Send responses to other tools

A connection (also called a webhook) sends each new response of a form to another tool: Zapier, Make, a Google Sheet, or any address that starts with https://. Connections will be part of the Pro plan; during early access they are open to every account (see Plans and credits).

Before you start

• Two-step verification is required to add, change or turn on a connection, because responses leave Fillfold. See Create your account and turn on two-step verification.
• A form can have at most 2 connections. A new connection starts off.
• We email you each time a connection is added, changed, turned on, or gets a new secret.

Add a connection

1. Open the form and choose Connections.
2. Paste the address your tool gives you in Address (URL).
3. Tick I understand where the responses go, then choose Add connection.
4. Copy the secret shown under Signing secret, shown only once and keep it in your tool.
5. Choose Send a test: invented sample answers are sent, never a real response.
6. Choose Turn on.

The Recent deliveries list shows the last 50 deliveries, kept for 30 days, with Retry now for a failed one.

Zapier and Make

• Zapier: create a Zap with the trigger Webhooks by Zapier, event Catch Hook, and paste its URL in Fillfold. Check that your Zapier plan includes Webhooks by Zapier.
• Make: add the module Webhooks, then Custom webhook, and paste its address.

Each request holds the form, the response date, the questions (fields) and the answers (answers). Numbers arrive as numbers, tables as rows, files as names only.

When a client accepts a quote you prepared, your connections also receive the event quote.accepted, with the signed PDF behind document.url if you include PDF links (see Send a quote for acceptance).

Google Sheets

1. In your sheet, open Extensions, then Apps Script.
2. In Fillfold, choose Copy the Google Sheets script and paste it.
3. Put your signing secret in the line const SECRET.
4. Choose Deploy, New deployment, type Web app, run as you, access for anyone. Copy the web app URL.
5. Add it as a connection and tick Put the signature in the body (for Google Apps Script).

The script checks the signature, skips a response it already has, and puts an apostrophe before any text starting with =, +, - or @, so an answer can never run as a formula in your sheet.

Save the PDF to Google Drive or Dropbox

Tick Include a link to the PDF. Each response then comes with document.url, a private link that works for 24 hours and 5 downloads. In Zapier, add a Google Drive or Dropbox Upload File step and give it that link as the file. In Make, add HTTP, Get a file, then the upload module. Copies saved there are outside Fillfold's deletion settings (see privacy and terms).

Check the signature

Every request has a header Fillfold-Signature: t=1761400000,v1=.... Compute an HMAC-SHA256 of t, a dot and the raw body, with your signing secret as the key, and compare it with v1. Refuse requests older than 5 minutes. A response sent twice keeps the same id.

If deliveries fail

Failed deliveries are tried again for about 2 days. After 3 abandoned deliveries in a row, the connection is turned off and you get an email. Fix the address, send a test, then turn it on again.