Six steps from install to first approved action.
- Step 1
Create or sign in to your Ancil workspace
Use your work email to create an Ancil workspace. If your team already has one, ask an owner or admin to invite you.
- Step 2
Connect HubSpot
From Ancil, go to Settings, Connected portals, then choose Connect HubSpot. You will be sent to HubSpot to approve the OAuth connection.
- Step 3
Approve read access
Ancil starts read-only. It uses your approved scopes to inspect contacts, companies, deals, owners, lists, workflows, tickets, and related HubSpot configuration.
- Step 4
Run the first operations audit
After HubSpot redirects you back to Ancil, your first operations audit is queued automatically. You can also run a fresh audit from the app navigation.
- Step 5
Review findings and drafted actions
Use Dashboard, Findings, Audit Reports, Ask Ancil, and Fix Queue to review evidence, trends, onboarding tasks, and drafted HubSpot actions. Nothing changes in HubSpot unless an owner or admin approves it.
- Step 6
Grant write access only when needed
If a specific action needs write access, Ancil will ask for additional HubSpot permission at that moment. You can decline and resolve the issue manually in HubSpot.
What Ancil asks HubSpot for.
Ancil uses OAuth so you stay in control of what is granted. The initial connection is read-only. Write scopes are requested later only when a user approves a specific HubSpot action.
OAuth
Connect your HubSpot portal and keep the connection active.
CRM reads
Read contacts, companies, deals, owners, lists, tickets, and schemas for audit evidence.
Automation reads
Read workflow and sequence context so Ancil can identify stale or risky automation.
Marketing and service reads
Read forms, campaigns, files, knowledge base, and conversations when your portal grants those optional scopes.
Progressive write scopes
Requested only when you approve a specific drafted action that needs HubSpot write access.
What happens to your HubSpot data.
Ancil stores workspace settings, audit history, findings, approved action history, onboarding activity, and HubSpot portal metadata so your team can operate the portal over time.
HubSpot OAuth tokens are encrypted at the application layer before storage. Data is transmitted over HTTPS and access inside Ancil is limited by workspace role.
For retention, deletion, subprocessors, and controller/processor details, read our Privacy Policy, Terms of Service, and DPA.
Common setup questions.
I do not see my HubSpot portal after connecting.
Return to Settings and confirm the Connected portals section shows your Hub ID. If it does not, reconnect HubSpot or contact support@ancil.ai with your Hub ID.
HubSpot says a scope is unavailable.
Some optional scopes depend on your HubSpot subscription. Ancil will continue with the scopes your portal grants and will skip unsupported optional reads.
A fix asks for more access.
That is expected for actions that create lists, update records, or create tasks. You can grant the specific permission, cancel, or complete the action manually in HubSpot.
How do I disconnect Ancil?
In Ancil, go to Settings, Connected portals, then choose Disconnect. You can also remove the connected app from your HubSpot account settings.