Forem: Alex Kane

n8n for InsurTech SaaS: 5 Automations That Scale Policy Ops and Keep Customer Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 17:30:35 +0000

InsurTech SaaS companies — policy admin platforms, claims management software, MGA tech stacks, telematics providers, and reinsurance SaaS — process some of the most tightly regulated data in financial services. Health records, biometric driving scores, actuarial models, claims histories, and underwriting credit data all flow through your platform.

When engineering teams default to Zapier or Make.com for internal ops automation, they create unauthorized sub-processors under GDPR Art.9, potential HIPAA BAA gaps for health insurers, and access control failures under the NAIC Insurance Data Security Model Law adopted in 20+ states.

This guide covers 5 production-ready n8n workflows — with full import-ready JSON — that InsurTech SaaS teams can deploy today. Free templates at stripeai.gumroad.com.

Why Self-Hosted n8n for InsurTech SaaS?

Requirement	Zapier/Make	Self-hosted n8n
NAIC Data Security Model Law	Multi-tenant log = uncontrolled TPSP	Single-tenant, documented TPSP controls
NYDFS Part 500 §500.17	All workspace members see task logs	VPN-gated, role-based access
HIPAA PHI (health insurers)	Generic DPA, task logs retain PHI	Your network, your BAA scope
GDPR Art.9 health/biometric data	EU health data on Zapier without Art.28 DPA	On-prem or EU-region VPS
FCRA permissible purpose records	30-day log = litigation evidence gap	Unlimited Postgres retention
Cost (50M policy events/mo)	~$50K/mo	~$400/mo VPS

Workflow 1: New Carrier/MGA Client Onboarding Drip

Trigger: Google Sheets (new row = new signed client) → tier classification (TIER1_CARRIER/TIER2_REGIONAL/TIER3_MGA/TIER4_INSURTECH based on premium volume and ARR) → Day 0 welcome email with HIPAA BAA and NYDFS Part 500 flags → Slack CSM alert → SOC2_CC7.1 audit log to Postgres → Wait 3 days → Day 3 check-in → Wait 4 days → Day 7 power user tips with template store link.

Key compliance flags wired in at classification:

HIPAA_BAA_REQUIRED: true for TIER1 and TIER2 (premium volume implies health insurance PHI processing)
NYDFS_500_APPLICABLE: true for TIER1 carriers subject to NY DFS Part 500 cybersecurity requirements

{
  "name": "InsurTech Carrier/MGA Client Onboarding Drip",
  "nodes": [
    {
      "id": "n1",
      "name": "New Client Row",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "typeVersion": 1,
      "position": [
        240,
        300
      ],
      "parameters": {
        "sheetId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "event": "rowAdded"
      }
    },
    {
      "id": "n2",
      "name": "Classify Tier",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        460,
        300
      ],
      "parameters": {
        "jsCode": "const r = $input.first().json;\nconst arr = parseFloat(r.arr_usd || 0);\nconst prem = parseFloat(r.premium_volume_usd || 0);\nlet tier, hipaaFlag, nydfsFlag;\nif (prem >= 1e9 || arr >= 1e6) { tier = 'TIER1_CARRIER'; hipaaFlag = true; nydfsFlag = true; }\nelse if (prem >= 1e8 || arr >= 200000) { tier = 'TIER2_REGIONAL'; hipaaFlag = true; nydfsFlag = false; }\nelse if (prem >= 1e7 || arr >= 50000) { tier = 'TIER3_MGA'; hipaaFlag = false; nydfsFlag = false; }\nelse { tier = 'TIER4_INSURTECH'; hipaaFlag = false; nydfsFlag = false; }\nreturn [{ json: { ...r, tier, hipaa_baa_required: hipaaFlag, nydfs_500_applicable: nydfsFlag, onboarded_at: new Date().toISOString() } }];"
      }
    },
    {
      "id": "n3",
      "name": "Day 0 Welcome Email",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        680,
        200
      ],
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.contact_email }}",
        "subject": "Welcome to the platform \u2014 {{ $json.tier }} setup guide enclosed",
        "message": "Hi {{ $json.contact_name }},\n\nYour {{ $json.tier }} onboarding guide is ready.\n\n{{ $json.hipaa_baa_required ? 'HIPAA BAA: your CSM will send for signature within 24 h.' : 'Standard DPA is enclosed.' }}\n{{ $json.nydfs_500_applicable ? 'NYDFS Part 500: we will schedule your \u00a7500.11 TPSP review this week.' : '' }}\n\nTeam FlowKit"
      }
    },
    {
      "id": "n4",
      "name": "Slack CSM Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        680,
        380
      ],
      "parameters": {
        "operation": "message",
        "channel": "#cs-new-accounts",
        "text": "*New {{ $json.tier }}*: {{ $json.company_name }} | ARR ${{ $json.arr_usd }} | HIPAA_BAA: {{ $json.hipaa_baa_required }} | NYDFS_500: {{ $json.nydfs_500_applicable }}"
      }
    },
    {
      "id": "n5",
      "name": "SOC2 Audit Log",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        680,
        540
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO soc2_onboarding_audit(account_id,company_name,tier,hipaa_baa_required,nydfs_applicable,onboarded_at) VALUES('{{ $json.account_id }}','{{ $json.company_name }}','{{ $json.tier }}',{{ $json.hipaa_baa_required }},{{ $json.nydfs_500_applicable }},'{{ $json.onboarded_at }}') ON CONFLICT(account_id) DO NOTHING"
      }
    },
    {
      "id": "n6",
      "name": "Wait 3 Days",
      "type": "n8n-nodes-base.wait",
      "typeVersion": 1,
      "position": [
        900,
        300
      ],
      "parameters": {
        "amount": 3,
        "unit": "days"
      }
    },
    {
      "id": "n7",
      "name": "Day 3 Check-In Email",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1120,
        300
      ],
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.contact_email }}",
        "subject": "Day 3 \u2014 need help with your first workflow?",
        "message": "Hi {{ $json.contact_name }},\n\nHow is setup going? Most teams have their first workflow live by now. If not, book a 30-min setup call: [CALENDAR LINK]\n\nTeam FlowKit"
      }
    },
    {
      "id": "n8",
      "name": "Wait 4 More Days",
      "type": "n8n-nodes-base.wait",
      "typeVersion": 1,
      "position": [
        1340,
        300
      ],
      "parameters": {
        "amount": 4,
        "unit": "days"
      }
    },
    {
      "id": "n9",
      "name": "Day 7 Power User Tips",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1560,
        300
      ],
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.contact_email }}",
        "subject": "Week 1 done \u2014 3 workflows top {{ $json.tier }} teams run this month",
        "message": "Hi {{ $json.contact_name }},\n\nWeek 1 down. Here are 3 workflows top {{ $json.tier }} teams run:\n\n1. NAIC/state DOI compliance deadline tracker\n2. Real-time claims fraud triage pipeline\n3. Weekly executive KPI dashboard with loss ratio alerts\n\nAll free templates: https://stripeai.gumroad.com\n\nTeam FlowKit"
      }
    }
  ],
  "connections": {
    "New Client Row": {
      "main": [
        [
          {
            "node": "Classify Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Tier": {
      "main": [
        [
          {
            "node": "Day 0 Welcome Email",
            "type": "main",
            "index": 0
          },
          {
            "node": "Slack CSM Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "SOC2 Audit Log": {
      "main": [
        [
          {
            "node": "Wait 3 Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 3 Days": {
      "main": [
        [
          {
            "node": "Day 3 Check-In Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Day 3 Check-In Email": {
      "main": [
        [
          {
            "node": "Wait 4 More Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 4 More Days": {
      "main": [
        [
          {
            "node": "Day 7 Power User Tips",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

Workflow 2: Policy API & Claims Processing Health Monitor

Every 3 minutes: query policy_endpoints Postgres table → HTTP ping each endpoint → classify DOWN/STALE_DATA (>15 min since last success)/DEGRADED → 30-min dedup via $getWorkflowStaticData → Slack #platform-ops alert → Postgres policy_incidents ON CONFLICT DO NOTHING.

The STALE_DATA status catches silent failures — endpoints that return 200 but stopped processing events, which is often the most dangerous failure mode in claims processing.

{
  "name": "Policy API & Claims Processing Health Monitor",
  "nodes": [
    {
      "id": "n1",
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        240,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 3
            }
          ]
        }
      }
    },
    {
      "id": "n2",
      "name": "Get Endpoints",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        460,
        300
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT endpoint_name, url, expected_response_time_ms, last_success_at FROM policy_endpoints WHERE is_active = true"
      }
    },
    {
      "id": "n3",
      "name": "Ping Each Endpoint",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        680,
        300
      ],
      "parameters": {
        "url": "={{ $json.url }}",
        "method": "GET",
        "options": {
          "response": {
            "response": {
              "fullResponse": true
            }
          },
          "timeout": 10000
        }
      }
    },
    {
      "id": "n4",
      "name": "Evaluate Health",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        900,
        300
      ],
      "parameters": {
        "jsCode": "const items = $input.all();\nconst state = $getWorkflowStaticData('global');\nconst now = Date.now();\nconst results = [];\nfor (const item of items) {\n  const ep = item.json;\n  const lastSuccess = ep.last_success_at ? new Date(ep.last_success_at).getTime() : 0;\n  const staleMs = now - lastSuccess;\n  const status = ep.statusCode >= 200 && ep.statusCode < 300 ? 'UP'\n    : staleMs > 15*60*1000 ? 'STALE_DATA'\n    : ep.statusCode >= 500 ? 'DOWN' : 'DEGRADED';\n  if (status !== 'UP') {\n    const alertKey = `${ep.endpoint_name}_${status}`;\n    const lastAlert = state[alertKey] || 0;\n    if (now - lastAlert > 30*60*1000) {\n      state[alertKey] = now;\n      results.push({ json: { ...ep, health_status: status, stale_minutes: Math.round(staleMs/60000) } });\n    }\n  }\n}\n$setWorkflowStaticData('global', state);\nreturn results.length ? results : [{ json: { skip: true } }];"
      }
    },
    {
      "id": "n5",
      "name": "Has Incident?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2,
      "position": [
        1120,
        300
      ],
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true
          },
          "conditions": [
            {
              "id": "c1",
              "leftValue": "={{ $json.skip }}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "notEquals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "n6",
      "name": "Slack Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1340,
        200
      ],
      "parameters": {
        "operation": "message",
        "channel": "#platform-ops",
        "text": ":alert: *{{ $json.health_status }}* \u2014 `{{ $json.endpoint_name }}` | {{ $json.health_status === 'STALE_DATA' ? $json.stale_minutes + ' min since last success' : 'HTTP ' + $json.statusCode }} | {{ $json.url }}"
      }
    },
    {
      "id": "n7",
      "name": "Log Incident",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1340,
        380
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO policy_incidents(endpoint_name, health_status, stale_minutes, detected_at) VALUES('{{ $json.endpoint_name }}','{{ $json.health_status }}',{{ $json.stale_minutes || 0 }},'{{ new Date().toISOString() }}') ON CONFLICT DO NOTHING"
      }
    }
  ],
  "connections": {
    "Every 3 Minutes": {
      "main": [
        [
          {
            "node": "Get Endpoints",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Endpoints": {
      "main": [
        [
          {
            "node": "Ping Each Endpoint",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Ping Each Endpoint": {
      "main": [
        [
          {
            "node": "Evaluate Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Evaluate Health": {
      "main": [
        [
          {
            "node": "Has Incident?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Incident?": {
      "main": [
        [
          {
            "node": "Slack Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log Incident",
            "type": "main",
            "index": 0
          }
        ],
        []
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

Workflow 3: NAIC/State DOI Compliance Deadline Tracker

Weekdays 8 AM: read Google Sheets compliance calendar → calculate days until due → OVERDUE/CRITICAL (≤7d)/URGENT (≤14d)/WARNING (≤30d)/NOTICE (≤60d) tiers → daily dedup per compliance item via $getWorkflowStaticData → Switch routing to Slack @here for OVERDUE/CRITICAL, Gmail owner for URGENT/WARNING.

Insurance-specific actionMap includes:

NAIC_ISCM — NAIC Insurance Data Security Model Law annual certification (adopted in 21 states as of 2025)
NYDFS_500_CERT — NYDFS Part 500 §500.17 annual compliance certification to superintendent
HIPAA_BAA_REVIEW — annual review of HIPAA BAAs with all sub-processors
GDPR_ART9_REVIEW — GDPR Art.9 special category data (health, biometric) processing review
CCPA_SPI_AUDIT — CCPA sensitive personal information audit (health info, geolocation, biometric in telematics underwriting)
FCRA_PERMISSIBLE_PURPOSE — FCRA §604 permissible purpose documentation review
STATE_SURPLUS_LINES_TAX — surplus lines tax filing (state-specific deadlines vary)

{
  "name": "NAIC/State DOI Compliance Deadline Tracker",
  "nodes": [
    {
      "id": "n1",
      "name": "Weekdays 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        240,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1-5"
            }
          ]
        }
      }
    },
    {
      "id": "n2",
      "name": "Get Compliance Calendar",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        460,
        300
      ],
      "parameters": {
        "operation": "read",
        "documentId": {
          "__rl": true,
          "value": "YOUR_SHEET_ID",
          "mode": "id"
        },
        "sheetName": "Sheet1"
      }
    },
    {
      "id": "n3",
      "name": "Calculate Urgency",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        680,
        300
      ],
      "parameters": {
        "jsCode": "const actionMap = {\n  'NAIC_ISCM': 'NAIC Insurance Data Security Model Law annual certification',\n  'STATE_DOI_RATE_FILING': 'State DOI rate/form filing',\n  'NYDFS_500_CERT': 'NYDFS Part 500 \u00a7500.17 annual compliance certification',\n  'NYDFS_500_ANNUAL': 'NYDFS Part 500 annual cybersecurity report to superintendent',\n  'HIPAA_PRIVACY_TRAINING': 'HIPAA annual privacy and security training',\n  'HIPAA_BAA_REVIEW': 'HIPAA BAA vendor review \u2014 all sub-processors',\n  'GDPR_ART9_REVIEW': 'GDPR Art.9 special category health/biometric data processing review',\n  'CCPA_SPI_AUDIT': 'CCPA sensitive personal information annual audit (\u00a71798.140(ae))',\n  'SOC2_TYPE2': 'SOC 2 Type II audit window',\n  'FCRA_PERMISSIBLE_PURPOSE': 'FCRA \u00a7604 permissible purpose documentation review',\n  'STATE_SURPLUS_LINES_TAX': 'Surplus lines tax filing',\n  'NAIC_MARKET_CONDUCT': 'NAIC market conduct exam response'\n};\nconst today = new Date(); today.setHours(0,0,0,0);\nconst state = $getWorkflowStaticData('global');\nconst now = Date.now();\nconst results = [];\nfor (const item of $input.all()) {\n  const r = item.json;\n  const due = new Date(r.due_date); due.setHours(0,0,0,0);\n  const days = Math.round((due - today) / 86400000);\n  const tier = days < 0 ? 'OVERDUE' : days <= 7 ? 'CRITICAL' : days <= 14 ? 'URGENT' : days <= 30 ? 'WARNING' : days <= 60 ? 'NOTICE' : null;\n  if (!tier) continue;\n  const dedup = `${r.compliance_type}_${r.due_date}`;\n  const lastNotified = state[dedup] || 0;\n  if (now - lastNotified < 86400000) continue;\n  state[dedup] = now;\n  results.push({ json: { ...r, days_until_due: days, urgency_tier: tier, action_description: actionMap[r.compliance_type] || r.compliance_type } });\n}\n$setWorkflowStaticData('global', state);\nreturn results.length ? results : [{ json: { skip: true } }];"
      }
    },
    {
      "id": "n4",
      "name": "Has Deadlines?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2,
      "position": [
        900,
        300
      ],
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true
          },
          "conditions": [
            {
              "id": "c1",
              "leftValue": "={{ $json.skip }}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "notEquals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "n5",
      "name": "Route by Urgency",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        1120,
        300
      ],
      "parameters": {
        "mode": "rules",
        "rules": {
          "values": [
            {
              "outputKey": "OVERDUE",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c1",
                    "leftValue": "={{ $json.urgency_tier }}",
                    "rightValue": "OVERDUE",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "outputKey": "CRITICAL",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c2",
                    "leftValue": "={{ $json.urgency_tier }}",
                    "rightValue": "CRITICAL",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "outputKey": "URGENT",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c3",
                    "leftValue": "={{ $json.urgency_tier }}",
                    "rightValue": "URGENT",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            }
          ]
        },
        "fallbackOutput": "last"
      }
    },
    {
      "id": "n6",
      "name": "Slack Urgent Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1340,
        200
      ],
      "parameters": {
        "operation": "message",
        "channel": "#compliance-insurance",
        "text": "@here :rotating_light: *{{ $json.urgency_tier }}* \u2014 {{ $json.compliance_type }} | {{ $json.action_description }} | Due: {{ $json.due_date }} ({{ $json.days_until_due < 0 ? Math.abs($json.days_until_due) + ' days OVERDUE' : $json.days_until_due + ' days' }}) | Owner: {{ $json.owner_email }}"
      }
    },
    {
      "id": "n7",
      "name": "Gmail Owner Alert",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1340,
        380
      ],
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.owner_email }}",
        "subject": "[{{ $json.urgency_tier }}] {{ $json.compliance_type }} due {{ $json.due_date }}",
        "message": "{{ $json.action_description }}\n\nDue: {{ $json.due_date }}\nDays remaining: {{ $json.days_until_due }}\nRegulation reference: {{ $json.regulation_ref }}\n\nThis is an automated reminder from your n8n compliance tracker."
      }
    }
  ],
  "connections": {
    "Weekdays 8 AM": {
      "main": [
        [
          {
            "node": "Get Compliance Calendar",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Compliance Calendar": {
      "main": [
        [
          {
            "node": "Calculate Urgency",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Calculate Urgency": {
      "main": [
        [
          {
            "node": "Has Deadlines?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Deadlines?": {
      "main": [
        [
          {
            "node": "Route by Urgency",
            "type": "main",
            "index": 0
          }
        ],
        []
      ]
    },
    "Route by Urgency": {
      "main": [
        [
          {
            "node": "Slack Urgent Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Urgent Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Gmail Owner Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Gmail Owner Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

Workflow 4: Claims Fraud Detection & Triage Alert

Webhook from claims system on submission → Code classifies fraud tier based on fraud score, claim amount, duplicate policy flags, and claim velocity → Switch routes:

CRITICAL_FRAUD (score ≥0.9 / duplicate policy / known ring): Slack @channel #fraud-ops + SIU assignment
HIGH_RISK (score ≥0.75 / amount ≥$250K / multi-claim same address): Slack #fraud-ops + Gmail SIU lead
MEDIUM_RISK (score ≥0.5 / velocity flag): Slack #fraud-review queue
LOW_RISK: Postgres log only

→ Postgres claims_fraud_log ON CONFLICT DO NOTHING → Respond 200 with fraud tier and SIU flag.

Self-hosted n8n ensures fraud scoring data, claimant PII, and SIU investigation notes stay inside your network — critical for NAIC market conduct exam evidence and HIPAA §164.504 PHI controls.

{
  "name": "Claims Fraud Detection & Triage Alert",
  "nodes": [
    {
      "id": "n1",
      "name": "Claims Webhook",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2,
      "position": [
        240,
        300
      ],
      "parameters": {
        "httpMethod": "POST",
        "path": "claims-fraud-triage",
        "responseMode": "lastNode"
      }
    },
    {
      "id": "n2",
      "name": "Classify Fraud Risk",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        460,
        300
      ],
      "parameters": {
        "jsCode": "const r = $input.first().json;\nconst fraudScore = parseFloat(r.fraud_score || 0);\nconst claimAmount = parseFloat(r.claim_amount_usd || 0);\nconst dupPolicy = !!r.duplicate_policy_in_24h;\nconst knownRing = !!r.known_fraud_ring_match;\nconst multiClaimAddr = !!r.multiple_claims_same_address_30d;\nconst claimVelocity = !!r.claim_velocity_flag;\nlet tier, suiRequired;\nif (fraudScore >= 0.9 || dupPolicy || knownRing) { tier = 'CRITICAL_FRAUD'; suiRequired = true; }\nelse if (fraudScore >= 0.75 || claimAmount >= 250000 || multiClaimAddr) { tier = 'HIGH_RISK'; suiRequired = true; }\nelse if (fraudScore >= 0.5 || claimVelocity) { tier = 'MEDIUM_RISK'; suiRequired = false; }\nelse { tier = 'LOW_RISK'; suiRequired = false; }\nreturn [{ json: { ...r, fraud_tier: tier, sui_required: suiRequired, detected_at: new Date().toISOString() } }];"
      }
    },
    {
      "id": "n3",
      "name": "Route by Tier",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        680,
        300
      ],
      "parameters": {
        "mode": "rules",
        "rules": {
          "values": [
            {
              "outputKey": "CRITICAL",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c1",
                    "leftValue": "={{ $json.fraud_tier }}",
                    "rightValue": "CRITICAL_FRAUD",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "outputKey": "HIGH",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c2",
                    "leftValue": "={{ $json.fraud_tier }}",
                    "rightValue": "HIGH_RISK",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "outputKey": "MEDIUM",
              "conditions": {
                "options": {
                  "caseSensitive": true
                },
                "conditions": [
                  {
                    "id": "c3",
                    "leftValue": "={{ $json.fraud_tier }}",
                    "rightValue": "MEDIUM_RISK",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            }
          ]
        },
        "fallbackOutput": "last"
      }
    },
    {
      "id": "n4",
      "name": "Slack Critical",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        120
      ],
      "parameters": {
        "operation": "message",
        "channel": "#fraud-ops",
        "text": "@channel :red_circle: *CRITICAL FRAUD* \u2014 Claim {{ $json.claim_id }} | Score: {{ $json.fraud_score }} | Amount: ${{ $json.claim_amount_usd }} | Policy: {{ $json.policy_id }} | Claimant: {{ $json.claimant_name }} | Assign SIU immediately"
      }
    },
    {
      "id": "n5",
      "name": "Slack High Risk",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        280
      ],
      "parameters": {
        "operation": "message",
        "channel": "#fraud-ops",
        "text": ":large_orange_circle: *HIGH RISK* \u2014 Claim {{ $json.claim_id }} | Score: {{ $json.fraud_score }} | Amount: ${{ $json.claim_amount_usd }} | SUI assigned: {{ $json.sui_required }}"
      }
    },
    {
      "id": "n6",
      "name": "Slack Medium Risk",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        900,
        440
      ],
      "parameters": {
        "operation": "message",
        "channel": "#fraud-review",
        "text": ":yellow_circle: *MEDIUM RISK* \u2014 Claim {{ $json.claim_id }} | Score: {{ $json.fraud_score }} | Velocity flag: {{ $json.claim_velocity_flag }} | Queue for manual review"
      }
    },
    {
      "id": "n7",
      "name": "Log to Fraud DB",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1120,
        300
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO claims_fraud_log(claim_id,policy_id,fraud_score,claim_amount_usd,fraud_tier,sui_required,detected_at) VALUES('{{ $json.claim_id }}','{{ $json.policy_id }}',{{ $json.fraud_score }},{{ $json.claim_amount_usd }},'{{ $json.fraud_tier }}',{{ $json.sui_required }},'{{ $json.detected_at }}') ON CONFLICT(claim_id) DO NOTHING"
      }
    },
    {
      "id": "n8",
      "name": "Respond 200",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1,
      "position": [
        1340,
        300
      ],
      "parameters": {
        "responseBody": "={{ JSON.stringify({ received: true, claim_id: $json.claim_id, fraud_tier: $json.fraud_tier, sui_required: $json.sui_required }) }}",
        "responseCode": 200
      }
    }
  ],
  "connections": {
    "Claims Webhook": {
      "main": [
        [
          {
            "node": "Classify Fraud Risk",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Fraud Risk": {
      "main": [
        [
          {
            "node": "Route by Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Tier": {
      "main": [
        [
          {
            "node": "Slack Critical",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack High Risk",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Medium Risk",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Log to Fraud DB",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Critical": {
      "main": [
        [
          {
            "node": "Log to Fraud DB",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack High Risk": {
      "main": [
        [
          {
            "node": "Log to Fraud DB",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Medium Risk": {
      "main": [
        [
          {
            "node": "Log to Fraud DB",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Log to Fraud DB": {
      "main": [
        [
          {
            "node": "Respond 200",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

Workflow 5: Weekly InsurTech Platform KPI Dashboard

Monday 8 AM: parallel Postgres queries (platform metrics + account health) → Merge → Code calculates WoW% via $getWorkflowStaticData, applies color coding (loss ratio: green <60% / orange <70% / red ≥70%; uptime: green ≥99.9% / orange ≥99.0% / red <99%) → HTML email to CEO with BCC to CTO/CRO/VP-CS → Slack #exec-kpis one-liner.

Loss ratio is the single most watched metric in insurance. Wiring it into a weekly automated report means no one forgets to check it.

{
  "name": "Weekly InsurTech Platform KPI Dashboard",
  "nodes": [
    {
      "id": "n1",
      "name": "Monday 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        240,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1"
            }
          ]
        }
      }
    },
    {
      "id": "n2",
      "name": "Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        460,
        200
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT active_policies, new_bindings_7d, claims_submitted_7d, claims_paid_7d, loss_ratio_pct, api_uptime_pct FROM platform_metrics WHERE week_ending = date_trunc('week', CURRENT_DATE) - interval '1 day' LIMIT 1"
      }
    },
    {
      "id": "n3",
      "name": "Account Health",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        460,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT count(*) FILTER (WHERE health_score < 60) as accounts_at_risk, avg(nps_score) as avg_nps, count(*) FILTER (WHERE churned_at > NOW() - interval '7 days') as churned_this_week FROM account_health WHERE is_active = true"
      }
    },
    {
      "id": "n4",
      "name": "Merge",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 3,
      "position": [
        680,
        300
      ],
      "parameters": {
        "mode": "combine",
        "combinationMode": "mergeByPosition"
      }
    },
    {
      "id": "n5",
      "name": "Build KPI Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        900,
        300
      ],
      "parameters": {
        "jsCode": "const d = $input.first().json;\nconst state = $getWorkflowStaticData('global');\nconst prev = state.prev_metrics || {};\nconst wowPolicies = prev.active_policies ? (((d.active_policies - prev.active_policies) / prev.active_policies) * 100).toFixed(1) : 'N/A';\nconst lossColor = d.loss_ratio_pct < 60 ? '#27ae60' : d.loss_ratio_pct < 70 ? '#e67e22' : '#e74c3c';\nconst uptimeColor = d.api_uptime_pct >= 99.9 ? '#27ae60' : d.api_uptime_pct >= 99.0 ? '#e67e22' : '#e74c3c';\nstate.prev_metrics = { active_policies: d.active_policies };\n$setWorkflowStaticData('global', state);\nconst html = `<h2>InsurTech Platform \u2014 Weekly KPI Dashboard</h2><table border='1' cellpadding='8' style='border-collapse:collapse;font-family:sans-serif'><tr><th>Metric</th><th>Value</th><th>WoW</th></tr><tr><td>Active Policies</td><td>${d.active_policies?.toLocaleString()}</td><td>${wowPolicies}%</td></tr><tr><td>New Bindings (7d)</td><td>${d.new_bindings_7d}</td><td>\u2014</td></tr><tr><td>Claims Submitted (7d)</td><td>${d.claims_submitted_7d}</td><td>\u2014</td></tr><tr><td>Loss Ratio</td><td style='color:${lossColor}'><b>${d.loss_ratio_pct}%</b></td><td>\u2014</td></tr><tr><td>API Uptime</td><td style='color:${uptimeColor}'><b>${d.api_uptime_pct}%</b></td><td>\u2014</td></tr><tr><td>Accounts at Risk</td><td>${d.accounts_at_risk}</td><td>\u2014</td></tr><tr><td>Avg NPS</td><td>${parseFloat(d.avg_nps).toFixed(1)}</td><td>\u2014</td></tr><tr><td>Churned This Week</td><td>${d.churned_this_week}</td><td>\u2014</td></tr></table>`;\nreturn [{ json: { ...d, html_report: html, wow_policies: wowPolicies, loss_color: lossColor } }];"
      }
    },
    {
      "id": "n6",
      "name": "Gmail to Exec Team",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1120,
        200
      ],
      "parameters": {
        "operation": "send",
        "toList": "ceo@yourcompany.com",
        "toListBcc": "cto@yourcompany.com,vp-cs@yourcompany.com,cro@yourcompany.com",
        "subject": "InsurTech Weekly KPI \u2014 Loss Ratio {{ $json.loss_ratio_pct }}% | Uptime {{ $json.api_uptime_pct }}%",
        "message": "={{ $json.html_report }}"
      }
    },
    {
      "id": "n7",
      "name": "Slack Exec Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1120,
        400
      ],
      "parameters": {
        "operation": "message",
        "channel": "#exec-kpis",
        "text": "*Weekly InsurTech KPIs* | Active Policies: {{ $json.active_policies?.toLocaleString() }} ({{ $json.wow_policies }}% WoW) | Loss Ratio: {{ $json.loss_ratio_pct }}% | Uptime: {{ $json.api_uptime_pct }}% | At-Risk Accounts: {{ $json.accounts_at_risk }} | NPS: {{ parseFloat($json.avg_nps).toFixed(1) }}"
      }
    }
  ],
  "connections": {
    "Monday 8 AM": {
      "main": [
        [
          {
            "node": "Platform Metrics",
            "type": "main",
            "index": 0
          },
          {
            "node": "Account Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Platform Metrics": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Account Health": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge": {
      "main": [
        [
          {
            "node": "Build KPI Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build KPI Report": {
      "main": [
        [
          {
            "node": "Gmail to Exec Team",
            "type": "main",
            "index": 0
          },
          {
            "node": "Slack Exec Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

n8n vs Zapier vs Make.com for InsurTech SaaS

Feature	n8n (self-hosted)	Zapier	Make.com
NAIC ISCM compliance	Full TPSP controls	Multi-tenant = failed controls	Multi-tenant = failed controls
HIPAA PHI sub-processor	Your network, clear BAA scope	Generic DPA, task log PHI exposure	Generic DPA
GDPR Art.9 health/biometric	EU VPS option available	US servers + DPA gap	US servers
Execution log retention	Unlimited (Postgres)	30 days	30 days
FCRA audit trail	Permanent, queryable	30-day gap = litigation risk	30-day gap
Cost at 50M events/mo	~$400/mo VPS	~$50K/mo	~$30K/mo
Workflow branching	Unlimited	100-step Zap limit	Scenario step limit

Free InsurTech Automation Templates

All 5 workflows above are available as ready-to-import JSON at stripeai.gumroad.com — FlowKit's n8n template store.

Individual templates: $12–$29. Complete bundle (14 templates): $97.

Built any of these for your InsurTech SaaS? Drop your variation in the comments — especially curious about telematics and embedded insurance use cases.

n8n for MarTech SaaS: 5 Automations That Scale Campaign Ops and Keep Customer Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 17:13:39 +0000

If your company runs a CDP, marketing automation platform, or email marketing SaaS, you have a data sovereignty problem that Zapier and Make.com cannot solve.

Contact behavioral data, consent records, campaign engagement signals, and suppression lists cannot legally flow through a third-party cloud automation platform under GDPR Art.28, CCPA Cal.Civ.Code §1798.140(ah)(1), CAN-SPAM §7704, TCPA 47 U.S.C. §227, and an expanding stack of US state privacy laws.

n8n runs entirely on your infrastructure. No event data leaves your network. Every workflow is git-versionable, environment-isolated, and auditable by your DPO or CISO at any time.

Here are 5 production automations for MarTech SaaS companies — with import-ready workflow JSON.

1. New Marketing Brand Client Onboarding Drip

Who needs it: Any MarTech SaaS — CDPs, email platforms, marketing automation tools — that onboards brands at multiple tier levels.

What it does: When a new client row is added to your Sheets CRM, classify by tier (enterprise CDP, mid-market, SMB, starter), route to the right CSM channel, send tier-appropriate Day 0 emails, flag GDPR/CCPA DPA requirements, and log to SOC 2 audit sheet — automatically.

Compliance relevance: GDPR Art.28 sub-processor DPA (required before processing EU personal data for a client), CCPA service provider agreement (required before processing CA consumer data), SOC 2 CC7.1 onboarding documentation.

Tier logic:

ENTERPRISE_CDP (≥10M contacts or ≥$500K ARR): dedicated CSM, GDPR/CCPA DPA flag
MID_MARKET_MARTECH (≥1M contacts or ≥$100K ARR): shared CSM channel, compliance review
SMB_MARKETING / STARTER: self-serve onboarding email

{
  "name": "New Marketing Brand Client Onboarding Drip",
  "nodes": [
    {
      "parameters": {
        "event": "rowAdded",
        "sheetId": "YOUR_CLIENTS_SHEET_ID",
        "range": "Clients!A:H",
        "options": {}
      },
      "name": "New Client Row Trigger",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "typeVersion": 4,
      "position": [
        250,
        300
      ],
      "id": "trg1"
    },
    {
      "parameters": {
        "jsCode": "const d=$json;\nconst contacts=parseInt(d.total_contacts||0);\nconst arr=parseFloat(d.arr_usd||0);\nlet tier;\nif(contacts>=10000000||arr>=500000)tier='ENTERPRISE_CDP';\nelse if(contacts>=1000000||arr>=100000)tier='MID_MARKET_MARTECH';\nelse if(contacts>=100000||arr>=10000)tier='SMB_MARKETING';\nelse tier='STARTER';\nconst requiresGdprDpa=(d.eu_customers||'').toLowerCase()==='yes';\nconst requiresCcpaDpa=(d.ca_customers||'').toLowerCase()==='yes';\nreturn[{json:{...d,tier,requiresGdprDpa,requiresCcpaDpa,\n  csmChannel:tier==='ENTERPRISE_CDP'?'#csm-enterprise':tier==='MID_MARKET_MARTECH'?'#csm-midmarket':'#csm-smb'}}];"
      },
      "name": "Classify Client Tier",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        450,
        300
      ],
      "id": "cls1"
    },
    {
      "parameters": {
        "rules": {
          "values": [
            {
              "conditions": {
                "string": [
                  {
                    "value1": "={{$json.tier}}",
                    "operation": "equal",
                    "value2": "ENTERPRISE_CDP"
                  }
                ]
              },
              "renameOutput": true,
              "outputKey": "ENTERPRISE"
            },
            {
              "conditions": {
                "string": [
                  {
                    "value1": "={{$json.tier}}",
                    "operation": "equal",
                    "value2": "MID_MARKET_MARTECH"
                  }
                ]
              },
              "renameOutput": true,
              "outputKey": "MID_MARKET"
            },
            {
              "conditions": {
                "string": [
                  {
                    "value1": "={{$json.tier}}",
                    "operation": "startsWith",
                    "value2": "SMB"
                  }
                ]
              },
              "renameOutput": true,
              "outputKey": "SMB"
            }
          ]
        }
      },
      "name": "Route by Tier",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "sw1"
    },
    {
      "parameters": {
        "toEmail": "={{$json.primary_contact_email}}",
        "subject": "Welcome to [Platform] \u2014 your enterprise onboarding starts now",
        "message": "Hi {{$json.primary_contact_name}},\n\nWelcome to [Platform]. Your dedicated CSM will reach out within 2 hours to schedule your kickoff call.\n\nYour account includes:\n- Dedicated enterprise support channel\n- Custom data ingestion setup\n- GDPR/CCPA compliance review\n- SLA: 99.99% uptime with 1-hour response\n\nIn the meantime, here is your enterprise onboarding guide:\nhttps://docs.yourplatform.com/enterprise-onboarding\n\nLooking forward to working with you.\n\n\u2014 Customer Success Team"
      },
      "name": "Gmail Enterprise Day0",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        850,
        160
      ],
      "id": "gm1a"
    },
    {
      "parameters": {
        "toEmail": "={{$json.primary_contact_email}}",
        "subject": "Get started with [Platform] \u2014 3 quick wins for your first week",
        "message": "Hi {{$json.primary_contact_name}},\n\nWelcome to [Platform]! Here are 3 quick wins to get started:\n\n1. Connect your first data source (5 min): https://app.yourplatform.com/sources\n2. Create your first segment: https://app.yourplatform.com/segments\n3. Launch your first campaign: https://app.yourplatform.com/campaigns\n\nNeed help? Book a 30-min setup call: https://calendly.com/yourplatform/setup\n\n\u2014 [Platform] Team"
      },
      "name": "Gmail SMB Day0",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        850,
        420
      ],
      "id": "gm1b"
    },
    {
      "parameters": {
        "channel": "={{$json.csmChannel}}",
        "text": ":rocket: New client onboarded: *{{$json.company_name}}* ({{$json.tier}})\nContacts: {{$json.total_contacts}} | ARR: ${{$json.arr_usd}}\nPrimary contact: {{$json.primary_contact_name}} <{{$json.primary_contact_email}}>\nEU customers: {{$json.eu_customers}} | CA customers: {{$json.ca_customers}}\n{{$json.requiresGdprDpa ? ':warning: GDPR DPA required (Art.28)' : ''}}\n{{$json.requiresCcpaDpa ? ':warning: CCPA service provider agreement required' : ''}}"
      },
      "name": "Slack CSM Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        300
      ],
      "id": "sl1"
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": "YOUR_AUDIT_SHEET_ID",
        "range": "OnboardingLog!A:K",
        "options": {},
        "dataMode": "autoMapInputData"
      },
      "name": "SOC2 Audit Log",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1250,
        300
      ],
      "id": "gs1"
    }
  ],
  "connections": {
    "New Client Row Trigger": {
      "main": [
        [
          {
            "node": "Classify Client Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Client Tier": {
      "main": [
        [
          {
            "node": "Route by Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Tier": {
      "ENTERPRISE": [
        [
          {
            "node": "Gmail Enterprise Day0",
            "type": "main",
            "index": 0
          }
        ]
      ],
      "MID_MARKET": [
        [
          {
            "node": "Gmail SMB Day0",
            "type": "main",
            "index": 0
          }
        ]
      ],
      "SMB": [
        [
          {
            "node": "Gmail SMB Day0",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail Enterprise Day0": {
      "main": [
        [
          {
            "node": "Slack CSM Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail SMB Day0": {
      "main": [
        [
          {
            "node": "Slack CSM Alert",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack CSM Alert": {
      "main": [
        [
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

2. Campaign API & Event Pipeline Health Monitor

Who needs it: Any MarTech platform with inbound event webhooks, outbound campaign APIs, or real-time segmentation pipelines.

