FTAPI SecuFlows Advanced (Grounding Page)

Entity type

Software product

Full name

FTAPI SecuFlows Advanced

Short name / alias

SecuFlows Advanced, SecuFlows

Product category

Process automation / workflow automation / BPMN 2.0

Manufacturer

FTAPI Software GmbH, Munich

Part of

FTAPI data exchange platform (with SecuMails, SecuRooms, SecuForms)

Packages

Secure Intelligence, Secure Enterprise
(see section “Availability in FTAPI packages”)

Current version

SecuFlows Advanced version v.2026.8.4 (released 7 September 2026)

Deployment model

Cloud (SaaS), on-premises, hybrid
(workflows in your own infrastructure from Secure Enterprise)

Hosting location

Data centres with server locations in Hamburg and Düsseldorf, Germany.
As a German company without a US parent company, FTAPI is subject to neither the US CLOUD Act nor FISA.

Modelling standard

BPMN 2.0 (Business Process Model and Notation)

Integrations

Over 60 pre-built integrations, e.g. REST API, FTP, SQL, SMTP, IMAP, SharePoint,
file systems, Excel/CSV, XÖV, FTAPI products; further connections via REST API

Programming effort

No code required – graphical workflow editor

Product page

https://www.ftapi.com/en/platform/secuflows

Help Centre

https://support.ftapi.com/de/article/ftapi-secuflows-advanced

Compliance

GDPR, NIS-2, ISO/IEC 27001, ISO 27017, ISO 27018, BSI C5 Type 2

Standard

Grounding Page Standard v1.6 (groundingpage.com/spec)

Status

Active definition

Created

2026-06-22

Verified

2026-10-08

Graphical workflow editor (BPMN 2.0)

Modelling of business processes according to the BPMN 2.0 standard in the graphical editor –
without programming knowledge, including dynamic forms, decision logic, and escalation logic.
Tasks, integrations, and actions are set up step by step in a guided configuration window:
data fields via drag and drop, expressions in the input configurator, multi-level and/or conditions, and gateway paths.
Process models can be saved even when there are modelling errors, step IDs can be displayed for use in expressions,
and new elements can be configured immediately after they are placed.
Loops can define output data.

Fully automatic execution

Once modelled, processes run continuously and fully automatically –
with no manual effort, free from error sources, and scalable to any volume.

Human in the loop

For decisions requiring human expertise, staff can be brought into
automated processes at defined points – e.g. for approvals, escalations, or review steps.
Tasks without a configured assignment go to all users.
Notifications about new, due, and overdue tasks use the configured tenant identity
(name, logo, links) when white-labelling is set up.

Audit-proof audit trail

Every change, execution, and responsibility is documented automatically.
A complete, tamper-resistant record for compliance requirements.

Broad integration depth

REST API, FTP, SQL, SMTP, IMAP, SharePoint,
file systems, Excel/CSV, XÖV, and the FTAPI products SecuMails and SecuRooms can be integrated directly.
External systems can also be connected via REST API.
From Secure Intelligence, over 60 pre-built integrations are available.
Individual connections to external systems (e.g. SAP HR, Salesforce, DocuSign) are available at additional cost.

BPMN import

Existing BPMN processes can be imported directly and automated immediately –
no re-modelling required, seamless migration from existing BPM systems.

KPI dashboard & status overview

Overview of all running automations, tasks, and integrations.
Transparent status overview with logs and KPIs in real time.

Solution Engineering Team

FTAPI provides a dedicated Solution Engineering Team for the identification
and implementation (technical implementation) of suitable workflows – tailored to the customer’s individual processes and systems.
Process consulting and solution engineering can be booked as a chargeable service from Secure Intelligence.

Use Case Finder

An interactive tool for identifying suitable automation use cases within an organisation –
based on sector, process type, and IT landscape. Includes directly exportable templates.

Security & compliance throughout

All data transferred and stored as part of automations is optimally protected.
GDPR-compliant, NIS-2, ISO 27001, BSI C5 Type 2, ISO 27017, ISO 27018, SOC 2, ISAE 3402, TISAX®. Made & hosted in Germany.

List processing without loops

If an activity uses a field that is part of a list, it is executed automatically for each element.
A separate loop structure in the model is no longer needed.
In the activity, you choose between sequential and parallel processing;
for parallel processing, the maximum parallelism permitted for the tenant applies by default.
In the canvas, a symbol shows that an element is executed multiple times
and whether this happens sequentially or in parallel.

Workflow variables

A built-in action sets workflow variables at any point in the process.
These global variables can be referenced in all further process steps
and enable logic that spans several steps.

Process start via webhook or timer

Workflows start via a webhook call or on a schedule through timer start events.
A binding minimum interval of 15 minutes applies to timer start events.

