SOC 2 support and evidence

SOC 2 access criteria (CC6) expect access to be granted on need, reviewed regularly and removed when no longer required, and the monitoring criteria (CC7) expect suspicious activity to be detected and logged. FlowSentinel maps these to live data from your HubSpot portals.

• Access control: every user, role and team membership across connected portals.
• Privileged access oversight: super admin and export permissions, plus missing two-step verification alerts.
• Deprovisioning: offboarding hands over every record before access is removed.
• Monitoring: drift detection, anomaly rules, data-export and export-volume alerts.
• Logging: a full audit trail of every action taken inside FlowSentinel.

At the start of each quarter FlowSentinel opens a recertification campaign for every portal. A named reviewer checks each user and access path, records keep, change or revoke decisions, then signs off. Revoke decisions can be handed to the offboarding or move-user workflows so they are actioned and logged.

1. 1Campaigns are created automatically on the first day of the quarter.
2. 2Each campaign has one named reviewer.
3. 3Reviewers record a decision for every item.
4. 4Sign-off stores the reviewer name, timestamp and decision log.
5. 5Export the evidence CSV from the campaign detail page.

Each signed campaign exports a CSV with one row per person and access path reviewed, the keep, change or revoke decision, the named reviewer, decision timestamps, the sign-off statement and the portal and quarter covered.

• Full audit-trail export by date, actor or portal.
• Security alert history.
• Pen-test findings and coverage reports from the system console.

FlowSentinel is software that supports your SOC 2 programme. It is not itself SOC 2 attested and does not grant attestation to your organisation. Attestation remains your responsibility with your chosen auditor; FlowSentinel makes the access-review, monitoring and logging evidence easier to produce and maintain.