Due to API limitations, Vanta cannot detect HubSpot accounts that have been deactivated. This means if an account exists in Hubspot, Vanta will show the user as active no matter the status. This can cause delays with completing offboarding tasks for former employees and prevent the 'HubSpot accounts de-provisioned when employees leave' monitor from passing.
If you're unsure which option makes the most sense for you and your team, we recommend checking directly with your auditor, as auditor requirements tend to vary.
Prerequisites
- Administrator access on Vanta
- Super admin access on Hubspot
Method 1: Deactivate and Delete the HubSpot user account
For Vanta to detect deactivated HubSpot for offboarding, the HubSpot user account is required to be deactivated and deleted in Hubspot.
- Please follow the steps in this article by Hubspot, Remove a user or your user account, to remove a user from your Hubspot account
- Once this is done, the changes should reflect in Vanta within an hour
Method 2: Reassign ownership from the Access Page
- From the Access page, filter by HubSpot and mark the account as not a person or assign them to an external person
Method 3: Deactivate monitoring of resources on failing test
- If an administrator does not want to delete the Hubspot account, they can Deactivate monitoring for the flagged account on the test page. Administrators can reach out directly to their auditor or account manager for any questions or advice about providing optional evidence when deactivating the monitor, as they will be best to confirm what this would entail.