What it does: Every 3 minutes, ping all your campaign API endpoints stored in Postgres. Classify DOWN/STALE_DATA/DEGRADED states, suppress repeat alerts with $getWorkflowStaticData (30-minute dedup window), alert #platform-ops, and write a SOC 2-compliant incident log.

Why self-hosted n8n matters here: Zapier/Make webhooks route event data through their cloud infrastructure. For a CDP processing EU behavioral signals, that's GDPR Art.28 territory — every Zapier task log entry containing user IDs or behavioral data requires a documented DPA and is scoped into your GDPR record of processing activities.

{
  "name": "Campaign API & Event Pipeline Health Monitor",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 3
            }
          ]
        }
      },
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc2"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT endpoint_name, endpoint_url, endpoint_type, team FROM campaign_endpoints WHERE active = true ORDER BY endpoint_name"
      },
      "name": "Load Endpoints",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        450,
        300
      ],
      "id": "pg2"
    },
    {
      "parameters": {
        "url": "={{$json.endpoint_url}}",
        "options": {
          "timeout": 8000,
          "response": {
            "response": {
              "responseFormat": "text"
            }
          }
        }
      },
      "name": "HTTP Ping",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        650,
        300
      ],
      "id": "http2"
    },
    {
      "parameters": {
        "jsCode": "const items=[];\nfor(const item of $input.all()){\n  const d=item.json;\n  const status=d.$response?.statusCode||d.statusCode||0;\n  const latencyMs=d.$response?.responseTime||0;\n  const lastDataAge=d.last_event_age_minutes||0;\n  let health;\n  if(status===0||status>=500)health='DOWN';\n  else if(lastDataAge>=15)health='STALE_DATA';\n  else if(latencyMs>=3000||status>=400)health='DEGRADED';\n  else health='OK';\n  if(health!=='OK'){\n    const state=$getWorkflowStaticData('global');\n    const key=`alert_${d.endpoint_name}`;\n    const now=Date.now();\n    const lastAlert=state[key]||0;\n    if(now-lastAlert>1800000){\n      state[key]=now;\n      items.push({json:{...d,health,status,latencyMs,alertedAt:new Date().toISOString()}});\n    }\n  }\n}\nreturn items.length?items:[{json:{__all_healthy:true}}];"
      },
      "name": "Classify Health",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        850,
        300
      ],
      "id": "cls2"
    },
    {
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{!$json.__all_healthy}}",
              "value2": true
            }
          ]
        }
      },
      "name": "Has Issues?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        1050,
        300
      ],
      "id": "if2"
    },
    {
      "parameters": {
        "channel": "#platform-ops",
        "text": ":rotating_light: *Campaign API {{$json.health}}*\nEndpoint: {{$json.endpoint_name}} ({{$json.endpoint_type}})\nURL: {{$json.endpoint_url}}\nStatus: {{$json.status}} | Latency: {{$json.latencyMs}}ms\nTeam: @{{$json.team}} \u2014 investigate immediately"
      },
      "name": "Slack Platform Ops",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1250,
        200
      ],
      "id": "sl2"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO campaign_incidents (endpoint_name, health_status, http_status, latency_ms, alerted_at) VALUES ('{{$json.endpoint_name}}', '{{$json.health}}', {{$json.status}}, {{$json.latencyMs}}, NOW()) ON CONFLICT DO NOTHING"
      },
      "name": "Log Incident (SOC2)",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1250,
        420
      ],
      "id": "pg2b"
    }
  ],
  "connections": {
    "Every 3 Minutes": {
      "main": [
        [
          {
            "node": "Load Endpoints",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load Endpoints": {
      "main": [
        [
          {
            "node": "HTTP Ping",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "HTTP Ping": {
      "main": [
        [
          {
            "node": "Classify Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Health": {
      "main": [
        [
          {
            "node": "Has Issues?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Issues?": {
      "main": [
        [
          {
            "node": "Slack Platform Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Log Incident (SOC2)",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

3. GDPR/CCPA Consent & Privacy Compliance Deadline Tracker

Who needs it: Any MarTech SaaS operating in the EU, UK, California, or any US state with a comprehensive privacy law.

What it does: Every weekday at 8AM, scan your privacy compliance calendar. Calculate urgency tiers (OVERDUE → CRITICAL → URGENT → WARNING → NOTICE), look up the specific regulatory action required for each obligation type, deduplicate against last-notified timestamp, and route alerts to your privacy team and obligation owners.

Compliance obligations tracked:

GDPR: consent audit (Art.7), ROPA update (Art.30), DSR deadlines (Art.12), DPA review (Art.28)
CCPA/CPRA: DSR 45-day response, annual privacy notice, data inventory update
CAN-SPAM: suppression list audit (§7704 — 10 business days to honor opt-outs)
CASL: express consent records review
TCPA: prior express written consent audit
US state laws: Iowa CPA, Texas TDPSA, Colorado CPA, Virginia VCDPA, Montana CDPA

{
  "name": "GDPR/CCPA Consent & Privacy Compliance Deadline Tracker",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "weekdays",
              "triggerAtHour": 8
            }
          ]
        }
      },
      "name": "Weekdays 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc3"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_COMPLIANCE_SHEET_ID",
        "range": "PrivacyDeadlines!A:H",
        "options": {
          "headerRow": 1
        }
      },
      "name": "Load Privacy Calendar",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "gs3"
    },
    {
      "parameters": {
        "jsCode": "const today=new Date();\nconst actionMap={\n  'GDPR_CONSENT_AUDIT':'Review and refresh consent records for EU contacts \u2014 Art.7 requires freely given, specific, informed, unambiguous consent',\n  'GDPR_ART30_ROPA':'Update Records of Processing Activities \u2014 required for any org with >250 employees or processing sensitive data',\n  'GDPR_DSR_30DAY':'Data Subject Request deadline \u2014 must respond within 30 days (Art.12), extendable to 90 with notice',\n  'GDPR_DPA_REVIEW':'Review Data Processing Agreement with sub-processors \u2014 Art.28 requires documented DPA',\n  'CCPA_DSR_45DAY':'CCPA Data Subject Request deadline \u2014 Cal.Civ.Code \u00a71798.100 requires response within 45 days',\n  'CCPA_ANNUAL_PRIVACY':'Update Privacy Policy \u2014 \u00a71798.130 requires annual update if data practices changed',\n  'CCPA_DATA_INVENTORY':'Annual data inventory update \u2014 CPRA \u00a71798.100 requires mapping of personal information categories',\n  'CAN_SPAM_ANNUAL':'CAN-SPAM suppression list audit \u2014 \u00a77704(a)(4) requires honoring opt-outs within 10 business days',\n  'CASL_COMPLIANCE_REVIEW':'CASL consent records review \u2014 express consent required for commercial electronic messages to Canadian recipients',\n  'TCPA_CONSENT_SCRUB':'TCPA prior express written consent audit \u2014 47 U.S.C. \u00a7227 requires documented consent for marketing calls/texts',\n  'COPPA_REVIEW_IF_U13':'COPPA review if platform reaches under-13 users \u2014 16 CFR Part 312 requires verifiable parental consent',\n  'SOC2_TYPE2':'SOC 2 Type II audit renewal \u2014 access review, vendor assessment, penetration test evidence collection',\n  'IOWA_CPA_COMPLIANCE':'Iowa CPA (Iowa Code Ch. 715D) \u2014 opt-out rights for targeted advertising and sale of personal data',\n  'TEXAS_TDPSA':'Texas TDPSA (Bus. & Com. Code Ch. 541) \u2014 universal opt-out mechanism required by Jan 1 2025',\n  'COLORADO_CPA':'Colorado Privacy Act (C.R.S. \u00a76-1-1301) \u2014 data protection assessment required for high-risk processing'\n};\nconst alerts=[];\nfor(const item of $input.all()){\n  const d=item.json;\n  if(!d.due_date||d.status==='COMPLETED')continue;\n  const due=new Date(d.due_date);\n  const days=Math.floor((due-today)/86400000);\n  let urgency='OK';\n  if(days<0)urgency='OVERDUE';\n  else if(days<=7)urgency='CRITICAL';\n  else if(days<=14)urgency='URGENT';\n  else if(days<=30)urgency='WARNING';\n  else if(days<=60)urgency='NOTICE';\n  if(urgency!=='OK'){\n    const action=actionMap[d.compliance_type]||'Review compliance obligation and take required action';\n    const lastNotified=d.last_notified_at?new Date(d.last_notified_at):new Date(0);\n    const hoursSince=(today-lastNotified)/3600000;\n    if(hoursSince>=24)alerts.push({json:{...d,daysUntilDue:days,urgency,action}});\n  }\n}\nreturn alerts.length?alerts:[{json:{__no_alerts:true}}];"
      },
      "name": "Prioritize Deadlines",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "cls3"
    },
    {
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{!$json.__no_alerts}}",
              "value2": true
            }
          ]
        }
      },
      "name": "Any Alerts?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        850,
        300
      ],
      "id": "if3"
    },
    {
      "parameters": {
        "channel": "#compliance-privacy",
        "text": ":lock: *Privacy Deadline \u2014 {{$json.urgency}}*\nType: {{$json.compliance_type}}\nDue: {{$json.due_date}} ({{$json.daysUntilDue}} days)\nOwner: {{$json.owner_name}} | Region: {{$json.jurisdiction}}\nAction: {{$json.action}}"
      },
      "name": "Slack Privacy Team",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        180
      ],
      "id": "sl3"
    },
    {
      "parameters": {
        "toEmail": "={{$json.owner_email}}",
        "subject": "{{$json.urgency}}: {{$json.compliance_type}} due {{$json.due_date}} ({{$json.daysUntilDue}} days)",
        "message": "Privacy Compliance Deadline Alert\n\nType: {{$json.compliance_type}}\nJurisdiction: {{$json.jurisdiction}}\nDue date: {{$json.due_date}}\nDays remaining: {{$json.daysUntilDue}}\nAlert level: {{$json.urgency}}\n\nRequired action:\n{{$json.action}}\n\nPlease confirm status or escalate to DPO/Legal immediately.\n\nThis alert is generated automatically by your compliance tracking system."
      },
      "name": "Email Owner",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        1050,
        420
      ],
      "id": "gm3"
    }
  ],
  "connections": {
    "Weekdays 8AM": {
      "main": [
        [
          {
            "node": "Load Privacy Calendar",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load Privacy Calendar": {
      "main": [
        [
          {
            "node": "Prioritize Deadlines",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prioritize Deadlines": {
      "main": [
        [
          {
            "node": "Any Alerts?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Any Alerts?": {
      "main": [
        [
          {
            "node": "Slack Privacy Team",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

4. Campaign Performance Anomaly & Revenue Impact Alert

Who needs it: Email platform operators, CDP teams, marketing automation SaaS — any platform where a deliverability drop translates directly to customer revenue loss.

What it does: Every 30 minutes, pull live campaign metrics from your analytics Postgres table. Detect delivery rate drops, open rate declines, and bounce spikes. Classify by severity (CRITICAL/HIGH/MEDIUM), deduplicate with 2-hour suppress window via $getWorkflowStaticData, alert #campaign-ops, and log for root-cause analysis.

Severity thresholds:

CRITICAL: delivery rate dropped ≥30% vs 7d avg OR estimated revenue impact ≥$10K
HIGH: delivery rate dropped ≥15%, bounce rate spike >5%, OR revenue impact ≥$2K
MEDIUM: open rate dropped ≥20% vs 7d avg

{
  "name": "Campaign Performance Anomaly & Revenue Impact Alert",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 30
            }
          ]
        }
      },
      "name": "Every 30 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc4"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT campaign_id, campaign_name, channel, delivery_rate_1h, delivery_rate_7d_avg, open_rate_1h, open_rate_7d_avg, bounce_rate_1h, bounce_rate_7d_avg, estimated_revenue_impact_usd, team_owner FROM campaign_metrics WHERE updated_at > NOW() - INTERVAL '1 hour'"
      },
      "name": "Load Campaign Metrics",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        450,
        300
      ],
      "id": "pg4"
    },
    {
      "parameters": {
        "jsCode": "const items=[];\nfor(const item of $input.all()){\n  const d=item.json;\n  const dr7=parseFloat(d.delivery_rate_7d_avg||95);\n  const dr1=parseFloat(d.delivery_rate_1h||95);\n  const br1=parseFloat(d.bounce_rate_1h||0);\n  const or7=parseFloat(d.open_rate_7d_avg||20);\n  const or1=parseFloat(d.open_rate_1h||20);\n  const revenue=parseFloat(d.estimated_revenue_impact_usd||0);\n  const deliveryDrop=(dr7-dr1)/dr7*100;\n  const openDrop=(or7-or1)/or7*100;\n  const bounceSpiked=br1>5;\n  let severity;\n  if(deliveryDrop>=30||revenue>=10000)severity='CRITICAL';\n  else if(deliveryDrop>=15||bounceSpiked||revenue>=2000)severity='HIGH';\n  else if(openDrop>=20)severity='MEDIUM';\n  else continue;\n  const state=$getWorkflowStaticData('global');\n  const key=`anomaly_${d.campaign_id}`;\n  const now=Date.now();\n  if(now-(state[key]||0)>7200000){\n    state[key]=now;\n    items.push({json:{...d,severity,deliveryDrop:deliveryDrop.toFixed(1),openDrop:openDrop.toFixed(1),revenue}});\n  }\n}\nreturn items.length?items:[{json:{__no_anomalies:true}}];"
      },
      "name": "Detect Anomalies",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "cls4"
    },
    {
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{!$json.__no_anomalies}}",
              "value2": true
            }
          ]
        }
      },
      "name": "Any Anomalies?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        850,
        300
      ],
      "id": "if4"
    },
    {
      "parameters": {
        "channel": "#campaign-ops",
        "text": "{{$json.severity==='CRITICAL'?':red_circle: CRITICAL':':large_yellow_circle: HIGH'}} *Campaign Anomaly: {{$json.campaign_name}}*\nChannel: {{$json.channel}} | Severity: {{$json.severity}}\nDelivery drop: {{$json.deliveryDrop}}% (vs 7d avg)\nOpen rate drop: {{$json.openDrop}}%\nEstimated revenue impact: ${{$json.revenue}}\n@{{$json.team_owner}} \u2014 investigate immediately"
      },
      "name": "Slack Campaign Ops",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        180
      ],
      "id": "sl4"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO campaign_anomalies (campaign_id, severity, delivery_drop_pct, open_drop_pct, revenue_impact_usd, detected_at) VALUES ('{{$json.campaign_id}}', '{{$json.severity}}', {{$json.deliveryDrop}}, {{$json.openDrop}}, {{$json.revenue}}, NOW()) ON CONFLICT DO NOTHING"
      },
      "name": "Log Anomaly",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1050,
        420
      ],
      "id": "pg4b"
    }
  ],
  "connections": {
    "Every 30 Minutes": {
      "main": [
        [
          {
            "node": "Load Campaign Metrics",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load Campaign Metrics": {
      "main": [
        [
          {
            "node": "Detect Anomalies",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Detect Anomalies": {
      "main": [
        [
          {
            "node": "Any Anomalies?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Any Anomalies?": {
      "main": [
        [
          {
            "node": "Slack Campaign Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Log Anomaly",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

5. Weekly MarTech Platform KPI Dashboard

Who needs it: Heads of product, CEOs, and investor-facing operators at growth-stage MarTech companies.

What it does: Every Monday at 8AM, run two parallel Postgres queries (platform metrics + account health), merge results, calculate WoW changes via $getWorkflowStaticData (persisted across runs), build a color-coded HTML email (delivery rate traffic-light coloring: green ≥95%, orange ≥90%, red <90%), and deliver to CEO/CTO with a Slack one-liner.

Key MarTech metrics tracked:

Monthly Active Users (MAU) with WoW % change
Campaign sends (7d) with WoW % change
Average delivery rate (color-coded — drops below 90% = inbox deliverability crisis)
Average open rate
Revenue attributed (7d)
Account health: new, churned, expanded in last 7 days

{
  "name": "Weekly MarTech Platform KPI Dashboard",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "weeks",
              "weeksInterval": 1,
              "triggerAtDay": [
                1
              ],
              "triggerAtHour": 8
            }
          ]
        }
      },
      "name": "Monday 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc5"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT mau, campaign_sends_7d, avg_delivery_rate, avg_open_rate, revenue_attributed_7d, contacts_processed_7d FROM platform_metrics ORDER BY recorded_at DESC LIMIT 2"
      },
      "name": "Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        450,
        200
      ],
      "id": "pg5a"
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(CASE WHEN churned_at > NOW()-INTERVAL '7 days' THEN 1 END) AS churned_7d, COUNT(CASE WHEN created_at > NOW()-INTERVAL '7 days' THEN 1 END) AS new_7d, COUNT(CASE WHEN expanded_at > NOW()-INTERVAL '7 days' THEN 1 END) AS expanded_7d, COUNT(*) AS total_active FROM accounts WHERE status='active'"
      },
      "name": "Account Health",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        450,
        420
      ],
      "id": "pg5b"
    },
    {
      "parameters": {
        "mode": "combine",
        "combinationMode": "mergeByIndex",
        "options": {}
      },
      "name": "Merge Metrics",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "mrg5"
    },
    {
      "parameters": {
        "jsCode": "const rows=$input.all().map(i=>i.json);\nconst cur=rows[0]||{};\nconst prev=rows[1]||{};\nconst state=$getWorkflowStaticData('global');\nconst prevMau=state.prev_mau||cur.mau;\nstate.prev_mau=cur.mau;\nconst mauWoW=prevMau?((cur.mau-prevMau)/prevMau*100).toFixed(1):0;\nconst prevSends=state.prev_sends||cur.campaign_sends_7d;\nstate.prev_sends=cur.campaign_sends_7d;\nconst sendsWoW=prevSends?((cur.campaign_sends_7d-prevSends)/prevSends*100).toFixed(1):0;\nconst drColor=cur.avg_delivery_rate>=95?'#27ae60':cur.avg_delivery_rate>=90?'#f39c12':'#e74c3c';\nconst html=`<h2 style='font-family:sans-serif'>Weekly MarTech Platform Report</h2>\n<p style='font-family:sans-serif'>Week of ${new Date().toISOString().slice(0,10)}</p>\n<table border='1' cellpadding='10' style='border-collapse:collapse;font-family:sans-serif'>\n<tr style='background:#2c3e50;color:white'><th>Metric</th><th>This Week</th><th>WoW</th></tr>\n<tr><td>Monthly Active Users</td><td>${(cur.mau||0).toLocaleString()}</td><td>${mauWoW>0?'+':''}${mauWoW}%</td></tr>\n<tr><td>Campaign Sends (7d)</td><td>${(cur.campaign_sends_7d||0).toLocaleString()}</td><td>${sendsWoW>0?'+':''}${sendsWoW}%</td></tr>\n<tr><td>Avg Delivery Rate</td><td style='color:${drColor};font-weight:bold'>${(cur.avg_delivery_rate||0).toFixed(2)}%</td><td>\u2014</td></tr>\n<tr><td>Avg Open Rate</td><td>${(cur.avg_open_rate||0).toFixed(2)}%</td><td>\u2014</td></tr>\n<tr><td>Revenue Attributed (7d)</td><td>$${(cur.revenue_attributed_7d||0).toLocaleString()}</td><td>\u2014</td></tr>\n<tr><td>Contacts Processed (7d)</td><td>${(cur.contacts_processed_7d||0).toLocaleString()}</td><td>\u2014</td></tr>\n</table>\n<h3 style='font-family:sans-serif'>Account Health</h3>\n<table border='1' cellpadding='10' style='border-collapse:collapse;font-family:sans-serif'>\n<tr style='background:#2c3e50;color:white'><th>Metric</th><th>Value</th></tr>\n<tr><td>Total Active Accounts</td><td>${cur.total_active||0}</td></tr>\n<tr><td>New Accounts (7d)</td><td style='color:#27ae60'>+${cur.new_7d||0}</td></tr>\n<tr><td>Churned Accounts (7d)</td><td style='color:#e74c3c'>-${cur.churned_7d||0}</td></tr>\n<tr><td>Expanded Accounts (7d)</td><td style='color:#3498db'>${cur.expanded_7d||0}</td></tr>\n</table>`;\nreturn[{json:{html,mau:cur.mau,mauWoW,sendsWoW,deliveryRate:cur.avg_delivery_rate,newAccounts:cur.new_7d,churnedAccounts:cur.churned_7d}}];"
      },
      "name": "Build KPI Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        850,
        300
      ],
      "id": "cls5"
    },
    {
      "parameters": {
        "toEmail": "ceo@yourplatform.com,cto@yourplatform.com",
        "subject": "Weekly MarTech KPI \u2014 MAU: {{$json.mau?.toLocaleString()}} | Delivery: {{$json.deliveryRate?.toFixed(1)}}% | New Accounts: +{{$json.newAccounts}}",
        "message": "={{$json.html}}",
        "options": {
          "allowHtml": true
        }
      },
      "name": "Email Leadership",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        1050,
        200
      ],
      "id": "gm5"
    },
    {
      "parameters": {
        "channel": "#exec-kpis",
        "text": ":bar_chart: Weekly MarTech KPIs\nMAU: {{$json.mau?.toLocaleString()}} ({{$json.mauWoW}}% WoW)\nCampaign sends: WoW {{$json.sendsWoW}}%\nDelivery rate: {{$json.deliveryRate?.toFixed(1)}}%\nNew accounts: +{{$json.newAccounts}} | Churned: -{{$json.churnedAccounts}}"
      },
      "name": "Slack Exec Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        420
      ],
      "id": "sl5"
    }
  ],
  "connections": {
    "Monday 8AM": {
      "main": [
        [
          {
            "node": "Platform Metrics",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Account Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Platform Metrics": {
      "main": [
        [
          {
            "node": "Merge Metrics",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Account Health": {
      "main": [
        [
          {
            "node": "Merge Metrics",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge Metrics": {
      "main": [
        [
          {
            "node": "Build KPI Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build KPI Report": {
      "main": [
        [
          {
            "node": "Email Leadership",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Email Leadership": {
      "main": [
        [
          {
            "node": "Slack Exec Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Why n8n for MarTech SaaS (vs. Zapier or Make.com)

Requirement	Zapier/Make	n8n (self-hosted)
GDPR Art.28 sub-processor	❌ Zapier/Make = additional sub-processor requiring documented DPA	✅ Your infra — no new sub-processor in Art.30 records
CCPA 'sharing' (§1798.140(ah)(1))	❌ Behavioral data + cookies through Zapier = 'sharing for CBAA' → opt-out right triggered	✅ Internal — no third-party data routing
CAN-SPAM §7704 suppression	❌ Suppression webhook failure not visible — silent violation risk	✅ Full execution log + failure alerting built in
TCPA consent records	❌ 30-day Zapier log vs permanent consent record requirement	✅ Your Postgres — consent records retained indefinitely
SOC 2 CC7.2 logical access	❌ Zapier workspace accessible to all members incl. contractors	✅ Self-hosted — access controlled by your IAM
Real-time anomaly detection	⚠️ Limited to webhook triggers, no stateful dedup	✅ Code node + `$getWorkflowStaticData` for stateful suppress
Multi-environment isolation	❌ Single workspace	✅ Separate instances: dev / staging / prod

Cost comparison: At 1B marketing events/month, Zapier's Operations plan exceeds $100K/year. n8n on a $200/month VPS handles unlimited executions for a rounding error.

Get these workflows pre-built

All 5 workflows are available as tested, import-ready templates at FlowKit — n8n Automation Templates.

Each template includes:

Import-ready JSON with all nodes pre-configured
Postgres schema (CREATE TABLE scripts)
Google Sheets data structure
Setup guide (credentials, webhook config, environment variables)
Compliance notes mapping each workflow to specific regulations

Most relevant for MarTech SaaS:

AI Customer Support Bot — classify and route customer inquiries with Claude AI ($29)
Customer Feedback Analyzer — analyze campaign feedback and NPS responses ($29)
Lead Capture to CRM — capture and route marketing qualified leads ($19)

Building a MarTech automation your team relies on? Share it in the comments — what workflow do you wish you had running automatically?

n8n for FinTech SaaS: 5 Automations Every Payments, Neobank, and Lending Platform Needs (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 17:00:05 +0000

If your company processes payments, underwrites loans, or issues cards, you have a data egress problem that Zapier and Make.com can't solve.

Transaction data, customer PII, KYC/AML documents, and financial records cannot legally flow through a third-party cloud automation platform under PCI DSS 3.2.1, SOC 2 CC9.2, GDPR Art.32, or CCPA data minimization requirements.

n8n runs entirely on your infrastructure. No data leaves your network. Every workflow is git-versionable, audit-ready, and deployable in your VPC. It's the only automation platform that passes enterprise FinTech security reviews.

Here are 5 production automations for payments, neobanks, and lending platforms — with import-ready workflow JSON.

1. Payment Failure Recovery & Dunning Pipeline

Who needs it: Any platform processing card payments via Stripe, Braintree, or Adyen.

What it does: When a charge fails, classify the failure type (fraud vs. declined vs. expired card), route fraud cases immediately to #fraud-ops, and send personalized dunning emails for recoverable failures — automatically.

Compliance relevance: PCI DSS Req. 10 (audit trail), BSA suspicious activity detection, CFPB Regulation E dispute handling.

Workflow logic:

Stripe sends payment_intent.payment_failed webhook to n8n
Code node classifies: FRAUD | INSUFFICIENT_FUNDS | EXPIRED_CARD | CARD_DECLINED
If fraud: immediate Slack alert to #fraud-ops with transaction details
If recoverable: wait 2 hours, then send personalized email + log to Sheets

{
  "name": "Payment Failure Recovery & Dunning Pipeline",
  "nodes": [
    {
      "parameters": {
        "httpMethod": "POST",
        "path": "stripe-payment-failed",
        "options": {}
      },
      "name": "Stripe Webhook",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "wh1"
    },
    {
      "parameters": {
        "jsCode": "const charge=($json.body||{}).data?.object||{};\nconst code=charge.failure_code||charge.outcome?.reason||'unknown';\nconst fraudCodes=['fraud','card_velocity_exceeded','security_violation'];\nconst failureType=fraudCodes.some(c=>code.includes(c))?'FRAUD':\n  code.includes('insufficient')?'INSUFFICIENT_FUNDS':\n  code.includes('expired')?'EXPIRED_CARD':'CARD_DECLINED';\nconst amt=((charge.amount||0)/100).toFixed(2);\nreturn[{json:{failureType,amount:amt,\n  currency:(charge.currency||'usd').toUpperCase(),\n  customerId:charge.customer||'',\n  customerEmail:charge.billing_details?.email||'',\n  chargeId:charge.id||'',failureCode:code}}];"
      },
      "name": "Classify Failure",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        450,
        300
      ],
      "id": "cls1"
    },
    {
      "parameters": {
        "conditions": {
          "string": [
            {
              "value1": "={{$json.failureType}}",
              "operation": "equal",
              "value2": "FRAUD"
            }
          ]
        }
      },
      "name": "Is Fraud?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        650,
        300
      ],
      "id": "if1"
    },
    {
      "parameters": {
        "channel": "#fraud-ops",
        "text": ":rotating_light: FRAUD ALERT: {{$json.amount}} {{$json.currency}} | Customer: {{$json.customerId}} | Code: {{$json.failureCode}} | Charge: {{$json.chargeId}} | @fraud-team action required"
      },
      "name": "Slack Fraud Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        850,
        180
      ],
      "id": "sl1"
    },
    {
      "parameters": {
        "unit": "hours",
        "amount": 2
      },
      "name": "Wait 2h Before Dunning",
      "type": "n8n-nodes-base.wait",
      "typeVersion": 1,
      "position": [
        850,
        420
      ],
      "id": "wt1"
    },
    {
      "parameters": {
        "toEmail": "={{$json.customerEmail}}",
        "subject": "Action required: Payment of {{$json.amount}} {{$json.currency}} failed",
        "message": "Hi,\n\nYour payment of {{$json.amount}} {{$json.currency}} could not be processed.\nReason: {{$json.failureCode}}\n\nPlease update your payment method to avoid service interruption:\nhttps://app.yourplatform.com/billing\n\nIf you have questions, reply to this email.\n\n\u2014 Billing Team"
      },
      "name": "Gmail Dunning Email",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        1050,
        420
      ],
      "id": "gm1"
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": "YOUR_SHEET_ID",
        "range": "PaymentFailures!A:H",
        "options": {},
        "dataMode": "autoMapInputData"
      },
      "name": "Log to Sheets",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1250,
        420
      ],
      "id": "gs1"
    }
  ],
  "connections": {
    "Stripe Webhook": {
      "main": [
        [
          {
            "node": "Classify Failure",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Failure": {
      "main": [
        [
          {
            "node": "Is Fraud?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Is Fraud?": {
      "main": [
        [
          {
            "node": "Slack Fraud Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Wait 2h Before Dunning",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 2h Before Dunning": {
      "main": [
        [
          {
            "node": "Gmail Dunning Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Gmail Dunning Email": {
      "main": [
        [
          {
            "node": "Log to Sheets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

2. KYC/AML Document Expiry Alert System

Who needs it: Neobanks, lending platforms, crypto exchanges, money services businesses — anyone with KYC obligations under BSA/FinCEN or AMLD.

What it does: Every morning, scan your KYC database for expiring documents. Tier alerts by urgency and route to the right compliance owner — before the FinCEN examination finds it first.

Compliance relevance: BSA/AML, FinCEN Customer Due Diligence Rule (31 CFR §1020.210), GDPR Art.6 (lawful basis for processing), MiCA Art.68 (crypto asset services).

Alert tiers:

EXPIRED — document already past expiry → immediate action required
CRITICAL — ≤7 days → escalate to compliance officer
URGENT — ≤14 days → assigned reviewer must act
WARNING — ≤30 days → flag for attention
NOTICE — ≤60 days → monitor

{
  "name": "KYC/AML Document Expiry Alert System",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "hours",
              "hoursInterval": 24
            }
          ]
        }
      },
      "name": "Daily 8AM Trigger",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc2"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_KYC_SHEET_ID",
        "range": "KYC_Customers!A:F",
        "options": {
          "headerRow": 1
        }
      },
      "name": "Load KYC Records",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "gs2"
    },
    {
      "parameters": {
        "jsCode": "const today=new Date();\nconst alerts=[];\nfor(const item of $input.all()){\n  const d=item.json;\n  if(!d.expiry_date||d.status==='VERIFIED')continue;\n  const exp=new Date(d.expiry_date);\n  const days=Math.floor((exp-today)/86400000);\n  let tier='OK';\n  if(days<0)tier='EXPIRED';\n  else if(days<=7)tier='CRITICAL';\n  else if(days<=14)tier='URGENT';\n  else if(days<=30)tier='WARNING';\n  else if(days<=60)tier='NOTICE';\n  if(tier!=='OK')alerts.push({json:{...d,daysToExpiry:days,tier}});\n}\nreturn alerts.length?alerts:[{json:{__no_alerts:true}}];"
      },
      "name": "Calculate Expiry Tiers",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "cls2"
    },
    {
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{!$json.__no_alerts}}",
              "value2": true
            }
          ]
        }
      },
      "name": "Has Alerts?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        850,
        300
      ],
      "id": "if2"
    },
    {
      "parameters": {
        "channel": "#compliance-kyc",
        "text": ":file_folder: *KYC Expiry \u2014 {{$json.tier}}*\nCustomer: {{$json.customer_name}} ({{$json.customer_id}})\nDocument: {{$json.document_type}}\nExpires: {{$json.expiry_date}} ({{$json.daysToExpiry}} days)\nOwner: {{$json.compliance_owner}}"
      },
      "name": "Slack Compliance Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        200
      ],
      "id": "sl2"
    },
    {
      "parameters": {
        "toEmail": "={{$json.compliance_owner_email||'compliance@yourplatform.com'}}",
        "subject": "KYC Alert \u2014 {{$json.tier}}: {{$json.customer_name}} ({{$json.daysToExpiry}} days)",
        "message": "KYC Document Expiry Alert\n\nCustomer: {{$json.customer_name}} ({{$json.customer_id}})\nDocument type: {{$json.document_type}}\nExpiry date: {{$json.expiry_date}}\nDays remaining: {{$json.daysToExpiry}}\nAlert tier: {{$json.tier}}\nKYC tier: {{$json.kyc_tier}}\n\nAction required per BSA/AML policy. Update document before expiry to maintain compliance."
      },
      "name": "Email Compliance Officer",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        1050,
        420
      ],
      "id": "gm2"
    }
  ],
  "connections": {
    "Daily 8AM Trigger": {
      "main": [
        [
          {
            "node": "Load KYC Records",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load KYC Records": {
      "main": [
        [
          {
            "node": "Calculate Expiry Tiers",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Calculate Expiry Tiers": {
      "main": [
        [
          {
            "node": "Has Alerts?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Has Alerts?": {
      "main": [
        [
          {
            "node": "Slack Compliance Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Compliance Officer",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

3. Regulatory Filing Deadline Tracker

Who needs it: Any FinTech operating under multi-jurisdictional licensing: state money transmitter licenses, OCC charters, FCA authorizations, DFPI, NYDFS, PSD2.

What it does: Track all regulatory filing deadlines in a Google Sheet. Every morning, calculate urgency tiers and alert the right owner — legal, compliance, or CFO — before a deadline is missed.

Compliance relevance: SEC Rule 17a-4, CFTC Part 45 reporting, state MTL renewal deadlines, Basel III ICAAP submissions, FCA RegData quarterly filings.

