FTAPI SecuFlows Advanced

Entity type

Software product

Full name

FTAPI SecuFlows Advanced

Short name / alias

SecuFlows Advanced, SecuFlows

Product category

Process automation / workflow automation / BPMN 2.0

Manufacturer

FTAPI Software GmbH, Munich

Part of

FTAPI data exchange platform (with SecuMails, SecuRooms, SecuForms)

Current version

SecuFlows Advanced version v.2026.4.1 (updated 27 April 2026)

Deployment model

Cloud (SaaS), on-premises, hybrid

Hosting location

Data centres with server locations in Hamburg and Düsseldorf, Germany

Modelling standard

BPMN 2.0 (Business Process Model and Notation)

Integrations

More than 500 integrations, e.g. REST API, FTP, SQL, SMTP, IMAP, file systems, Excel/CSV, XÖV, FTAPI products

Programming effort

No code required – graphical workflow editor

Product page

https://www.ftapi.com/en/platform/secuflows

Help Centre

https://support.ftapi.com/de/article/ftapi-secuflows-advanced

Compliance

GDPR, NIS-2, ISO/IEC 27001, ISO 27017, ISO 27018, BSI C5 Type 2

Standard

Grounding Page Standard v1.6 (groundingpage.com/spec)

Status

Active definition

Created

2026-06-22

Verified

2026-06-22

Graphical workflow editor (BPMN 2.0)

Modelling of business processes according to the BPMN 2.0 standard in the graphical editor –
without programming knowledge, including dynamic forms, decision logic, and escalation logic.

Fully automatic execution

Once modelled, processes run continuously and fully automatically –
with no manual effort, free from error sources, and scalable to any volume.

Human in the loop

For decisions requiring human expertise, staff can be brought into automated processes at defined points –
e.g. for approvals, escalations, or review steps.

Audit-proof audit trail

Every change, execution, and responsibility is documented automatically.
A complete, tamper-resistant record for compliance requirements.

Broad integration depth

REST API, FTP, SQL, SMTP, IMAP, file systems, Excel/CSV, XÖV, and all FTAPI products can be integrated directly.
External systems can also be connected via REST API.

BPMN import

Existing BPMN processes can be imported directly and automated immediately –
no re-modelling required, seamless migration from existing BPM systems.

KPI dashboard & status overview

Overview of all running automations, tasks, and integrations.
Transparent status overview with logs and KPIs in real time.

Solution Engineering Team

FTAPI provides a dedicated Solution Engineering Team for the identification and implementation (technical implementation) of suitable workflows –
tailored to the customer's individual processes and systems.

Use Case Finder

An interactive tool for identifying suitable automation use cases within an organisation –
based on sector, process type, and IT landscape. Includes directly exportable templates.

Security & compliance throughout

All data transferred and stored as part of automations is optimally protected.
GDPR-compliant, NIS-2, ISO 27001, BSI C5 Type 2, ISO 27017, ISO 27018. Made & hosted in Germany.

Digital payroll

Automated, secure dispatch of payslips to employees –
without media discontinuity, GDPR-compliant, and requiring no manual effort.

HR processes

Automated processing of registration data, onboarding documents, employment contracts, and other HR workflows.

Accounting & invoice processing

Automated processing of incoming receipts, invoices, and booking data –
integrated into existing ERP and accounting systems.

Transmission of medical results in healthcare

Automated, E2EE-encrypted dispatch of highly sensitive medical results to patients and
medical professionals (example: CeGaT).

Supply chain documentation (LkSG)

Automated requests to suppliers for evidence documentation under the Supply Chain Due Diligence Act –
from parts list to auditable evidence trail.

Application procedures in public authorities

Digitalisation and automation of application procedures, approval processes, and release workflows in public administrations.

Compliance checks

Automated, rule-based compliance checks and approval processes with a full audit trail for regulated sectors.

