A point-and-click workflow editor that chains AV scanning, DLP, archival, and custom API calls onto every encrypted upload. Native Actions run inside SendSafely on file metadata. External Actions deploy into your own AWS so decrypted content never leaves your environment.
Workflows chain Actions onto events. Native Actions handle metadata operations inside SendSafely. External Actions run wherever you choose — typically your own cloud — and can decrypt content. The Workflow Editor lets your operators wire them together without code.
Pre-built Actions that run inside SendSafely. They operate on file metadata only and cannot access the content of encrypted files. Block a package until a scan passes, hold a file until it's archived, or delete on quarantine.
Triggered by webhook, runs in your own cloud environment. Because the Action lives in your perimeter, it can decrypt files and run AV, DLP, or archive logic against content — without that content ever leaving your environment.
Pick a trigger event, drop Actions onto it, add filters between steps. Branch on the result of an earlier Action ("only delete if AV returned quarantined"). Toggle live when ready. Logs and replay built in.
Built so a security analyst, support manager, or compliance lead can wire a multi-step workflow without filing a ticket with engineering.
Templates ship as AWS CloudFormation stacks. Deploy as-is or fork them as a starting point for your own Actions. The list grows over time — talk to your account team for the current catalog.
Request a templateCustom Actions. Any HTTPS endpoint can be an Action. Bring your own AV, DLP, archive system, ticketing tool, or notification channel — the Workflow Editor speaks plain webhooks. If you can describe the call in JSON, you can wire it into a workflow without writing SendSafely-specific code.
A workflow is a cascading waterfall: an event in SendSafely fires, optional filters narrow it down, then Actions run in sequence. Each Action can branch on the result of the previous one.
A Secure Package finalized or a file uploaded to a Workspace. Add event filters to narrow by sender, recipient domain, file type, or package owner.
Choose a Native Action from a dropdown, or call an External webhook. Add per-Action filters so a step only runs when the previous one returns the result you care about.
Workflows run on every matching event. Execution logs are visible from the workflow list. Failures can be replayed once you've fixed whatever was wrong upstream.
Personal Workflows let non-admin users wire up automations against their own SendSafely activity — without filing a ticket and without impacting anyone else's data.
External AV Action scans decrypted contents in your AWS. Native Delete Action fires if results return malicious. The owner is notified, the package is gone, no human review needed.
Every finalized package routes through the S3 Export Action into a tamper-proof bucket. Native Hold ensures originals stay put until the archive confirms write.
Google DLP Action inspects decrypted contents in your environment. Native Block Action keeps the package undeliverable until a compliance reviewer signs off.
Custom webhook Action pings your ticketing system whenever a Dropzone receives an upload — populating Jira, Zendesk, ServiceNow with the package metadata.
Event filter on the sender domain routes vendor uploads to one workflow, partner uploads to another. Both run their own AV + archive chains.
A service-account user runs a Personal Workflow that forwards every Dropzone upload to a parsing pipeline. No global admin involvement, no shared keys.
Native Actions never see plaintext — they operate on metadata only. External Actions can decrypt content, but they only do so inside your own perimeter, using a Trusted Browser Key (per-user) or Portal Master Key (portal-wide) that you provision.
Independent SOC 2 Type 2, HIPAA, PCI DSS, and GDPR audits cover the SendSafely platform that Actions run on top of.
See SendSafely Actions running against the workflow you already have. We'll walk through Native + External together and show you what's in the library today.