Hightouch

Connect Hightouch to collect data export evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Hightouch:

   1. Sign in as a member of the Organization admins group, with SAML SSO already configured for your Hightouch organization.
   2. Go to the Organization settings page and open the Single sign-on tab.
   3. Click Generate SCIM token and copy the generated bearer token.
   4. Click Save to activate the token.

   Hightouch shows the secret only once, so copy it before you leave the page.

   "SAML single sign-on and SCIM are only available on Business tier plans", and SAML SSO must be configured before SCIM. Hightouch shows the SCIM token only once; if you miss it, click Refresh SCIM token (which replaces the token any IdP SCIM integration is using). The SCIM base URL is https://api.hightouch.com/api/scim/v2. A SCIM token can also create and change users; there is no read-only one.

   Source: hightouch.com, checked 2026-10-07.

   The permissions Safeguard needs: SCIM token. A SCIM token can also create and change users, and Hightouch has no read-only one. Safeguard only reads with it. Needs Hightouch's Business plan.

2. On Compliance › Connectors, open Hightouch, click Connect, choose API token and fill in:

   Field	What to enter
   SCIM token	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Hightouch and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Data Export connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks