governance

19 Dtwo policies tagged "governance", including Apollo Cap Search, Apollo Read-Only. Browse by what the control does rather than which app it targets.

On this page

Apollo
Clay
Confluence
HubSpot
Intercom
Salesforce
Slack

Apollo

Apollo Cap Searchingress · ApolloLimits every Apollo search to 50 results per page, so a prospecting search can't turn into a dump of Apollo's contact database.Apollo Read-Onlyingress · ApolloMakes the Apollo connection read-only for agents.

Clay

Clay Cap Enrichmentingress · ClayKeeps any single Clay enrichment call to 50 records and 5 data points, so one bad prompt can't burn through the team's credits or pull contact data for a…Clay Subroutine Allowlistingress · ClayLets the agent run Clay's built-in enrichment functions (Work Email, Person Job Title, Enrich Company, Tech Stack and the rest) and blocks every other Clay…

Confluence

Confluence: Deny Org-Wide & Public Publicationingress · ConfluenceStops a prompt-injected or erring agent from broadcasting Confluence content org-wide or to anonymous external readers.

HubSpot

HubSpot Block Deal Closureingress · HubSpotBlocks HubSpot CRM-object calls that move a deal into a closed stage (closedwon or closedlost). Both create and update requests are inspected.HubSpot Protect Associationsingress · HubSpotBlocks HubSpot CRM-object calls that create or change associations between objects (deal↔company, contact↔company, etc.).HubSpot Protect Deal Owneringress · HubSpotBlocks HubSpot CRM-object update calls that set or change a deal's owner.HubSpot Protect Lifecycle Stageingress · HubSpotBlocks HubSpot CRM-object calls that set or change a contact's lifecycle stage.HubSpot Read-Onlyingress · HubSpotMakes the HubSpot connection read-only by blocking the write tool.HubSpot Read-Only Except Call Notesingress · HubSpotKeeps the HubSpot connection read-only for agents, with one exception: the agent can log a call note against a contact.

Intercom

Intercom: Keep Agent Help Center Articles in Draftingress · IntercomKeeps agent-authored Intercom Help Center articles in draft so a human reviews them before they go live on the public Help Center.

Salesforce

Salesforce Guard Opportunity Pipeline Fieldsingress · SalesforceKeeps revenue-pipeline moves human-approved.Salesforce Protect Contact Fieldsingress · SalesforceBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query Allowlistingress · SalesforceRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only Accessingress · SalesforceRestricts the Salesforce MCP server to read-only access.Salesforce Read-Only Except Call Notesingress · SalesforceKeeps the Salesforce connection read-only for agents, with one exception: the agent can log a call note against a contact.

Slack

Slack: Deny Channel Creationingress · SlackBlocks Slack channel-creation tool calls at ingress. Every other Slack tool — and every non-Slack tool — passes through untouched.Slack: Deny Sending Direct Messagesingress · SlackBlocks Slack message-write calls whose destination resolves to a direct conversation — a 1:1 DM, a message posted to a user ID (which Slack auto-opens as a…