Certyneo Webhooks eSignature Workflow for n8n

Send Certyneo contracts for eSignature and securely file the sealed PDF + audit trail into Google Drive from n8n—automatically.

This n8n workflow uses Certyneo Webhooks to send a contract for signature, validates every incoming signature event with HMAC-SHA256, and uploads the resulting sealed PDF and audit trail to Google Drive immediately when the signer is done.

What this workflow does

• Configure everything in one Set node: template ID, signer name/email, subject, and message.
• Create and send the envelope via Certyneo REST API: first generates a draft envelope from your template, then sends it to the signer in a second API call.
• Receive signature events securely: a Webhook node is configured to keep the untouched request bytes alongside the parsed body.
• Verify the event integrity with HMAC: the workflow recomputes HMAC-SHA256 from the raw request bytes using the Crypto node and compares it against the X-Certyneo-Signature header—any mismatch stops the run before Drive uploads.
• Process only completed envelopes: it filters to keep only envelope.completed events.
• Download and upload final documents: once completed, it downloads the sealed PDF and the audit trail from the Certyneo API as binary files, then uploads both to Google Drive named after the envelope ID.

Use cases

• Automate contract signing in a SaaS app: send templates, verify webhook authenticity, and archive proof in Drive.
• Reduce operational risk: block processing if the Certyneo signature verification fails.
• Centralize compliance evidence: store sealed documents and audit trails per envelope ID in Google Drive.

Technical details

• Certyneo REST API (envelopes + webhooks scopes) using a Bearer Authorization header.
• Webhook node to receive signature events and retain raw request bytes.
• Crypto node to compute HMAC-SHA256 and validate against X-Certyneo-Signature.
• Filter to keep only envelope.completed events.
• Google Drive uploads: sealed PDF + audit trail as binaries.
• Nodes used include if, set, crypto, filter, webhook, and sticky note.