Connect your CRM

1. 1
   Open any completed briefing.
2. 2
   Top-right of the title bar: click Push to CRM.
3. 3
   A small dialog lists every CRM you've connected. Pick one. We'll search your CRM for a company / account matching your customer name. If we find one, we'll attach a Note (HubSpot, Attio) or Task (Salesforce) with the briefing's executive summary and key insights. If we don't find one, we create a new company first, then attach.
4. 4
   On success, a small Pushed to {Provider} badge appears in the metadata row right under the briefing title. Click Push to CRM again any time to re-sync — identical content sends nothing ("Already up-to-date"), changed content updates the existing Briefing in your CRM in place. We never create duplicates, even if you've manually deleted the prior copy in your CRM.

What we transmit: title (vendor → customer), generated date, your briefing's executive summary (up to 3000 chars), and the first 2000 chars of the strategic alignment. Playbook details, stakeholder maps, and downloadable files are not pushed — they stay in SalesCanvas.ai. We're a CRM enrichment layer, not a CRM replacement.

• Token encryption at rest. Every access token, refresh token, and API key is AES-256 (Fernet) encrypted in our database before it touches disk.
• No tokens leave the backend. Our UI shows "Connected since …" — never the actual token. There's no API endpoint, internal or external, that exposes raw tokens.
• Disconnect = full wipe. Clicking Disconnect on a CRM row immediately removes the access token, refresh token, API key, and instance URL from our database. The connection row stays for audit visibility but becomes inert.
• Minimal scopes. HubSpot: companies + notes only (not contacts.write, not deals). Salesforce: api refresh_token only. Attio: Records + Notes only.
• Connect-time validation. We hit each provider's identity endpoint before saving — if the token doesn't actually work, you see an error immediately, never a silent broken connection.
• No duplicates on re-push. A re-push to your CRM does not duplicate. We remember what was sent and update it, unless the update we're sending is identical to that already sent. In that case, we do not send it. If you've manually deleted the briefing in your CRM, you don't need to do anything special — just re-push from SalesCanvas.ai and a fresh copy is created in your CRM automatically.
• Privacy disclosures. HubSpot, Salesforce, and Attio are listed under Sub-processors → CRM Integrations with the explicit note that data only flows when you connect.
• Outcome sync-back (HubSpot & Salesforce only). Once per hour we re-read the most-recently-modified Deal (HubSpot) or Opportunity (Salesforce) on Companies/Accounts you've previously pushed briefings to. We use it only to infer outcome (won / lost / advanced / stalled) and stamp it back on the corresponding briefing. We never read contacts, notes, emails, or attachments. Pause or resume per-connection at Profile → Integrations. Attio does not currently support sync-back.