Icertis / Integration design guide
Keep your Icertis workflow. Define the authority handoff.
Agree which Icertis documents and context enter the review and which approved documents and decisions return. The customer-specific connection must be configured and validated before live use.
The proposed operating boundary
A defined exchange. Clear ownership on each side.
Customer-defined record and lifecycle-context mapping. These are the fields and outcomes to scope—not a confirmation of active synchronisation.
- Agreed input
- Record identity, current version, ownership and permitted lifecycle metadata
- DataHalt scope
- Negotiated terms, evidence conditions and accountable owner decisions
- Intended return
- The exact authorised package and customer-agreed status mapping
- 01 / Receive
Define the gateway contract
Agree the provider endpoint and payload mapping for the relevant Icertis records, document versions and customer entity.
- 02 / Govern
Evaluate inside the agreed scope
Use the workspace’s approved positions, connected-package conditions, current evidence and decision rights for the vendor round.
- 03 / Return
Return a reconciled package
Validate the final document set and lifecycle-state mapping before the handoff. Record the provider response and any unresolved conflict.
Before a final-agreement handoff, DataHalt must establish authority for the exact document set. A named human controls acceptance; the destination does not inherit permission to sign from a readiness record. Live vendor responses require a human-approved exact response and destination; neither a mapped provider status nor a valid permit substitutes for that approval. A historical decision record, including a separately configured signed record, does not grant the receiving system current approval or permission to execute.
See how the package becomes readyAuthority stays with the exact package
Ready for signature is not permission to sign.
DataHalt evaluates contractual acceptability. The customer retains corporate signing authority and the signing workflow in its configured CLM or e-signature environment.
- Document integrity
Bind the document set
The handoff must match the authorised package, including the evaluated versions and required attachments.
- Current decision
Recheck before handoff
Policy, evidence, approvals and destination remain subject to a fresh authority check. A changed package needs re-evaluation.
- Delivery evidence
Reconcile the outcome
A prepared permit is not delivery confirmation. Record the provider response and route failures through governed recovery.
The connection does not enable autonomous signing, renewal, amendment or termination. Unsupported actions remain blocked.
Inspect the authority recordCustomer-specific production validation
What must be demonstrated before go-live.
These are review requirements, not completed checks. Agree the evidence with the people who will operate the connection.
- 01Tenant and gateway access
Confirm the endpoint, customer tenant permissions and permitted record operations.
- 02Record and lifecycle semantics
Map metadata, ownership, document versions and lifecycle states; do not infer approval from a status label alone. Agree the rule, represented entity and exact action for any authority condition that consumes mapped facts.
- 03Reconciliation and retries
Test changed records, conflicting updates, repeat requests and recoverable failures under the agreed gateway contract.
- 04Operating sign-off
Have the customer approve the import, final-package return and exception-handling path before production use.
Scope the connection before connecting
One workflow. One validated path.
In a 15-minute workflow review, discuss the systems you use and the connection your first workflow would need. No contract upload needed for this conversation.
Deployment scope. These workflows are available for pilot validation, not presented as verified live capabilities. Confirm the enabled scope and current release evidence before live use. Examples are illustrative, not customer outcomes or permissions. Live vendor responses require human approval and a fresh check of current authority, exact content and destination. A permit or wording approval alone is not permission to send.