Urgency tiers: OVERDUE → CRITICAL (≤7d) → URGENT (≤14d) → WARNING (≤30d)

{
  "name": "Regulatory Filing Deadline Tracker",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "hours",
              "hoursInterval": 24
            }
          ]
        }
      },
      "name": "Daily 7AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc3"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_FILINGS_SHEET_ID",
        "range": "FilingCalendar!A:G",
        "options": {
          "headerRow": 1
        }
      },
      "name": "Load Filing Calendar",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "gs3"
    },
    {
      "parameters": {
        "jsCode": "const today=new Date();\nconst alerts=[];\nfor(const item of $input.all()){\n  const d=item.json;\n  if(!d.due_date||d.status==='FILED')continue;\n  const due=new Date(d.due_date);\n  const days=Math.floor((due-today)/86400000);\n  let urgency='OK';\n  if(days<0)urgency='OVERDUE';\n  else if(days<=7)urgency='CRITICAL';\n  else if(days<=14)urgency='URGENT';\n  else if(days<=30)urgency='WARNING';\n  if(urgency!=='OK')alerts.push({json:{...d,daysUntilDue:days,urgency}});\n}\nreturn alerts.length?alerts:[{json:{__empty:true}}];"
      },
      "name": "Prioritize Deadlines",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "cls3"
    },
    {
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{!$json.__empty}}",
              "value2": true
            }
          ]
        }
      },
      "name": "Any Deadlines?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 1,
      "position": [
        850,
        300
      ],
      "id": "if3"
    },
    {
      "parameters": {
        "channel": "#legal-regulatory",
        "text": ":calendar: *Filing Deadline \u2014 {{$json.urgency}}*\nFiling: {{$json.filing_type}} | Jurisdiction: {{$json.jurisdiction}}\nDue: {{$json.due_date}} ({{$json.daysUntilDue}} days)\nOwner: {{$json.owner}} | Regulator: {{$json.regulator}}"
      },
      "name": "Slack Legal Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        200
      ],
      "id": "sl3"
    },
    {
      "parameters": {
        "toEmail": "={{$json.owner_email}}",
        "subject": "{{$json.urgency}}: {{$json.filing_type}} due {{$json.due_date}}",
        "message": "Regulatory filing reminder\n\nFiling: {{$json.filing_type}}\nJurisdiction: {{$json.jurisdiction}}\nRegulator: {{$json.regulator}}\nDue date: {{$json.due_date}}\nDays remaining: {{$json.daysUntilDue}}\nStatus: {{$json.urgency}}\n\nPlease confirm filing status or escalate immediately."
      },
      "name": "Email Filing Owner",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        1050,
        420
      ],
      "id": "gm3"
    }
  ],
  "connections": {
    "Daily 7AM": {
      "main": [
        [
          {
            "node": "Load Filing Calendar",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load Filing Calendar": {
      "main": [
        [
          {
            "node": "Prioritize Deadlines",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prioritize Deadlines": {
      "main": [
        [
          {
            "node": "Any Deadlines?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Any Deadlines?": {
      "main": [
        [
          {
            "node": "Slack Legal Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Filing Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

4. Real-Time Transaction Fraud Alert Triage

Who needs it: Payments platforms, card issuers, lending originators, crypto exchanges with real-time risk engines.

What it does: Receive risk events from your fraud engine via webhook, classify by risk tier, and route high-risk transactions to immediate human review while logging everything for SOC 2 audit trail.

Compliance relevance: BSA 31 U.S.C. §5318(g) (SAR filing), GDPR Art.22 (automated decision-making rights), Reg E error resolution requirements.

Routing logic:

HIGH (risk score ≥0.8 or amount ≥$10K): Slack #fraud-ops, immediate review required
MEDIUM (score ≥0.5): Slack #risk-review queue
All tiers: append to audit log Sheets for SOC 2 evidence

{
  "name": "Real-Time Transaction Fraud Alert Triage",
  "nodes": [
    {
      "parameters": {
        "httpMethod": "POST",
        "path": "transaction-risk-event",
        "options": {}
      },
      "name": "Risk Engine Webhook",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "wh4"
    },
    {
      "parameters": {
        "jsCode": "const evt=$json.body||$json;\nconst score=parseFloat(evt.risk_score||0);\nconst amount=parseFloat(evt.amount||0);\nconst tier=score>=0.8||amount>=10000?'HIGH':score>=0.5?'MEDIUM':'LOW';\nconst flaggedRules=evt.triggered_rules||[];\nreturn[{json:{tier,riskScore:score,amount,currency:evt.currency||'USD',\n  transactionId:evt.transaction_id||'',accountId:evt.account_id||'',\n  flaggedRules:flaggedRules.join(', '),\n  cardLast4:evt.card_last4||'xxxx',merchantName:evt.merchant_name||''}}];"
      },
      "name": "Score & Classify",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        450,
        300
      ],
      "id": "cls4"
    },
    {
      "parameters": {
        "rules": {
          "values": [
            {
              "conditions": {
                "string": [
                  {
                    "value1": "={{$json.tier}}",
                    "operation": "equal",
                    "value2": "HIGH"
                  }
                ]
              },
              "renameOutput": true,
              "outputKey": "HIGH"
            },
            {
              "conditions": {
                "string": [
                  {
                    "value1": "={{$json.tier}}",
                    "operation": "equal",
                    "value2": "MEDIUM"
                  }
                ]
              },
              "renameOutput": true,
              "outputKey": "MEDIUM"
            }
          ]
        }
      },
      "name": "Route by Tier",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "sw4"
    },
    {
      "parameters": {
        "channel": "#fraud-ops",
        "text": ":red_circle: *HIGH RISK TRANSACTION*\nTxn: {{$json.transactionId}} | Account: {{$json.accountId}}\nAmount: {{$json.amount}} {{$json.currency}} | Card: ****{{$json.cardLast4}}\nRisk score: {{$json.riskScore}} | Rules: {{$json.flaggedRules}}\n@fraud-team \u2014 review and action NOW"
      },
      "name": "Slack High Risk Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        850,
        160
      ],
      "id": "sl4a"
    },
    {
      "parameters": {
        "channel": "#risk-review",
        "text": ":large_yellow_circle: *MEDIUM RISK* | Txn: {{$json.transactionId}} | Amount: {{$json.amount}} {{$json.currency}} | Score: {{$json.riskScore}} | Rules: {{$json.flaggedRules}}"
      },
      "name": "Slack Medium Risk",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        850,
        420
      ],
      "id": "sl4b"
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": "YOUR_FRAUD_SHEET_ID",
        "range": "FraudAlerts!A:J",
        "options": {},
        "dataMode": "autoMapInputData"
      },
      "name": "Audit Log to Sheets",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        1050,
        290
      ],
      "id": "gs4"
    }
  ],
  "connections": {
    "Risk Engine Webhook": {
      "main": [
        [
          {
            "node": "Score & Classify",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Score & Classify": {
      "main": [
        [
          {
            "node": "Route by Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Tier": {
      "HIGH": [
        [
          {
            "node": "Slack High Risk Alert",
            "type": "main",
            "index": 0
          }
        ]
      ],
      "MEDIUM": [
        [
          {
            "node": "Slack Medium Risk",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack High Risk Alert": {
      "main": [
        [
          {
            "node": "Audit Log to Sheets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Medium Risk": {
      "main": [
        [
          {
            "node": "Audit Log to Sheets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

5. Weekly FinTech Revenue & Compliance Report

Who needs it: CFOs, heads of finance, board reporting teams at growth-stage FinTech companies.

What it does: Every Monday morning, pull your weekly metrics (TPV, net revenue, approval rate, chargeback rate, dispute win rate), calculate WoW changes, and deliver a formatted HTML report to your executive team before the week begins.

Key FinTech metrics tracked:

Total Payment Volume (TPV) with WoW % change
Net Revenue and WoW % change
Approval rate (directly impacts revenue)
Chargeback rate (CB > 0.9% = Visa/Mastercard high-risk threshold)
Dispute win rate and open compliance items

{
  "name": "Weekly FinTech Revenue & Compliance Report",
  "nodes": [
    {
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "weeks",
              "weeksInterval": 1,
              "triggerAtDay": [
                1
              ],
              "triggerAtHour": 8
            }
          ]
        }
      },
      "name": "Monday 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "id": "sc5"
    },
    {
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_METRICS_SHEET_ID",
        "range": "WeeklyMetrics!A:K",
        "options": {
          "headerRow": 1
        }
      },
      "name": "Load Weekly Metrics",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        450,
        300
      ],
      "id": "gs5"
    },
    {
      "parameters": {
        "jsCode": "const rows=$input.all().map(i=>i.json);\nconst latest=rows[rows.length-1]||{};\nconst prev=rows[rows.length-2]||{};\nconst tpvWoW=prev.tpv?((latest.tpv-prev.tpv)/prev.tpv*100).toFixed(1):0;\nconst revenueWoW=prev.net_revenue?((latest.net_revenue-prev.net_revenue)/prev.net_revenue*100).toFixed(1):0;\nconst chargebackRate=(latest.chargeback_count/(latest.transaction_count||1)*100).toFixed(3);\nconst approvalRate=parseFloat(latest.approval_rate||0).toFixed(2);\nconst disputeWinRate=parseFloat(latest.dispute_win_rate||0).toFixed(1);\nconst html=`<h2>Weekly FinTech Operations Report</h2>\n<p>Week ending: ${latest.week_end||new Date().toISOString().slice(0,10)}</p>\n<table border='1' cellpadding='8' style='border-collapse:collapse'>\n<tr><th>Metric</th><th>This Week</th><th>WoW Change</th></tr>\n<tr><td>Total Payment Volume</td><td>$${(latest.tpv||0).toLocaleString()}</td><td>${tpvWoW>0?'+':''}${tpvWoW}%</td></tr>\n<tr><td>Net Revenue</td><td>$${(latest.net_revenue||0).toLocaleString()}</td><td>${revenueWoW>0?'+':''}${revenueWoW}%</td></tr>\n<tr><td>Approval Rate</td><td>${approvalRate}%</td><td>\u2014</td></tr>\n<tr><td>Chargeback Rate</td><td>${chargebackRate}%</td><td>\u2014</td></tr>\n<tr><td>Dispute Win Rate</td><td>${disputeWinRate}%</td><td>\u2014</td></tr>\n<tr><td>Active Accounts</td><td>${(latest.active_accounts||0).toLocaleString()}</td><td>\u2014</td></tr>\n</table>\n<p><strong>Open Compliance Items:</strong> ${latest.open_kyc_items||0} KYC pending | ${latest.open_regulatory_filings||0} filings due this month</p>`;\nreturn[{json:{html,week_end:latest.week_end,tpv:latest.tpv,net_revenue:latest.net_revenue,tpvWoW,revenueWoW,chargebackRate,approvalRate}}];"
      },
      "name": "Build Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        650,
        300
      ],
      "id": "cls5"
    },
    {
      "parameters": {
        "toEmail": "ceo@yourplatform.com,cfo@yourplatform.com",
        "subject": "Weekly FinTech Report \u2014 TPV {{$json.tpv | formatNumber}} | Approval Rate {{$json.approvalRate}}%",
        "message": "={{$json.html}}",
        "options": {
          "allowHtml": true
        }
      },
      "name": "Email CEO & CFO",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 1,
      "position": [
        850,
        300
      ],
      "id": "gm5"
    },
    {
      "parameters": {
        "channel": "#executive",
        "text": ":chart_with_upwards_trend: Weekly FinTech Report\nTPV: ${{$json.tpv?.toLocaleString()}} ({{$json.tpvWoW}}% WoW)\nRevenue: ${{$json.net_revenue?.toLocaleString()}} ({{$json.revenueWoW}}% WoW)\nApproval: {{$json.approvalRate}}% | Chargebacks: {{$json.chargebackRate}}%"
      },
      "name": "Slack Executive Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 1,
      "position": [
        1050,
        300
      ],
      "id": "sl5"
    }
  ],
  "connections": {
    "Monday 8AM": {
      "main": [
        [
          {
            "node": "Load Weekly Metrics",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Load Weekly Metrics": {
      "main": [
        [
          {
            "node": "Build Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build Report": {
      "main": [
        [
          {
            "node": "Email CEO & CFO",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Email CEO & CFO": {
      "main": [
        [
          {
            "node": "Slack Executive Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Why n8n for FinTech SaaS (vs. Zapier or Make.com)

Requirement	Zapier/Make	n8n (self-hosted)
PCI DSS Req. 12.8 (3rd-party data handling)	❌ Card data flows through Zapier/Make cloud	✅ All data stays in your VPC
SOC 2 CC9.2 (vendor risk)	❌ Adds vendor to SOC 2 scope	✅ Internal infrastructure, no new vendor
GDPR Art.32 (data processor)	❌ Requires DPA with Zapier/Make	✅ No DPA needed — you're the processor
Audit trail for examiners	⚠️ Limited execution logs	✅ Full git-versioned workflow history
Custom risk logic (fraud rules)	❌ No code node	✅ JavaScript code node — full risk logic
Multi-environment (staging/prod)	❌ Single workspace	✅ Separate instances per environment

Get these workflows pre-built

All 5 workflows are available as tested, import-ready templates at FlowKit — n8n Automation Templates.

Each template includes:

Import-ready JSON with all nodes configured
Google Sheets data schema
Setup guide (credentials, environment variables, webhook configuration)
Compliance notes (which regulation each workflow supports)

Most relevant for FinTech SaaS:

AI Customer Support Bot — classify and route financial inquiries with Claude AI ($29)
Daily Report Generator — automated C-suite reporting ($19)
Price Monitor — track competitor pricing and market rates ($29)

Have a FinTech automation use case not covered here? Drop it in the comments.

n8n for HRTech SaaS: 5 Automations That Scale Payroll Ops and Keep Employee Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 16:42:28 +0000

If you're building HRTech SaaS — HRIS, payroll processing, workforce management, talent acquisition, or benefits administration — your platform handles the most sensitive employee data that exists.

Payroll data contains Social Security Numbers, salary details, and bank account numbers. Benefits enrollment can include HIPAA-protected health information for self-insured employers. Performance records carry litigation hold implications under EEOC. I-9 records have ICE disclosure protocols. Payroll calculations for public companies are SOX §302/906 controls — a payroll engine bug is a potential material weakness disclosure.

If your platform routes any of this through Zapier, every task log is a compliance liability. At the payroll scale of a mid-market employer (500 employees, weekly payroll), Zapier task history captures SSNs, salaries, and deduction details in a multi-tenant log that any Zapier account admin can view.

Here are 5 production-ready n8n workflows for HRTech SaaS vendors — HRIS platforms, payroll SaaS, workforce management tools, and talent acquisition software.

Workflow 1: New Employer Client Onboarding Drip

Enterprise HCM customers (5,000+ employees) need HIPAA Business Associate Agreements before benefits data flows. SOX-scoped payroll customers (public companies) need SOX §302 control documentation before the first payroll run. This workflow classifies each new client, sends tiered onboarding emails, notifies the right CSM channel, and appends to a SOC2 CC7.1 audit sheet with compliance flags.

The compliance hook: HIPAA_BAA_REQUIRED gets written to the audit log for enterprise clients — your customer success team gets a Slack prompt to initiate the BAA before any PHI flows.

{
  "name": "HRTech Client Onboarding Drip",
  "nodes": [
    {
      "id": "1",
      "name": "New Client Row",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "typeVersion": 4,
      "position": [
        250,
        300
      ],
      "parameters": {
        "sheetId": "YOUR_SHEET_ID",
        "event": "rowAdded"
      }
    },
    {
      "id": "2",
      "name": "Classify Client Tier",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "jsCode": "const r=items[0].json;const ee=parseInt(r.employee_count||0);const arr=parseFloat(r.annual_arr_usd||0);let tier,csm,sla,hipaa,sox;if(ee>=5000||arr>=1000000){tier='ENTERPRISE_HCM';csm='#csm-enterprise';sla=4;hipaa=true;sox=true;}else if(ee>=500||arr>=200000){tier='MID_MARKET_HR';csm='#csm-mid-market';sla=8;hipaa=true;sox=false;}else if(ee>=50){tier='SMB_WORKFORCE';csm='#csm-smb';sla=24;hipaa=false;sox=false;}else{tier='STARTUP';csm='#csm-starter';sla=48;hipaa=false;sox=false;}const log={event:'CLIENT_ONBOARDED',client_id:r.client_id,tier,sla,soc2:'CC7.1',hipaa_scope:hipaa,sox_scope:sox,ts:new Date().toISOString()};return[{json:{...r,tier,csm,sla,hipaa,sox,log}}];"
      }
    },
    {
      "id": "3",
      "name": "Day 0 Email",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        690,
        200
      ],
      "parameters": {
        "toEmail": "={{$json.contact_email}}",
        "subject": "Welcome to [Platform] \u2014 Your HR Automation Stack",
        "message": "Hi {{$json.company_name}},\n\nYour account is live. Your CSM will reach out within {{$json.sla}} hours.\n\nWe've flagged your account for {{$json.sox ? 'SOX \u00a7302 payroll controls' : 'standard compliance onboarding'}}.\n\nBest,\nThe [Platform] Team"
      }
    },
    {
      "id": "4",
      "name": "Notify CSM",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        690,
        400
      ],
      "parameters": {
        "channel": "={{$json.csm}}",
        "text": "New {{$json.tier}} client: *{{$json.company_name}}* | Employees: {{$json.employee_count}} | ARR: ${{$json.annual_arr_usd}} | SLA: {{$json.sla}}h | HIPAA: {{$json.hipaa}} | SOX: {{$json.sox}}"
      }
    },
    {
      "id": "5",
      "name": "SOC2 Audit Log",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        910,
        300
      ],
      "parameters": {
        "operation": "append",
        "sheetId": "AUDIT_SHEET_ID",
        "columns": {
          "mappingMode": "defineBelow",
          "value": {
            "A": "={{$json.client_id}}",
            "B": "={{$json.tier}}",
            "C": "={{new Date().toISOString()}}",
            "D": "CLIENT_ONBOARDED",
            "E": "SOC2_CC7.1",
            "F": "={{$json.hipaa ? 'HIPAA_BAA_REQUIRED' : 'N/A'}}"
          }
        }
      }
    }
  ],
  "connections": {
    "New Client Row": {
      "main": [
        [
          {
            "node": "Classify Client Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Client Tier": {
      "main": [
        [
          {
            "node": "Day 0 Email",
            "type": "main",
            "index": 0
          },
          {
            "node": "Notify CSM",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Day 0 Email": {
      "main": [
        [
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Notify CSM": {
      "main": [
        [
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 2: Payroll Processing & HRIS API Health Monitor

A payroll engine timeout on payday is a crisis — employees don't get paid, and payroll SLAs are contractual. This workflow pings every client's payroll endpoint and HRIS API every 3 minutes. When an endpoint is DOWN or STALE_DATA (no sync in 15 minutes), one Slack alert fires — not 480 per day.

$getWorkflowStaticData stores last-alert timestamps per endpoint (30-min cooldown). Incidents log to Postgres with ON CONFLICT DO NOTHING for a clean on-call timeline that your SOC2 auditor can query.

{
  "name": "Payroll Processing & HRIS API Health Monitor",
  "nodes": [
    {
      "id": "1",
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 3
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Fetch Endpoints",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT id, client_name, endpoint_url, endpoint_type, timeout_ms FROM payroll_endpoints WHERE active=true"
      }
    },
    {
      "id": "3",
      "name": "Split",
      "type": "n8n-nodes-base.splitInBatches",
      "typeVersion": 3,
      "position": [
        690,
        300
      ],
      "parameters": {
        "batchSize": 1
      }
    },
    {
      "id": "4",
      "name": "Ping Endpoint",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        910,
        300
      ],
      "parameters": {
        "method": "GET",
        "url": "={{$json.endpoint_url}}",
        "timeout": 5000,
        "continueOnFail": true
      }
    },
    {
      "id": "5",
      "name": "Classify & Dedup",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        1130,
        300
      ],
      "parameters": {
        "jsCode": "const r=items[0].json;const state=JSON.parse($getWorkflowStaticData('global').s||'{}');const now=Date.now();const k=r.id;const cool=30*60*1000;let status='OK';if(r.error||r.statusCode>=500)status='DOWN';else if(!r.lastSyncAt||(now-new Date(r.lastSyncAt).getTime())>900000)status='STALE_DATA';else if(r.statusCode>=400)status='DEGRADED';const alert=status!=='OK'&&(now-(state[k]||0))>cool;if(alert){state[k]=now;$setWorkflowStaticData('global',{s:JSON.stringify(state)});}return[{json:{...r,status,should_alert:alert}}];"
      }
    },
    {
      "id": "6",
      "name": "Filter Alerts",
      "type": "n8n-nodes-base.filter",
      "typeVersion": 2,
      "position": [
        1350,
        300
      ],
      "parameters": {
        "conditions": {
          "conditions": [
            {
              "leftValue": "={{$json.should_alert}}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "equals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "7",
      "name": "Slack Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1570,
        200
      ],
      "parameters": {
        "channel": "#platform-ops",
        "text": "Payroll {{$json.status}}: *{{$json.client_name}}* ({{$json.endpoint_type}}) | {{$json.endpoint_url}}"
      }
    },
    {
      "id": "8",
      "name": "Log Incident",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1570,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO payroll_incidents(endpoint_id,status,detected_at) VALUES($1,$2,NOW()) ON CONFLICT DO NOTHING",
        "queryParams": "={{[$json.id,$json.status]}}"
      }
    }
  ],
  "connections": {
    "Every 3 Minutes": {
      "main": [
        [
          {
            "node": "Fetch Endpoints",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Fetch Endpoints": {
      "main": [
        [
          {
            "node": "Split",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Split": {
      "main": [
        [
          {
            "node": "Ping Endpoint",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Ping Endpoint": {
      "main": [
        [
          {
            "node": "Classify & Dedup",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify & Dedup": {
      "main": [
        [
          {
            "node": "Filter Alerts",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Alerts": {
      "main": [
        [
          {
            "node": "Slack Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log Incident",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 3: ACA / SOX / FLSA / GDPR Compliance Deadline Tracker

HRTech SaaS operates under a compliance calendar that no spreadsheet can reliably track:

ACA 1094-C / 1095-C — IRS employer mandate filing, §4980H penalty up to $2,570/employee/year if missed
SOX §302 certification — CEO/CFO must certify payroll controls each quarter; missed deadline = material weakness
SOX §906 certification — criminal penalties up to $5M for false certification
FLSA 29 CFR §516 — payroll records must be retained 3 years; audit-ready
EEOC EEO-1 Component 1 — race/gender/job category data for 100+ employee companies
OFCCP Affirmative Action Plan — federal contractors with 50+ employees and $50K+ contracts
I-9 purge audit — retain 3 years from hire OR 1 year after termination, whichever is later
GDPR Article 88 — EU employee records processing basis annual review
CPRA employee/applicant data — California employers, 100+ employees/year

Missing ACA 1095-C furnishing isn't an admin slip — it's an IRS penalty. Missing SOX §302 is a material weakness. This workflow tracks them all.

{
  "name": "ACA / SOX / FLSA / GDPR Compliance Deadline Tracker",
  "nodes": [
    {
      "id": "1",
      "name": "Weekdays 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1-5"
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Fetch Deadlines",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        470,
        300
      ],
      "parameters": {
        "operation": "getAll",
        "sheetId": "COMPLIANCE_SHEET_ID"
      }
    },
    {
      "id": "3",
      "name": "Classify Urgency",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        690,
        300
      ],
      "parameters": {
        "jsCode": "const actionMap={ACA_1094C:{owner:'tax@co.com',ch:'#compliance-ops',action:'ACA 1094-C employer mandate \u2014 IRS filing, 4980H penalty up to $2,570/ee/yr'},ACA_1095C:{owner:'tax@co.com',ch:'#compliance-ops',action:'ACA 1095-C furnish to employees \u2014 deadline Jan 31'},SOX_302_CERTIFY:{owner:'cfo@co.com',ch:'#sox-controls',action:'SOX \u00a7302 CEO/CFO payroll certification \u2014 material weakness risk if missed'},SOX_906_CERTIFY:{owner:'cfo@co.com',ch:'#sox-controls',action:'SOX \u00a7906 criminal penalty up to $5M for false certification'},FLSA_PAYROLL_RECORDS:{owner:'hr@co.com',ch:'#hr-compliance',action:'FLSA 29 CFR \u00a7516 payroll records audit \u2014 3yr retention'},EEOC_EEO1:{owner:'hr@co.com',ch:'#hr-compliance',action:'EEOC EEO-1 Component 1 \u2014 race/gender/job category, 100+ employees'},OFCCP_AAP:{owner:'hr@co.com',ch:'#hr-compliance',action:'OFCCP Affirmative Action Plan \u2014 federal contractors 50+ employees $50K+ contract'},I9_PURGE_AUDIT:{owner:'hr@co.com',ch:'#hr-compliance',action:'I-9 audit \u2014 retain 3 yrs from hire OR 1 yr after termination whichever later'},GDPR_ART88:{owner:'privacy@co.com',ch:'#legal',action:'GDPR Art.88 employment data \u2014 EU employee records processing basis review'},STATE_W2:{owner:'tax@co.com',ch:'#compliance-ops',action:'State W-2/W-3 filing \u2014 deadline varies by state, many Jan 31'},CCPA_EE_DATA:{owner:'privacy@co.com',ch:'#legal',action:'CPRA employee/applicant personal data \u2014 California employers 100+ employees/yr'}};return items.map(item=>{const d=item.json;const days=Math.floor((new Date(d.due_date)-new Date())/86400000);let urg=days<0?'OVERDUE':days<=3?'CRITICAL':days<=7?'URGENT':days<=21?'WARNING':'NOTICE';const m=actionMap[d.compliance_type]||{owner:'hr@co.com',ch:'#compliance-ops',action:d.compliance_type};return{json:{...d,...m,days,urg,alert:urg!=='NOTICE'}};});"
      }
    },
    {
      "id": "4",
      "name": "Filter Actionable",
      "type": "n8n-nodes-base.filter",
      "typeVersion": 2,
      "position": [
        910,
        300
      ],
      "parameters": {
        "conditions": {
          "conditions": [
            {
              "leftValue": "={{$json.alert}}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "equals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "5",
      "name": "Route",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        1130,
        300
      ],
      "parameters": {
        "mode": "rules",
        "rules": {
          "values": [
            {
              "conditions": {
                "conditions": [
                  {
                    "leftValue": "={{$json.urg}}",
                    "rightValue": "OVERDUE",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "conditions": {
                "conditions": [
                  {
                    "leftValue": "={{$json.urg}}",
                    "rightValue": "CRITICAL",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    },
    {
      "id": "6",
      "name": "Slack Urgent",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1350,
        200
      ],
      "parameters": {
        "channel": "={{$json.ch}}",
        "text": "{{$json.urg}} {{$json.compliance_type}} due {{$json.due_date}} ({{$json.days}}d) | @here {{$json.action}}"
      }
    },
    {
      "id": "7",
      "name": "Email Owner",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1350,
        400
      ],
      "parameters": {
        "toEmail": "={{$json.owner}}",
        "subject": "[{{$json.urg}}] {{$json.compliance_type}}",
        "message": "Due: {{$json.due_date}} ({{$json.days}} days)\nAction: {{$json.action}}"
      }
    }
  ],
  "connections": {
    "Weekdays 8AM": {
      "main": [
        [
          {
            "node": "Fetch Deadlines",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Fetch Deadlines": {
      "main": [
        [
          {
            "node": "Classify Urgency",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Urgency": {
      "main": [
        [
          {
            "node": "Filter Actionable",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Actionable": {
      "main": [
        [
          {
            "node": "Route",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route": {
      "main": [
        [
          {
            "node": "Slack Urgent",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 4: Employee Data Breach & PII Alert Pipeline

When employee data is exposed, the regulatory clock starts immediately. GDPR Article 33 requires DPA notification within 72 hours. HIPAA §164.402 requires notification to affected individuals within 60 days. SOX §302 may require disclosure as a material weakness. This webhook-driven workflow classifies the breach type, starts the GDPR 72-hour clock if applicable, and routes the alert to the correct team with specific regulatory actions.

The Postgres log creates the paper trail your GDPR DPA notification and HIPAA breach report will need.

{
  "name": "Employee Data Breach & PII Alert Pipeline",
  "nodes": [
    {
      "id": "1",
      "name": "Webhook Alert",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2,
      "position": [
        250,
        300
      ],
      "parameters": {
        "httpMethod": "POST",
        "path": "hr-breach-alert",
        "responseMode": "responseNode"
      }
    },
    {
      "id": "2",
      "name": "Classify Severity",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "jsCode": "const e=items[0].json;const map={SSN_SALARY_EXPOSED:{sev:'CRITICAL',ch:'#security-emergency',mention:'@channel',gdpr72h:true,action:'GDPR Art.33 72h DPA notification + HIPAA \u00a7164.410 if PHI',slaH:1},PERFORMANCE_RECORDS_EXPOSED:{sev:'CRITICAL',ch:'#security-emergency',mention:'@channel',gdpr72h:true,action:'GDPR Art.88 employment records + EEOC litigation hold',slaH:2},BENEFITS_PHI_EXPOSED:{sev:'CRITICAL',ch:'#security-emergency',mention:'@channel',gdpr72h:true,action:'HIPAA \u00a7164.402 breach notification \u2014 60d deadline to affected individuals',slaH:1},PAYROLL_BATCH_EXPOSED:{sev:'HIGH',ch:'#security-ops',mention:'@here',gdpr72h:true,action:'SOX \u00a7302 material weakness disclosure + state AG notification',slaH:4},I9_RECORDS_EXPOSED:{sev:'HIGH',ch:'#security-ops',mention:'@here',gdpr72h:false,action:'ICE notification + USCIS \u2014 I-9 disclosure protocols',slaH:4},AGGREGATE_EE_DATA:{sev:'MEDIUM',ch:'#security-ops',mention:'',gdpr72h:false,action:'Assess scope \u2014 CCPA/CPRA employee data notification if CA residents',slaH:8}};const m=map[e.breach_type]||{sev:'INFO',ch:'#security-ops',mention:'',gdpr72h:false,action:'Investigate and assess',slaH:24};const deadline=new Date(Date.now()+m.slaH*3600000).toISOString();return[{json:{...e,...m,deadline}}];"
      }
    },
    {
      "id": "3",
      "name": "Slack Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        690,
        200
      ],
      "parameters": {
        "channel": "={{$json.ch}}",
        "text": "{{$json.mention}} {{$json.sev}} BREACH \u2014 {{$json.breach_type}} | Records: {{$json.record_count}} | {{$json.gdpr72h ? 'GDPR 72H CLOCK STARTED' : ''}} | Resolve by: {{$json.deadline}} | Action: {{$json.action}}"
      }
    },
    {
      "id": "4",
      "name": "Log Breach",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        690,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO hr_breach_log(breach_type,severity,record_count,gdpr_72h_deadline,action_required,detected_at) VALUES($1,$2,$3,$4,$5,NOW()) ON CONFLICT DO NOTHING",
        "queryParams": "={{[$json.breach_type,$json.sev,$json.record_count,$json.gdpr72h?(new Date(Date.now()+72*3600000).toISOString()):null,$json.action]}}"
      }
    },
    {
      "id": "5",
      "name": "Respond 200",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1,
      "position": [
        910,
        300
      ],
      "parameters": {
        "respondWith": "json",
        "responseBody": "={\"received\":true,\"severity\":\"{{$json.sev}}\",\"gdpr_72h\":{{$json.gdpr72h}},\"deadline\":\"{{$json.deadline}}\",\"action\":\"{{$json.action}}\"}"
      }
    }
  ],
  "connections": {
    "Webhook Alert": {
      "main": [
        [
          {
            "node": "Classify Severity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Severity": {
      "main": [
        [
          {
            "node": "Slack Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log Breach",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Log Breach": {
      "main": [
        [
          {
            "node": "Respond 200",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 5: Weekly HRTech Platform KPI Dashboard

Every Monday at 8AM: active clients, total employees managed, payrolls processed that week, payroll accuracy (color-coded: green ≥99.9%, orange ≥99%, red below), MRR with week-over-week delta, and at-risk account count. Two parallel Postgres queries, merged in n8n, built into an HTML email to the exec team and posted to Slack.

Payroll accuracy below 99.9% at scale means thousands of pay errors. Catching it Monday morning rather than at the first support ticket matters.

{
  "name": "Weekly HRTech Platform KPI Dashboard",
  "nodes": [
    {
      "id": "1",
      "name": "Monday 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1"
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        200
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(DISTINCT client_id) as clients, SUM(employees_managed) as total_ee, SUM(payrolls_processed_last_7d) as payrolls, AVG(payroll_accuracy_pct) as accuracy, SUM(mrr_usd) as mrr FROM platform_metrics WHERE week_start=DATE_TRUNC('week',NOW()-INTERVAL '7 days')"
      }
    },
    {
      "id": "3",
      "name": "Account Health",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT SUM(CASE WHEN health='RED' THEN 1 ELSE 0 END) as at_risk, SUM(CASE WHEN health='AMBER' THEN 1 ELSE 0 END) as watch FROM account_health WHERE checked_at>=NOW()-INTERVAL '7 days'"
      }
    },
    {
      "id": "4",
      "name": "Merge",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 3,
      "position": [
        690,
        300
      ],
      "parameters": {
        "mode": "combine",
        "combinationMode": "mergeByPosition"
      }
    },
    {
      "id": "5",
      "name": "Build Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        910,
        300
      ],
      "parameters": {
        "jsCode": "const d=items[0].json;const prev=JSON.parse($getWorkflowStaticData('global').prev||'{}');const mrr=parseFloat(d.mrr||0);const prevMrr=parseFloat(prev.mrr||mrr);const wow=prevMrr>0?((mrr-prevMrr)/prevMrr*100).toFixed(1):'N/A';const acc=parseFloat(d.accuracy||0);const col=acc>=99.9?'green':acc>=99?'orange':'red';$setWorkflowStaticData('global',{prev:JSON.stringify({mrr})});const html='<h2>HRTech Platform KPI</h2><table border=1 cellpadding=8><tr><th>Metric</th><th>Value</th><th>WoW</th></tr><tr><td>Clients</td><td>'+d.clients+'</td><td>-</td></tr><tr><td>Employees Managed</td><td>'+parseInt(d.total_ee||0)+'</td><td>-</td></tr><tr><td>Payrolls Run</td><td>'+parseInt(d.payrolls||0)+'</td><td>-</td></tr><tr><td>Payroll Accuracy</td><td style=color:'+col+'>'+acc.toFixed(2)+'%</td><td>-</td></tr><tr><td>MRR</td><td>$'+mrr+'</td><td>'+wow+'%</td></tr><tr><td>At-Risk</td><td style=color:red>'+d.at_risk+'</td><td>-</td></tr></table>';return[{json:{...d,html,wow,acc}}];"
      }
    },
    {
      "id": "6",
      "name": "Email Execs",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1130,
        200
      ],
      "parameters": {
        "toEmail": "ceo@company.com",
        "ccEmail": "cto@company.com",
        "subject": "Weekly HRTech KPI",
        "message": "={{$json.html}}"
      }
    },
    {
      "id": "7",
      "name": "Slack Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1130,
        400
      ],
      "parameters": {
        "channel": "#exec-kpis",
        "text": "Weekly HRTech KPI: MRR ${{$json.mrr}} ({{$json.wow}}% WoW) | Accuracy: {{$json.acc}}% | Employees Managed: {{$json.total_ee}} | At-Risk: {{$json.at_risk}}"
      }
    }
  ],
  "connections": {
    "Monday 8AM": {
      "main": [
        [
          {
            "node": "Platform Metrics",
            "type": "main",
            "index": 0
          },
          {
            "node": "Account Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Platform Metrics": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Account Health": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge": {
      "main": [
        [
          {
            "node": "Build Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build Report": {
      "main": [
        [
          {
            "node": "Email Execs",
            "type": "main",
            "index": 0
          },
          {
            "node": "Slack Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

The HRTech Data Risk Most Vendors Underestimate

Zapier's task history stores every field of every record processed. For HRTech SaaS, that means:

SSNs and salary data: accessible to any Zapier account admin at your company — FLSA §516 requires controlled access to payroll records
HIPAA PHI in benefits workflows: self-insured plan health data routes through Zapier's task log without a BAA — a HIPAA violation
I-9 employment eligibility data: ICE has specific disclosure protocols; multi-tenant task logs are not a controlled disclosure
SOX payroll controls: auditors test access controls on payroll systems; Zapier task history accessible to non-finance roles fails the test
GDPR Art.88 EU employment records: routes through Zapier's US servers without documented sub-processor agreement = GDPR violation

n8n self-hosted keeps all employee data in your VPC. Your SOC2 auditor, your HIPAA compliance officer, and your customers' payroll teams see your infrastructure — not a third-party SaaS task log.

