We need to audit third party app marketplace security for both Salesforce and HubSpot to satisfy our enterprise SOC2 compliance requirements.
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
We need to audit third party app marketplace security for both Salesforce and HubSpot to satisfy our enterprise SOC2 compliance requirements.
5 real searches · 1 real-search pass
Salesforce AppExchange security review requirements security review official documentation 2026Google ↗
OBSERVEDOther / navigational
HubSpot app marketplace app certification security requirements official documentationGoogle ↗
OBSERVEDOther / navigational
Salesforce connected app OAuth scopes security best practices official documentationGoogle ↗
OBSERVEDOther / navigational
HubSpot OAuth scopes app security webhooks official documentationGoogle ↗
OBSERVEDOther / navigational
Salesforce Trust compliance SOC 2 reports HubSpot trust SOC 2 officialGoogle ↗
OBSERVEDReason
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (5)
Classes come from the query-classifier (a local Laya model). 5 of 5 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT5 real searches · gpt-6
Salesforce AppExchange security review requirements security review official documentation 2026 Google ↗
HubSpot app marketplace app certification security requirements official documentation Google ↗
Salesforce connected app OAuth scopes security best practices official documentation Google ↗
HubSpot OAuth scopes app security webhooks official documentation Google ↗
Salesforce Trust compliance SOC 2 reports HubSpot trust SOC 2 official Google ↗
- Official marketplace · appexchange.salesforce.com
- Official marketplace · ecosystem.hubspot.com
- Cloud Security · security.my.salesforce-sites.com
- Required Materials for Security Review Submission | ISVforce Guide: Build and Distribute AgentExchange Solutions | ISVforce Guide · developer.salesforce.com
- Trust - Regulatory Compliance and Audit Patterns | Patterns | Well-Architected Framework · architect.salesforce.com
- Authorization Through External Client Apps or Connected Apps and OAuth 2.0 | Introduction to REST API | REST API Developer Guide · developer.salesforce.com
- Connected Apps (CAs) and External Client Apps (ECAs) AppExchange Security Review Submission Guidance · help.salesforce.com
- How to Build Customer Trust Through Certification · developers.hubspot.com
- Technology Partner Program Guide · developers.hubspot.com
- App Listing and App Certification Requirement Updates for May 2026 · developers.hubspot.com
- Sensitive Data in HubSpot for Developers · developers.hubspot.com
- New Confirmation Step for Unverified Third-Party App Installs · developers.hubspot.com
Queries
5 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
Salesforce AppExchange security review requirements security review official documentation 2026 OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
HubSpot app marketplace app certification security requirements official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
Salesforce connected app OAuth scopes security best practices official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
HubSpot OAuth scopes app security webhooks official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
Salesforce Trust compliance SOC 2 reports HubSpot trust SOC 2 official OBSERVED | Google ↗ AI Mode ↗ | — | Reason | — | — | 1x of 1 |