How to Scan and Redact Sensitive Data in Hubspot

Protecting sensitive customer information in Hubspot is essential for security, compliance, and trust. This guide explains how to scan your account for sensitive data, configure redaction rules, and review results so your CRM stays clean and compliant.

What Hubspot Sensitive Data Redaction Does

The sensitive data redaction feature automatically scans your account for sensitive values, such as government IDs or financial data, and helps you remove or anonymize those values. It focuses on content that could expose your customers or your organization to risk if left unprotected.

When enabled, the tool scans various objects and tools in your account and then presents a report of potential sensitive values. From that report, you can choose what to redact, where to redact it, and how aggressively to apply redaction across similar data.

Where Hubspot Scans for Sensitive Data

The scanning tool checks multiple areas of your CRM and content tools where sensitive information may appear. Typical locations include:

Contact, company, deal, and ticket records
Custom properties and default properties
Notes, activities, and timeline events
Emails and logged communications
Other CRM content that may store text values

By scanning widely across these locations, Hubspot reduces the chance that sensitive values remain unnoticed in your database.

Access Requirements for Hubspot Redaction

Only users with appropriate permissions can run scans and manage redaction. In most accounts, this is limited to super admins or users with similar security access. Check your user permissions in the settings area before attempting to start a scan.

If you manage a large CRM, consider limiting redaction access to a small group of security or operations owners to avoid accidental data loss.

How to Start a Hubspot Sensitive Data Scan

Follow these steps to initiate a scan for sensitive data in your account:

Sign in to your account with an admin-level user.
Navigate to Settings from the main navigation.
In the left sidebar, open the security or data protection tools area (location may vary by subscription).
Select the option to Scan and redact sensitive data.
Click the button to start a new scan.

Once the scan begins, it may take some time to complete depending on the size of your database. You can typically leave the page and return later to review results.

Understanding Hubspot Scan Results

When the scan completes, you will see a report that groups potential sensitive values. Each item in the report usually includes:

The type of sensitive pattern detected (for example, government ID or financial number)
Example records or fields where the value appears
The total number of matches across your account
Options to review more detail or redact

Use this summary to prioritize the most critical values first, especially those that appear in many records or that clearly match regulated data types.

Reviewing Detected Values in Hubspot

Before you redact anything, open the detail view of a detected value. Confirm that:

The pattern truly represents sensitive data and not a false positive
Redacting the value will not break internal processes or automation
You understand which teams or tools currently use the field

If a detected value turns out to be harmless, you can leave it as is or adjust future handling accordingly.

How Redaction Works in Hubspot

Redaction replaces a detected sensitive value in your CRM with a masked or cleared value so it cannot be viewed or misused. This may involve clearing out specific fields or replacing the contents with anonymized characters, depending on the pattern and tool behavior.

Important notes about redaction behavior include:

Redaction is usually irreversible. You will not be able to restore the original content after removal.
Redaction applies to all chosen locations, not just a single record.
Some related tools or reports might update after the values are removed.

Choosing What to Redact in Hubspot

For each detected pattern, you can typically choose:

Specific records to redact
All records containing that value or pattern
Only certain objects, such as contacts or tickets

Review these options carefully and start with smaller, controlled redaction sets if you are new to the feature.

Step-by-Step: Redacting Data in Hubspot

Open the scan report and select a detected sensitive pattern.
Click to view the detailed list of matches.
Filter by object type or property if supported.
Select individual matches or choose to select all.
Click the redaction action button.
Review the warning message that redaction is permanent.
Confirm the redaction to apply the changes across selected records.

After redaction, revisit a few sample records to confirm that the values have been removed as expected and that key processes continue to function correctly.

Best Practices for Hubspot Data Redaction

To use this feature safely and effectively, adopt these practical best practices:

Run an initial scan in off-peak hours to reduce disruption.
Export critical data or create backups of essential reports before redacting.
Coordinate with legal and security teams to align with regulatory requirements.
Inform stakeholders whose workflows may rely on fields that will be cleared.
Document decisions about what was redacted and why for future audits.

Ongoing Hubspot Security Hygiene

Redaction should be part of a broader security and governance program. Combine it with:

Regular permission reviews and access controls
Data retention policies for old records
Training for users on what not to store in free-text fields

By combining scanning, redaction, and prevention, you can keep your CRM safer over time.

Limitations of Hubspot Sensitive Data Scanning

While powerful, the feature has limitations you should understand:

It relies on pattern detection and may not catch every sensitive value.
Some custom formats or localized IDs might not be recognized.
Historical exports or external storage are outside its scope.

You should still use additional security layers, including encryption, access controls, and regular audits of external tools connected to your CRM.

Learn More About Hubspot Redaction

For full technical details, supported patterns, and the latest product behavior, refer to the official documentation on scanning and redacting sensitive data: Hubspot sensitive data redaction guide.

If you need help designing a wider data governance or CRM optimization strategy around this feature, you can consult specialists at Consultevo for implementation and process guidance.

By regularly scanning and redacting sensitive data in Hubspot, your organization can lower risk, support compliance programs, and maintain customer trust while keeping your CRM clean and efficient.

Need Help With Hubspot?

If you want expert help building, automating, or scaling your Hubspot , work with ConsultEvo, a team who has a decade of Hubspot experience.

Scale Hubspot

“`

Hupspot data redaction guide