Smart Email Clients + HubSpot for the CEO — Plain-Language Summary

Compiled June 2026. Parts 1 & 4 from a fact-checked research pass; Parts 2 & 3 (HubSpot extensions + BCC) from HubSpot's official Knowledge Base, fetched directly and updated April–May 2026. Sources listed in SOURCES_INDEX.md.

The headline: The 34K-unread inbox, the HubSpot logging, and the "keeps logging her out" problem are three separate problems. Don't solve them with one tool. A cleanup service (Mailstrom/Clean Email + SaneBox) tames the inbox; the HubSpot Outlook add-in handles CRM logging + open/click tracking; and the logout is the HubSpot add-in's session dropping (fix: email+password login, not SSO) — not Microsoft auth. Latest direction: keep the CEO on Outlook, don't migrate her.

📂 Docs in this folder: - CEO_Outlook_Stack.md — the recommended CEO setup (Outlook + service + add-in), incl. Outlook decluttering - HubSpot_Addin_Logout_Fix.md — step-by-step fix for the add-in logging her out - Inbox_Cleanup_Tools.md — Mailstrom vs Clean Email for the 34K dig-out - Client_Comparison.md — Spark vs Superhuman (incl. verified HubSpot connectivity) - Spark_CLI.md · Triage_Playbook.md — agent-driven triage (validated live)

Part 1 — AI email clients to tame 34,000 unread

Recommendation: For a CEO who is on HubSpot, Superhuman is the best single fit — it's the one AI-native client that also logs to HubSpot. Spark is great at triage but doesn't talk to HubSpot, so you'd still bolt on the BCC trick below. ⚠️ Verify Superhuman's live pricing/tier — post-acquisition the plans were restructured and the HubSpot integration moved into the bundled Business tier.

Reality check on 34K unread: No AI "cleans" 34K for you safely in one click. The practical move is bankruptcy + triage: archive everything older than ~30 days (it's still searchable), then let the AI client keep the new inbox sorted.

Part 2 — HubSpot's own email tools (the Outlook add-in)

HubSpot ships a free Sales Office 365 add-in (and a Gmail Chrome extension). This is the proper way to connect the CEO's email to HubSpot — far better than BCC:

• Logging — one "Log" checkbox files the email to the contact's record (+ company & open deals). Works in Classic Outlook (Win/Mac), New Outlook, and Outlook-on-web.
• Tracking — real-time desktop notification when a contact opens your email; click tracking on links (click tracking needs an assigned Sales Hub seat).
• Available on all products/plans (logging/basic tracking); advanced tracking & sequences need a Sales Hub seat.

This is what to install on the CEO's Outlook once the login issue (Part 4) is fixed.

Part 3 — Your BCC question, answered (from HubSpot's official KB) ✅

Is the BCC-to-HubSpot address always the same? Yes — it's one address per HubSpot account (portal), not per individual user. Find it at: Settings → Data Management → Objects → Activities → "Email Log & Track" tab → Manual Logging → BCC Address (click Copy).

Can you log/track with ONLY the BCC, no extension? — Partially: - ✅ BCC-ing it does log the email (content + attachments) to the recipient's contact record, its primary company, and the 5 most recent open deals — no extension needed. - ❌ BCC-only does NOT track opens or clicks. HubSpot states verbatim: "if you manually use the BCC address... without tracking, this will only log the email on a contact record. This will not allow you to track opens or clicks." - ❌ It only logs that one outbound message — it does not capture the contact's replies.

Watch-outs with BCC-only logging: - It creates a new contact record for anyone CC'd on the email, and for any recipient not already in HubSpot — this can clutter your CRM fast. - Sender must have personal-email access; the sending address must be a HubSpot user, a connected inbox, or an alias; recipient must not be on the "Never Log" list.

Bottom line: BCC = quick, zero-install, logs the message only. The add-in = logs + opens + clicks + auto-fills the BCC for you. For a CEO, install the add-in.

Part 4 — Outlook keeps logging her out (the re-auth loop) ✅

This is NOT a password problem — it's a token/credential problem. A correctly configured Outlook should prompt once per token lifetime and stay silent. A constant loop is a fixable misconfiguration. Documented causes & fixes (Microsoft):

1. Stale cached credentials → On Windows: Control Panel → Credential Manager → delete Generic Credentials starting MicrosoftOffice16_, Outlook, ADAL. On Mac: Keychain → delete Exchange/ADAL/Microsoft Office Identities entries.
2. Conflicting accounts (a personal Microsoft account + the work 365 account on the same device) → sign out the personal one (File → Account → Sign out).
3. Reset the work account token → Settings → Accounts → Access work or school → Disconnect, then reconnect (resets the WAM/AAD broker).
4. Invalid refresh token after a password/policy/Conditional-Access change → a full sign-out + clean sign-in re-issues a valid token.
5. VPN / proxy / SSL-inspection can sever OAuth tokens → test off the VPN.
6. Corrupted profile → recreate via Control Panel → Mail → Show Profiles.

Fast diagnostic: Have her sign in at outlook.office.com (web). If the web works but the desktop app loops → it's a local cache/profile issue (fixes 1–6). If the web also loops → it's an account / MFA / Conditional Access policy issue for IT to check in Entra Sign-in logs.

Does switching clients help? It can — a freshly configured client (Superhuman, new Outlook, web) re-does the OAuth handshake cleanly. But if the root cause is a Conditional Access policy, the loop will follow her to any client, so fix the auth first, then choose the client.

Recommended path for the CEO

1. IT fixes the Outlook auth loop (Part 4) — diagnose web-vs-desktop first.
2. Pick the client: Superhuman if you want AI triage + native HubSpot logging in one; or keep Outlook/Spark + the HubSpot add-in.
3. Install the HubSpot Sales add-in for proper logging + open/click tracking (Part 2). Use BCC only as a no-install fallback (Part 3).
4. Declare inbox bankruptcy on the 34K, then let AI keep the new inbox sorted.