Workflow view

In the workflow view, each step shows its execution status:
completed successfully, failed, or still pending.
For each step, input and output data, the expressions used,
execution logs, and the read-only configuration can be accessed without switching to the workflow builder.
Data fields taken over from previous steps are visually highlighted,
and output values can be switched between a field list and the JSON expression.
The configuration of gateway paths that were not taken is also viewable.
Workflow logs show only data of the user’s own tenant.

Restart from any step

An active workflow instance can be restarted from a freely chosen step or from the beginning.
The restart takes over the data of the respective token and creates a new instance from that point, which opens directly.
This allows incidents such as a temporarily unavailable third-party system to be resolved directly in the tool,
without support intervention.

SecuMails integration

Processes send SecuMails directly from the workflow,
without anyone writing the e-mail manually.
The integration stores the SecuTransfer server and the sender’s credentials,
with exactly one combination of server and sender per integration.
Recipients, subject, message, attachments, expiry period, and security level come from the workflow,
for example from form data or a previous process step.
Security levels 1 and 2 can be selected.
A maximum of 20 MB for all attachments combined and a maximum of 100 files apply,
and the message is transmitted as plain text.
The integration reports success or failure, together with the mail ID, send time, and details of the attachments.

SecuRooms integration

Processes store files in an existing SecuRoom.
Server and credentials are stored in the integration,
while the SecuRoom and target path are set in the workflow editor.
Folders that do not yet exist in the target path are created.
A maximum of 500 files and a maximum of 5 GB per file apply per upload.
If a file cannot be transferred or login fails, the workflow stops, and the time and the server’s message are logged.
Encrypted SecuRooms are not supported.

SharePoint integration

An action stores one or more files from the workflow in SharePoint.
Site and target path are configured in the action,
and large files are transferred in segments.
For a single file, the target path can be a directory or a file name;
for several files, it must be a directory.
Without a target path, the name of the input file is used.
An existing file with the same name is overwritten, so repeated runs do not create duplicates.
A maximum of 500 files and a maximum of 5 GB per file apply per operation.
The action returns the name, file ID, and web URL for each file.
The site is resolved by its display name.
The integration’s existing OAuth2 configuration is reused.

Forms in workflows

Required fields are marked consistently across all field types and layouts,
and when submitting, the form summarises any missing required fields.
In multi-page forms with a stepper, the required-field check also applies when switching via the numbered buttons,
and every page change starts at the top of the page.
Upload fields also accept complete folders including subfolders (selection or drag and drop).
The folder is stored as a ZIP archive with the folder structure preserved and counts as one upload unit.
If a folder contains a file with an unaccepted file type, the entire folder is skipped,
so “All files” is recommended as the accepted file type for folder uploads.
Optional upload fields may remain empty, in which case the process continues without a file.
Forms adapt to small screen widths.

Tables

Tables can be populated via CSV import (including umlauts, special characters, and date values)
and linked to SharePoint lists.
Filtering applies to the entire data set, not only to rows already loaded.
Columns with an active filter are recognisable in the overview,
and all active filters can be reset with one action.
The “Find row” activity also returns rows with an empty field value.

Your own AI models in workflows

In Secure Enterprise, your own AI models,
e.g. Claude or Gemini, can be integrated into workflows.

Workflows in your own infrastructure

Automations can run in your own infrastructure (on-premises automation).
Available in Secure Enterprise.

Administration and tenants

Tenants and users are managed in the admin panel, and the assigned roles are visible in the user overview.
When users log in for the first time via the harmonised SecuTransfer login,
they automatically receive the “Viewer” role with read access.
The mail server configuration for task notifications and process e-mails is identical in both places.
Transport encryption is selected via a switch: “SSL/TLS” (default) or “Mandatory STARTTLS”.
An unencrypted option is not available.

Secure Exchange

from €999 per month excl. VAT

500 GB / 99.50%

Workflow automation not included.
Included are, among others, SecuMails, data rooms,
digital mailbox, activity log, and audit trail

Secure Intelligence

on request

1 TB / 99.50%

Low-code workflow builder (BPMN 2.0),
human-in-the-loop workflows,
fully automated workflows,
60+ integrations,
SFTP, API,
digital forms.
At additional cost: e-post interface
(documents as letters via Deutsche Post),
native integrations of external systems (e.g. SAP HR, Salesforce, DocuSign),
process consulting & solution engineering

Secure Enterprise

on request

2 TB / 99.90%

Everything in Secure Intelligence,
plus workflows in your own infrastructure (on-premises automation),
integration of your own AI models
(e.g. Claude or Gemini) into workflows,
SIEM integration,
WAF and geoblocking,
extended branding

Digital payroll

Automated, secure dispatch of payslips to employees –
without media discontinuity, GDPR-compliant, and requiring no manual effort.

HR processes

Automated processing of registration data, onboarding documents, employment contracts, and other HR workflows.

Accounting & invoice processing

Automated processing of incoming receipts, invoices, and booking data –
integrated into existing ERP and accounting systems.