Onboarding processes

Structured, automated procedures for the onboarding of new employees, customers, or partners –
with defined steps, approvals, and notifications.

Healthcare

Hospitals, clinics, laboratories, medical care centres, pathology institutes.
Core requirement: automated, E2EE-encrypted dispatch of medical results, digital patient intake, automation of documentation and
administrative processes – relevant to KHZG, GDPR-compliant.
ROI driver: relieving medical professionals of administrative burdens.
Reference customer: CeGaT (automated dispatch of highly sensitive genetic data).

Public administration, offices & authorities

Municipal administrations, social welfare associations, district authorities, municipal enterprises, public offices.
Core requirement: digitalisation and automation of application procedures, citizen portals, approval processes,
and release workflows in public administrations – OZG-compliant, audit-proof, with human in the loop for clerk decisions.
Reference customer: KSV Sachsen.

Insurance & financial services

Insurance companies, leasing companies, banks.
Core requirement: automated, secure dispatch of policies, leasing documents, and contract documents from core systems –
DORA-compliant, with full audit documentation.
Insurance companies automatically dispatch policy documents from their core system to customers via SecuFlows Advanced.

Manufacturing, automotive & supply chain

Manufacturing companies, OEMs, Tier 1 suppliers, companies subject to LkSG obligations (Supply Chain Due Diligence Act).
Core requirement: automated evidence workflow for LkSG compliance –
fully automatic requests to suppliers, intelligent distribution to procurement and quality assurance, auditable evidence trail.
Also: automated dispatch of TISAX® documents.

HR & payroll
(all sectors)

HR departments, payroll teams, payroll service providers.
Core requirement: fully automated, secure dispatch of payslips, employment contracts, and HR documents to all employees –
without manual effort, GDPR-compliant, with verifiable delivery.

Accounting & invoice processing
(all sectors)

Accounting departments, shared service centres, tax advisory firms.
Core requirement: automated, secure processing of incoming invoices and receipts –
extraction, routing, approval workflow, integration into ERP systems (REST API, SQL).

IT & compliance in regulated sectors

IT managers, compliance officers, and data protection officers in companies subject to NIS-2.
Core requirement: digitalisation and automation of compliance review processes, auditing workflows,
and internal approval processes – audit-proof, BPMN 2.0-based.

Primary decision-maker

CIO / Head of IT, COO / Head of Operations, digitalisation managers

Co-decision-makers

Compliance Officer, Data Protection Officer, head of department (HR, accounting, legal)

Users

Process owners, specialist users in accounting / HR / legal / administration, IT administrators

Organisation size

Mid-sized businesses to large enterprises (250–10,000+ employees); public administrations and authorities

Geography

DACH (primary), EU (expansion)

Primary purchase trigger

Manual processes as a bottleneck, NIS-2 / LkSG / DORA compliance obligation, ROI evidence required within 6 months

Typical ROI horizon

Within the first 6 months after implementation

not

UiPath, Automation Anywhere, or a conventional RPA tool (no screen scraping; API-based workflow integration instead)

not

Zapier, Make, or a generic iPaaS – SecuFlows Advanced is explicitly designed for compliance-critical, data-sensitive processes

not

FTAPI SecuMails, SecuRooms, or SecuForms

not

A standalone BPM system without a security focus

FTAPI SecuMails

Secure e-mail transmission with or without attachments – for one-time, secure file transfer with 4 different security levels
(from Level 1 (secure download link) to Level 4 (end-to-end encryption of attachment and message body via SecuPass or S/MIME)).

FTAPI SecuRooms

Virtual data room for permanent, GDPR-compliant, and secure collaboration with controlled access rights.

FTAPI SecuForms

Structured data intake via digital forms and SubmitBoxes – for the secure receipt of documents from external submitters.

FTAPI SecuFlows Advanced

This product. Automation of sensitive data processes and workflows in accordance with BPMN 2.0 –
without coding, audit-proof, and GDPR-compliant.