Certyneo × HubSpot — eIDAS electronic signatures for your CRM
Every Certyneo envelope signed, declined or expired shows up in the matching HubSpot contact timeline in under 5 seconds. eIDAS compliant, German hosting, no Zapier in between.
Certyneo account and HubSpot Admin access required. Free from the Certyneo Starter plan.
Why connect Certyneo to HubSpot
The integration is designed for sales and HR teams who run their deals in HubSpot and want to see signatures without leaving the tool.
Events in the contact timeline
When an envelope is signed, the event shows up in the matching HubSpot contact's timeline with the document name, status and a link to the signed PDF.
Sync signers as HubSpot contacts
Enable contact-sync: on every signed envelope, the signer is upserted as a HubSpot contact (email + name + custom properties). Ideal for post-signature sales workflows.
5 supported events
envelope.completed, envelope.signed, envelope.declined, envelope.expired, recipient.viewed — pick what you want to push, disable the rest in one click.
OAuth 2.0 + tokens encrypted at rest
Standard HubSpot OAuth 2.0 authentication. Access and refresh tokens are AES-256-GCM encrypted in the database. No client token ever stored in cleartext.
Which events get pushed?
Here is the full list of events you can push to HubSpot and what each contains. All are opt-in — pick what you enable in Settings → Integrations.
| Event | Data sent to HubSpot |
|---|---|
| envelope.completed | Document signed by every signer. Push: document name, dates, signers, link to the eIDAS proof PDF. |
| envelope.signed | One signer just signed (not all). Push: signer email, timestamp, signing order. |
| envelope.declined | A signer declined the envelope. Push: decline reason (if provided), email, timestamp. |
| envelope.expired | Validity date passed without full signature. Push: missing signers, expiration date. |
| recipient.viewed | A signer opened the envelope without signing. Push: email, timestamp, IP geolocation. |
If contact-sync is enabled, the envelope.completed event also creates a HubSpot contact for each signer (if not already present) with the certyneo_first_signed_at and certyneo_last_envelope_id properties.
Install the integration in 4 steps
Installation takes under 2 minutes. You need an active Certyneo account and Admin access on your HubSpot portal.
- 1
Go to Settings → Integrations
Log in to Certyneo, open the Settings menu, select Integrations, and click the 'Connect HubSpot' button on the HubSpot card.
- 3
Pick the events to push
Back on Certyneo, select the events you want to see in HubSpot. Optionally enable contact-sync. Save.
- 4
Test with an envelope
Send a test envelope to an email matching an existing HubSpot contact. Once signed, open the contact in HubSpot: the Certyneo event appears in the timeline.
Security and compliance
The HubSpot integration follows the same security policy as the rest of Certyneo: encryption, least privilege, full audit trail, GDPR compliance.
- Access and refresh tokens AES-256-GCM encrypted in the PostgreSQL database, never cleartext.
- OAuth scopes limited to the strict minimum: contacts read/write + timeline. No access to deals or tickets.
- HubSpot data processed as a GDPR sub-processor: DPA signed, EU German hosting, right-to-be-forgotten honoured.
- Every HubSpot API call is logged in the Certyneo audit trail with timestamp and outcome (success / error).
Frequently asked questions
Which Certyneo plan includes the HubSpot integration?
The HubSpot integration is available from the Starter plan (free for 5 envelopes/month) and on every paid plan. There is no HubSpot-specific surcharge.
What HubSpot data can Certyneo see?
None — the connection only flows from Certyneo to HubSpot. We write to the timeline and create contacts (if enabled), but we don't read anything from HubSpot. OAuth scopes ask for contacts read/write only to upsert without duplicating.
Which OAuth scopes are requested?
Four scopes: crm.objects.contacts.read (check whether a contact exists before creating), crm.objects.contacts.write (upsert the signer as a contact), timeline (push events), tickets (optional push to linked tickets). No access to deals, companies, or pipelines.
How do I uninstall?
Two options: (1) on the Certyneo side, Settings → Integrations → Disconnect button — removes our encrypted tokens and stops all pushes; (2) on the HubSpot side, Settings → Integrations → Connected Apps → Uninstall Certyneo. Both methods are equivalent and reversible — you can reconnect at any time.
Can I choose which events get pushed?
Yes. In Settings → Integrations → HubSpot, tick the events you want (envelope.completed, signed, declined, expired, recipient.viewed). Changes take effect immediately, no reinstall needed.
Is the app listed on the official HubSpot Marketplace?
The integration is technically complete and works through direct OAuth from this page. The public listing on the HubSpot App Marketplace is in submission (HubSpot's 4-6 week review process). You can already use it via the button above.
Go further
Connect Certyneo to HubSpot in 30 seconds
Standard OAuth. No credit card. Disable anytime from Settings or HubSpot.