Integrating Proofpoint SER

Capabilities

DataGrail's Proofpoint SER integration provides the following capabilities:

Product	Capability
Request Manager	Foundation Connections Transactional Mailer

Before You Start

To successfully configure this integration, please ensure you have sufficient privileges:

• DataGrail User Role: Super Admin, Connections Manager
• Proofpoint SER User Role: Admin

Create an API Key

1. Log in to the Proofpoint Secure Email Relay Portal.
2. Select the App Switcher in the top-left corner and navigate to Services > API Key Management.
3. Select Create Key, then choose Secure Email Relay.
4. Copy the newly created Key and Secret and store them in a secure, temporary location.

warning

The Secret is displayed only once. If you lose it, you will need to create a new key. The Key and Secret expire one year after activation and must be rotated before then to avoid disruption to your transactional mailer.

Connect to DataGrail

1. In DataGrail, navigate to Integrations and select Configure New Integration to search for Proofpoint SER.
2. Enter the Client ID (the Key from Create an API Key) and Client Secret (the Secret from Create an API Key).
3. Under Region, select your SER account's region: US, EU, Canada, or Australia.
4. Select Configure Integration.

Configure Sender Settings

After connecting the integration, configure the Sender Name and Email Address that will appear on all outgoing privacy communications to data subjects.

1. Select Edit Integration
2. Under Sender Configurations, select Add Sender.
3. Enter a Sender Name — this is the display name that will appear in the "From" field of emails sent to data subjects (e.g., The Privacy Team).
4. Enter a From Address — this must be a verified email address or domain within your Proofpoint SER account (e.g., privacy@company.com).
5. Select Send Test Email, then Send Email to confirm your configuration has been successfully connected. You will receive a test email from the address entered.
6. Select Save Sender.

Multi-Brand Accounts

If your account has Multi-Brand enabled, you can add additional senders and associate them to specific groups. When a data subject request is submitted for a group, email communications will be sent from that group's configured sender. If no sender is assigned to a group, the default sender configured when the mailer was connected will be used.

Next Steps

Now that you've successfully connected the integration, check out the following resources:

• Transactional Mailer - Deliverability Testing
• Direct Contact Integrations

Troubleshooting

If you are unable to successfully connect the integration, review these common troubleshooting steps:

Ensure the Region matches your account

The Region selected in DataGrail should match your SER account's actual region. If they don't match, API calls will be routed to the wrong regional endpoint and the connection may not work as expected.

Ensure your Key and Secret have not expired

A Key and Secret expire one year after activation. If your connection stops working, create a new key in Create an API Key and update the integration with the new credentials.

Ensure Required Permissions Are Granted on API Keys/Resources

DataGrail checks required permissions and scopes on API keys/resources used by each integration. If all necessary permissions are not granted, new connections will fail.

Review Required Account Types and User Roles

If users do not have the necessary permissions or the minimum required user role in the connecting system, the connection to DataGrail will fail. Additionally, connections will fail if your account type does not match the one required by the integration.

See Before You Start to review these requirements.