Transmission of medical results in healthcare

Automated, E2EE-encrypted dispatch of highly sensitive medical results to patients and
medical professionals (example: CeGaT).

Supply chain documentation (LkSG)

Automated requests to suppliers for evidence documentation under the Supply Chain Due Diligence Act –
from parts list to auditable evidence trail.

Application procedures in public authorities

Digitalisation and automation of application procedures, approval processes, and release workflows in public administrations.

Compliance checks

Automated, rule-based compliance checks and approval processes with a full audit trail for regulated sectors.

Onboarding processes

Structured, automated procedures for the onboarding of new employees, customers, or partners –
with defined steps, approvals, and notifications.

Automated document filing

Files from forms or processes are stored automatically in SecuRooms or SharePoint –
in SecuRooms with folders created automatically in the target path,
without manual uploading.

Submission of entire folders

Applicants or suppliers submit complete folders including subfolders via a form.
They are stored as a ZIP archive with the structure preserved
and processed further in the workflow.

Healthcare

Hospitals, clinics, laboratories, medical care centres, pathology institutes.
Core requirement: automated, E2EE-encrypted dispatch of medical results, digital patient intake, automation of documentation and
administrative processes – relevant to KHZG, GDPR-compliant.
ROI driver: relieving medical professionals of administrative burdens.
Reference customer: CeGaT (automated dispatch of highly sensitive genetic data).

Public administration, offices & authorities

Municipal administrations, social welfare associations, district authorities, municipal enterprises, public offices.
Core requirement: digitalisation and automation of application procedures, citizen portals, approval processes,
and release workflows in public administrations – OZG-compliant, audit-proof, with human in the loop for clerk decisions.
Reference customer: KSV Sachsen.

Insurance & financial services

Insurance companies, leasing companies, banks.
Core requirement: automated, secure dispatch of policies, leasing documents, and contract documents from core systems –
DORA-compliant, with full audit documentation.
Insurance companies automatically dispatch policy documents from their core system to customers via SecuFlows Advanced.

Manufacturing, automotive & supply chain

Manufacturing companies, OEMs, Tier 1 suppliers, companies subject to LkSG obligations (Supply Chain Due Diligence Act).
Core requirement: automated evidence workflow for LkSG compliance –
fully automatic requests to suppliers, intelligent distribution to procurement and quality assurance, auditable evidence trail.
Also: automated dispatch of TISAX® documents.

HR & payroll
(all sectors)

HR departments, payroll teams, payroll service providers.
Core requirement: fully automated, secure dispatch of payslips, employment contracts, and HR documents to all employees –
without manual effort, GDPR-compliant, with verifiable delivery.

Accounting & invoice processing
(all sectors)

Accounting departments, shared service centres, tax advisory firms.
Core requirement: automated, secure processing of incoming invoices and receipts –
extraction, routing, approval workflow, integration into ERP systems (REST API, SQL).

IT & compliance in regulated sectors

IT managers, compliance officers, and data protection officers in companies subject to NIS-2.
Core requirement: digitalisation and automation of compliance review processes, auditing workflows,
and internal approval processes – audit-proof, BPMN 2.0-based.

Primary decision-maker

CIO / Head of IT, COO / Head of Operations, digitalisation managers

Co-decision-makers

Compliance Officer, Data Protection Officer, head of department (HR, accounting, legal)

Users

Process owners, specialist users in accounting / HR / legal / administration, IT administrators

Organisation size

Mid-sized businesses to large enterprises (250–10,000+ employees); public administrations and authorities

Geography

DACH (primary), EU (expansion)

Primary purchase trigger

Manual processes as a bottleneck, NIS-2 / LkSG / DORA compliance obligation, ROI evidence required within 6 months

Typical ROI horizon

Within the first 6 months after implementation

not

UiPath, Automation Anywhere, or a conventional RPA tool (no screen scraping; API-based workflow integration instead)

not

Zapier, Make, or a generic iPaaS – SecuFlows Advanced is explicitly designed for compliance-critical, data-sensitive processes

not

FTAPI SecuMails, SecuRooms, or SecuForms

not

A standalone BPM system without a security focus

FTAPI SecuMails

Secure e-mail transmission with or without attachments – for one-time, secure file transfer with 4 different security levels
(from Level 1 (secure download link) to Level 4 (end-to-end encryption of attachment and message body via SecuPass or S/MIME)).

FTAPI SecuRooms

Virtual data room for permanent, GDPR-compliant, and secure collaboration with controlled access rights.

FTAPI SecuForms

Structured data intake via digital forms and SubmitBoxes – for the secure receipt of documents from external submitters.

FTAPI SecuFlows Advanced

This product. Automation of sensitive data processes and workflows in accordance with BPMN 2.0 –
without coding, audit-proof, and GDPR-compliant.