Connecting Resend
- 1As the workspace owner, open Settings → API & Integration.
- 2Paste your Resend API key and sending details.
- 3From then on, invoices and reminders send from your verified address.
Connecting credentials is an ownership concern — only the workspace owner can view or change them, deliberately not a module grant.
How your key is protected
- Keys are encrypted with AES-256-GCM before they ever reach the database — a stolen dump yields nothing usable.
- The key is never returned to a browser; only the last four characters are shown, for masked display.
- Saving with a blank key field means "keep the existing one" — there's no code path that round-trips a secret to a client.
Who can send with it
At send time, Flowpera resolves the key server-side: your workspace's own key first, then the platform key, otherwise it fails loudly and logs against the invoice.
A manager with invoice access can send through the owner's connected account without ever being handed the key — resolution happens on the server, so the credential stays invisible while remaining usable.
Connection status
A connection status is surfaced on the invoice create, invoice settings and workspace settings screens. It has three states:
A healthy key is in place — nothing to do.
No key of your own, but the platform address can still send.
No key and no fallback — email won't reach the client until you connect one.
The layer is provider-agnostic. Stripe connects the same way, for payments — with keys encrypted identically — so you can sell on a storefront, charge on forms and let clients pay invoices online. See the Products, Storefront & Payments guide. Newsletter automation is next on the roadmap.