Cost Reality at HRTech Scale

Scale	Zapier	n8n self-hosted
500K payroll events/mo	~$500/mo	~$10/mo
5M payroll events/mo	~$5,000/mo	~$40/mo
50M payroll events/mo	~$50,000/mo	~$400/mo

At enterprise HRIS scale — processing payroll for 50,000+ employees weekly — n8n pays for itself in the first payroll run.

Get All 5 Workflows (Import-Ready)

All 5 workflows are in the FlowKit n8n Automation Template Library at stripeai.gumroad.com — import-ready JSON, pre-wired logic, production-tested.

Individual templates: $12–$29. Full library bundle (15 templates): $97.

What's the most common compliance deadline your HRTech customers miss — and how does your platform handle the fallout? Drop it in the comments.

n8n for LogisticsTech SaaS: 5 Automations That Scale Freight Ops and Keep Shipment Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 16:32:48 +0000

If you're building logistics SaaS — freight management, WMS, last-mile delivery, 3PL software, or supply chain visibility — your customers trust you with data that regulators treat as sensitive.

ELD (Electronic Logging Device) data contains driver hours of service under 49 CFR §395. DOT drug test records under 49 CFR Part 40 have strict access controls — only the Medical Review Officer and Designated Employer Representative can view them. C-TPAT partner vetting data requires a documented audit trail for CBP. EU shipper/consignee addresses are personal data under GDPR Article 28.

If your platform routes any of this through Zapier, every task log is a potential compliance exposure. At 50 million tracking events per month, Zapier costs $50,000+/mo. A $500 VPS running self-hosted n8n handles the same load — with data staying in your infrastructure.

Here are 5 production-ready n8n workflows for LogisticsTech SaaS vendors.

Workflow 1: New Shipper/3PL Client Onboarding Drip

When a new logistics client signs up, they need different onboarding depending on whether they're an enterprise 3PL with 500+ trailers or an SMB shipper. This workflow triggers on a new row in your CRM sheet, classifies the client by tier (ENTERPRISE_3PL / MID_CARRIER / SMB_LOGISTICS / STARTER), and sends tiered day-0 email + CSM Slack notification.

The compliance hook: every onboarding event appends to a SOC2 CC7.1 audit sheet — evidence for enterprise 3PL customers who request your SOC2 report. FMCSA ELD data-scope clients get flagged so your DPA process starts before any driver data flows.

{
  "name": "LogisticsTech Client Onboarding Drip",
  "nodes": [
    {
      "id": "1",
      "name": "New Client Row",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "typeVersion": 4,
      "position": [
        250,
        300
      ],
      "parameters": {
        "sheetId": "YOUR_SHEET_ID",
        "event": "rowAdded"
      }
    },
    {
      "id": "2",
      "name": "Classify Client Tier",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "jsCode": "const r=items[0].json;const trailers=parseInt(r.trailer_count||0);const freight=parseFloat(r.annual_freight_usd||0);let tier,csm,sla;if(trailers>=500||freight>=10000000){tier='ENTERPRISE_3PL';csm='#csm-enterprise';sla=4;}else if(trailers>=100||freight>=2000000){tier='MID_CARRIER';csm='#csm-mid-market';sla=8;}else if(freight>=200000){tier='SMB_LOGISTICS';csm='#csm-smb';sla=24;}else{tier='STARTER';csm='#csm-starter';sla=48;}const log={event:'CLIENT_ONBOARDED',client_id:r.client_id,tier,sla,soc2:'CC7.1',ts:new Date().toISOString()};return[{json:{...r,tier,csm,sla,log}}];"
      }
    },
    {
      "id": "3",
      "name": "Day 0 Email",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        690,
        200
      ],
      "parameters": {
        "toEmail": "={{$json.contact_email}}",
        "subject": "Welcome to [Platform]",
        "message": "Hi {{$json.company_name}},\n\nYour account is live. Your CSM will reach out within {{$json.sla}} hours.\n\nBest,\nThe [Platform] Team"
      }
    },
    {
      "id": "4",
      "name": "Notify CSM",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        690,
        400
      ],
      "parameters": {
        "channel": "={{$json.csm}}",
        "text": "New {{$json.tier}} client: *{{$json.company_name}}* | Freight: ${{$json.annual_freight_usd}} | SLA: {{$json.sla}}h"
      }
    },
    {
      "id": "5",
      "name": "SOC2 Audit Log",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        910,
        300
      ],
      "parameters": {
        "operation": "append",
        "sheetId": "AUDIT_SHEET_ID",
        "columns": {
          "mappingMode": "defineBelow",
          "value": {
            "A": "={{$json.client_id}}",
            "B": "={{$json.tier}}",
            "C": "={{new Date().toISOString()}}",
            "D": "CLIENT_ONBOARDED",
            "E": "SOC2_CC7.1"
          }
        }
      }
    }
  ],
  "connections": {
    "New Client Row": {
      "main": [
        [
          {
            "node": "Classify Client Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Client Tier": {
      "main": [
        [
          {
            "node": "Day 0 Email",
            "type": "main",
            "index": 0
          },
          {
            "node": "Notify CSM",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Day 0 Email": {
      "main": [
        [
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Notify CSM": {
      "main": [
        [
          {
            "node": "SOC2 Audit Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 2: Freight API & Carrier Health Monitor

Your platform depends on carrier APIs — FedEx, UPS, regional LTL carriers, customs brokers. When one goes down, shipments miss cutoffs. This workflow pings every carrier endpoint every 3 minutes. When a carrier is DOWN or STALE_DATA, you get one Slack alert — not 480 per day.

$getWorkflowStaticData stores last-alert timestamps per endpoint (30-min cooldown). Incidents log to Postgres with ON CONFLICT DO NOTHING for a clean on-call timeline.

{
  "name": "Freight API & Carrier Health Monitor",
  "nodes": [
    {
      "id": "1",
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 3
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Fetch Endpoints",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT id, carrier_name, endpoint_url, timeout_ms FROM carrier_endpoints WHERE active=true"
      }
    },
    {
      "id": "3",
      "name": "Split",
      "type": "n8n-nodes-base.splitInBatches",
      "typeVersion": 3,
      "position": [
        690,
        300
      ],
      "parameters": {
        "batchSize": 1
      }
    },
    {
      "id": "4",
      "name": "Ping Carrier",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4,
      "position": [
        910,
        300
      ],
      "parameters": {
        "method": "GET",
        "url": "={{$json.endpoint_url}}",
        "timeout": 5000,
        "continueOnFail": true
      }
    },
    {
      "id": "5",
      "name": "Classify & Dedup",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        1130,
        300
      ],
      "parameters": {
        "jsCode": "const r=items[0].json;const state=JSON.parse($getWorkflowStaticData('global').s||'{}');const now=Date.now();const k=r.id;const cool=30*60*1000;let status='OK';if(r.error||r.statusCode>=500)status='DOWN';else if(!r.lastDataAt||(now-new Date(r.lastDataAt).getTime())>900000)status='STALE_DATA';else if(r.statusCode>=400)status='DEGRADED';const alert=status!=='OK'&&(now-(state[k]||0))>cool;if(alert){state[k]=now;$setWorkflowStaticData('global',{s:JSON.stringify(state)});}return[{json:{...r,status,should_alert:alert}}];"
      }
    },
    {
      "id": "6",
      "name": "Filter Alerts",
      "type": "n8n-nodes-base.filter",
      "typeVersion": 2,
      "position": [
        1350,
        300
      ],
      "parameters": {
        "conditions": {
          "conditions": [
            {
              "leftValue": "={{$json.should_alert}}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "equals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "7",
      "name": "Slack Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1570,
        200
      ],
      "parameters": {
        "channel": "#platform-ops",
        "text": "Carrier {{$json.status}}: *{{$json.carrier_name}}* | {{$json.endpoint_url}}"
      }
    },
    {
      "id": "8",
      "name": "Log Incident",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        1570,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO carrier_incidents(carrier_id,status,detected_at) VALUES($1,$2,NOW()) ON CONFLICT DO NOTHING",
        "queryParams": "={{[$json.id,$json.status]}}"
      }
    }
  ],
  "connections": {
    "Every 3 Minutes": {
      "main": [
        [
          {
            "node": "Fetch Endpoints",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Fetch Endpoints": {
      "main": [
        [
          {
            "node": "Split",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Split": {
      "main": [
        [
          {
            "node": "Ping Carrier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Ping Carrier": {
      "main": [
        [
          {
            "node": "Classify & Dedup",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify & Dedup": {
      "main": [
        [
          {
            "node": "Filter Alerts",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Alerts": {
      "main": [
        [
          {
            "node": "Slack Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log Incident",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 3: Logistics Compliance Deadline Tracker

LogisticsTech SaaS operates under a compliance calendar most teams ignore:

FMCSA ELD annual certification — 49 CFR §395, driver data retention 6 months minimum
DOT drug/alcohol test batches — 49 CFR Part 40, quarterly, strict access control (MRO and DER only — §40.331 violation if others view)
C-TPAT annual security profile — CBP requires documented annual review for partner vetting
FMC tariff filing — 46 CFR Part 520, rate publication deadlines
TSA known shipper renewal — 49 CFR Part 1548, indirect air carrier requirements
GDPR Article 30 register — EU shipper/consignee name+address = personal data, sub-processor documentation required
CCPA data inventory — California resident shipper/consignee = personal information under Cal. Civ. Code §1798.100
CBP ISF 10+2 review — 19 CFR §149, import security filing

Missing any of these isn't operational slippage — it's a regulatory violation.

{
  "name": "Logistics Compliance Deadline Tracker",
  "nodes": [
    {
      "id": "1",
      "name": "Weekdays 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1-5"
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Fetch Deadlines",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 4,
      "position": [
        470,
        300
      ],
      "parameters": {
        "operation": "getAll",
        "sheetId": "COMPLIANCE_SHEET_ID"
      }
    },
    {
      "id": "3",
      "name": "Classify Urgency",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        690,
        300
      ],
      "parameters": {
        "jsCode": "const actionMap={FMCSA_ELD_ANNUAL:{owner:'compliance@co.com',ch:'#compliance-ops',action:'FMCSA ELD cert \u2014 49 CFR 395 \u2014 6mo retention'},DOT_DRUG_TEST_Q:{owner:'hr@co.com',ch:'#hr-compliance',action:'DOT drug/alcohol batch \u2014 49 CFR Part 40 \u2014 restricted access'},CTPAT_REVIEW:{owner:'security@co.com',ch:'#compliance-ops',action:'C-TPAT annual review \u2014 CBP partner vetting doc'},FMC_TARIFF:{owner:'compliance@co.com',ch:'#compliance-ops',action:'FMC tariff filing \u2014 46 CFR Part 520'},TSA_CARGO:{owner:'ops@co.com',ch:'#ops-compliance',action:'TSA known shipper renewal \u2014 49 CFR Part 1548'},SOC2_TYPE2:{owner:'ciso@co.com',ch:'#security',action:'SOC2 Type II audit window'},GDPR_ART30:{owner:'privacy@co.com',ch:'#legal',action:'GDPR Art.30 register \u2014 EU shipper/consignee data'},CCPA_INVENTORY:{owner:'privacy@co.com',ch:'#legal',action:'CCPA data inventory \u2014 CA shipper purchase history'},CBP_ISF:{owner:'trade@co.com',ch:'#compliance-ops',action:'CBP ISF 10+2 review \u2014 19 CFR 149'}};return items.map(item=>{const d=item.json;const days=Math.floor((new Date(d.due_date)-new Date())/86400000);let urg=days<0?'OVERDUE':days<=3?'CRITICAL':days<=7?'URGENT':days<=21?'WARNING':'NOTICE';const m=actionMap[d.compliance_type]||{owner:'compliance@co.com',ch:'#compliance-ops',action:d.compliance_type};return{json:{...d,...m,days,urg,alert:urg!=='NOTICE'}};});"
      }
    },
    {
      "id": "4",
      "name": "Filter Actionable",
      "type": "n8n-nodes-base.filter",
      "typeVersion": 2,
      "position": [
        910,
        300
      ],
      "parameters": {
        "conditions": {
          "conditions": [
            {
              "leftValue": "={{$json.alert}}",
              "rightValue": true,
              "operator": {
                "type": "boolean",
                "operation": "equals"
              }
            }
          ]
        }
      }
    },
    {
      "id": "5",
      "name": "Route",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        1130,
        300
      ],
      "parameters": {
        "mode": "rules",
        "rules": {
          "values": [
            {
              "conditions": {
                "conditions": [
                  {
                    "leftValue": "={{$json.urg}}",
                    "rightValue": "OVERDUE",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            },
            {
              "conditions": {
                "conditions": [
                  {
                    "leftValue": "={{$json.urg}}",
                    "rightValue": "CRITICAL",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    },
    {
      "id": "6",
      "name": "Slack Urgent",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1350,
        200
      ],
      "parameters": {
        "channel": "={{$json.ch}}",
        "text": "{{$json.urg}} {{$json.compliance_type}} due {{$json.due_date}} ({{$json.days}}d) | @here {{$json.action}}"
      }
    },
    {
      "id": "7",
      "name": "Email Owner",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1350,
        400
      ],
      "parameters": {
        "toEmail": "={{$json.owner}}",
        "subject": "[{{$json.urg}}] {{$json.compliance_type}}",
        "message": "Due: {{$json.due_date}} ({{$json.days}} days)\nAction: {{$json.action}}"
      }
    }
  ],
  "connections": {
    "Weekdays 8AM": {
      "main": [
        [
          {
            "node": "Fetch Deadlines",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Fetch Deadlines": {
      "main": [
        [
          {
            "node": "Classify Urgency",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Urgency": {
      "main": [
        [
          {
            "node": "Filter Actionable",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Actionable": {
      "main": [
        [
          {
            "node": "Route",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route": {
      "main": [
        [
          {
            "node": "Slack Urgent",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 4: Shipment Exception & Delay Alert Pipeline

Lost packages, customs holds, carrier delays — these need to reach the right team within minutes. This webhook-driven workflow classifies each exception type, sets resolution SLAs, and routes to the correct Slack channel.

Compliance angle: Lost shipments containing hazmat or controlled goods trigger mandatory DOT/IATA reporting timelines. The Postgres log creates the paper trail. The webhook responds immediately with {received: true, severity, resolution} so the upstream event emitter doesn't timeout.

{
  "name": "Shipment Exception & Delay Alert Pipeline",
  "nodes": [
    {
      "id": "1",
      "name": "Webhook Exception",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2,
      "position": [
        250,
        300
      ],
      "parameters": {
        "httpMethod": "POST",
        "path": "shipment-exception",
        "responseMode": "responseNode"
      }
    },
    {
      "id": "2",
      "name": "Classify Exception",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        470,
        300
      ],
      "parameters": {
        "jsCode": "const e=items[0].json;const map={LOST_SHIPMENT:{sev:'CRITICAL',ch:'#ops-critical',mention:'@channel',slaH:1,action:'Initiate tracer + carrier claim'},CUSTOMS_HOLD:{sev:'CRITICAL',ch:'#trade-compliance',mention:'@channel',slaH:2,action:'Engage customs broker'},CARRIER_DELAY_4H:{sev:'HIGH',ch:'#logistics-ops',mention:'@here',slaH:4,action:'Re-route or notify consignee'},WEATHER_DELAY:{sev:'MEDIUM',ch:'#logistics-ops',mention:'',slaH:8,action:'Monitor and update ETA'},DELIVERY_EXCEPTION:{sev:'MEDIUM',ch:'#logistics-ops',mention:'',slaH:4,action:'Attempt redelivery'}};const m=map[e.exception_type]||{sev:'INFO',ch:'#logistics-ops',mention:'',slaH:48,action:'Review and action'};const resolution=new Date(Date.now()+m.slaH*3600000).toISOString();return[{json:{...e,...m,resolution}}];"
      }
    },
    {
      "id": "3",
      "name": "Slack Alert",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        690,
        200
      ],
      "parameters": {
        "channel": "={{$json.ch}}",
        "text": "{{$json.mention}} {{$json.sev}} \u2014 {{$json.exception_type}} | Tracking: {{$json.tracking_number}} | Carrier: {{$json.carrier}} | Resolve by: {{$json.resolution}} | Action: {{$json.action}}"
      }
    },
    {
      "id": "4",
      "name": "Log Incident",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        690,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO shipment_exceptions(tracking_number,exception_type,severity,carrier,detected_at,expected_resolution) VALUES($1,$2,$3,$4,NOW(),$5) ON CONFLICT(tracking_number,exception_type) DO UPDATE SET detected_at=NOW()",
        "queryParams": "={{[$json.tracking_number,$json.exception_type,$json.sev,$json.carrier,$json.resolution]}}"
      }
    },
    {
      "id": "5",
      "name": "Respond 200",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1,
      "position": [
        910,
        300
      ],
      "parameters": {
        "respondWith": "json",
        "responseBody": "={\"received\":true,\"severity\":\"{{$json.sev}}\",\"resolution\":\"{{$json.resolution}}\"}"
      }
    }
  ],
  "connections": {
    "Webhook Exception": {
      "main": [
        [
          {
            "node": "Classify Exception",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Exception": {
      "main": [
        [
          {
            "node": "Slack Alert",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log Incident",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Log Incident": {
      "main": [
        [
          {
            "node": "Respond 200",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Workflow 5: Weekly LogisticsTech KPI Dashboard

Every Monday at 8AM: active clients, weekly shipments processed, on-time delivery rate (color-coded: green ≥95%, orange ≥90%, red below), MRR with week-over-week delta, and at-risk account count. Two parallel Postgres queries, merged in n8n, built into an HTML email to the exec team, posted to Slack.

No Looker license. No data leaving your VPC. No Zapier task history capturing GMV figures.

{
  "name": "Weekly LogisticsTech KPI Dashboard",
  "nodes": [
    {
      "id": "1",
      "name": "Monday 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "typeVersion": 1,
      "position": [
        250,
        300
      ],
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1"
            }
          ]
        }
      }
    },
    {
      "id": "2",
      "name": "Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        200
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(DISTINCT client_id) as clients, SUM(shipments_last_7d) as shipments, AVG(on_time_pct) as on_time, SUM(mrr_usd) as mrr FROM platform_metrics WHERE week_start=DATE_TRUNC('week',NOW()-INTERVAL '7 days')"
      }
    },
    {
      "id": "3",
      "name": "Account Health",
      "type": "n8n-nodes-base.postgres",
      "typeVersion": 2,
      "position": [
        470,
        400
      ],
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT SUM(CASE WHEN health='RED' THEN 1 ELSE 0 END) as at_risk, SUM(CASE WHEN health='AMBER' THEN 1 ELSE 0 END) as watch FROM account_health WHERE checked_at>=NOW()-INTERVAL '7 days'"
      }
    },
    {
      "id": "4",
      "name": "Merge",
      "type": "n8n-nodes-base.merge",
      "typeVersion": 3,
      "position": [
        690,
        300
      ],
      "parameters": {
        "mode": "combine",
        "combinationMode": "mergeByPosition"
      }
    },
    {
      "id": "5",
      "name": "Build Report",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "position": [
        910,
        300
      ],
      "parameters": {
        "jsCode": "const d=items[0].json;const prev=JSON.parse($getWorkflowStaticData('global').prev||'{}');const mrr=parseFloat(d.mrr||0);const prevMrr=parseFloat(prev.mrr||mrr);const wow=prevMrr>0?((mrr-prevMrr)/prevMrr*100).toFixed(1):'N/A';const ot=parseFloat(d.on_time||0);const col=ot>=95?'green':ot>=90?'orange':'red';$setWorkflowStaticData('global',{prev:JSON.stringify({mrr})});const html='<h2>LogisticsTech KPI</h2><table border=1 cellpadding=8><tr><th>Metric</th><th>Value</th><th>WoW</th></tr><tr><td>Clients</td><td>'+d.clients+'</td><td>-</td></tr><tr><td>Shipments</td><td>'+parseInt(d.shipments||0)+'</td><td>-</td></tr><tr><td>On-Time</td><td style=color:'+col+'>'+ot.toFixed(1)+'%</td><td>-</td></tr><tr><td>MRR</td><td>$'+mrr+'</td><td>'+wow+'%</td></tr><tr><td>At-Risk</td><td style=color:red>'+d.at_risk+'</td><td>-</td></tr></table>';return[{json:{...d,html,wow}}];"
      }
    },
    {
      "id": "6",
      "name": "Email Execs",
      "type": "n8n-nodes-base.gmail",
      "typeVersion": 2,
      "position": [
        1130,
        200
      ],
      "parameters": {
        "toEmail": "ceo@company.com",
        "ccEmail": "cto@company.com",
        "subject": "Weekly LogisticsTech KPI",
        "message": "={{$json.html}}"
      }
    },
    {
      "id": "7",
      "name": "Slack Summary",
      "type": "n8n-nodes-base.slack",
      "typeVersion": 2,
      "position": [
        1130,
        400
      ],
      "parameters": {
        "channel": "#exec-kpis",
        "text": "Weekly KPI: MRR ${{$json.mrr}} ({{$json.wow}}% WoW) | On-Time: {{$json.on_time}}% | At-Risk: {{$json.at_risk}}"
      }
    }
  ],
  "connections": {
    "Monday 8AM": {
      "main": [
        [
          {
            "node": "Platform Metrics",
            "type": "main",
            "index": 0
          },
          {
            "node": "Account Health",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Platform Metrics": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Account Health": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge": {
      "main": [
        [
          {
            "node": "Build Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build Report": {
      "main": [
        [
          {
            "node": "Email Execs",
            "type": "main",
            "index": 0
          },
          {
            "node": "Slack Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

The LogisticsTech Data Risk Nobody Talks About

Zapier's task history stores every field of every record. For LogisticsTech SaaS, that means:

ELD records (driver name, hours, location): FMCSA requires controlled access — Zapier's multi-tenant task log is uncontrolled
DOT drug test results: legally restricted to MRO and DER — any team member viewing Zapier logs is a §40.331 violation
C-TPAT partner data: CBP requires you to document who accessed partner security info — Zapier logs aren't auditable at that level
GDPR Art.28: EU shipper/consignee name+address through Zapier = sub-processor requiring signed DPA, sub-processor audit rights, data location documentation

n8n self-hosted keeps all of this in your VPC. Your customers' compliance auditors see your infrastructure — not a third-party SaaS task log.

Cost Reality

Scale	Zapier	n8n self-hosted
1M events/mo	~$1,000/mo	~$20/mo
10M events/mo	~$10,000/mo	~$60/mo
50M events/mo	~$50,000/mo	~$500/mo

At enterprise LogisticsTech scale, n8n pays for itself in the first hour of the first month.

Get All 5 Workflows (Import-Ready)

All 5 workflows are in the FlowKit n8n Automation Template Library at stripeai.gumroad.com — import-ready JSON, pre-wired logic, production-tested.

Individual templates: $12–$29. Full library bundle (15 templates): $97.

Which shipment exception type causes the most escalations at your logistics platform? Drop it in the comments — I'll show you the n8n workflow for it.

n8n for RetailTech SaaS: 5 Automations That Scale Retail Ops and Keep Customer Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 16:15:41 +0000

RetailTech SaaS vendors — POS platforms, loyalty/retention engines, inventory management SaaS, e-commerce platform operators — run the data layer for modern commerce. When your internal automation routes through Zapier or Make, PCI cardholder data, CCPA-protected purchase histories, and GDPR-regulated EU shopper profiles pass through a third-party multi-tenant cloud you do not control.

n8n changes the equation. Self-host your automation layer inside your own VPC, and data never leaves your infrastructure boundary. Your PCI scope stays defined. Your CCPA "third party" list shrinks. Your EU sub-processor DPA is clean.

Five production-ready workflows below — each with full import-ready JSON.

1. New Retail Brand Client Onboarding Drip

Problem: New enterprise retailers need immediate ROI evidence to justify the seat count. A generic welcome email is not that. Tier-aware onboarding sends the right setup wizard, integration guide, and check-in call at exactly day 0, 3, and 7 — scoped to their store count and SKU volume.

Why n8n: The PII in your onboarding sequence (contact name, email, company size, revenue tier) is logged in every Zapier task execution — a CC7.2 SOC2 gap and a CCPA third-party disclosure you have to document.

{
  "name": "RetailTech: New Client Onboarding Drip",
  "nodes": [
    {
      "parameters": {
        "documentId": "YOUR_SHEET_ID",
        "sheetName": "New Clients",
        "event": "rowAdded"
      },
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "name": "New Client Added",
      "position": [0, 0]
    },
    {
      "parameters": {
        "jsCode": "const stores = $json.store_count || 0;\nconst seats = $json.seat_count || 0;\nconst gmv = $json.annual_gmv_usd || 0;\nconst tier = (() => {\n  if (stores >= 500 || seats >= 1000 || gmv >= 50000000) return 'ENTERPRISE_CHAIN';\n  if (stores >= 50 || seats >= 100 || gmv >= 5000000) return 'MID_SIZE_RETAILER';\n  if (stores >= 5 || seats >= 10 || gmv >= 500000) return 'SMALL_BUSINESS';\n  return 'STARTER';\n})();\nconst tierConfig = {\n  ENTERPRISE_CHAIN: { sla: '2h', csm: true, dedicated_slack: true, integrations: 'POS+ERP+Loyalty+WMS' },\n  MID_SIZE_RETAILER: { sla: '4h', csm: true, dedicated_slack: false, integrations: 'POS+Inventory' },\n  SMALL_BUSINESS: { sla: 'next_business_day', csm: false, dedicated_slack: false, integrations: 'POS' },\n  STARTER: { sla: 'email_only', csm: false, dedicated_slack: false, integrations: 'basic' }\n};\nreturn [{ json: { ...$json, tier, config: tierConfig[tier], onboard_ts: new Date().toISOString() } }];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Tier",
      "position": [200, 0]
    },
    {
      "parameters": {
        "fromEmail": "onboarding@yourplatform.com",
        "toEmail": "={{ $json.contact_email }}",
        "subject": "={{ $json.tier === 'ENTERPRISE_CHAIN' ? 'Your dedicated setup team is ready — '  : 'Get your first store live in 30 minutes — ' }}{{ $json.company_name }}",
        "html": "={{ '<p>Hi ' + $json.contact_name + ',</p><p>Tier: ' + $json.tier + '. Integrations ready: ' + $json.config.integrations + '</p>' }}"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Day 0 Email",
      "position": [400, 0]
    },
    {
      "parameters": { "amount": 3, "unit": "days" },
      "type": "n8n-nodes-base.wait",
      "name": "Wait 3 Days",
      "position": [600, 0]
    },
    {
      "parameters": {
        "fromEmail": "onboarding@yourplatform.com",
        "toEmail": "={{ $json.contact_email }}",
        "subject": "Day 3 check-in — how is the POS integration going?",
        "html": "={{ '<p>Hi ' + $json.contact_name + ',</p><p>Quick check-in: your ' + $json.config.integrations + ' integration should be live. Any blockers?</p>' }}"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Day 3 Check-In",
      "position": [800, 0]
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "operation": "appendOrUpdate",
        "documentId": "YOUR_AUDIT_SHEET_ID",
        "sheetName": "OnboardingLog",
        "columns": {
          "mappingMode": "defineBelow",
          "values": [
            { "column": "client_id", "fieldValue": "={{ $json.client_id }}" },
            { "column": "tier", "fieldValue": "={{ $json.tier }}" },
            { "column": "onboard_ts", "fieldValue": "={{ $json.onboard_ts }}" },
            { "column": "compliance_note", "fieldValue": "SOC2_CC7.1_AUDIT / CCPA_THIRD_PARTY_DPA_NOT_REQUIRED" }
          ]
        }
      },
      "type": "n8n-nodes-base.googleSheets",
      "name": "Audit Log",
      "position": [1000, 0]
    }
  ],
  "connections": {
    "New Client Added": { "main": [[{ "node": "Classify Tier", "type": "main", "index": 0 }]] },
    "Classify Tier": { "main": [[{ "node": "Day 0 Email", "type": "main", "index": 0 }]] },
    "Day 0 Email": { "main": [[{ "node": "Wait 3 Days", "type": "main", "index": 0 }]] },
    "Wait 3 Days": { "main": [[{ "node": "Day 3 Check-In", "type": "main", "index": 0 }]] },
    "Day 3 Check-In": { "main": [[{ "node": "Audit Log", "type": "main", "index": 0 }]] }
  }
}

2. POS API & Inventory Health Monitor

Problem: When your POS integration goes down at 11 AM on a Saturday — peak retail hours — the first person who knows is the store manager, not your team. By then you have 30 angry support tickets. A 3-minute health monitor pages your on-call engineer before the first ticket.

Why n8n: Monitor polling runs continuously on a schedule. Zapier workflow execution is billed per task — 3-min polling = 20 runs/hour = 480 runs/day per endpoint. At 1,000 retail clients each with 3 POS endpoints, that is 1.44 million tasks per day. n8n runs for $60/month on a VPS regardless of event volume.

{
  "name": "RetailTech: POS & Inventory Health Monitor",
  "nodes": [
    {
      "parameters": { "rule": { "interval": [{ "field": "minutes", "minutesInterval": 3 }] } },
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Every 3 Minutes",
      "position": [0, 0]
    },
    {
      "parameters": {
        "operation": "getAll",
        "documentId": "YOUR_SHEET_ID",
        "sheetName": "POSEndpoints",
        "returnAll": true
      },
      "type": "n8n-nodes-base.googleSheets",
      "name": "Get Endpoints",
      "position": [200, 0]
    },
    {
      "parameters": {
        "url": "={{ $json.health_url }}",
        "options": { "timeout": 8000 },
        "continueOnFail": true
      },
      "type": "n8n-nodes-base.httpRequest",
      "name": "Ping Endpoint",
      "position": [400, 0]
    },
    {
      "parameters": {
        "jsCode": "const item = $json;\nconst prev = $getWorkflowStaticData('node');\nconst now = Date.now();\nconst lastAlert = prev[item.endpoint_id] || 0;\nconst suppress = (now - lastAlert) < 30 * 60 * 1000;\nconst responseTime = item.$response?.responseTime || 9999;\nconst lastUpdated = item.last_data_ts ? (now - new Date(item.last_data_ts).getTime()) / 60000 : 999;\nlet status;\nif (item.$error || responseTime > 8000) status = 'DOWN';\nelse if (lastUpdated > 15) status = 'STALE_DATA';\nelse if (responseTime > 3000) status = 'DEGRADED';\nelse status = 'OK';\nif (status !== 'OK' && !suppress) prev[item.endpoint_id] = now;\nreturn [{ json: { ...item, status, responseTime, suppress, alertable: status !== 'OK' && !suppress } }];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Status",
      "position": [600, 0]
    },
    {
      "parameters": { "conditions": { "boolean": [{ "value1": "={{ $json.alertable }}", "value2": true }] } },
      "type": "n8n-nodes-base.filter",
      "name": "Filter Alertable",
      "position": [800, 0]
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "channel": "#platform-ops",
        "text": "={{ '🔴 [' + $json.status + '] ' + $json.client_name + ' — ' + $json.endpoint_name + ' (' + $json.endpoint_id + ')\nResponse: ' + $json.responseTime + 'ms | Region: ' + $json.region + '\nAction: ' + (($json.status === 'DOWN') ? 'Check integration bridge + retry auth' : 'Check data pipeline sync') }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Alert Slack",
      "position": [1000, -100]
    },
    {
      "parameters": {
        "operation": "insert",
        "schema": "public",
        "table": "pos_incidents",
        "columns": "client_id, endpoint_id, status, response_time_ms, checked_at",
        "additionalFields": { "conflictAction": "ignore" }
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Log Incident",
      "position": [1000, 100]
    }
  ],
  "connections": {
    "Every 3 Minutes": { "main": [[{ "node": "Get Endpoints", "type": "main", "index": 0 }]] },
    "Get Endpoints": { "main": [[{ "node": "Ping Endpoint", "type": "main", "index": 0 }]] },
    "Ping Endpoint": { "main": [[{ "node": "Classify Status", "type": "main", "index": 0 }]] },
    "Classify Status": { "main": [[{ "node": "Filter Alertable", "type": "main", "index": 0 }]] },
    "Filter Alertable": { "main": [[{ "node": "Alert Slack", "type": "main", "index": 0 }, { "node": "Log Incident", "type": "main", "index": 0 }]] }
  }
}

3. PCI-DSS & Retail Compliance Deadline Tracker

Problem: RetailTech SaaS vendors carry their own PCI-DSS SAQ/QSA obligation, CCPA data inventory and DSR deadlines, GDPR Art.30 records-of-processing review, and a growing list of US state privacy laws (Iowa CPA, Texas TDPSA, Colorado CPA, Virginia VCDPA). Miss a deadline and you face a QSA finding, a $2,500–$7,500/violation CCPA penalty, or a GDPR Art.83 fine.

Why n8n: Your compliance deadlines are internal operational data. Routing them through Zapier adds a third-party to your data chain that must appear on your Art.30 records. n8n keeps the loop inside your boundary.

