App Install Governance
Friday, August 14, 2026
What it is
Super Admins now get centralized control over which apps can be installed in a HubSpot account and what data those apps can access — including AI connectors like the HubSpot connectors for ChatGPT, Claude, and Gemini. In this beta, Super Admins can approve which apps are allowed, control which users and teams can install each app, customize optional data permissions per app (read-only vs. write access), and revoke approval at any time, either for specific users and teams or across the whole account.
Why it matters
This is the longest segment on today's show for a reason. Chris's framing: once you understand scopes, keys, and how data flows between AI-enabled systems, "you can just like jump into that role and everybody can be an AI orchestrator should they choose to be." Without someone stepping into that role, an organization gets forced into one of two bad defaults — shut AI down entirely, or let everyone use it unsupervised — and "both carry significant risk." App Install Governance gives a Super Admin an actual middle path: approve, scope, and revoke instead of choosing between lockdown and free-for-all.
The Take
Chris Carolan
everybody can be an AI orchestrator should they choose to be
There's so much opportunity here for any HubSpot admin or manager to just step into this role — and here's the thing, you don't really have a choice anymore. The gap between adminning HubSpot without AI and adminning it once you're tracking scopes, keys, and how data moves between AI-enabled systems is a completely different world, and most organizations are not where they need to be on that yet.
I watched this exact tension play out with a client the week before this update shipped: a team member used Claude to vibe-code a landing page while HubSpot's own landing pages sat right there unused. Nobody had told them not to — "it was just because nobody said that you shouldn't do that." That's the real cost of not having someone in the orchestrator seat: not malice, just silence where a policy should be. My advice to any admin looking at this update: don't freeze everything and don't open the floodgates. Take your first AI adopter, give them one or two hours, and have them help you get an actual AI policy in place before you turn on App Install Governance for real.
Watch Us Discuss This
The full segment from the show, us working through this update start to finish.
FAQ
Who can use App Install Governance?
Super Admins, on all hubs and tiers. This beta gives that role centralized control over which apps get installed and what they can access.
Does this cover AI connectors like ChatGPT or Claude?
Yes — HubSpot names AI connectors specifically, including the HubSpot connectors for ChatGPT, Claude, and Gemini, as part of what a Super Admin now governs.
Can I revoke an app after it's already installed?
Yes. A Super Admin can revoke approval for specific users and teams, or across the entire account, at any time.
What should I do before turning this on?
Chris's advice on today's show: find your first AI adopter, give them an hour or two, and get an actual AI policy written before you flip on governance controls for everyone.
Produced by Value-First Media