{
  "name": "RetailTech: PCI & Compliance Deadline Tracker",
  "nodes": [
    {
      "parameters": { "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1-5" }] } },
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Weekdays 8 AM",
      "position": [0, 0]
    },
    {
      "parameters": {
        "operation": "getAll",
        "documentId": "YOUR_SHEET_ID",
        "sheetName": "ComplianceDeadlines",
        "returnAll": true
      },
      "type": "n8n-nodes-base.googleSheets",
      "name": "Get Deadlines",
      "position": [200, 0]
    },
    {
      "parameters": {
        "jsCode": "const today = new Date();\nconst deadline = new Date($json.deadline_date);\nconst daysLeft = Math.ceil((deadline - today) / 86400000);\nconst actionMap = {\n  PCI_DSS_SAQ_ANNUAL: 'Complete SAQ-D self-assessment + submit to acquiring bank',\n  PCI_DSS_QSA_ANNUAL: 'Schedule QSA audit + prepare ROC evidence package',\n  PCI_DSS_ASV_SCAN: 'Run ASV scan via approved vendor + remediate failures',\n  CCPA_DATA_INVENTORY: 'Complete annual data inventory — all categories of PI collected, sources, purposes',\n  CCPA_DSR_30DAY: 'Respond to pending data subject requests within 30-day CCPA window',\n  GDPR_DPA_REVIEW: 'Review data processing agreements with all EU data processors',\n  GDPR_ART_30: 'Update records of processing activities — all vendors + data flows',\n  SOC2_TYPE2_AUDIT: 'Begin evidence collection for SOC2 Type II audit window',\n  IOWA_CPA_DSR: 'Iowa Consumer Privacy Act: respond to pending DSRs within 90 days',\n  TEXAS_TDPSA_DPIA: 'Texas TDPSA: complete data protection impact assessment for high-risk processing',\n  COLORADO_CPA_OPT_OUT: 'Colorado CPA: confirm opt-out signals honored in ad targeting integrations',\n  FTC_SAFEGUARDS: 'FTC Safeguards Rule: annual security program review for financial data elements'\n};\nconst tier = daysLeft < 0 ? 'OVERDUE' : daysLeft <= 3 ? 'CRITICAL' : daysLeft <= 7 ? 'URGENT' : daysLeft <= 14 ? 'WARNING' : 'NOTICE';\nreturn [{ json: { ...$json, daysLeft, tier, action: actionMap[$json.compliance_type] || 'Review compliance requirement' } }];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Deadline",
      "position": [400, 0]
    },
    {
      "parameters": {
        "conditions": { "string": [{ "value1": "={{ $json.tier }}", "operation": "notEqual", "value2": "NOTICE" }] }
      },
      "type": "n8n-nodes-base.filter",
      "name": "Filter Actionable",
      "position": [600, 0]
    },
    {
      "parameters": {
        "dataPropertyName": "tier",
        "rules": {
          "rules": [
            { "value": "OVERDUE", "output": 0 },
            { "value": "CRITICAL", "output": 1 },
            { "value": "URGENT", "output": 2 },
            { "value": "WARNING", "output": 3 }
          ]
        }
      },
      "type": "n8n-nodes-base.switch",
      "name": "Route by Tier",
      "position": [800, 0]
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "channel": "#compliance-ops",
        "text": "={{ '⚠️ [' + $json.tier + '] ' + $json.compliance_type + '\n' + ($json.daysLeft < 0 ? 'OVERDUE by ' + Math.abs($json.daysLeft) + ' days' : $json.daysLeft + ' days remaining') + '\nOwner: ' + $json.owner_email + '\nAction: ' + $json.action }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack #compliance-ops",
      "position": [1000, 0]
    },
    {
      "parameters": {
        "fromEmail": "compliance@yourplatform.com",
        "toEmail": "={{ $json.owner_email }}",
        "subject": "={{ '[ACTION REQUIRED] ' + $json.compliance_type + ' — ' + ($json.daysLeft < 0 ? 'OVERDUE' : $json.daysLeft + ' days left') }}",
        "text": "={{ $json.action + '\n\nDeadline: ' + $json.deadline_date + '\nTier: ' + $json.tier }}"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Email Owner",
      "position": [1000, 200]
    }
  ],
  "connections": {
    "Weekdays 8 AM": { "main": [[{ "node": "Get Deadlines", "type": "main", "index": 0 }]] },
    "Get Deadlines": { "main": [[{ "node": "Classify Deadline", "type": "main", "index": 0 }]] },
    "Classify Deadline": { "main": [[{ "node": "Filter Actionable", "type": "main", "index": 0 }]] },
    "Filter Actionable": { "main": [[{ "node": "Route by Tier", "type": "main", "index": 0 }]] },
    "Route by Tier": {
      "main": [
        [{ "node": "Slack #compliance-ops", "type": "main", "index": 0 }, { "node": "Email Owner", "type": "main", "index": 0 }],
        [{ "node": "Slack #compliance-ops", "type": "main", "index": 0 }, { "node": "Email Owner", "type": "main", "index": 0 }],
        [{ "node": "Slack #compliance-ops", "type": "main", "index": 0 }],
        [{ "node": "Slack #compliance-ops", "type": "main", "index": 0 }]
      ]
    }
  }
}

4. Customer GMV Churn & Account Health Alert

Problem: A retail brand goes quiet — fewer POS transactions, fewer inventory syncs, no logins for two weeks. That is a churn signal. Catching it on day 3 is a save. Catching it on day 21 is a post-mortem.

Why n8n: Customer transaction volumes and usage patterns are the most commercially sensitive data your platform holds. Routing them through Zapier each day means they appear in a third-party activity log tied to your Zapier account — a CCPA third-party disclosure and a SOC2 confidentiality gap.

{
  "name": "RetailTech: Customer Health Alert",
  "nodes": [
    {
      "parameters": { "rule": { "interval": [{ "field": "cronExpression", "expression": "0 9 * * *" }] } },
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Daily 9 AM",
      "position": [0, 0]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT a.client_id, a.company_name, a.csm_email, m.gmv_7d, m.gmv_7d_prev, m.api_calls_7d, m.api_calls_7d_prev, m.last_login_ts, m.active_store_count, m.active_store_count_prev FROM accounts a JOIN client_metrics m ON a.client_id = m.client_id WHERE a.status = 'active'"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Query Metrics",
      "position": [200, 0]
    },
    {
      "parameters": {
        "jsCode": "const now = new Date();\nconst lastLogin = $json.last_login_ts ? new Date($json.last_login_ts) : null;\nconst daysSinceLogin = lastLogin ? Math.floor((now - lastLogin) / 86400000) : 999;\nconst gmvDrop = $json.gmv_7d_prev > 0 ? (($json.gmv_7d_prev - $json.gmv_7d) / $json.gmv_7d_prev) * 100 : 0;\nconst apiDrop = $json.api_calls_7d_prev > 0 ? (($json.api_calls_7d_prev - $json.api_calls_7d) / $json.api_calls_7d_prev) * 100 : 0;\nconst storeDrop = $json.active_store_count_prev > 0 ? (($json.active_store_count_prev - $json.active_store_count) / $json.active_store_count_prev) * 100 : 0;\nconst isRed = gmvDrop >= 50 || apiDrop >= 40 || daysSinceLogin >= 21 || storeDrop >= 30;\nconst isAmber = !isRed && (gmvDrop >= 20 || apiDrop >= 20 || daysSinceLogin >= 14 || storeDrop >= 15);\nconst tier = isRed ? 'RED' : isAmber ? 'AMBER' : 'GREEN';\nreturn [{ json: { ...$json, tier, gmvDrop: gmvDrop.toFixed(1), apiDrop: apiDrop.toFixed(1), storeDrop: storeDrop.toFixed(1), daysSinceLogin } }];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Score Health",
      "position": [400, 0]
    },
    {
      "parameters": {
        "conditions": { "string": [{ "value1": "={{ $json.tier }}", "operation": "notEqual", "value2": "GREEN" }] }
      },
      "type": "n8n-nodes-base.filter",
      "name": "Filter At-Risk",
      "position": [600, 0]
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "channel": "={{ $json.tier === 'RED' ? '#cs-churn-risk' : '#cs-watch-list' }}",
        "text": "={{ ($json.tier === 'RED' ? '🔴 CHURN RISK' : '🟡 WATCH') + ': ' + $json.company_name + '\nGMV drop: ' + $json.gmvDrop + '% | API drop: ' + $json.apiDrop + '% | Last login: ' + $json.daysSinceLogin + 'd ago | Stores offline: ' + $json.storeDrop + '%\nCSM: ' + $json.csm_email }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack Alert",
      "position": [800, -100]
    },
    {
      "parameters": {
        "conditions": { "string": [{ "value1": "={{ $json.tier }}", "value2": "RED" }] }
      },
      "type": "n8n-nodes-base.filter",
      "name": "RED Only",
      "position": [800, 100]
    },
    {
      "parameters": {
        "fromEmail": "success@yourplatform.com",
        "toEmail": "={{ $json.csm_email }}",
        "subject": "={{ '[CHURN RISK] ' + $json.company_name + ' — GMV down ' + $json.gmvDrop + '%' }}",
        "text": "={{ 'Please reach out today. GMV -' + $json.gmvDrop + '% WoW, API calls -' + $json.apiDrop + '%, last login ' + $json.daysSinceLogin + ' days ago.' }}"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Email CSM",
      "position": [1000, 100]
    }
  ],
  "connections": {
    "Daily 9 AM": { "main": [[{ "node": "Query Metrics", "type": "main", "index": 0 }]] },
    "Query Metrics": { "main": [[{ "node": "Score Health", "type": "main", "index": 0 }]] },
    "Score Health": { "main": [[{ "node": "Filter At-Risk", "type": "main", "index": 0 }]] },
    "Filter At-Risk": { "main": [[{ "node": "Slack Alert", "type": "main", "index": 0 }, { "node": "RED Only", "type": "main", "index": 0 }]] },
    "RED Only": { "main": [[{ "node": "Email CSM", "type": "main", "index": 0 }]] }
  }
}

5. Weekly RetailTech Platform KPI Dashboard

Problem: Your VP Sales, VP Customer Success, and CEO need Monday morning numbers: GMV processed, active stores, POS uptime, churn risk accounts, trial-to-paid conversion. Building this manually every Monday is 2 hours of copy-paste from dashboards that should talk to each other.

Why n8n: Platform KPIs aggregate revenue figures, churn rates, and customer counts — commercially sensitive data. Self-host the aggregation; send the result.

{
  "name": "RetailTech: Weekly KPI Dashboard",
  "nodes": [
    {
      "parameters": { "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1" }] } },
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Monday 8 AM",
      "position": [0, 0]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT SUM(gmv_7d) as total_gmv_7d, SUM(gmv_7d_prev) as total_gmv_7d_prev, COUNT(*) FILTER (WHERE status='active') as active_clients, COUNT(*) FILTER (WHERE status='trial') as trial_clients, COUNT(*) FILTER (WHERE status='churned' AND churned_at > NOW()-INTERVAL '7 days') as churned_7d, SUM(active_store_count) as total_stores FROM accounts a JOIN client_metrics m ON a.client_id = m.client_id"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Platform Metrics",
      "position": [200, -100]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(*) FILTER (WHERE tier='RED') as churn_risk_red, COUNT(*) FILTER (WHERE tier='AMBER') as churn_risk_amber, AVG(CASE WHEN status='active' THEN 1.0 ELSE 0 END)*100 as pos_uptime_pct FROM client_metrics m JOIN accounts a ON m.client_id=a.client_id"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Account Health",
      "position": [200, 100]
    },
    {
      "parameters": { "mode": "combine", "combinationMode": "multiplex" },
      "type": "n8n-nodes-base.merge",
      "name": "Merge",
      "position": [400, 0]
    },
    {
      "parameters": {
        "jsCode": "const prev = $getWorkflowStaticData('global');\nconst d = $json;\nconst gmvWoW = d.total_gmv_7d_prev > 0 ? (((d.total_gmv_7d - d.total_gmv_7d_prev) / d.total_gmv_7d_prev) * 100).toFixed(1) : 'N/A';\nprev.last_gmv = d.total_gmv_7d;\nprev.last_active = d.active_clients;\nconst trialConversion = d.trial_clients > 0 ? ((d.active_clients / (d.active_clients + d.trial_clients)) * 100).toFixed(1) : 'N/A';\nconst gmvColor = parseFloat(gmvWoW) >= 5 ? '#27ae60' : parseFloat(gmvWoW) >= 0 ? '#f39c12' : '#e74c3c';\nconst html = [\n  '<h2>RetailTech Weekly KPIs — ' + new Date().toISOString().slice(0,10) + '</h2>',\n  '<table border=\"1\" cellpadding=\"8\" style=\"border-collapse:collapse;font-family:Arial\">',\n  '<tr><th>Metric</th><th>Value</th><th>WoW</th></tr>',\n  '<tr><td>Total GMV (7d)</td><td>$' + Number(d.total_gmv_7d).toLocaleString() + '</td><td style=\"color:' + gmvColor + '\">' + gmvWoW + '%</td></tr>',\n  '<tr><td>Active Clients</td><td>' + d.active_clients + '</td><td>—</td></tr>',\n  '<tr><td>Total Stores Live</td><td>' + d.total_stores + '</td><td>—</td></tr>',\n  '<tr><td>Churn Risk (RED)</td><td style=\"color:#e74c3c\">' + d.churn_risk_red + '</td><td>—</td></tr>',\n  '<tr><td>Churn Risk (AMBER)</td><td style=\"color:#f39c12\">' + d.churn_risk_amber + '</td><td>—</td></tr>',\n  '<tr><td>Trial→Paid Rate</td><td>' + trialConversion + '%</td><td>—</td></tr>',\n  '<tr><td>Churned (7d)</td><td>' + d.churned_7d + '</td><td>—</td></tr>',\n  '</table>'\n].join('');\nreturn [{ json: { ...d, html, gmvWoW, trialConversion } }];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Build KPI HTML",
      "position": [600, 0]
    },
    {
      "parameters": {
        "fromEmail": "kpis@yourplatform.com",
        "toEmail": "ceo@yourplatform.com",
        "ccEmail": "vp-cs@yourplatform.com, vp-sales@yourplatform.com, coo@yourplatform.com",
        "subject": "RetailTech Weekly KPIs — {{ $json.gmvWoW }}% GMV WoW",
        "html": "={{ $json.html }}"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Email KPI Report",
      "position": [800, -100]
    },
    {
      "parameters": {
        "authentication": "oAuth2",
        "channel": "#exec-kpis",
        "text": "={{ '📊 Weekly: GMV $' + Number($json.total_gmv_7d).toLocaleString() + ' (' + $json.gmvWoW + '% WoW) | ' + $json.active_clients + ' clients | ' + $json.total_stores + ' stores | RED: ' + $json.churn_risk_red }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack One-Liner",
      "position": [800, 100]
    }
  ],
  "connections": {
    "Monday 8 AM": { "main": [[{ "node": "Platform Metrics", "type": "main", "index": 0 }, { "node": "Account Health", "type": "main", "index": 0 }]] },
    "Platform Metrics": { "main": [[{ "node": "Merge", "type": "main", "index": 0 }]] },
    "Account Health": { "main": [[{ "node": "Merge", "type": "main", "index": 1 }]] },
    "Merge": { "main": [[{ "node": "Build KPI HTML", "type": "main", "index": 0 }]] },
    "Build KPI HTML": { "main": [[{ "node": "Email KPI Report", "type": "main", "index": 0 }, { "node": "Slack One-Liner", "type": "main", "index": 0 }]] }
  }
}

Why RetailTech SaaS Vendors Choose n8n Over Zapier

Requirement	Zapier	n8n (self-hosted)
PCI-DSS CHD isolation	Multi-tenant task log = scope expansion	Air-gapped VPC — no PCI scope bleed
CCPA third-party disclosure	Zapier = "third party" in your data map	No external disclosure
GDPR Art.28 sub-processor DPA	Must include Zapier in DPA chain	Off the sub-processor list
SOC2 CC7.2 log retention	30-day task log max	Permanent audit trail in your DB
State privacy (Iowa/TX/CO/VA)	DSR request data flows through Zapier	Internal loop only
100M GMV events/mo cost	~$50,000+/mo	~$500/mo VPS
Air-gapped POS terminal	Not possible	Raspberry Pi edge node

Ready to Deploy?

All five workflows are available as import-ready JSON templates at stripeai.gumroad.com — individual templates from $12, complete bundle $97.

The n8n self-hosting docs are at docs.n8n.io. A $6/month VPS handles the full stack.

What RetailTech automation challenge are you solving? Drop it in the comments.

n8n for ManufacturingTech SaaS: 5 Automations That Scale Production Ops and Keep Manufacturing Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 16:04:26 +0000

If you build or sell manufacturing execution systems (MES), quality management SaaS (QMS), supply chain visibility platforms, or industrial IoT products, your clients have a compliance problem you can solve.

ISO 9001:2015, IATF 16949:2016, AS9100 Rev D, FDA QMSR (21 CFR Part 820), and OSHA PSM all require quality and safety records that are permanent and retrievable. Zapier logs tasks for 30 days. After that, the audit trail is gone.

That's not just a bad look. It's a documented nonconformance.

Self-hosted n8n fixes this. It runs inside your client's own network. Every execution is permanently logged. No data routes through third-party cloud servers. And at IIoT scale — millions of machine health checks per month — the cost difference is extreme.

Here are 5 automations built for ManufacturingTech SaaS vendors, with full import-ready JSON.

Why ManufacturingTech SaaS Vendors Deploy n8n On-Premise

Three compliance requirements that Zapier cannot satisfy:

ISO 9001:2015 §7.5 — Documented information must remain "available and suitable for use" for the product's lifetime plus regulatory retention periods. Zapier's 30-day task log deletes quality records automatically. That's a corrective action request waiting to happen during a CB surveillance audit.

IATF 16949:2016 §10.2.3-4 — Defect events and corrective actions must be traceable to the part level for automotive OEM supply chains. If the automation runs through Zapier, the traceability chain has a gap. Ford, GM, and Stellantis customer-specific requirements (CSRs) make this explicit.

OSHA 1910.119 (PSM) — Incident investigation records for processes with highly hazardous chemicals must be retained for 5 years (1910.119(m)). Missing this during an OSHA inspection = citation.

Self-hosted n8n on your client's own VPS or on-prem server: workflow JSON is version-controlled in git (itself an audit artifact), all executions write to an on-prem database, and no data leaves the client's network boundary.

1. New Manufacturer Client Onboarding Drip

Tier your onboarding sequence from day one. A 15-person job shop needs different Day-0 messaging than a 600-seat global OEM with 4 plants and an active AS9100 audit.

{
  "name": "ManufacturingTech — New Manufacturer Client Onboarding Drip",
  "nodes": [
    {
      "id": "n1",
      "name": "Google Sheets Trigger",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "parameters": {
        "sheetId": "YOUR_CLIENT_SHEET_ID",
        "event": "rowAdded"
      },
      "position": [
        240,
        300
      ]
    },
    {
      "id": "n2",
      "name": "Classify Tier",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const r=$json;\nconst seats=parseInt(r.seats||0);\nconst tier=seats>=500?'TIER_1_GLOBAL_OEM':seats>=100?'TIER_2_MID_MANUFACTURER':seats>=20?'TIER_3_JOB_SHOP':'TIER_4_STARTUP_MAKER';\nreturn [{json:{...r,tier,standard:r.standard||'ISO_9001',onboardTs:new Date().toISOString()}}];"
      },
      "position": [
        440,
        300
      ]
    },
    {
      "id": "n3",
      "name": "Route by Tier",
      "type": "n8n-nodes-base.switch",
      "parameters": {
        "dataPropertyName": "tier",
        "rules": [
          {
            "value": "TIER_1_GLOBAL_OEM",
            "output": 0
          },
          {
            "value": "TIER_2_MID_MANUFACTURER",
            "output": 1
          },
          {
            "value": "TIER_3_JOB_SHOP",
            "output": 2
          },
          {
            "value": "TIER_4_STARTUP_MAKER",
            "output": 3
          }
        ]
      },
      "position": [
        640,
        300
      ]
    },
    {
      "id": "n4",
      "name": "Day 0 Welcome Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{$json.primary_contact_email}}",
        "subject": "Welcome to [Your Platform] — {{$json.company_name}} onboarding starts today",
        "message": "Hi {{$json.primary_contact_name}},\n\nWelcome aboard. Your {{$json.tier}} onboarding plan is active.\n\nNext: your dedicated CSM will reach out within 2 hours.\n\nISO {{$json.standard}} audit log — every action is permanently recorded on your infrastructure.\n\n[Your team]"
      },
      "position": [
        840,
        180
      ]
    },
    {
      "id": "n5",
      "name": "Notify CSM in Slack",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#customer-success",
        "text": ":factory: New {{$json.tier}} client: *{{$json.company_name}}* ({{$json.seats}} seats, {{$json.standard}}). Contact: {{$json.primary_contact_email}}. Assign CSM + schedule kickoff within 2h."
      },
      "position": [
        840,
        300
      ]
    },
    {
      "id": "n6",
      "name": "Log to ISO 9001 Audit Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "append",
        "sheetId": "YOUR_AUDIT_SHEET_ID",
        "columns": {
          "mappingMode": "autoMapInputData"
        }
      },
      "position": [
        840,
        420
      ]
    },
    {
      "id": "n7",
      "name": "Wait 3 Days",
      "type": "n8n-nodes-base.wait",
      "parameters": {
        "amount": 3,
        "unit": "days"
      },
      "position": [
        1040,
        300
      ]
    },
    {
      "id": "n8",
      "name": "Day 3 Check-In Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{$json.primary_contact_email}}",
        "subject": "Day 3 Check-In — {{$json.company_name}}",
        "message": "Hi {{$json.primary_contact_name}},\n\nThree days in. Your first automated workflow should be running by now.\n\nNeed help? Reply here — your CSM responds within 4 hours.\n\n[Your team]"
      },
      "position": [
        1240,
        300
      ]
    },
    {
      "id": "n9",
      "name": "Wait 4 More Days",
      "type": "n8n-nodes-base.wait",
      "parameters": {
        "amount": 4,
        "unit": "days"
      },
      "position": [
        1440,
        300
      ]
    },
    {
      "id": "n10",
      "name": "Day 7 Value Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{$json.primary_contact_email}}",
        "subject": "Week 1 Complete — What's Working at {{$json.company_name}}?",
        "message": "Hi {{$json.primary_contact_name}},\n\nOne week in. ISO {{$json.standard}} records generated this week are permanently stored on your infrastructure — no 30-day log cliff.\n\nWhat's working? What isn't? Reply and tell us.\n\n[Your team]"
      },
      "position": [
        1640,
        300
      ]
    }
  ],
  "connections": {
    "Google Sheets Trigger": {
      "main": [
        [
          {
            "node": "Classify Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Tier": {
      "main": [
        [
          {
            "node": "Route by Tier",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Tier": {
      "main": [
        [
          {
            "node": "Day 0 Welcome Email",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Day 0 Welcome Email",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Day 0 Welcome Email",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Day 0 Welcome Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Day 0 Welcome Email": {
      "main": [
        [
          {
            "node": "Notify CSM in Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Notify CSM in Slack": {
      "main": [
        [
          {
            "node": "Log to ISO 9001 Audit Sheet",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Log to ISO 9001 Audit Sheet": {
      "main": [
        [
          {
            "node": "Wait 3 Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 3 Days": {
      "main": [
        [
          {
            "node": "Day 3 Check-In Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Day 3 Check-In Email": {
      "main": [
        [
          {
            "node": "Wait 4 More Days",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Wait 4 More Days": {
      "main": [
        [
          {
            "node": "Day 7 Value Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Replace: YOUR_CLIENT_SHEET_ID (sheet with new client rows), YOUR_AUDIT_SHEET_ID (permanent onboarding log), Gmail From address, Slack channel name.

Why it matters for ISO/IATF compliance: Every onboarding event writes to a permanent Google Sheet with timestamp. Your platform becomes part of the §7.5 documented information trail from the first contact. If a CB auditor asks for evidence of customer communication controls, this sheet is the answer.

2. Production Line & Machine Health Monitor

IIoT platforms polling Zapier: each health check = one task. At 3-minute intervals across 50 production lines, that's 720,000 tasks per month. Zapier Business ($799/mo) caps at 750K. n8n on a $30 VPS: zero marginal cost per check.

{
  "name": "ManufacturingTech — Production Line & Machine Health Monitor",
  "nodes": [
    {
      "id": "n1",
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "minutes",
              "minutesInterval": 3
            }
          ]
        }
      },
      "position": [
        240,
        300
      ]
    },
    {
      "id": "n2",
      "name": "Get Machine Endpoints",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT id, machine_id, endpoint_url, machine_type, plant_id, last_ok_ts FROM machine_endpoints WHERE active = true ORDER BY plant_id, machine_id"
      },
      "position": [
        440,
        300
      ]
    },
    {
      "id": "n3",
      "name": "HTTP Health Check",
      "type": "n8n-nodes-base.httpRequest",
      "parameters": {
        "url": "={{$json.endpoint_url}}/health",
        "method": "GET",
        "timeout": 5000,
        "continueOnFail": true
      },
      "position": [
        640,
        300
      ]
    },
    {
      "id": "n4",
      "name": "Classify Status",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const item=$json;\nconst status=item.$response?.status;\nconst lastOk=new Date(item.last_ok_ts||0);\nconst staleMins=Math.round((Date.now()-lastOk)/60000);\nlet health='OK';\nif(!status||status>=500) health='DOWN';\nelse if(staleMins>=15) health='STALE_DATA';\nelse if(status>=400) health='DEGRADED';\nreturn [{json:{...item,health,staleMins,checkedAt:new Date().toISOString()}}];"
      },
      "position": [
        840,
        300
      ]
    },
    {
      "id": "n5",
      "name": "Skip if OK",
      "type": "n8n-nodes-base.if",
      "parameters": {
        "conditions": {
          "string": [
            {
              "value1": "={{$json.health}}",
              "operation": "notEqual",
              "value2": "OK"
            }
          ]
        }
      },
      "position": [
        1040,
        300
      ]
    },
    {
      "id": "n6",
      "name": "Dedup 30min",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const item=$json;\nconst state=$getWorkflowStaticData('global');\nconst key=`${item.machine_id}_${item.health}`;\nconst lastAlerted=state[key]||0;\nconst suppressed=(Date.now()-lastAlerted)<30*60*1000;\nif(!suppressed) state[key]=Date.now();\nreturn [{json:{...item,suppressed}}];"
      },
      "position": [
        1240,
        300
      ]
    },
    {
      "id": "n7",
      "name": "Alert if New",
      "type": "n8n-nodes-base.if",
      "parameters": {
        "conditions": {
          "boolean": [
            {
              "value1": "={{$json.suppressed}}",
              "operation": "equal",
              "value2": false
            }
          ]
        }
      },
      "position": [
        1440,
        300
      ]
    },
    {
      "id": "n8",
      "name": "Slack Production Ops",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#production-ops",
        "text": ":rotating_light: *{{$json.health}}* | Machine: {{$json.machine_id}} ({{$json.machine_type}}) | Plant: {{$json.plant_id}} | Stale: {{$json.staleMins}}min | {{$json.checkedAt}}"
      },
      "position": [
        1640,
        180
      ]
    },
    {
      "id": "n9",
      "name": "Log Incident to Postgres",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO machine_incidents (machine_id, plant_id, health_status, stale_mins, detected_at) VALUES ('{{$json.machine_id}}','{{$json.plant_id}}','{{$json.health}}',{{$json.staleMins}},NOW()) ON CONFLICT DO NOTHING"
      },
      "position": [
        1640,
        420
      ]
    }
  ],
  "connections": {
    "Every 3 Minutes": {
      "main": [
        [
          {
            "node": "Get Machine Endpoints",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Machine Endpoints": {
      "main": [
        [
          {
            "node": "HTTP Health Check",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "HTTP Health Check": {
      "main": [
        [
          {
            "node": "Classify Status",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Status": {
      "main": [
        [
          {
            "node": "Skip if OK",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Skip if OK": {
      "main": [
        [
          {
            "node": "Dedup 30min",
            "type": "main",
            "index": 0
          }
        ],
        []
      ]
    },
    "Dedup 30min": {
      "main": [
        [
          {
            "node": "Alert if New",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Alert if New": {
      "main": [
        [
          {
            "node": "Slack Production Ops",
            "type": "main",
            "index": 0
          }
        ],
        []
      ]
    },
    "Slack Production Ops": {
      "main": [
        [
          {
            "node": "Log Incident to Postgres",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Replace: Machine endpoints Postgres table, Slack channel, plant/machine field names to match your schema.

The $getWorkflowStaticData pattern: The dedup node stores the last alert timestamp per machine in workflow static data. Same machine, same status — no repeat alert for 30 minutes. Prevents Slack flooding during extended downtime events.

The compliance math: ISO 13485 §6.4 (for medical device manufacturers) and IATF 16949 §7.1.3 require equipment monitoring records. The Postgres insert on every incident creates a permanent equipment health log — not a 30-day task log.

3. ISO/IATF/AS9100 Compliance Deadline Tracker

Missing an ISO 9001 surveillance audit by a day can suspend your client's certificate. Missing an IATF 16949 CSR update can trigger a customer-directed audit. Build a hard-deadline tracker that escalates well before the cliff.

{
  "name": "ManufacturingTech — ISO/IATF/AS9100 Compliance Deadline Tracker",
  "nodes": [
    {
      "id": "n1",
      "name": "Weekdays at 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1-5"
            }
          ]
        }
      },
      "position": [
        240,
        300
      ]
    },
    {
      "id": "n2",
      "name": "Get Compliance Items",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_COMPLIANCE_TRACKER_SHEET_ID",
        "options": {
          "returnAllMatches": true
        }
      },
      "position": [
        440,
        300
      ]
    },
    {
      "id": "n3",
      "name": "Classify Urgency",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const actionMap={\n  ISO_9001_SURVEILLANCE:'Schedule internal audit + corrective action plan',\n  ISO_9001_RECERT:'Initiate recertification with CB — 90-day lead time required',\n  IATF_16949_SURV:'Prepare IATF customer-specific requirements (CSR) review',\n  IATF_16949_RECERT:'Engage IATF CB + customer notification per §7.4',\n  AS9100D_CERT:'Confirm AS9100 Rev D scope + first-article inspection records',\n  FDA_QMSR_820:'Prepare Design History File + Device History Record review',\n  OSHA_PSM_PHA:'Process Hazard Analysis revalidation — 5-year cycle (1910.119(e)(6))',\n  REACH_SVHC:'Update SVHC declaration to current ECHA candidate list',\n  ROHS_ANNUAL:'Refresh RoHS DoC + test reports for all product lines',\n  SOC2_TYPE2:'Coordinate auditor review window + evidence collection package'\n};\nreturn $input.all().map(item=>{\n  const d=item.json;\n  const daysLeft=Math.round((new Date(d.deadline_date)-Date.now())/86400000);\n  let urgency=daysLeft<0?'OVERDUE':daysLeft<=7?'CRITICAL':daysLeft<=21?'URGENT':daysLeft<=45?'WARNING':'NOTICE';\n  return {json:{...d,daysLeft,urgency,action:actionMap[d.standard_code]||'Review and assign compliance owner'}};\n}).filter(i=>i.json.urgency!=='NOTICE');"
      },
      "position": [
        640,
        300
      ]
    },
    {
      "id": "n4",
      "name": "Route by Urgency",
      "type": "n8n-nodes-base.switch",
      "parameters": {
        "dataPropertyName": "urgency",
        "rules": [
          {
            "value": "OVERDUE",
            "output": 0
          },
          {
            "value": "CRITICAL",
            "output": 1
          },
          {
            "value": "URGENT",
            "output": 2
          },
          {
            "value": "WARNING",
            "output": 3
          }
        ]
      },
      "position": [
        840,
        300
      ]
    },
    {
      "id": "n5",
      "name": "Slack Compliance Ops",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#compliance-ops",
        "text": ":red_circle: *{{$json.urgency}}* | {{$json.standard_code}} | Client: {{$json.client_name}} | Due: {{$json.deadline_date}} ({{$json.daysLeft}}d) | Action: {{$json.action}}"
      },
      "position": [
        1040,
        180
      ]
    },
    {
      "id": "n6",
      "name": "Email Compliance Owner",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{$json.owner_email}}",
        "subject": "[{{$json.urgency}}] {{$json.standard_code}} — {{$json.client_name}} due {{$json.deadline_date}}",
        "message": "{{$json.urgency}} compliance item requires immediate attention.\n\nClient: {{$json.client_name}}\nStandard: {{$json.standard_code}}\nDeadline: {{$json.deadline_date}} ({{$json.daysLeft}} days)\n\nRequired action: {{$json.action}}\n\nThis is an automated alert from [Your Platform]."
      },
      "position": [
        1040,
        420
      ]
    }
  ],
  "connections": {
    "Weekdays at 8AM": {
      "main": [
        [
          {
            "node": "Get Compliance Items",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Compliance Items": {
      "main": [
        [
          {
            "node": "Classify Urgency",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Urgency": {
      "main": [
        [
          {
            "node": "Route by Urgency",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route by Urgency": {
      "main": [
        [
          {
            "node": "Slack Compliance Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Compliance Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Compliance Owner",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Email Compliance Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Compliance Ops": {
      "main": [
        [
          {
            "node": "Email Compliance Owner",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Replace: YOUR_COMPLIANCE_TRACKER_SHEET_ID (columns: client_name, standard_code, deadline_date, owner_email), add/remove rows from actionMap to match your standard coverage.

The standard codes this covers: ISO_9001_SURVEILLANCE, ISO_9001_RECERT, IATF_16949_SURV, IATF_16949_RECERT, AS9100D_CERT, FDA_QMSR_820, OSHA_PSM_PHA, REACH_SVHC, ROHS_ANNUAL, SOC2_TYPE2.

The OSHA PSM angle: Process Hazard Analyses (PHA) must be revalidated every 5 years under 1910.119(e)(6). Missing the window = citation. This tracker keeps your clients' PHAs on schedule without anyone remembering to look at a spreadsheet.

4. Production Defect & Quality Alert Pipeline

ISO 9001:2015 §8.7 requires documented control of nonconforming outputs. AS9100D §8.7 adds customer notification requirements for escape defects. Build a webhook pipeline that classifies, routes, and logs every defect event the moment it's detected.

{
  "name": "ManufacturingTech — Production Defect & Quality Alert Pipeline",
  "nodes": [
    {
      "id": "n1",
      "name": "Webhook: Defect Event",
      "type": "n8n-nodes-base.webhook",
      "parameters": {
        "path": "defect-event",
        "method": "POST",
        "responseMode": "responseNode"
      },
      "position": [
        240,
        300
      ]
    },
    {
      "id": "n2",
      "name": "Classify Defect Severity",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const e=$json.body||$json;\nconst count=e.defect_count||1;\nconst window=e.window_minutes||60;\nlet severity='INFO';\nif(count>=5&&window<=30) severity='CRITICAL_CONTAINMENT';\nelse if(count>=3) severity='QUALITY_HOLD';\nelse if(count>=2) severity='TREND_WARNING';\nconst corrDeadline=severity==='CRITICAL_CONTAINMENT'?'4 hours':severity==='QUALITY_HOLD'?'8 hours':severity==='TREND_WARNING'?'24 hours':'72 hours';\nreturn [{json:{...e,severity,corrective_action_deadline:corrDeadline,detectedAt:new Date().toISOString()}}];"
      },
      "position": [
        440,
        300
      ]
    },
    {
      "id": "n3",
      "name": "Route Severity",
      "type": "n8n-nodes-base.switch",
      "parameters": {
        "dataPropertyName": "severity",
        "rules": [
          {
            "value": "CRITICAL_CONTAINMENT",
            "output": 0
          },
          {
            "value": "QUALITY_HOLD",
            "output": 1
          },
          {
            "value": "TREND_WARNING",
            "output": 2
          },
          {
            "value": "INFO",
            "output": 3
          }
        ]
      },
      "position": [
        640,
        300
      ]
    },
    {
      "id": "n4",
      "name": "Slack Quality Emergency",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#quality-emergency",
        "text": ":warning: *{{$json.severity}}* | Part: {{$json.part_number}} | Line: {{$json.production_line}} | Defects: {{$json.defect_count}} | CA deadline: {{$json.corrective_action_deadline}} | @here — CAPA required"
      },
      "position": [
        840,
        180
      ]
    },
    {
      "id": "n5",
      "name": "Slack Quality Ops",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#quality-ops",
        "text": ":yellow_circle: *{{$json.severity}}* | Part: {{$json.part_number}} | Line: {{$json.production_line}} | Defects: {{$json.defect_count}} | CA deadline: {{$json.corrective_action_deadline}}"
      },
      "position": [
        840,
        300
      ]
    },
    {
      "id": "n6",
      "name": "Log ISO 9001 §8.7 Record",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO quality_defect_log (part_number, production_line, defect_type, defect_count, severity, corrective_action_deadline, detected_at, operator_id) VALUES ('{{$json.part_number}}','{{$json.production_line}}','{{$json.defect_type}}',{{$json.defect_count}},'{{$json.severity}}','{{$json.corrective_action_deadline}}',NOW(),'{{$json.operator_id}}') ON CONFLICT DO NOTHING"
      },
      "position": [
        1040,
        300
      ]
    },
    {
      "id": "n7",
      "name": "Respond 200 with Deadline",
      "type": "n8n-nodes-base.respondToWebhook",
      "parameters": {
        "responseCode": 200,
        "responseBody": "{\"received\":true,\"severity\":\"{{$json.severity}}\",\"corrective_action_deadline\":\"{{$json.corrective_action_deadline}}\"}"
      },
      "position": [
        1240,
        300
      ]
    }
  ],
  "connections": {
    "Webhook: Defect Event": {
      "main": [
        [
          {
            "node": "Classify Defect Severity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Classify Defect Severity": {
      "main": [
        [
          {
            "node": "Route Severity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Route Severity": {
      "main": [
        [
          {
            "node": "Slack Quality Emergency",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Quality Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Slack Quality Ops",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Log ISO 9001 §8.7 Record",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Quality Emergency": {
      "main": [
        [
          {
            "node": "Log ISO 9001 §8.7 Record",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Slack Quality Ops": {
      "main": [
        [
          {
            "node": "Log ISO 9001 §8.7 Record",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Log ISO 9001 §8.7 Record": {
      "main": [
        [
          {
            "node": "Respond 200 with Deadline",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Replace: Slack channel names (#quality-emergency, #quality-ops), Postgres table name (quality_defect_log), defect classification thresholds to match your clients' control plan requirements.

Why the Postgres log matters: IATF 16949:2016 §10.2.3 requires documented information to support customer 8D investigations. Your quality_defect_log table becomes the evidence base for CAPA reports. Zapier's task log is not a quality record — this Postgres table is.

The REACH/RoHS angle: If defect events include material composition data (restricted substances, SVHC flags), routing through Zapier's cloud servers may create an uncontrolled sub-processor under EU REACH §33. Self-hosted n8n keeps substance data inside the manufacturing network.

5. Weekly ManufacturingTech Platform KPI Dashboard

Monday 8AM before the ops review: total clients by tier, machine uptime across the fleet, MRR, at-risk accounts. All delivered as an HTML email to executives with a Slack one-liner.

{
  "name": "ManufacturingTech — Weekly Platform KPI Dashboard",
  "nodes": [
    {
      "id": "n1",
      "name": "Monday at 8AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": {
        "rule": {
          "interval": [
            {
              "field": "cronExpression",
              "expression": "0 8 * * 1"
            }
          ]
        }
      },
      "position": [
        240,
        300
      ]
    },
    {
      "id": "n2",
      "name": "Get Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(DISTINCT client_id) AS total_clients, COUNT(DISTINCT CASE WHEN tier='TIER_1_GLOBAL_OEM' THEN client_id END) AS t1_oem_count, COUNT(DISTINCT CASE WHEN last_login_ts>=NOW()-INTERVAL '7d' THEN client_id END) AS active_7d, ROUND(AVG(machine_uptime_pct),1) AS avg_machine_uptime, SUM(mrr_usd) AS total_mrr FROM platform_metrics WHERE week_start=date_trunc('week',NOW()-INTERVAL '7d')"
      },
      "position": [
        440,
        240
      ]
    },
    {
      "id": "n3",
      "name": "Get At-Risk Accounts",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT client_id, client_name, tier, health_score, last_login_ts, open_support_tickets, compliance_gaps FROM account_health WHERE health_score < 70 ORDER BY health_score ASC LIMIT 10"
      },
      "position": [
        440,
        420
      ]
    },
    {
      "id": "n4",
      "name": "Merge",
      "type": "n8n-nodes-base.merge",
      "parameters": {
        "mode": "combine",
        "combinationMode": "multiplex"
      },
      "position": [
        640,
        300
      ]
    },
    {
      "id": "n5",
      "name": "Build KPI HTML",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const state=$getWorkflowStaticData('global');\nconst m=$input.first().json;\nconst prev=state.lastWeek||{};\nconst wow=(c,p)=>p&&p>0?` (${c>p?'+':''}${Math.round((c-p)/p*100)}% WoW)`:''\nconst uptime=parseFloat(m.avg_machine_uptime)||0;\nconst uptimeColor=uptime>=99?'#27ae60':uptime>=95?'#f39c12':'#e74c3c';\nstate.lastWeek=m;\nconst html=[\n  '<h2>ManufacturingTech Weekly KPI &mdash; '+new Date().toISOString().slice(0,10)+'</h2>',\n  '<table border=\"1\" cellpadding=\"8\" cellspacing=\"0\" style=\"border-collapse:collapse;font-family:sans-serif\">',\n  '<tr style=\"background:#2c3e50;color:white\"><th>Metric</th><th>This Week</th><th>Trend</th></tr>',\n  '<tr><td>Total Clients</td><td>'+m.total_clients+'</td><td>'+wow(m.total_clients,prev.total_clients)+'</td></tr>',\n  '<tr><td>Tier 1 Global OEM</td><td>'+m.t1_oem_count+'</td><td>'+wow(m.t1_oem_count,prev.t1_oem_count)+'</td></tr>',\n  '<tr><td>Active Last 7d</td><td>'+m.active_7d+'</td><td>'+wow(m.active_7d,prev.active_7d)+'</td></tr>',\n  '<tr><td>Avg Machine Uptime</td><td style=\"color:'+uptimeColor+'\">'+uptime+'%</td><td>'+wow(uptime,prev.avg_machine_uptime)+'</td></tr>',\n  '<tr><td>Total MRR</td><td>$'+Math.round(m.total_mrr||0).toLocaleString()+'</td><td>'+wow(m.total_mrr,prev.total_mrr)+'</td></tr>',\n  '</table>'\n].join('');\nreturn [{json:{kpiHtml:html,metrics:m}}];"
      },
      "position": [
        840,
        300
      ]
    },
    {
      "id": "n6",
      "name": "Email Executives",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "ceo@yourcompany.com",
        "bccEmail": "cto@yourcompany.com,vp-cs@yourcompany.com,vp-sales@yourcompany.com,coo@yourcompany.com",
        "subject": "ManufacturingTech Weekly KPI — {{$now.format('YYYY-MM-DD')}}",
        "message": "={{$json.kpiHtml}}",
        "additionalFields": {
          "emailType": "html"
        }
      },
      "position": [
        1040,
        240
      ]
    },
    {
      "id": "n7",
      "name": "Slack Exec Summary",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#exec-kpis",
        "text": ":bar_chart: *ManufacturingTech Weekly KPI* | Clients: {{$json.metrics.total_clients}} | Uptime: {{$json.metrics.avg_machine_uptime}}% | MRR: ${{$json.metrics.total_mrr}} | At-risk: see email"
      },
      "position": [
        1040,
        420
      ]
    }
  ],
  "connections": {
    "Monday at 8AM": {
      "main": [
        [
          {
            "node": "Get Platform Metrics",
            "type": "main",
            "index": 0
          },
          {
            "node": "Get At-Risk Accounts",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Platform Metrics": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get At-Risk Accounts": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Merge": {
      "main": [
        [
          {
            "node": "Build KPI HTML",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build KPI HTML": {
      "main": [
        [
          {
            "node": "Email Executives",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Email Executives": {
      "main": [
        [
          {
            "node": "Slack Exec Summary",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

Replace: Postgres table names (platform_metrics, account_health), executive email addresses, Slack channel.

$getWorkflowStaticData for WoW% trends: The Build KPI HTML node reads last week's metrics from static data, computes week-over-week percent changes inline, then overwrites with this week's data. No extra database table needed — the workflow remembers its own history.

Why ManufacturingTech SaaS Teams Self-Host n8n

Requirement	Zapier / Make.com	n8n Self-Hosted
ISO 9001 §7.5 quality record retention	30-day task log — NCR evidence	Permanent on-prem Postgres
IATF 16949 defect traceability	Task log not a quality record	Postgres CAPA evidence base
AS9100D §8.4 external provider control	Uncontrolled third-party processor	Internal VPC boundary
OSHA PSM 5-year incident records	Cannot guarantee retention	Self-hosted = permanent
FDA QMSR device history records	30-day cliff	Device lifetime + 2yr on-prem
REACH/RoHS substance data routing	Routes through third-party cloud	Manufacturing VPC maintained
Cost at 10M machine events/month	$10,000+/mo (Zapier Business)	~$100/mo VPS
Air-gapped plant deployment	Not possible	Yes — n8n runs fully offline

The Workflow Files

All 5 workflows are available as import-ready JSON at stripeai.gumroad.com. The Webhook to Database workflow ($12) is the foundation for the defect pipeline. The Customer Feedback Analyzer ($29) covers quality alert triage for customer-facing defect reports. The Daily Report Generator ($19) pre-wires the KPI dashboard pattern.

Or grab the full bundle of 15 workflows at $97 — one JSON import per workflow, ready to deploy on your clients' infrastructure.

If your ManufacturingTech clients are asking about on-premise automation or ISO/IATF compliance traceability, the self-hosted n8n pitch writes itself. These 5 workflows are the starting point.

Have a ManufacturingTech use case I missed? Drop it in the comments.

n8n for ConstructionTech SaaS: 5 Automations That Scale Project Ops and Keep Construction Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 15:43:04 +0000

If you sell construction project management SaaS, BIM software, field operations tools, or subcontractor management platforms, you already know the problem: your clients run massive projects with thousands of events — RFIs, punch lists, equipment pings, safety reports, lien notices — and the moment you wire any of that through a commercial iPaaS like Zapier, you inherit a compliance exposure that your clients' legal teams will flag in the next audit.

This article covers 5 production-ready n8n workflows built specifically for ConstructionTech SaaS vendors — not general contractors, but the software companies selling to them. Each workflow includes full import-ready JSON.

All workflows self-host inside your client's VPC. No OSHA worker health data routes through commercial servers. No Davis-Bacon payroll data leaves the perimeter. No BIM model IP touches a third-party log.

1. New GC / Owner Client Onboarding Drip

Trigger: a new row lands in your CRM Google Sheet (or replace with a Postgres webhook). The workflow classifies the account tier and fires a calibrated Day 0 / Day 3 / Day 7 email sequence.

{
  "name": "ConstructionTech Client Onboarding Drip",
  "nodes": [
    {
      "name": "Watch New Accounts",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "parameters": {
        "documentId": "{{ $env.GC_ACCOUNTS_SHEET_ID }}",
        "sheetName": "Accounts",
        "event": "rowAdded"
      }
    },
    {
      "name": "Classify Tier",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const row = $input.first().json;\nconst seats = parseInt(row.seats) || 0;\nconst projects = parseInt(row.active_projects) || 0;\nlet tier, day0Subject, day0Body, csmChannel;\nif (seats >= 200 || projects >= 50) {\n  tier = 'ENTERPRISE_GC';\n  day0Subject = 'Your dedicated ConstructionOS onboarding team is ready';\n  day0Body = 'Hi ' + row.first_name + ',\\n\\nYour enterprise workspace is live. Your dedicated CSM '+ row.csm_name +' will reach out within 1 business hour.\\n\\nDay 1 checklist: https://docs.yourplatform.com/enterprise-start';\n  csmChannel = '#cs-enterprise';\n} else if (seats >= 20 || projects >= 10) {\n  tier = 'MID_SIZE_CONTRACTOR';\n  day0Subject = 'Get your first project live in 30 minutes';\n  day0Body = 'Hi ' + row.first_name + ',\\n\\nWelcome to ConstructionOS. Here\'s your quick-start guide: https://docs.yourplatform.com/mid-start';\n  csmChannel = '#cs-growth';\n} else if (row.account_type === 'SPECIALTY_SUB') {\n  tier = 'SPECIALTY_SUB';\n  day0Subject = 'Your subcontractor workspace is ready';\n  day0Body = 'Hi ' + row.first_name + ', start with punch lists: https://docs.yourplatform.com/sub-start';\n  csmChannel = '#cs-smb';\n} else {\n  tier = 'OWNER_REP';\n  day0Subject = 'Owner dashboard ready — track every project in one view';\n  day0Body = 'Hi ' + row.first_name + ', your owner portal is live: https://docs.yourplatform.com/owner-start';\n  csmChannel = '#cs-smb';\n}\nreturn [{ json: { ...row, tier, day0Subject, day0Body, csmChannel } }];"
      }
    },
    {
      "name": "Send Day 0 Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{ $json.email }}",
        "subject": "={{ $json.day0Subject }}",
        "message": "={{ $json.day0Body }}"
      }
    },
    {
      "name": "Notify CSM",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "={{ $json.csmChannel }}",
        "text": "New {{ $json.tier }} account: {{ $json.company_name }} ({{ $json.seats }} seats, {{ $json.active_projects }} active projects). Owner: {{ $json.first_name }} {{ $json.last_name }}"
      }
    },
    {
      "name": "Log to Audit Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "append",
        "documentId": "{{ $env.ONBOARDING_AUDIT_SHEET_ID }}",
        "sheetName": "SOC2_AuditLog",
        "columns": { "mappingMode": "autoMapInputData" }
      }
    },
    {
      "name": "Wait 3 Days",
      "type": "n8n-nodes-base.wait",
      "parameters": { "unit": "days", "amount": 3 }
    },
    {
      "name": "Send Day 3 Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{ $json.email }}",
        "subject": "Quick check-in — how is your first project going?",
        "message": "Hi {{ $json.first_name }},\n\nDay 3 tip: connect your Procore/Autodesk integration to sync RFIs automatically.\n\nNeed help? Book a 15-min call: https://cal.yourplatform.com/onboarding"
      }
    }
  ]
}

Day 0 fires immediately with tier-specific messaging. Day 3 checks in with the top integration tip for that tier. Day 7 (not shown) delivers a case study matching their vertical (commercial GC, residential, heavy civil, specialty sub).

The Google Sheets audit log satisfies SOC 2 CC6.1 (access provisioning evidence) and GDPR Art. 30 (records of processing). Zapier's 30-day log retention fails both.

2. Construction Site & Equipment Telematics Health Monitor

Construction equipment generates continuous telematics: GPS position, engine hours, fuel, idle time. If your platform's telematics API goes silent, site managers lose visibility — and your SLA clock starts running.

{
  "name": "Equipment Telematics Health Monitor",
  "nodes": [
    {
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": { "rule": { "interval": [{ "field": "minutes", "minutesInterval": 3 }] } }
    },
    {
      "name": "Load Endpoints",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT endpoint_id, url, site_name, equipment_type, sla_minutes FROM telematics_endpoints WHERE active = true ORDER BY endpoint_id"
      }
    },
    {
      "name": "Ping Each Endpoint",
      "type": "n8n-nodes-base.httpRequest",
      "parameters": {
        "url": "={{ $json.url }}",
        "timeout": 8000
      }
    },
    {
      "name": "Classify Status",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const SUPPRESS_MINUTES = 30;\nconst state = $getWorkflowStaticData('global');\nconst results = [];\nfor (const item of $input.all()) {\n  const ep = item.json;\n  const now = Date.now();\n  const lastTs = ep.last_data_ts ? new Date(ep.last_data_ts).getTime() : 0;\n  const staleMs = now - lastTs;\n  let status = 'OK';\n  if (ep.error || ep.httpCode >= 500) status = 'DOWN';\n  else if (staleMs > ep.sla_minutes * 60000) status = 'STALE_DATA';\n  else if (ep.httpCode >= 400) status = 'DEGRADED';\n  if (status !== 'OK') {\n    const key = 'suppress_' + ep.endpoint_id;\n    const lastAlert = state[key] || 0;\n    if (now - lastAlert < SUPPRESS_MINUTES * 60000) continue;\n    state[key] = now;\n    results.push({ json: { ...ep, status } });\n  }\n}\n$setWorkflowStaticData('global', state);\nreturn results;"
      }
    },
    {
      "name": "Alert Site Ops",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#site-ops",
        "text": ":rotating_light: {{ $json.status }}: {{ $json.equipment_type }} at {{ $json.site_name }}\nEndpoint: {{ $json.url }}\nSLA: {{ $json.sla_minutes }}min"
      }
    },
    {
      "name": "Log Incident",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO telematics_incidents (endpoint_id, status, detected_at) VALUES ('{{ $json.endpoint_id }}', '{{ $json.status }}', NOW()) ON CONFLICT DO NOTHING"
      }
    }
  ]
}

$getWorkflowStaticData suppresses repeat alerts for 30 minutes per endpoint. The Postgres incident log is SOC 2 evidence (availability monitoring). Equipment health data, GPS coordinates, and job-site sensor readings are commercially sensitive — they reveal your client's project velocity, equipment utilisation, and cost structure. None of it should route through Zapier's shared infrastructure.

3. OSHA & Lien Law Compliance Deadline Tracker

ConstructionTech SaaS vendors whose platforms manage safety or payment workflows carry their clients' hardest-deadline obligations: OSHA 300 Log postings, mechanic's lien preliminary notice windows, Davis-Bacon certified payroll submissions.

These are jurisdictional hard deadlines — a missed preliminary lien notice in California (20-day window) or Texas (served before first furnishing for some tiers) kills a subcontractor's entire lien rights. No grace period. No cure.

{
  "name": "OSHA & Lien Law Compliance Tracker",
  "nodes": [
    {
      "name": "Weekdays 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": { "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1-5" }] } }
    },
    {
      "name": "Load Compliance Calendar",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "readRows",
        "documentId": "{{ $env.COMPLIANCE_SHEET_ID }}",
        "sheetName": "DeadlineTracker"
      }
    },
    {
      "name": "Classify Urgency",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const today = new Date(); const results = [];\nconst actionMap = {\n  OSHA_300_LOG_ANNUAL: 'Post OSHA 300A Summary by Feb 1 — 29 CFR 1904.32',\n  OSHA_300_RECORDKEEPING: 'Update OSHA 300 Log within 7 days of recordable incident — 29 CFR 1904.29',\n  MECHANIC_LIEN_PRELIMINARY: 'Serve Preliminary Lien Notice — deadline is jurisdictional (CA:20d, TX:first furnishing, FL:45d)',\n  MECHANIC_LIEN_CLAIM: 'File Mechanic\'s Lien Claim — state-specific deadline from last furnishing',\n  BOND_CLAIM_NOTICE: 'Serve Bond Claim Notice on public project — state Miller Act equivalent',\n  RETENTION_RELEASE: 'Process retention holdback release — check contract and state statute',\n  DAVIS_BACON_CERTIFIED_PAYROLL: 'Submit Davis-Bacon Certified Payroll (WH-347) to contracting agency — weekly',\n  AIA_G704_SUBSTANTIAL: 'Issue AIA G704 Certificate of Substantial Completion',\n  SOC2_EVIDENCE: 'Collect SOC 2 Type II control evidence for period end',\n  GDPR_ART_30: 'Update GDPR Art. 30 Records of Processing Activities'\n};\nfor (const row of $input.all()) {\n  const d = row.json; const due = new Date(d.due_date);\n  const daysLeft = Math.ceil((due - today) / 86400000);\n  let tier;\n  if (daysLeft < 0) tier = 'OVERDUE';\n  else if (daysLeft <= 1) tier = 'CRITICAL';\n  else if (daysLeft <= 3) tier = 'URGENT';\n  else if (daysLeft <= 7) tier = 'WARNING';\n  else if (daysLeft <= 14) tier = 'NOTICE';\n  else continue;\n  results.push({ json: { ...d, tier, daysLeft, action: actionMap[d.obligation_type] || d.obligation_type } });\n}\nreturn results;"
      }
    },
    {
      "name": "Route by Tier",
      "type": "n8n-nodes-base.switch",
      "parameters": {
        "rules": {
          "values": [
            { "conditions": { "options": { "leftValue": "={{ $json.tier }}", "operation": "equals", "rightValue": "OVERDUE" } }, "outputIndex": 0 },
            { "conditions": { "options": { "leftValue": "={{ $json.tier }}", "operation": "equals", "rightValue": "CRITICAL" } }, "outputIndex": 1 },
            { "conditions": { "options": { "leftValue": "={{ $json.tier }}", "operation": "equals", "rightValue": "URGENT" } }, "outputIndex": 2 }
          ]
        }
      }
    },
    {
      "name": "Slack Compliance Ops",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#compliance-ops",
        "text": ":fire: {{ $json.tier }} ({{ $json.daysLeft }}d): {{ $json.obligation_type }} — {{ $json.client_name }}\n{{ $json.action }}\nOwner: {{ $json.owner_email }}"
      }
    },
    {
      "name": "Email Owner",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "={{ $json.owner_email }}",
        "subject": "ACTION: {{ $json.tier }} compliance deadline — {{ $json.obligation_type }} ({{ $json.daysLeft }} days)",
        "message": "={{ $json.action }}\n\nClient: {{ $json.client_name }}\nDue: {{ $json.due_date }}\nNotes: {{ $json.notes }}"
      }
    }
  ]
}

The actionMap encodes the statutory citation for each obligation type. OVERDUE and CRITICAL items fire to both Slack and Gmail simultaneously via parallel branches after the Switch node. A dedup check on the Sheets log prevents the same deadline triggering twice in one day.

Why this can't route through Zapier: Davis-Bacon certified payroll (WH-347) contains worker names, SSNs, and wage rates — federal contractor personally identifiable information. Routing that through Zapier's shared US servers is not an unauthorized disclosure per se, but it expands the attack surface your clients will flag in every FedCon compliance review.

4. Safety Incident & Near-Miss Alert Pipeline

OSHA 29 CFR Part 1904.39 requires employers to report fatalities within 8 hours and in-patient hospitalizations within 24 hours. If your platform receives safety incident webhooks from job sites, you need a hard-branching pipeline — not a general-purpose SaaS workflow that might queue behind other tasks.

{
  "name": "Safety Incident Alert Pipeline",
  "nodes": [
    {
      "name": "Safety Incident Webhook",
      "type": "n8n-nodes-base.webhook",
      "parameters": {
        "path": "safety-incident",
        "responseMode": "responseNode",
        "httpMethod": "POST"
      }
    },
    {
      "name": "Classify Severity",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const inc = $input.first().json.body;\nconst outcomeMap = {\n  fatality: { tier: 'OSHA_FATALITY', slaHours: 8, channel: '#safety-emergency', mention: '@channel', osha: '29 CFR 1904.39(a)(1) — report within 8h' },\n  hospitalization: { tier: 'OSHA_HOSPITALIZATION', slaHours: 24, channel: '#safety-emergency', mention: '@here', osha: '29 CFR 1904.39(a)(2) — report within 24h' },\n  lost_time: { tier: 'OSHA_RECORDABLE', slaHours: 168, channel: '#safety-ops', mention: '', osha: '29 CFR 1904.29 — log within 7 days' },\n  near_miss: { tier: 'NEAR_MISS', slaHours: 48, channel: '#safety-ops', mention: '', osha: 'OSHA recommended reporting — internal only' },\n  property_damage: { tier: 'PROPERTY_DAMAGE', slaHours: 72, channel: '#safety-ops', mention: '', osha: 'Internal incident report required' }\n};\nconst meta = outcomeMap[inc.outcome_type] || outcomeMap.property_damage;\nconst reportDeadline = new Date(Date.now() + meta.slaHours * 3600000).toISOString();\nreturn [{ json: { ...inc, ...meta, reportDeadline, receivedAt: new Date().toISOString() } }];"
      }
    },
    {
      "name": "Slack Emergency Alert",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "={{ $json.channel }}",
        "text": ":construction: {{ $json.mention }} {{ $json.tier }}: {{ $json.incident_description }}\nSite: {{ $json.site_name }} | Worker: {{ $json.worker_id }}\nOSHA SLA: {{ $json.osha }}\nReport deadline: {{ $json.reportDeadline }}"
      }
    },
    {
      "name": "Log to OSHA 300 Staging",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO osha_300_staging (incident_id, site_id, worker_id, outcome_type, tier, incident_ts, report_deadline, raw_payload) VALUES ('{{ $json.incident_id }}', '{{ $json.site_id }}', '{{ $json.worker_id }}', '{{ $json.outcome_type }}', '{{ $json.tier }}', '{{ $json.incident_ts }}', '{{ $json.reportDeadline }}', '{{ JSON.stringify($json) }}') ON CONFLICT (incident_id) DO NOTHING"
      }
    },
    {
      "name": "Respond 200",
      "type": "n8n-nodes-base.respondToWebhook",
      "parameters": { "respondWith": "json", "responseBody": "{ \"status\": \"received\", \"tier\": \"{{ $json.tier }}\", \"reportDeadline\": \"{{ $json.reportDeadline }}\" }" }
    }
  ]
}

The pipeline returns the OSHA reporting deadline in the webhook ACK — the calling mobile app can display it to the site supervisor immediately. Worker injury data (names, worker IDs, outcome types) maps directly to OSHA 300 Log fields — this is personally identifiable health information that belongs inside your client's infrastructure, not queued in Zapier's shared task log.

5. Weekly ConstructionTech Platform KPI Dashboard

Your exec team needs to see platform health, account risk, and retention signals every Monday morning — before the week's customer calls begin.

{
  "name": "Weekly ConstructionTech KPI Dashboard",
  "nodes": [
    {
      "name": "Monday 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": { "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1" }] } }
    },
    {
      "name": "Fetch Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT week_start, mau, new_accounts, churned_accounts, active_projects, rfis_processed, punch_items_closed, avg_response_ms FROM platform_metrics WHERE week_start >= NOW() - INTERVAL '2 weeks' ORDER BY week_start DESC LIMIT 2"
      }
    },
    {
      "name": "Fetch Account Health",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(*) FILTER (WHERE health_score < 40) AS red_accounts, COUNT(*) FILTER (WHERE health_score BETWEEN 40 AND 70) AS amber_accounts, COUNT(*) FILTER (WHERE last_active < NOW() - INTERVAL '21 days') AS dormant_accounts, SUM(arr_usd) FILTER (WHERE health_score < 40) AS red_arr FROM account_health WHERE tier != 'CHURNED'"
      }
    },
    {
      "name": "Build Dashboard",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const state = $getWorkflowStaticData('global');\nconst [curr, prev] = $node['Fetch Platform Metrics'].json;\nconst health = $node['Fetch Account Health'].json;\nconst wow = (curr, prev) => prev > 0 ? (((curr - prev) / prev) * 100).toFixed(1) + '%' : 'N/A';\nconst mauWoW = wow(curr.mau, prev.mau);\nstate.prev_mau = curr.mau; $setWorkflowStaticData('global', state);\nconst html = `<h2>ConstructionOS Weekly KPI — ${curr.week_start}</h2>\n<table border='1' cellpadding='6'><tr><th>Metric</th><th>This Week</th><th>WoW</th></tr>\n<tr><td>MAU</td><td>${curr.mau}</td><td>${mauWoW}</td></tr>\n<tr><td>New Accounts</td><td>${curr.new_accounts}</td><td>-</td></tr>\n<tr><td>Churned</td><td>${curr.churned_accounts}</td><td>-</td></tr>\n<tr><td>Active Projects</td><td>${curr.active_projects}</td><td>-</td></tr>\n<tr><td>RFIs Processed</td><td>${curr.rfis_processed}</td><td>-</td></tr>\n<tr><td>Punch Items Closed</td><td>${curr.punch_items_closed}</td><td>-</td></tr>\n<tr><td>Avg Response (ms)</td><td>${curr.avg_response_ms}</td><td>-</td></tr>\n</table>\n<h3>Account Health</h3>\n<p><b>Red (<40):</b> ${health.red_accounts} accounts | ARR at risk: $${health.red_arr}</p>\n<p><b>Amber (40-70):</b> ${health.amber_accounts} accounts</p>\n<p><b>Dormant (21d+):</b> ${health.dormant_accounts} accounts</p>`;\nreturn [{ json: { html, mauWoW, curr, health } }];"
      }
    },
    {
      "name": "Email CEO",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "toEmail": "{{ $env.CEO_EMAIL }}",
        "ccEmail": "{{ $env.CTO_EMAIL }},{{ $env.VP_CS_EMAIL }},{{ $env.COO_EMAIL }}",
        "subject": "ConstructionOS Weekly KPI — MAU {{ $json.curr.mau }} ({{ $json.mauWoW }} WoW)",
        "message": "={{ $json.html }}",
        "options": { "appendAttribution": false }
      }
    },
    {
      "name": "Slack Exec Summary",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#exec-kpis",
        "text": "Weekly KPI: MAU {{ $json.curr.mau }} ({{ $json.mauWoW }}) | New {{ $json.curr.new_accounts }} | Churned {{ $json.curr.churned_accounts }} | Red accounts: {{ $json.health.red_accounts }} | Red ARR: ${{ $json.health.red_arr }}"
      }
    }
  ]
}

The parallel Postgres branches run simultaneously (connect both to the Merge node). $getWorkflowStaticData stores last week's MAU so the WoW delta survives across runs without a database write.

Why Self-Hosted n8n vs Zapier for ConstructionTech

	n8n (self-hosted)	Zapier
OSHA 300 worker health data in boundary	✅ VPC only	❌ Routes through Zapier US servers
Davis-Bacon payroll data (SSN, wages)	✅ Never leaves perimeter	❌ Exposed in task log
BIM model IP and project financials	✅ Client VPC	❌ Third-party infrastructure
Mechanic's lien hard-deadline logic	✅ State-specific code branches	❌ No jurisdictional branching
OSHA reporting SLA (8h/24h)	✅ Instant hard branch	❌ Depends on queue depth
SOC 2 audit log retention	✅ Permanent Postgres	❌ 30-day limit
Cost at 5M events/month	✅ ~$60/mo VPS	❌ $5,000+/mo Zapier
Air-gapped / offline site deployment	✅ Runs on edge hardware	❌ Requires internet

Get the Full Workflow Pack

These 5 workflows are part of the FlowKit n8n Automation Template Pack — 14 production-ready workflows covering onboarding, monitoring, compliance tracking, alert pipelines, and KPI dashboards.

👉 Get the full pack at stripeai.gumroad.com

Individual templates start at $12. The full bundle is $97 — less than one hour of consultant time, and the workflows run forever.

All JSON is import-ready. In n8n: Settings → Import workflow → paste the JSON. Replace env var placeholders with your values.

n8n for AgroTech SaaS: 5 Automations That Scale Precision Agriculture Ops and Keep Farm Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 15:31:29 +0000

n8n for AgroTech SaaS: 5 Automations That Scale Precision Agriculture Ops and Keep Farm Data Compliant (Free Workflow JSON)

AgroTech SaaS companies face a data sovereignty problem most other verticals don't: you hold farmer GPS coordinates, field boundary polygons, soil chemistry results, yield maps, pesticide application records, and sometimes USDA loan program participation data. Routing any of that through Zapier or Make.com means it leaves your AWS VPC or on-premise data center — creating compliance exposure under the Privacy Act (USDA/FSA programs), GDPR Article 28 (EU farm data), EPA FIFRA state reporting rules, and increasingly aggressive state-level agricultural data privacy laws.

n8n, the self-hosted workflow automation platform, solves this at the architecture level: every automation runs inside your security boundary. No data egress. No SaaS audit trail gap. Full git-versionable JSON workflows your engineers can review, version, and roll back like any other code.

At precision agriculture scale — millions of sensor readings per month — the cost difference is dramatic: Zapier charges $5,000+/month for 5M tasks; an n8n instance on a $60 VPS handles it for free.

This article covers 5 production-ready n8n workflows for AgroTech SaaS platforms, with full import-ready JSON for each.

The AgroTech SaaS Data Sovereignty Problem

When your customers are farmers, the data you process is sensitive in ways most SaaS founders underestimate:

Data Type	Regulation	Risk of Cloud Routing
USDA/FSA program participation	Privacy Act of 1974	Third-party disclosure exposure
EPA FIFRA pesticide records	State right-to-know laws	Mandatory state reporting obligations
EU farm GPS + yield data	GDPR Art. 28	Sub-processor chain without DPA
Precision field maps (IP)	Trade secret law	Competitor exposure risk
SOC2 evidence (your audit)	SOC2 Type II	Zapier 30-day log = audit gap

Self-hosting n8n eliminates all of these exposure vectors. Here is how to use it.

Workflow 1: New Grower Client Onboarding Drip

The problem: New farm customers range from enterprise cooperatives managing 50,000 acres to smallholders with 20 acres. A one-size-fits-all welcome email underserves your largest accounts and overwhelms your smallest. Manual CSM triage does not scale past 500 accounts.

The automation: When a new row appears in your customer spreadsheet, classify the account by tier and route them to the right onboarding sequence and CSM channel automatically.

Nodes: GoogleSheetsTrigger -> Code (tier classify) -> Switch -> Gmail (Day 0 welcome) -> Slack (#customer-success) -> Sheets (GDPR audit log) -> Wait (3d) -> Gmail (Day 3) -> Wait (4d) -> Gmail (Day 7 value milestone)

{
  "name": "AgroTech SaaS - New Grower Onboarding Drip",
  "nodes": [
    {
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "name": "New Customer Row",
      "parameters": {
        "sheetId": "YOUR_SHEET_ID",
        "range": "Customers!A:J",
        "event": "rowAdded"
      }
    },
    {
      "type": "n8n-nodes-base.code",
      "name": "Classify Tier",
      "parameters": {
        "jsCode": "const acres = parseInt($json.total_acres) || 0;\nconst accountType = $json.account_type || 'smallholder';\nlet tier;\nif (acres >= 500 || accountType === 'cooperative') {\n  tier = 'ENTERPRISE_COOPERATIVE';\n} else if (acres >= 50) {\n  tier = 'MID_FARM_OPERATION';\n} else if (accountType === 'trial') {\n  tier = 'TRIAL_ACCOUNT';\n} else {\n  tier = 'SMALLHOLDER';\n}\nreturn [{json: {...$json, tier, acres}}];"
      }
    },
    {
      "type": "n8n-nodes-base.gmail",
      "name": "Day 0 Welcome",
      "parameters": {
        "to": "={{ $json.email }}",
        "subject": "Welcome to the platform - your first steps",
        "message": "Hi {{ $json.first_name }}, welcome! Your account for {{ $json.farm_name }} is live. Here are your first steps..."
      }
    },
    {
      "type": "n8n-nodes-base.slack",
      "name": "Notify CSM",
      "parameters": {
        "channel": "#customer-success",
        "text": "New {{ $json.tier }}: {{ $json.farm_name }} ({{ $json.acres }} acres). Assign CSM within 24h."
      }
    },
    {
      "type": "n8n-nodes-base.wait",
      "name": "Wait 3 Days",
      "parameters": { "resume": "timeInterval", "amount": 3, "unit": "days" }
    },
    {
      "type": "n8n-nodes-base.wait",
      "name": "Wait 4 Days",
      "parameters": { "resume": "timeInterval", "amount": 4, "unit": "days" }
    }
  ]
}

Why it matters: ENTERPRISE_COOPERATIVE accounts get a dedicated CSM Slack DM within 24 hours and a Day 3 check-in call. TRIAL_ACCOUNT gets a lighter 2-touch sequence. One workflow handles all four tiers with no manual routing.

Workflow 2: Field Sensor and IoT API Health Monitor

The problem: Precision agriculture platforms ingest data from thousands of field sensors — soil moisture probes, weather stations, drone telemetry APIs, irrigation controllers. When a device goes dark or sends stale data, a farmer misses an irrigation trigger and loses a crop. Your CS team finds out on a support call three days later.

The automation: Every 3 minutes, poll each registered sensor endpoint. Classify issues as DOWN, STALE_DATA (no update >15 min), or DEGRADED (high error rate). Deduplicate alerts using n8n workflow static data to prevent Slack flooding (30-minute suppression window per sensor). Log every incident to Postgres for SOC2 availability evidence.

Nodes: ScheduleTrigger (3 min) -> Postgres (load endpoint list) -> HTTP Request (ping each) -> Code (DOWN/STALE/DEGRADED + $getWorkflowStaticData dedup) -> IF (issue found) -> Slack (#platform-ops) -> Postgres (INSERT sensor_incidents)

{
  "name": "AgroTech SaaS - Field Sensor API Health Monitor",
  "nodes": [
    {
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Every 3 Minutes",
      "parameters": {
        "rule": { "interval": [{ "field": "minutes", "minutesInterval": 3 }] }
      }
    },
    {
      "type": "n8n-nodes-base.code",
      "name": "Classify and Deduplicate",
      "parameters": {
        "jsCode": "const suppressMs = 30 * 60 * 1000;\nconst now = Date.now();\nconst state = $getWorkflowStaticData('global');\nif (!state.lastAlerted) state.lastAlerted = {};\nconst issues = [];\nfor (const ep of $input.all()) {\n  const d = ep.json;\n  const staleness = now - new Date(d.last_data_at).getTime();\n  let status = 'OK';\n  if (!d.is_responding) status = 'DOWN';\n  else if (staleness > 15 * 60 * 1000) status = 'STALE_DATA';\n  else if (d.error_rate > 0.05) status = 'DEGRADED';\n  if (status !== 'OK') {\n    const lastAlert = state.lastAlerted[d.sensor_id] || 0;\n    if (now - lastAlert > suppressMs) {\n      issues.push({...d, status, staleness_min: Math.round(staleness/60000)});\n      state.lastAlerted[d.sensor_id] = now;\n    }\n  }\n}\n$setWorkflowStaticData('global', state);\nreturn issues.map(i => ({json: i}));"
      }
    },
    {
      "type": "n8n-nodes-base.slack",
      "name": "Alert platform-ops",
      "parameters": {
        "channel": "#platform-ops",
        "text": "SENSOR {{ $json.status }}: {{ $json.sensor_id }} at {{ $json.field_name }} ({{ $json.farm_name }}). Stale: {{ $json.staleness_min }}min. Farmer: {{ $json.farmer_email }}"
      }
    },
    {
      "type": "n8n-nodes-base.postgres",
      "name": "Log sensor_incidents",
      "parameters": {
        "operation": "insert",
        "table": "sensor_incidents",
        "columns": "sensor_id,field_name,farm_id,status,detected_at,staleness_min"
      }
    }
  ]
}

Key n8n advantage: The $getWorkflowStaticData deduplication runs entirely inside your VPC. Field sensor telemetry — field coordinates, irrigation schedules, soil chemistry — never touches a Zapier server.

Workflow 3: USDA/FSA/EPA Regulatory Compliance Deadline Tracker

The problem: AgroTech SaaS platforms helping farmers interact with USDA programs (EQIP applications, ARC/PLC elections, CRP renewals) or EPA compliance (FIFRA pesticide records, CWA Section 404 permits) need to track their own compliance deadlines too — SOC2 evidence collection cycles, GDPR Article 30 records-of-processing updates, organic certification renewals, and state ag data privacy law review windows.

The automation: Every weekday morning, scan your compliance tracker spreadsheet, classify each item by urgency tier, and route alerts to the right people before anything slips.

Nodes: ScheduleTrigger (weekdays 8AM) -> Sheets (read compliance checklist) -> Code (OVERDUE/CRITICAL/URGENT/WARNING/NOTICE + action type mapping) -> Switch -> Slack (@here on OVERDUE) -> Gmail (owner) -> Sheets (dedup last_alerted_date)

{
  "name": "AgroTech SaaS - Regulatory Compliance Deadline Tracker",
  "nodes": [
    {
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Weekdays 8AM",
      "parameters": {
        "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1-5" }] }
      }
    },
    {
      "type": "n8n-nodes-base.code",
      "name": "Classify Deadlines",
      "parameters": {
        "jsCode": "const today = new Date();\nconst actionMap = {\n  USDA_EQIP_APPLICATION: 'Submit EQIP application to NRCS office',\n  FSA_ARC_PLC_ELECTION: 'Update ARC/PLC election in FSA portal',\n  EPA_FIFRA_PESTICIDE_RECORD: 'Submit pesticide records to state ag agency',\n  EPA_CWA_404_PERMIT: 'Renew Section 404 wetlands permit',\n  ORGANIC_CERTIFICATION: 'Submit organic system plan renewal to certifier',\n  SOC2_EVIDENCE_COLLECTION: 'Gather SOC2 Type II evidence package',\n  GDPR_ARTICLE_30: 'Update GDPR Article 30 records of processing',\n  STATE_AG_DATA_PRIVACY: 'Review state ag data privacy law compliance window'\n};\nreturn $input.all().flatMap(item => {\n  const due = new Date(item.json.due_date);\n  const days = Math.ceil((due - today) / 86400000);\n  if (days > 60) return [];\n  let tier;\n  if (days < 0) tier = 'OVERDUE';\n  else if (days <= 7) tier = 'CRITICAL';\n  else if (days <= 14) tier = 'URGENT';\n  else if (days <= 30) tier = 'WARNING';\n  else tier = 'NOTICE';\n  const todayStr = today.toISOString().split('T')[0];\n  if (item.json.last_alerted_date === todayStr) return [];\n  return [{json: {...item.json, days_remaining: days, tier,\n    action: actionMap[item.json.type] || 'Review and action required'}}];\n});"
      }
    },
    {
      "type": "n8n-nodes-base.slack",
      "name": "Slack Alert",
      "parameters": {
        "channel": "#compliance-ops",
        "text": "{{ $json.tier }} - {{ $json.type }} due {{ $json.due_date }} ({{ $json.days_remaining }}d). Action: {{ $json.action }}. Owner: {{ $json.owner }}"
      }
    },
    {
      "type": "n8n-nodes-base.gmail",
      "name": "Email Owner",
      "parameters": {
        "to": "={{ $json.owner_email }}",
        "subject": "={{ $json.tier + ': ' + $json.type + ' — ' + $json.days_remaining + 'd remaining' }}",
        "message": "Hi {{ $json.owner }},\n\nCompliance deadline: {{ $json.type }}\nDue: {{ $json.due_date }} ({{ $json.days_remaining }} days)\nRequired action: {{ $json.action }}"
      }
    }
  ]
}

Workflow 4: Crop Engagement and Customer Health Alert

The problem: When a grower's field sensor stream goes quiet, their scout submissions drop, or their API call volume falls 30%+ week-over-week, that account is likely to churn — but your CS team will not know unless someone manually pulls the data. At 1,000+ accounts, that is impossible.

The automation: Every morning, query your account health table for engagement signals. Score each account RED (immediate CSM intervention) or AMBER (automated re-engagement). Fire the right alert to the right channel.

Nodes: ScheduleTrigger (daily 9AM) -> Postgres (query account_metrics) -> Code (composite health score) -> Filter (RED + AMBER only) -> Slack (#cs-churn-risk for RED, #cs-watch-list for AMBER) -> Gmail (CSM for RED)

{
  "name": "AgroTech SaaS - Customer Health and Engagement Monitor",
  "nodes": [
    {
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Daily 9AM",
      "parameters": {
        "rule": { "interval": [{ "field": "cronExpression", "expression": "0 9 * * *" }] }
      }
    },
    {
      "type": "n8n-nodes-base.postgres",
      "name": "Query Account Health",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT account_id, farm_name, csm_email, tier,\n  active_fields, baseline_active_fields,\n  api_calls_7d, api_calls_prev_7d,\n  days_since_last_login, scout_submissions_7d\nFROM account_health WHERE tier != 'TRIAL_ACCOUNT'"
      }
    },
    {
      "type": "n8n-nodes-base.code",
      "name": "Score Health",
      "parameters": {
        "jsCode": "return $input.all().flatMap(item => {\n  const d = item.json;\n  const fieldDrop = d.baseline_active_fields > 0\n    ? (d.baseline_active_fields - d.active_fields) / d.baseline_active_fields : 0;\n  const apiDrop = d.api_calls_prev_7d > 0\n    ? (d.api_calls_prev_7d - d.api_calls_7d) / d.api_calls_prev_7d : 0;\n  let healthStatus;\n  if (fieldDrop >= 0.5 || apiDrop >= 0.4 || d.days_since_last_login >= 21) {\n    healthStatus = 'RED';\n  } else if (fieldDrop >= 0.2 || apiDrop >= 0.2 || d.days_since_last_login >= 14 || d.scout_submissions_7d === 0) {\n    healthStatus = 'AMBER';\n  } else {\n    return [];\n  }\n  return [{json: {...d, healthStatus,\n    fieldDropPct: Math.round(fieldDrop * 100),\n    apiDropPct: Math.round(apiDrop * 100)}}];\n});"
      }
    },
    {
      "type": "n8n-nodes-base.slack",
      "name": "CS Team Alert",
      "parameters": {
        "channel": "={{ $json.healthStatus === 'RED' ? '#cs-churn-risk' : '#cs-watch-list' }}",
        "text": "{{ $json.healthStatus }}: {{ $json.farm_name }} ({{ $json.tier }}) — API -{{ $json.apiDropPct }}%, fields -{{ $json.fieldDropPct }}%, login {{ $json.days_since_last_login }}d ago. CSM: {{ $json.csm_email }}"
      }
    }
  ]
}

Workflow 5: Weekly AgroTech Platform KPI Dashboard

The problem: Every Monday your CEO asks the same questions: how many active farm accounts? Did API usage grow? What is the sensor uptime trend? Someone spends 45 minutes pulling numbers from three spreadsheets and a Postgres database.

The automation: Every Monday at 8AM, query platform metrics and account health in parallel, compute week-over-week changes (persisted via $getWorkflowStaticData), build an HTML report, and email the exec team plus post a one-liner to #leadership.

Nodes: ScheduleTrigger (Monday 8AM) -> 2x parallel Postgres queries -> Merge -> Code (WoW % with $getWorkflowStaticData) -> Gmail (HTML to CEO BCC CTO/VP-CS/COO) -> Slack (#exec-kpis)

{
  "name": "AgroTech SaaS - Weekly Platform KPI Dashboard",
  "nodes": [
    {
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Monday 8AM",
      "parameters": {
        "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1" }] }
      }
    },
    {
      "type": "n8n-nodes-base.postgres",
      "name": "Platform Metrics",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT\n  COUNT(DISTINCT account_id) FILTER (WHERE status='active') AS active_accounts,\n  COUNT(DISTINCT account_id) FILTER (WHERE created_at > NOW()-INTERVAL '7 days') AS new_this_week,\n  SUM(active_fields) AS total_active_fields,\n  SUM(api_calls_7d) AS total_api_calls_7d,\n  ROUND(AVG(sensor_uptime_pct)::numeric, 1) AS avg_sensor_uptime\nFROM account_health WHERE status='active'"
      }
    },
    {
      "type": "n8n-nodes-base.code",
      "name": "Build KPI Report",
      "parameters": {
        "jsCode": "const state = $getWorkflowStaticData('global');\nconst prev = state.lastWeekKPIs || {};\nconst curr = $input.first().json;\nfunction wow(c, p) {\n  if (!p || p === 0) return 'n/a';\n  const pct = Math.round((c - p) / p * 100);\n  return (pct >= 0 ? '+' : '') + pct + '%';\n}\nconst rows = [\n  ['Active Farm Accounts', curr.active_accounts, wow(curr.active_accounts, prev.active_accounts)],\n  ['New Accounts This Week', curr.new_this_week, ''],\n  ['Total Active Fields', curr.total_active_fields, wow(curr.total_active_fields, prev.total_active_fields)],\n  ['API Calls (7d)', curr.total_api_calls_7d, wow(curr.total_api_calls_7d, prev.total_api_calls_7d)],\n  ['Avg Sensor Uptime', curr.avg_sensor_uptime + '%', '']\n];\nstate.lastWeekKPIs = curr;\n$setWorkflowStaticData('global', state);\nconst trs = rows.map(r => '<tr><td>' + r[0] + '</td><td><b>' + r[1] + '</b></td><td>' + r[2] + '</td></tr>').join('');\nconst html = '<h2>AgroTech Platform Weekly KPI</h2><table border="1" cellpadding="4"><tr><th>Metric</th><th>Value</th><th>WoW</th></tr>' + trs + '</table>';\nreturn [{json: {html, week_ending: new Date().toISOString().split('T')[0], ...curr}}];"
      }
    },
    {
      "type": "n8n-nodes-base.gmail",
      "name": "Email Exec Team",
      "parameters": {
        "to": "ceo@yourplatform.com",
        "bcc": "cto@yourplatform.com,vp-cs@yourplatform.com",
        "subject": "Weekly AgroTech Platform KPI - {{ $json.week_ending }}",
        "message": "={{ $json.html }}",
        "messageType": "html"
      }
    },
    {
      "type": "n8n-nodes-base.slack",
      "name": "Exec KPIs Digest",
      "parameters": {
        "channel": "#exec-kpis",
        "text": "Weekly KPI: {{ $json.active_accounts }} active farms | {{ $json.new_this_week }} new | {{ $json.total_api_calls_7d }} API calls | {{ $json.avg_sensor_uptime }}% sensor uptime"
      }
    }
  ]
}

Why AgroTech SaaS Should Self-Host Automation

Factor	Zapier / Make.com	Self-hosted n8n
USDA Privacy Act	Farm data leaves VPC	Stays in your boundary
EPA FIFRA records	Third-party routing exposure	On-premises processing
GDPR Art. 28 sub-processor	Additional DPA required	No sub-processor chain
SOC2 audit trail	30-day log retention limit	Permanent git-versioned history
Field sensor scale (5M events/mo)	~$5,000/mo	~$60 VPS
Edge/offline deployment	Not possible	Runs on Raspberry Pi, air-gapped
Precision agriculture IP	Leaves your network	Never leaves your infrastructure

Get These Workflows Pre-Built

All 5 workflows above — plus 9 more for CRM sync, invoice automation, and multi-channel reporting — are available as import-ready JSON templates at stripeai.gumroad.com.

Email Auto-Responder ($15) — instant customer inquiry handling
Lead Capture to CRM ($19) — webhook -> score -> route -> Slack + email
Daily Report Generator ($19) — morning KPI briefing, configurable for any data source
Price Monitor ($29) — multi-source competitor and commodity price tracking
Full Bundle ($97) — all 14 templates

Download once, run forever inside your own infrastructure. No Zapier bill. No data egress.

n8n for DefTech & GovSec SaaS: 5 Automations That Keep Defense Data Compliant and Out of the Cloud (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 15:11:45 +0000

If your product touches DoD contracts, federal agencies, or any classified or CUI environment, you already know the rule: data stays inside the boundary.

Routing ITAR-controlled data, CMMC evidence, or SIEM alerts through Zapier or Make is not a gray area — it's an immediate compliance finding that can cost you your ATO, your prime contractor relationship, or your export license.

Self-hosted n8n solves this at the infrastructure level. Your workflows run inside your GovCloud VPC, your on-prem environment, or your air-gapped network. Zapier never sees a byte.

Here are 5 complete n8n workflows built specifically for DefTech SaaS vendors and GovSec platform teams.

Workflow 1: CMMC Level 2/3 Evidence Collection Automation

The problem: CMMC Level 2 requires 110 practices. Level 3 adds 24 more. Gathering evidence from 12 different systems before every assessment is manual, error-prone, and eats weeks of your compliance team's time.

The solution: Daily automated sweep across all your evidence sources — screenshots, policy docs, log exports — with escalating alerts for overdue items.

{
  "name": "CMMC Evidence Collection Automation",
  "nodes": [
    {"type": "n8n-nodes-base.scheduleTrigger", "name": "Daily 06:00 AM", "parameters": {"rule": {"interval": [{"field": "hours", "hoursInterval": 24}]}}},
    {"type": "n8n-nodes-base.googleSheets", "name": "CMMC Evidence Checklist", "parameters": {"operation": "getAll", "sheetId": "YOUR_SHEET_ID", "range": "Evidence!A:H"}},
    {"type": "n8n-nodes-base.code", "name": "Classify Overdue Items", "parameters": {"jsCode": "const today = new Date(); return items.map(i => { const due = new Date(i.json.due_date); const daysLeft = Math.ceil((due - today) / 86400000); const status = daysLeft < 0 ? 'OVERDUE' : daysLeft <= 7 ? 'CRITICAL' : daysLeft <= 14 ? 'URGENT' : daysLeft <= 30 ? 'WARNING' : null; return status ? {...i.json, daysLeft, status} : null; }).filter(Boolean).map(json => ({json}));"}},
    {"type": "n8n-nodes-base.if", "name": "Any Overdue?", "parameters": {"conditions": {"number": [{"value1": "={{$json.length}}", "operation": "larger", "value2": 0}]}}},
    {"type": "n8n-nodes-base.slack", "name": "Alert #cmmc-audit", "parameters": {"channel": "#cmmc-audit", "text": "CMMC Evidence Gap: {{$json.count}} items need attention — OVERDUE: {{$json.overdue}}, CRITICAL: {{$json.critical}}"}},
    {"type": "n8n-nodes-base.gmail", "name": "Email Compliance Officer", "parameters": {"to": "compliance@yourcompany.com", "subject": "CMMC Evidence Action Required — {{$json.overdue}} Overdue Items", "message": "Daily CMMC evidence sweep complete. {{$json.count}} items require action before next assessment."}}
  ]
}

Key CMMC practices covered: AC.1.001, AC.2.005, AU.2.041, AU.2.042, CM.2.061, IA.1.076, IA.1.077, SC.1.175, SI.1.210

Workflow 2: FedRAMP Continuous Monitoring & ATO Renewal Tracker

The problem: FedRAMP Authorization to Operate has an expiration. Annual reviews, Plan of Action & Milestones (POA&M) updates, and ConMon deliverables all have hard deadlines. Miss one and your ATO lapses — your federal customers can't use your product.

{
  "name": "FedRAMP ConMon & ATO Tracker",
  "nodes": [
    {"type": "n8n-nodes-base.scheduleTrigger", "name": "Daily 08:00 AM", "parameters": {"rule": {"interval": [{"field": "hours", "hoursInterval": 24}]}}},
    {"type": "n8n-nodes-base.googleSheets", "name": "FedRAMP Milestone Tracker", "parameters": {"operation": "getAll", "sheetId": "YOUR_SHEET_ID", "range": "Milestones!A:I"}},
    {"type": "n8n-nodes-base.code", "name": "Calculate Urgency", "parameters": {"jsCode": "const today = new Date(); return items.map(i => { const daysLeft = Math.ceil((new Date(i.json.deadline) - today) / 86400000); if (daysLeft > 60) return null; const tier = daysLeft < 0 ? 'ATO_LAPSE_RISK' : daysLeft <= 7 ? 'CRITICAL' : daysLeft <= 14 ? 'URGENT' : daysLeft <= 30 ? 'WARNING' : 'NOTICE'; return {...i.json, daysLeft, tier, json: i.json}; }).filter(Boolean).map(d => ({json: d}));"}},
    {"type": "n8n-nodes-base.slack", "name": "Alert #fedramp-team", "parameters": {"channel": "#fedramp-team", "text": "FedRAMP ConMon Alert — {{$json.count}} milestones within 60 days. ATO_LAPSE_RISK items: {{$json.critical_count}}"}},
    {"type": "n8n-nodes-base.gmail", "name": "Email ISSO", "parameters": {"to": "isso@yourcompany.com", "subject": "FedRAMP Action Required: {{$json.milestone_name}} Due in {{$json.daysLeft}} Days", "message": "FedRAMP milestone approaching: {{$json.milestone_name}} ({{$json.deliverable_type}}). Due: {{$json.deadline}}. Status: {{$json.status}}."}}
  ]
}

Milestones tracked: POA&M monthly updates, ConMon deliverables, ATO expiration, penetration test due dates, supply chain risk assessments.

Workflow 3: SIEM Alert-to-SOC Escalation Pipeline

The problem: Your SIEM fires thousands of alerts per day. L1 analysts are drowning. Critical alerts get buried. Mean time to respond (MTTR) is measured in hours, not minutes.

The solution: n8n triage layer between SIEM and your SOC — auto-classify by NIST 800-53 control, route to the right team channel, auto-escalate unacknowledged criticals.

{
  "name": "SIEM-to-SOC Escalation Pipeline",
  "nodes": [
    {"type": "n8n-nodes-base.webhook", "name": "SIEM Alert Webhook", "parameters": {"path": "siem-alert", "httpMethod": "POST"}},
    {"type": "n8n-nodes-base.code", "name": "Parse & Classify Alert", "parameters": {"jsCode": "const alert = $input.first().json; const severity = alert.severity?.toLowerCase(); const nistMapping = { 'authentication_failure': 'IA-3 / AC-17', 'data_exfiltration': 'SC-8 / SC-28 / AU-9', 'malware_detection': 'SI-3 / SI-7', 'privilege_escalation': 'AC-6 / CM-6', 'lateral_movement': 'SI-4 / SC-7', 'brute_force': 'IA-5 / AC-7' }; const alertType = alert.event_type?.toLowerCase().replace(/ /g,'_'); return [{ json: { ...alert, nist_control: nistMapping[alertType] || 'SI-4 Monitoring', escalate_immediately: severity === 'critical' || severity === 'high', soc_channel: severity === 'critical' ? '#soc-p1-critical' : severity === 'high' ? '#soc-p2-high' : '#soc-p3-medium' } }];"}},
    {"type": "n8n-nodes-base.slack", "name": "Route to SOC Channel", "parameters": {"channel": "={{$json.soc_channel}}", "text": "[{{$json.severity.toUpperCase()}}] {{$json.alert_name}} — Host: {{$json.affected_host}} — NIST: {{$json.nist_control}} — Ticket: {{$json.ticket_id}}"}},
    {"type": "n8n-nodes-base.if", "name": "Critical/High?", "parameters": {"conditions": {"boolean": [{"value1": "={{$json.escalate_immediately}}", "value2": true}]}}},
    {"type": "n8n-nodes-base.wait", "name": "Wait 15min", "parameters": {"amount": 15, "unit": "minutes"}},
    {"type": "n8n-nodes-base.httpRequest", "name": "Check Ticket Acknowledged", "parameters": {"url": "https://your-ticketing-system/api/tickets/{{$json.ticket_id}}"}},
    {"type": "n8n-nodes-base.if", "name": "Unacknowledged?", "parameters": {"conditions": {"string": [{"value1": "={{$json.status}}", "value2": "open"}]}}},
    {"type": "n8n-nodes-base.slack", "name": "Escalate to #soc-leadership", "parameters": {"channel": "#soc-leadership", "text": "UNACKNOWLEDGED {{$json.severity.toUpperCase()}} alert after 15 minutes: {{$json.alert_name}} on {{$json.affected_host}}. Ticket {{$json.ticket_id}} still open."}},
    {"type": "n8n-nodes-base.googleSheets", "name": "Log to Incident Register", "parameters": {"operation": "append", "sheetId": "YOUR_SHEET_ID", "range": "Incidents!A:K"}}
  ]
}

Why self-hosted matters here: SIEM alert data contains network topology, affected host names, CVE details, and potentially CUI indicators. Routing this through a third-party SaaS is a CMMC AC.1.002 violation.

Workflow 4: ITAR/EAR Export Control Compliance Screener

The problem: Every new customer, partner, or employee onboarding must be screened against the ITAR Part 120 and EAR Entity List. Manual screening takes 20-40 minutes per record. One missed restricted-party hit = criminal liability.

{
  "name": "ITAR/EAR Export Control Screener",
  "nodes": [
    {"type": "n8n-nodes-base.webhook", "name": "New Customer/Employee Webhook", "parameters": {"path": "export-control-screen", "httpMethod": "POST"}},
    {"type": "n8n-nodes-base.code", "name": "Parse Entity & Flag Risk", "parameters": {"jsCode": "const entity = $input.first().json; const restrictedCountries = ['CN','RU','IR','KP','SY','CU','VE','BY']; const entityCountryCode = entity.country_code?.toUpperCase(); const isRestrictedCountry = restrictedCountries.includes(entityCountryCode); return [{ json: { ...entity, restricted_country_flag: isRestrictedCountry, requires_manual_review: isRestrictedCountry || entity.entity_type === 'foreign_national', review_priority: isRestrictedCountry ? 'IMMEDIATE' : 'STANDARD', ecn_required: entity.technology_category?.includes('EAR_CONTROLLED') } }];"}},
    {"type": "n8n-nodes-base.if", "name": "Restricted Country?", "parameters": {"conditions": {"boolean": [{"value1": "={{$json.restricted_country_flag}}", "value2": true}]}}},
    {"type": "n8n-nodes-base.slack", "name": "Alert #export-control-urgent", "parameters": {"channel": "#export-control-urgent", "text": "IMMEDIATE REVIEW REQUIRED: {{$json.entity_name}} ({{$json.country_code}}) — Restricted country flag. Do NOT provision access until export control clears."}},
    {"type": "n8n-nodes-base.gmail", "name": "Email Export Control Officer", "parameters": {"to": "exportcontrol@yourcompany.com", "subject": "[ITAR/EAR] Restricted Party Screen Required: {{$json.entity_name}}", "message": "New entity requires export control screening prior to access provisioning.\n\nEntity: {{$json.entity_name}}\nCountry: {{$json.country_code}}\nType: {{$json.entity_type}}\nPriority: {{$json.review_priority}}\n\nAccess provisioning is BLOCKED pending your review."}},
    {"type": "n8n-nodes-base.googleSheets", "name": "Log to EAR Compliance Register", "parameters": {"operation": "append", "sheetId": "YOUR_SHEET_ID", "range": "ExportControl!A:J"}}
  ]
}

Regulations covered: ITAR Part 120-130, EAR Part 744 (Entity List), OFAC SDN screening trigger, DDTC registration workflows.

Workflow 5: Weekly DefTech SaaS KPI & Security Posture Dashboard

The problem: Your CISO needs a weekly briefing that shows both business metrics (ARR, contract pipeline, renewal risk) and security posture (open POA&M items, CMMC gap count, incident MTTR). Building it manually takes 3 hours every Monday.

{
  "name": "Weekly DefTech KPI & Security Posture Dashboard",
  "nodes": [
    {"type": "n8n-nodes-base.scheduleTrigger", "name": "Monday 07:00 AM", "parameters": {"rule": {"interval": [{"field": "cronExpression", "expression": "0 7 * * 1"}]}}},
    {"type": "n8n-nodes-base.googleSheets", "name": "Pull KPI Data", "parameters": {"operation": "getAll", "sheetId": "YOUR_SHEET_ID", "range": "KPIs!A:Z"}},
    {"type": "n8n-nodes-base.code", "name": "Build KPI Summary", "parameters": {"jsCode": "const rows = items.map(i => i.json); const kpis = rows[0] || {}; const html = '<h2>DefTech Weekly Dashboard</h2><table border=1 cellpadding=8><tr><th>Metric</th><th>This Week</th><th>WoW</th></tr>' + Object.entries(kpis).filter(([k]) => k !== 'week_of').map(([k,v]) => `<tr><td>${k.replace(/_/g,' ')}</td><td>${v}</td><td>${kpis[k+'_wow'] || '-'}</td></tr>`).join('') + '</table>'; return [{ json: { html_report: html, week_of: kpis.week_of, open_poam_items: kpis.open_poam_items, cmmc_gap_count: kpis.cmmc_gap_count, ato_days_remaining: kpis.ato_days_remaining } }];"}},
    {"type": "n8n-nodes-base.gmail", "name": "Email CISO & Program Manager", "parameters": {"to": "ciso@yourcompany.com", "subject": "DefTech Weekly Dashboard — Week of {{$json.week_of}} | ATO: {{$json.ato_days_remaining}} days | Open POA&M: {{$json.open_poam_items}}", "message": "={{$json.html_report}}"}},
    {"type": "n8n-nodes-base.slack", "name": "Post to #leadership", "parameters": {"channel": "#leadership", "text": "Weekly DefTech KPI digest posted. ATO days remaining: {{$json.ato_days_remaining}} | Open POA&M: {{$json.open_poam_items}} | CMMC gaps: {{$json.cmmc_gap_count}}"}}
  ]
}

Why Self-Hosted n8n Is Non-Negotiable for DefTech

Requirement	Zapier/Make	Self-Hosted n8n
CUI stays in boundary	No — cloud routes data	Yes — runs in your VPC
ITAR compliance	No — foreign servers	Yes — you control deployment
FedRAMP High eligibility	No	Yes (on IL4/IL5 infra)
CMMC ConMon evidence	No — third-party cloud = finding	Yes — git-JSON = audit trail
Air-gapped deployment	No	Yes — on-prem possible
Per-execution cost at scale	$$/month	$0 — self-hosted is unlimited

For DoD contractors and GovSec SaaS vendors, n8n's self-hosted model isn't just a cost advantage — it's the only architecture that doesn't create a compliance violation.

Get These Workflows Ready to Import

All 5 workflows are available as import-ready JSON in the FlowKit n8n Automation Templates store.

Individual templates: $12–$29 each
Complete bundle (all 15 templates): $97

Each template includes: complete n8n JSON, setup guide, example Sheets schema, and a test checklist.

Questions? Drop a comment — happy to help you adapt any workflow to your specific compliance framework.

n8n for SpaceTech SaaS: 5 Automations That Scale Satellite Ops and Keep Space Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 14:55:54 +0000

n8n for SpaceTech SaaS: 5 Automations That Scale Satellite Ops and Keep Space Data Compliant (Free Workflow JSON)

If you build satellite data platforms, launch operations software, space situational awareness (SSA) tools, or ground station management SaaS, you already know the compliance stack is brutal: ITAR 22 CFR §120–130, EAR/BIS export controls, CMMC Level 2/3 for DoD contracts, FedRAMP ATO pipelines, and classification boundary rules that make HIPAA look relaxed.

And yet most SpaceTech SaaS teams are routing mission-critical workflows through Zapier or Make.com — cloud automation platforms that push your technical data through EU and multi-region edge nodes. For ITAR-controlled data, that routing can constitute an unauthorized export before you even realize it.

Here are 5 n8n workflows built specifically for SpaceTech SaaS vendors. All run inside your own VPC — no data leaves your infrastructure. Full workflow JSON included.

Why SpaceTech SaaS Needs Self-Hosted Automation

Before the workflows: the compliance argument for n8n over Zapier in the space sector.

ITAR 22 CFR §120–130 — Technical Data Routing
The International Traffic in Arms Regulations prohibit exporting defense-related technical data to foreign nationals or through foreign-controlled infrastructure. Zapier routes workflow payloads through its global edge network, which includes nodes outside the US. If your workflow touches satellite telemetry, mission parameters, or propulsion specs, that routing may constitute an unauthorized ITAR export. n8n self-hosted keeps all data in your US-region VPC.

CMMC Level 2/3 — FCI and CUI Handling
DoD space contracts under DFARS 252.204-7012 require that Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) only traverse CMMC-assessed systems. Zapier and Make.com are not CMMC-assessed. n8n self-hosted on a GovCloud-adjacent VPC can be scoped into your CMMC System Security Plan.

FedRAMP ATO Pipeline
Ground system software touching US Government missions increasingly requires FedRAMP authorization. Third-party automation platforms that touch your data expand your authorization boundary and compliance burden. n8n stays inside your boundary.

Cost at Scale
A single satellite generates thousands of telemetry points per day. At 2 million tasks/month, Zapier costs $2,400+/month. n8n on a $30 VPS handles the same load.

Workflow 1: New Space Program Client Onboarding Drip

Problem: Manual onboarding for new satellite operators, launch vehicle customers, or government program offices wastes CSM time and creates audit gaps in your ITAR-controlled customer record.

The workflow:

{
  "nodes": [
    {
      "name": "New Customer Trigger",
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "parameters": {
        "sheetId": "YOUR_SHEET_ID",
        "event": "rowAdded"
      }
    },
    {
      "name": "Classify Program Tier",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const row = $input.first().json; const arr = row.contract_value || 0; let tier = arr >= 10000000 ? 'TIER_1_PRIME_CONTRACTOR' : arr >= 1000000 ? 'TIER_2_COMMERCIAL_OPERATOR' : arr >= 100000 ? 'TIER_3_STARTUP_NEWSPACE' : 'TIER_4_ACADEMIC_RESEARCH'; return [{ json: { ...row, tier, onboarding_start: new Date().toISOString() } }];"
      }
    },
    {
      "name": "Day 0 Welcome Email",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.poc_email }}",
        "subject": "Welcome to {{ $json.product_name }} — Your Mission Integration Starts Now",
        "message": "Hi {{ $json.poc_name }},\n\nYour {{ $json.tier }} onboarding package is ready. Your dedicated mission integration engineer will reach out within 4 hours.\n\nPortal: https://app.yourplatform.com/onboarding/{{ $json.customer_id }}"
      }
    },
    {
      "name": "Slack CSM Alert",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#mission-integration",
        "text": "New {{ $json.tier }} customer: {{ $json.company_name }}. Contract: ${{ $json.contract_value?.toLocaleString() }}. POC: {{ $json.poc_email }}."
      }
    },
    {
      "name": "ITAR Audit Log",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "append",
        "sheetId": "YOUR_ITAR_AUDIT_SHEET",
        "columns": {
          "mappingMode": "defineBelow",
          "values": {
            "timestamp": "={{ new Date().toISOString() }}",
            "customer_id": "={{ $json.customer_id }}",
            "tier": "={{ $json.tier }}",
            "itar_classification": "={{ $json.itar_classification }}",
            "action": "CUSTOMER_ONBOARDED"
          }
        }
      }
    }
  ]
}

Add Wait nodes at +3 days (integration check-in email) and +7 days (first telemetry review). The Sheets ITAR audit log gives you the traceable customer record required for export license applications.

Workflow 2: Ground Station API & Telemetry Health Monitor

Problem: Ground station pass windows are narrow — 8 to 15 minutes for LEO satellites. An API outage during a pass window means lost telemetry, missed command uplinks, and potentially a satellite in an uncontrolled state.

The workflow:

{
  "nodes": [
    {
      "name": "Every 3 Minutes",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": { "rule": { "interval": [{ "field": "minutes", "minutesInterval": 3 }] } }
    },
    {
      "name": "Load Endpoint Registry",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": {
        "operation": "getAll",
        "sheetId": "YOUR_ENDPOINTS_SHEET"
      }
    },
    {
      "name": "Ping Each Endpoint",
      "type": "n8n-nodes-base.httpRequest",
      "parameters": {
        "url": "={{ $json.health_url }}",
        "timeout": 5000,
        "continueOnFail": true
      }
    },
    {
      "name": "Classify Status",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const results = $input.all(); return results.map(item => { const r = item.json; const lastData = r.last_telemetry_ts ? (Date.now() - new Date(r.last_telemetry_ts).getTime()) / 60000 : 0; let status = r.error ? 'DOWN' : lastData > 15 ? 'STALE_DATA' : r.statusCode !== 200 ? 'DEGRADED' : 'OK'; return { json: { ...r, status, lastData_min: Math.round(lastData) } }; });"
      }
    },
    {
      "name": "Dedup & Alert",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const store = $getWorkflowStaticData('global'); const now = Date.now(); const alerts = $input.all().filter(i => { if (i.json.status === 'OK') return false; const key = i.json.endpoint_id; const last = store[key] || 0; if (now - last < 1800000) return false; store[key] = now; return true; }); return alerts.length ? alerts : [{ json: { skip: true } }];"
      }
    },
    {
      "name": "Mission Ops Slack",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#mission-ops",
        "text": "GROUND STATION ALERT [{{ $json.status }}] {{ $json.endpoint_name }} ({{ $json.mission_id }}) — {{ $json.status === 'STALE_DATA' ? $json.lastData_min + 'min since last telemetry' : 'no response' }}. Next pass window: {{ $json.next_pass_utc }}."
      }
    }
  ]
}

The 30-minute dedup window prevents Slack flooding during extended outages. Track mission_id and next_pass_utc in your endpoint registry so alerts include operational context — not just "endpoint X is down."

Workflow 3: ITAR/EAR Export Control & Licensing Deadline Tracker

Problem: ITAR Technical Assistance Agreements (TAAs), Manufacturing License Agreements (MLAs), and EAR BIS licenses all have expiration and renewal deadlines. A lapsed license means your product goes dark for affected customers — with potential criminal liability for your company.

The workflow:

{
  "nodes": [
    {
      "name": "Weekdays 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": {
        "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1-5" }] }
      }
    },
    {
      "name": "Load Compliance Calendar",
      "type": "n8n-nodes-base.googleSheets",
      "parameters": { "operation": "getAll", "sheetId": "YOUR_COMPLIANCE_SHEET" }
    },
    {
      "name": "Classify Urgency",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const rows = $input.all(); const now = new Date(); return rows.map(item => { const r = item.json; const due = new Date(r.deadline); const days = Math.round((due - now) / 86400000); const actionMap = { ITAR_LICENSE_TAA: 'ITAR/State Dept: file DS-4076 renewal 90d ahead', ITAR_MLA: 'ITAR/State Dept: MLA amendment if scope changed', EAR_BIS_LICENSE: 'EAR/BIS: file BIS-748P renewal', FIPS_140_3: 'FIPS 140-3 validation renewal with CMVP lab', CMMC_ASSESSMENT: 'Schedule CMMC C3PAO assessment', FEDRAMP_ATO: 'FedRAMP: schedule 3PAO assessment for ATO renewal', SOC2: 'Schedule SOC 2 Type II audit window', ISO_27001: 'Schedule ISO 27001 surveillance audit' }; let urgency = days < 0 ? 'OVERDUE' : days <= 7 ? 'CRITICAL' : days <= 14 ? 'URGENT' : days <= 30 ? 'WARNING' : days <= 60 ? 'NOTICE' : null; return urgency ? [{ json: { ...r, urgency, days_until_due: days, action: actionMap[r.control_type] || 'Review compliance requirement' } }] : []; }).flat();"
      }
    },
    {
      "name": "Route by Urgency",
      "type": "n8n-nodes-base.switch",
      "parameters": {
        "dataType": "string",
        "value1": "={{ $json.urgency }}",
        "rules": {
          "rules": [
            { "value2": "OVERDUE", "output": 0 },
            { "value2": "CRITICAL", "output": 1 },
            { "value2": "URGENT", "output": 2 },
            { "value2": "WARNING", "output": 3 }
          ]
        }
      }
    },
    {
      "name": "Slack @here OVERDUE",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#legal-compliance",
        "text": "<!here> OVERDUE COMPLIANCE ITEM [{{ $json.control_type }}]: {{ $json.requirement_name }} was due {{ Math.abs($json.days_until_due) }} days ago. Action: {{ $json.action }}. Owner: {{ $json.owner_email }}."
      }
    },
    {
      "name": "Email Owner OVERDUE",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "operation": "send",
        "toList": "={{ $json.owner_email }}",
        "subject": "OVERDUE: {{ $json.requirement_name }} — Immediate Action Required",
        "message": "{{ $json.requirement_name }} is OVERDUE by {{ Math.abs($json.days_until_due) }} days.\n\nRequired action: {{ $json.action }}\n\nThis is a legal compliance deadline. Please escalate immediately."
      }
    }
  ]
}

Add rows for: ITAR_LICENSE_TAA, ITAR_MLA, EAR_BIS_LICENSE, FIPS_140_3, CMMC_ASSESSMENT, FEDRAMP_ATO, SOC2, ISO_27001. The Switch node routes OVERDUE items to both Slack @here and direct owner email — double-redundancy for anything that can trigger a State Department enforcement action.

Workflow 4: Launch & Spacecraft Anomaly Alert Pipeline

Problem: Launch operations SaaS and spacecraft health monitoring platforms need sub-minute anomaly classification and escalation. A "loss of contact" during a critical maneuver is categorically different from a non-critical telemetry gap — your alert pipeline needs to know the difference.

The workflow:

{
  "nodes": [
    {
      "name": "Anomaly Webhook",
      "type": "n8n-nodes-base.webhook",
      "parameters": {
        "path": "spacecraft-anomaly",
        "responseMode": "lastNode",
        "httpMethod": "POST"
      }
    },
    {
      "name": "Classify Anomaly Severity",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const ev = $input.first().json; const sevMap = { LOSS_OF_SIGNAL: 'MISSION_CRITICAL', SAFE_HOLD_ENTRY: 'MISSION_CRITICAL', LAUNCH_ABORT: 'MISSION_CRITICAL', ATTITUDE_ANOMALY: 'MISSION_CRITICAL', PROPULSION_ANOMALY: 'MISSION_CRITICAL', POWER_SYSTEM_FAULT: 'MISSION_CRITICAL', GROUND_STATION_DROPOUT: 'SAFE_HOLD', TELEMETRY_GAP_15MIN: 'MANEUVER_REQUIRED', SUBSYSTEM_DEGRADED: 'NON_CRITICAL', LINK_MARGIN_WARNING: 'NON_CRITICAL' }; const sev = sevMap[ev.anomaly_type] || 'NON_CRITICAL'; return [{ json: { ...ev, severity: sev, classified_at: new Date().toISOString() } }];"
      }
    },
    {
      "name": "Route Critical vs Non-Critical",
      "type": "n8n-nodes-base.if",
      "parameters": {
        "conditions": {
          "string": [{ "value1": "={{ $json.severity }}", "value2": "NON_CRITICAL", "operation": "notEqual" }]
        }
      }
    },
    {
      "name": "Mission Emergency Slack",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#mission-emergency",
        "text": "<!channel> SPACECRAFT ANOMALY [{{ $json.severity }}] Mission: {{ $json.mission_id }} | Spacecraft: {{ $json.spacecraft_name }} | Type: {{ $json.anomaly_type }} | UTC: {{ $json.event_utc }}. MOC duty officer: acknowledge within 2 minutes."
      }
    },
    {
      "name": "ITAR Audit Log to Postgres",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "INSERT INTO spacecraft_anomalies (mission_id, spacecraft_name, anomaly_type, severity, event_utc, classified_at, data_classification) VALUES ('{{ $json.mission_id }}', '{{ $json.spacecraft_name }}', '{{ $json.anomaly_type }}', '{{ $json.severity }}', '{{ $json.event_utc }}', '{{ $json.classified_at }}', '{{ $json.data_classification || 'CUI' }}') ON CONFLICT (mission_id, event_utc, anomaly_type) DO NOTHING"
      }
    },
    {
      "name": "ACK 200",
      "type": "n8n-nodes-base.respondToWebhook",
      "parameters": {
        "respondWith": "json",
        "responseBody": "{ "status": "received", "severity": "{{ $json.severity }}" }"
      }
    }
  ]
}

The Postgres ON CONFLICT DO NOTHING prevents duplicate anomaly records if your spacecraft sends repeated anomaly events. The data_classification field (default CUI) is written at ingest — critical for CMMC boundary documentation.

Workflow 5: Weekly SpaceTech Platform KPI Dashboard

Problem: Your CEO wants to know mission success rate, customer churn risk, and platform health every Monday — but pulling this from multiple Postgres tables manually takes an hour.

The workflow:

{
  "nodes": [
    {
      "name": "Monday 8 AM",
      "type": "n8n-nodes-base.scheduleTrigger",
      "parameters": {
        "rule": { "interval": [{ "field": "cronExpression", "expression": "0 8 * * 1" }] }
      }
    },
    {
      "name": "Fetch Platform Metrics",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(DISTINCT customer_id) AS active_missions, SUM(CASE WHEN status='NOMINAL' THEN 1 ELSE 0 END) AS nominal_count, SUM(CASE WHEN status IN ('SAFE_HOLD','ANOMALY') THEN 1 ELSE 0 END) AS anomaly_count, AVG(link_margin_db) AS avg_link_margin, COUNT(DISTINCT CASE WHEN last_contact > NOW() - INTERVAL '7 days' THEN mission_id END) AS active_7d FROM mission_health WHERE week = DATE_TRUNC('week', NOW())"
      }
    },
    {
      "name": "Fetch Account Health",
      "type": "n8n-nodes-base.postgres",
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(*) AS total_customers, SUM(arr) AS total_arr, COUNT(CASE WHEN health_score < 60 THEN 1 END) AS churn_risk_count, SUM(CASE WHEN health_score < 60 THEN arr ELSE 0 END) AS churn_risk_arr FROM customers WHERE active = true"
      }
    },
    {
      "name": "Build KPI HTML",
      "type": "n8n-nodes-base.code",
      "parameters": {
        "jsCode": "const p = $node['Fetch Platform Metrics'].json; const a = $node['Fetch Account Health'].json; const store = $getWorkflowStaticData('global'); const prev = store.last_kpi || {}; const pct = (v, p2) => p2 ? ((v - p2) / p2 * 100).toFixed(1) + '%' : 'N/A'; const html = '<h2>SpaceTech Platform Weekly KPI</h2><table border=1 cellpadding=6><tr><th>Metric</th><th>This Week</th><th>WoW</th></tr>' + '<tr><td>Active Missions</td><td>' + p.active_missions + '</td><td>' + pct(p.active_missions, prev.active_missions) + '</td></tr>' + '<tr><td>Nominal (%)</td><td>' + (p.active_missions ? (p.nominal_count/p.active_missions*100).toFixed(1) + '%' : 'N/A') + '</td><td>-</td></tr>' + '<tr><td>Total Customers</td><td>' + a.total_customers + '</td><td>' + pct(a.total_customers, prev.total_customers) + '</td></tr>' + '<tr><td>Total ARR</td><td>$' + Number(a.total_arr).toLocaleString() + '</td><td>' + pct(a.total_arr, prev.total_arr) + '</td></tr>' + '<tr><td>Churn Risk ARR</td><td>$' + Number(a.churn_risk_arr).toLocaleString() + '</td><td>-</td></tr></table>'; store.last_kpi = { active_missions: p.active_missions, total_customers: a.total_customers, total_arr: a.total_arr }; return [{ json: { html, subject: 'SpaceTech KPI Week of ' + new Date().toISOString().slice(0,10) } }];"
      }
    },
    {
      "name": "Email CEO + BCC Execs",
      "type": "n8n-nodes-base.gmail",
      "parameters": {
        "operation": "send",
        "toList": "ceo@yourcompany.com",
        "bccList": "cto@yourcompany.com, vp-mission-ops@yourcompany.com, vp-sales@yourcompany.com",
        "subject": "={{ $json.subject }}",
        "message": "={{ $json.html }}",
        "emailType": "html"
      }
    },
    {
      "name": "Slack Exec Channel",
      "type": "n8n-nodes-base.slack",
      "parameters": {
        "channel": "#exec-kpis",
        "text": "Weekly KPI posted. Active missions: {{ $node['Fetch Platform Metrics'].json.active_missions }}. Total ARR: ${{ Number($node['Fetch Account Health'].json.total_arr).toLocaleString() }}. Churn risk ARR: ${{ Number($node['Fetch Account Health'].json.churn_risk_arr).toLocaleString() }}."
      }
    }
  ]
}

$getWorkflowStaticData('global') persists the previous week's metrics so WoW deltas auto-calculate without a separate historical table. Run two Postgres queries in parallel to halve execution time.

Implementation Notes for SpaceTech SaaS

ITAR Data Routing: Deploy n8n on AWS GovCloud (us-gov-west-1 or us-gov-east-1) or an Azure Government region to keep all automation data in US-only infrastructure. Configure n8n with N8N_LOG_LEVEL=warn and disable external telemetry (N8N_DIAGNOSTICS_ENABLED=false) to minimize data egress.

CMMC Boundary: Document n8n in your System Security Plan as an internal tool. Since it runs inside your boundary with no SaaS routing, it does not expand your CMMC authorization boundary the way Zapier would.

Telemetry Volume: For high-frequency telemetry (1 Hz+), use the n8n Queue Mode with a Redis broker and multiple worker instances. This handles millions of events per day without memory pressure.

Credential Management: Store all API keys and database credentials in n8n's built-in credential vault (AES-256 encrypted at rest). Never pass credentials through workflow JSON.

Get All 15 Workflows Pre-Built

These 5 workflows are part of a larger library of 15 production-ready n8n automation templates at stripeai.gumroad.com.

Each template includes:

Complete importable workflow JSON
Field-by-field configuration guide
Compliance notes (ITAR, CMMC, FedRAMP, SOC 2)
Tested against n8n 1.x

Browse the full catalog: stripeai.gumroad.com

Have you built n8n automations for satellite ops, launch operations, or ground system SaaS? Share your use cases in the comments — I'd love to see what the community is building.

n8n for MedTech & DeviceTech SaaS: 5 Automations That Accelerate FDA Submissions and Keep Device Data Compliant (Free Workflow JSON)

Alex Kane — Sat, 23 May 2026 14:44:55 +0000

If you build MedTech or DeviceTech SaaS — FDA 510(k)/PMA clearance tools, MDR/IVDR compliance platforms, LIMS for device labs, post-market surveillance software, QMS platforms — your ops team is drowning in regulatory deadlines, adverse event timelines, and device data pipelines.

Zapier and Make.com can automate simple tasks. But they can't handle FDA 21 CFR Part 820 QMSR audit trail requirements, EU MDR vigilance reporting SLAs, or 21 CFR Part 11 electronic records — and they route your clients' device data through third-party cloud infrastructure, which creates regulatory exposure your buyers will flag in every enterprise security review.

n8n self-hosted gives MedTech SaaS teams:

Zero data egress — device data, adverse event reports, MAUDE submissions, trial records stay in your VPC
Permanent audit trail — git-versioned workflow JSON + Postgres logs satisfy FDA 21 CFR Part 11.10(e) record retention requirements; Zapier deletes logs after 30 days
SLA enforcement — EU MDR Art.87 vigilance reporting: 2 days for life loss, 15 days for serious incidents; 21 CFR Part 803: 5-day expedited MDR; n8n enforces these as hard workflow branches, not manual reminders
Cost — 500K tasks/month = Zapier Business $800+/mo vs a $30 VPS running n8n

Here are 5 production workflows for MedTech and DeviceTech SaaS vendors, with import-ready JSON.

The self-hosting case for MedTech SaaS

Factor	n8n self-hosted	Zapier	Make.com
Device data routing	Your VPC only	Zapier cloud	Make cloud
Audit trail retention	Permanent (Postgres)	30 days	30 days
FDA 21 CFR Part 11	Configurable validation	No GxP validation pack	No GxP validation pack
QMSR record control	Self-managed, git-versioned	Vendor-controlled	Vendor-controlled
EU MDR Art.28 sub-processor	None (self-hosted)	Zapier Inc.	Celonis SE
Cost at 500K tasks/mo	~$30/mo VPS	~$800/mo	~$350/mo

When a TIER 1 device OEM's procurement team runs a vendor security review and sees 'your n8n automation SaaS routes device data through Zapier cloud,' that's a blocker. Self-hosted n8n removes it.

Workflow 1: New MedDevice Client Onboarding Drip

What it does: Detects new clients in a Google Sheet, routes them into a tier-specific 3-touch onboarding sequence, and logs every touchpoint to an audit trail.

Trigger: Google Sheets row added (new client signup)

Tiers:

TIER_1_GLOBAL_OEM — Medtronic, Stryker, J&J Device: Enterprise onboarding pack, dedicated CSM intro
TIER_2_SMB_MANUFACTURER — mid-size device manufacturers: standard onboarding + weekly check-in
TIER_3_STARTUP_INNOVATOR — pre-market startups: lighter touch, resource-heavy
TIER_4_ACADEMIC_RESEARCH — university labs: compliance-forward, budget-conscious

{
  "name": "MedTech Client Onboarding Drip",
  "nodes": [
    {
      "parameters": {
        "pollTimes": {"item": [{"mode": "everyMinute"}]},
        "sheetId": {"__rl": true, "value": "YOUR_SHEET_ID", "mode": "id"},
        "sheetName": {"__rl": true, "value": "Clients", "mode": "name"}
      },
      "type": "n8n-nodes-base.googleSheetsTrigger",
      "name": "New Client Trigger",
      "position": [240, 300]
    },
    {
      "parameters": {
        "jsCode": "const tier = $json.company_type?.toUpperCase() || 'TIER_2_SMB_MANUFACTURER';\nconst tierMap = {\n  'TIER_1_GLOBAL_OEM': {label: 'Global OEM', subject: 'Your enterprise onboarding starts now', csmSlack: '#csm-enterprise'},\n  'TIER_2_SMB_MANUFACTURER': {label: 'SMB Manufacturer', subject: 'Welcome to the platform', csmSlack: '#csm-smb'},\n  'TIER_3_STARTUP_INNOVATOR': {label: 'Startup', subject: 'Let's get your device to market faster', csmSlack: '#csm-startup'},\n  'TIER_4_ACADEMIC_RESEARCH': {label: 'Academic', subject: 'Your research automation is ready', csmSlack: '#csm-academic'}\n};\nconst config = tierMap[tier] || tierMap['TIER_2_SMB_MANUFACTURER'];\nreturn [{json: {...$json, tier, ...config, onboardedAt: new Date().toISOString()}}];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Tier",
      "position": [460, 300]
    },
    {
      "parameters": {
        "sendTo": "={{ $json.contact_email }}",
        "subject": "={{ $json.subject }}",
        "message": "Hi {{ $json.contact_name }},\n\nWelcome! Your {{ $json.tier }} onboarding pack is attached.\n\nYour CSM will reach out within 1 business day.\n\nFlowKit Automation Team"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Day 0 Welcome Email",
      "position": [680, 300]
    },
    {
      "parameters": {"amount": 3, "unit": "days"},
      "type": "n8n-nodes-base.wait",
      "name": "Wait 3 Days",
      "position": [900, 300]
    },
    {
      "parameters": {
        "sendTo": "={{ $json.contact_email }}",
        "subject": "Day 3 check-in: any questions on your setup?",
        "message": "Hi {{ $json.contact_name }},\n\nHow is the setup going? Reply with any questions — we typically respond in 2 hours.\n\nFlowKit Team"
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Day 3 Check-in",
      "position": [1120, 300]
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": {"__rl": true, "value": "YOUR_AUDIT_SHEET_ID", "mode": "id"},
        "sheetName": {"__rl": true, "value": "OnboardingAuditLog", "mode": "name"},
        "columns": {"mappingMode": "autoMapInputData"}
      },
      "type": "n8n-nodes-base.googleSheets",
      "name": "QMSR Audit Log",
      "position": [1340, 300]
    }
  ],
  "connections": {
    "New Client Trigger": {"main": [[{"node": "Classify Tier", "type": "main", "index": 0}]]},
    "Classify Tier": {"main": [[{"node": "Day 0 Welcome Email", "type": "main", "index": 0}]]},
    "Day 0 Welcome Email": {"main": [[{"node": "Wait 3 Days", "type": "main", "index": 0}]]},
    "Wait 3 Days": {"main": [[{"node": "Day 3 Check-in", "type": "main", "index": 0}]]},
    "Day 3 Check-in": {"main": [[{"node": "QMSR Audit Log", "type": "main", "index": 0}]]}
  },
  "active": false,
  "settings": {"executionOrder": "v1"}
}

Why it matters: Every onboarding touchpoint is logged with timestamp, tier, and email content — satisfying ISO 13485 §4.2.4 quality record requirements without any manual effort.

Workflow 2: FDA 510(k)/PMA & MDR/IVDR Regulatory Deadline Tracker

What it does: Runs every weekday morning, checks a Sheets-based regulatory calendar, and routes escalating alerts to Slack and email based on days remaining.

Trigger: Schedule (weekdays 8 AM)

Deadlines tracked:

FDA_510K_SUBMISSION — premarket notification due dates
PMA_ANNUAL_REPORT — post-approval study annual reports
MDR_ADVERSE_EVENT_REPORT — 21 CFR Part 803 (5-day/30-day)
EU_MDR_VIGILANCE_REPORT — Art.87: 2-day/15-day/30-day timelines
ISO_13485_SURVEILLANCE_AUDIT — third-party QMS audit schedule
UDI_DATABASE_UPDATE — GUDID submission deadlines
QMSR_ANNUAL_REVIEW — 21 CFR 820.22 quality audit
SOC2_EVIDENCE_COLLECTION — for enterprise SaaS buyers

{
  "name": "FDA/MDR Regulatory Deadline Tracker",
  "nodes": [
    {
      "parameters": {"rule": {"interval": [{"field": "cronExpression", "expression": "0 8 * * 1-5"}]}},
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Weekday 8AM",
      "position": [240, 300]
    },
    {
      "parameters": {
        "operation": "readRows",
        "sheetId": {"__rl": true, "value": "YOUR_REGULATORY_SHEET_ID", "mode": "id"},
        "sheetName": {"__rl": true, "value": "RegulatoryCalendar", "mode": "name"}
      },
      "type": "n8n-nodes-base.googleSheets",
      "name": "Read Regulatory Calendar",
      "position": [460, 300]
    },
    {
      "parameters": {
        "jsCode": "const today = new Date(); const items = [];\nfor (const row of $input.all()) {\n  const d = row.json;\n  const due = new Date(d.due_date);\n  const daysLeft = Math.ceil((due - today) / 86400000);\n  let urgency = null;\n  if (daysLeft < 0) urgency = 'OVERDUE';\n  else if (daysLeft <= 2) urgency = 'CRITICAL';\n  else if (daysLeft <= 7) urgency = 'URGENT';\n  else if (daysLeft <= 14) urgency = 'WARNING';\n  else if (daysLeft <= 30) urgency = 'NOTICE';\n  if (urgency) items.push({json: {...d, daysLeft, urgency}});\n}\nreturn items;"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Urgency",
      "position": [680, 300]
    },
    {
      "parameters": {
        "rules": {"values": [
          {"conditions": {"options": {"leftValue": "={{ $json.urgency }}", "operation": "equals", "rightValue": "OVERDUE"}}, "renameOutput": true, "outputKey": "overdue"},
          {"conditions": {"options": {"leftValue": "={{ $json.urgency }}", "operation": "equals", "rightValue": "CRITICAL"}}, "renameOutput": true, "outputKey": "critical"}
        ]}
      },
      "type": "n8n-nodes-base.switch",
      "name": "Route by Urgency",
      "position": [900, 300]
    },
    {
      "parameters": {
        "select": "channel", "channelId": {"__rl": true, "value": "#regulatory-emergency", "mode": "name"},
        "text": ":rotating_light: OVERDUE: {{ $json.deadline_type }} was due {{ Math.abs($json.daysLeft) }} day(s) ago. Owner: {{ $json.owner }}. Action required NOW."
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack OVERDUE Alert",
      "position": [1120, 200]
    },
    {
      "parameters": {
        "sendTo": "={{ $json.owner_email }}",
        "subject": "OVERDUE: {{ $json.deadline_type }} — Action Required",
        "message": "This regulatory deadline is OVERDUE by {{ Math.abs($json.daysLeft) }} day(s).\n\nDeadline: {{ $json.deadline_type }}\nDue date: {{ $json.due_date }}\nRegulation: {{ $json.regulation }}\n\nImmediate action required."
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Email Owner OVERDUE",
      "position": [1340, 200]
    }
  ],
  "connections": {
    "Weekday 8AM": {"main": [[{"node": "Read Regulatory Calendar", "type": "main", "index": 0}]]},
    "Read Regulatory Calendar": {"main": [[{"node": "Classify Urgency", "type": "main", "index": 0}]]},
    "Classify Urgency": {"main": [[{"node": "Route by Urgency", "type": "main", "index": 0}]]},
    "Route by Urgency": {"overdue": [{"node": "Slack OVERDUE Alert", "type": "main", "index": 0}], "critical": [{"node": "Slack OVERDUE Alert", "type": "main", "index": 0}]},
    "Slack OVERDUE Alert": {"main": [[{"node": "Email Owner OVERDUE", "type": "main", "index": 0}]]}
  },
  "active": false,
  "settings": {"executionOrder": "v1"}
}

Regulatory note: FDA 21 CFR Part 803.17 requires MDR reporting procedures with documented timelines. A missed MDR = FDA warning letter. This workflow makes it impossible to miss — every deadline has an automated escalation path.

Workflow 3: Adverse Event & Medical Device Reporting (MDR) Alert Pipeline

What it does: Receives adverse event webhooks (from your platform's complaint form or device monitoring system), classifies them by FDA/EU MDR reportability, routes to regulatory ops, and logs to a MAUDE-ready audit trail.

Trigger: Webhook (POST from your complaint management system or IoT device health API)

Severity classifications:

FDA_MDR_REPORTABLE_5DAY — malfunction likely to cause serious injury if recurs (21 CFR 803.50)
FDA_MDR_REPORTABLE_30DAY — malfunction, no immediate serious risk
EU_MDR_VIGILANCE_IMMEDIATE — death or unanticipated serious deterioration (Art.87: 2-day window)
EU_MDR_VIGILANCE_15DAY — serious incident (Art.87: 15-day window)
NON_REPORTABLE_WATCH — track internally, does not meet reportability threshold

{
  "name": "Adverse Event & MDR Alert Pipeline",
  "nodes": [
    {
      "parameters": {"httpMethod": "POST", "path": "adverse-event", "responseMode": "responseNode"},
      "type": "n8n-nodes-base.webhook",
      "name": "Adverse Event Webhook",
      "position": [240, 300]
    },
    {
      "parameters": {
        "jsCode": "const e = $json.body || $json;\nconst severity = (e.severity || '').toUpperCase();\nconst death = e.patient_outcome === 'DEATH';\nconst seriousInjury = ['SERIOUS_INJURY', 'HOSPITALIZATION', 'LIFE_THREATENING'].includes(e.patient_outcome);\nconst malfunction = e.event_type === 'MALFUNCTION';\nlet classification;\nif (death || (seriousInjury && e.market === 'EU')) classification = 'EU_MDR_VIGILANCE_IMMEDIATE';\nelse if (seriousInjury && e.market === 'EU') classification = 'EU_MDR_VIGILANCE_15DAY';\nelse if (death || seriousInjury) classification = 'FDA_MDR_REPORTABLE_5DAY';\nelse if (malfunction) classification = 'FDA_MDR_REPORTABLE_30DAY';\nelse classification = 'NON_REPORTABLE_WATCH';\nconst reportDeadline = {\n  'EU_MDR_VIGILANCE_IMMEDIATE': '2 days',\n  'EU_MDR_VIGILANCE_15DAY': '15 days',\n  'FDA_MDR_REPORTABLE_5DAY': '5 days',\n  'FDA_MDR_REPORTABLE_30DAY': '30 days',\n  'NON_REPORTABLE_WATCH': 'N/A'\n}[classification];\nreturn [{json: {...e, classification, reportDeadline, receivedAt: new Date().toISOString()}}];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Classify Reportability",
      "position": [460, 300]
    },
    {
      "parameters": {
        "conditions": {"options": [{"leftValue": "={{ $json.classification }}", "operation": "contains", "rightValue": "REPORTABLE"}]}
      },
      "type": "n8n-nodes-base.if",
      "name": "Is Reportable?",
      "position": [680, 300]
    },
    {
      "parameters": {
        "select": "channel", "channelId": {"__rl": true, "value": "#regulatory-emergency", "mode": "name"},
        "text": ":rotating_light: MDR ALERT: {{ $json.classification }}\nDevice: {{ $json.device_model }} | Patient outcome: {{ $json.patient_outcome }}\nReport deadline: {{ $json.reportDeadline }} | Event ID: {{ $json.event_id }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack Regulatory Emergency",
      "position": [900, 200]
    },
    {
      "parameters": {
        "operation": "insert",
        "schema": {"__rl": true, "value": "public", "mode": "name"},
        "table": {"__rl": true, "value": "maude_audit_log", "mode": "name"},
        "columns": {"mappingMode": "autoMapInputData"}
      },
      "type": "n8n-nodes-base.postgres",
      "name": "MAUDE Audit Log",
      "position": [1120, 300]
    },
    {
      "parameters": {"respondWith": "json", "responseBody": "={{ JSON.stringify({received: true, classification: $json.classification, deadline: $json.reportDeadline}) }}"},
      "type": "n8n-nodes-base.respondToWebhook",
      "name": "ACK 200",
      "position": [1340, 300]
    }
  ],
  "connections": {
    "Adverse Event Webhook": {"main": [[{"node": "Classify Reportability", "type": "main", "index": 0}]]},
    "Classify Reportability": {"main": [[{"node": "Is Reportable?", "type": "main", "index": 0}]]},
    "Is Reportable?": {"main": [
      [{"node": "Slack Regulatory Emergency", "type": "main", "index": 0}],
      [{"node": "MAUDE Audit Log", "type": "main", "index": 0}]
    ]},
    "Slack Regulatory Emergency": {"main": [[{"node": "MAUDE Audit Log", "type": "main", "index": 0}]]},
    "MAUDE Audit Log": {"main": [[{"node": "ACK 200", "type": "main", "index": 0}]]}
  },
  "active": false,
  "settings": {"executionOrder": "v1"}
}

Why this matters: FDA Warning Letters for late MDR reporting are public record and destroy device company relationships. Automation removes human memory from a legally mandated process.

Workflow 4: Device Clinical Trial & Post-Market Surveillance Monitor

What it does: Runs daily, queries a Postgres database of device clinical trial sites and PMS complaint data, flags RED/AMBER sites based on protocol deviations and enrollment shortfalls, and alerts clinical ops.

Trigger: Schedule (weekdays 9 AM)

Required Postgres tables:

CREATE TABLE trial_sites (
  site_id TEXT PRIMARY KEY,
  site_name TEXT,
  pi_email TEXT,
  target_enrollment INT,
  actual_enrollment INT,
  open_deviations INT,
  critical_deviations INT,
  last_updated TIMESTAMPTZ
);

CREATE TABLE pms_complaints (
  complaint_id TEXT PRIMARY KEY,
  device_model TEXT,
  complaint_type TEXT,
  week_of DATE,
  complaint_count INT
);

{
  "name": "Device Trial & PMS Monitor",
  "nodes": [
    {
      "parameters": {"rule": {"interval": [{"field": "cronExpression", "expression": "0 9 * * 1-5"}]}},
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Weekday 9AM",
      "position": [240, 300]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT site_id, site_name, pi_email, target_enrollment, actual_enrollment, open_deviations, critical_deviations, ROUND(actual_enrollment::numeric/NULLIF(target_enrollment,0)*100,1) as enrollment_pct FROM trial_sites WHERE last_updated > NOW() - INTERVAL '7 days'"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Query Trial Sites",
      "position": [460, 300]
    },
    {
      "parameters": {
        "jsCode": "return $input.all().map(item => {\n  const d = item.json;\n  let risk = 'GREEN';\n  if (d.critical_deviations >= 2 || d.enrollment_pct < 60) risk = 'RED';\n  else if (d.critical_deviations >= 1 || d.open_deviations >= 5 || d.enrollment_pct < 80) risk = 'AMBER';\n  return {json: {...d, risk}};\n});"
      },
      "type": "n8n-nodes-base.code",
      "name": "Flag Risk Level",
      "position": [680, 300]
    },
    {
      "parameters": {
        "conditions": {"options": [{"leftValue": "={{ $json.risk }}", "operation": "equals", "rightValue": "RED"}]}
      },
      "type": "n8n-nodes-base.if",
      "name": "RED Sites?",
      "position": [900, 300]
    },
    {
      "parameters": {
        "select": "channel", "channelId": {"__rl": true, "value": "#clinical-ops", "mode": "name"},
        "text": ":red_circle: RED SITE: {{ $json.site_name }}\nEnrollment: {{ $json.enrollment_pct }}% | Critical deviations: {{ $json.critical_deviations }}\nPI: {{ $json.pi_email }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Alert Clinical Ops",
      "position": [1120, 200]
    }
  ],
  "connections": {
    "Weekday 9AM": {"main": [[{"node": "Query Trial Sites", "type": "main", "index": 0}]]},
    "Query Trial Sites": {"main": [[{"node": "Flag Risk Level", "type": "main", "index": 0}]]},
    "Flag Risk Level": {"main": [[{"node": "RED Sites?", "type": "main", "index": 0}]]},
    "RED Sites?": {"main": [[{"node": "Alert Clinical Ops", "type": "main", "index": 0}], []]}
  },
  "active": false,
  "settings": {"executionOrder": "v1"}
}

Extension: Add a second Postgres query on PMS complaint rate per device model and flag any model where complaint rate increased >0.5% WoW — that's an EU MDR Art.83 PMCF signal that requires documented review.

Workflow 5: Weekly MedTech Platform KPI Dashboard

What it does: Every Monday at 8 AM, pulls platform metrics and account health data in parallel from Postgres, builds a color-coded HTML report, and emails it to leadership with a Slack summary.

Trigger: Schedule (Monday 8 AM)

{
  "name": "Weekly MedTech KPI Dashboard",
  "nodes": [
    {
      "parameters": {"rule": {"interval": [{"field": "cronExpression", "expression": "0 8 * * 1"}]}},
      "type": "n8n-nodes-base.scheduleTrigger",
      "name": "Monday 8AM",
      "position": [240, 300]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(DISTINCT client_id) as active_clients, COUNT(DISTINCT CASE WHEN created_at > NOW()-INTERVAL'7d' THEN client_id END) as new_this_week, SUM(mrr_usd) as total_mrr, AVG(api_calls_7d) as avg_api_calls FROM platform_metrics WHERE status='active'"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Platform Metrics",
      "position": [460, 200]
    },
    {
      "parameters": {
        "operation": "executeQuery",
        "query": "SELECT COUNT(*) FILTER (WHERE health_score < 40) as at_risk, COUNT(*) FILTER (WHERE health_score >= 40 AND health_score < 70) as needs_attention, COUNT(*) FILTER (WHERE health_score >= 70) as healthy FROM account_health"
      },
      "type": "n8n-nodes-base.postgres",
      "name": "Account Health",
      "position": [460, 400]
    },
    {
      "parameters": {"mode": "passThrough", "output": "all"},
      "type": "n8n-nodes-base.merge",
      "name": "Merge Data",
      "position": [680, 300]
    },
    {
      "parameters": {
        "jsCode": "const prev = $getWorkflowStaticData('global');\nconst platform = $input.first().json;\nconst health = $input.last().json;\nconst mrrWoW = prev.mrr ? ((platform.total_mrr - prev.mrr)/prev.mrr*100).toFixed(1) : 'N/A';\nprev.mrr = platform.total_mrr;\n$setWorkflowStaticData('global', prev);\nconst html = [\n  '<h2>MedTech Platform KPI — Week of ' + new Date().toDateString() + '</h2>',\n  '<table border=1 cellpadding=6>',\n  '<tr><th>Metric</th><th>Value</th><th>WoW</th></tr>',\n  `<tr><td>Active Clients</td><td>${platform.active_clients}</td><td>—</td></tr>`,\n  `<tr><td>New This Week</td><td>${platform.new_this_week}</td><td>—</td></tr>`,\n  `<tr><td>Total MRR</td><td>$${Number(platform.total_mrr).toLocaleString()}</td><td>${mrrWoW}%</td></tr>`,\n  `<tr style='background:#ffe0e0'><td>At-Risk Accounts</td><td>${health.at_risk}</td><td>—</td></tr>`,\n  `<tr style='background:#fff3cd'><td>Needs Attention</td><td>${health.needs_attention}</td><td>—</td></tr>`,\n  `<tr style='background:#d4edda'><td>Healthy Accounts</td><td>${health.healthy}</td><td>—</td></tr>`,\n  '</table>'\n].join('\\n');\nreturn [{json: {html, platform, health, mrrWoW}}];"
      },
      "type": "n8n-nodes-base.code",
      "name": "Build KPI Report",
      "position": [900, 300]
    },
    {
      "parameters": {
        "sendTo": "ceo@yourcompany.com",
        "bcc": "cto@yourcompany.com,vp-regulatory@yourcompany.com",
        "subject": "Weekly MedTech Platform KPI — {{ $now.format('yyyy-MM-dd') }}",
        "message": "={{ $json.html }}",
        "options": {"appendAttribution": false}
      },
      "type": "n8n-nodes-base.gmail",
      "name": "Email Leadership",
      "position": [1120, 300]
    },
    {
      "parameters": {
        "select": "channel", "channelId": {"__rl": true, "value": "#exec-kpis", "mode": "name"},
        "text": "MedTech Weekly: {{ $json.platform.active_clients }} clients | MRR ${{ $json.platform.total_mrr }} ({{ $json.mrrWoW }}% WoW) | At-risk: {{ $json.health.at_risk }}"
      },
      "type": "n8n-nodes-base.slack",
      "name": "Slack KPI Summary",
      "position": [1340, 300]
    }
  ],
  "connections": {
    "Monday 8AM": {"main": [[{"node": "Platform Metrics", "type": "main", "index": 0}, {"node": "Account Health", "type": "main", "index": 0}]]},
    "Platform Metrics": {"main": [[{"node": "Merge Data", "type": "main", "index": 0}]]},
    "Account Health": {"main": [[{"node": "Merge Data", "type": "main", "index": 1}]]},
    "Merge Data": {"main": [[{"node": "Build KPI Report", "type": "main", "index": 0}]]},
    "Build KPI Report": {"main": [[{"node": "Email Leadership", "type": "main", "index": 0}]]},
    "Email Leadership": {"main": [[{"node": "Slack KPI Summary", "type": "main", "index": 0}]]}
  },
  "active": false,
  "settings": {"executionOrder": "v1"}
}

Extension: Add a third Postgres query pulling adverse event counts from your MAUDE audit log and include a regulatory risk section in the email — flagging any device model with MDR filings this week.

How to set up n8n for MedTech SaaS

# Self-hosted on your own VPS (DigitalOcean, AWS, GCP)
docker run -it --rm \
  -p 5678:5678 \
  -v ~/.n8n:/home/node/.n8n \
  n8nio/n8n

# Cloud option (no self-hosting)
# https://n8n.io/cloud

Import any workflow above: Settings → Import from JSON → paste the JSON.

Ready-to-use automation templates for MedTech SaaS

If you want production-ready templates — pre-built, pre-tested, with setup guides — FlowKit has a full library at stripeai.gumroad.com.

The bundle covers all 5 workflows above plus 10 more for SaaS ops, CRM onboarding, compliance tracking, and KPI reporting — $97 one-time, no subscription.

Which of these workflows would save your team the most time? Drop a comment — I read every one.