Email & Notification Settings

How Email Works in SecBoard

SecBoard uses a two-layer model: a Mail Server defines the SMTP/IMAP connection (host, port, TLS), and a Mail Account ties a sender address and password to that server. Multiple accounts can share one server.

Step 1 — Add a Mail Server

Go to App Conf → Mail Servers → Add (/secboard_admin/app_conf/mailserver/add/).

SMTP Settings

IMAP Settings (optional)

The IMAP section is collapsed by default and is optional. Fill it in only if a module needs to read incoming email (e.g. for reply-based workflows).

Step 2 — Add a Mail Account

Go to App Conf → Mail Accounts → Add (/secboard_admin/app_conf/mailaccount/add/).

Verify with "Send test email"

After saving the account, go back to the Mail Accounts list, select the new account's checkbox, choose "Send test email" from the actions dropdown, and click Go. The system sends a plain-text test message from the account to itself. Check the inbox to confirm delivery.

Step 3 — Assign Accounts to Features

Several places in the platform need to know which account to use for sending. Configure each one that applies to your deployment:

Contact Form Auto-Reply

In App Conf → Contact Settings → Auto-Reply Settings:

• Toggle Enable Contact Auto-Reply to send an automatic acknowledgement when a visitor submits the contact form.
• Set Auto-Reply Email Account to the Mail Account that should appear as the sender.
• Customise Auto-Reply Subject and Auto-Reply Body using the {name} and {subject} placeholders.

# Example subject
Thank you for contacting {subject} support, {name}!

# Example body
Dear {name},

We received your message "{subject}" and will get back to you within one business day.

Best regards,
The SecBoard Team

Risk Report Emails

In App Risk → Risk Report Email Config (/secboard_admin/app_risk/riskreportemailconfig/):

• Send Email — global on/off switch for all risk report emails.
• Use Default Email Settings — when enabled, Django's default sender is used; when disabled, the Mail Server and Mail Account fields below it take effect.
• Default Subject / Body — template text for report delivery emails.

Use the "Send test email to me" action in that admin list to verify delivery to your own address.

Individual Scheduled Reports can override the global config with their own Mail Server and Mail Account fields.

Access Request Notifications

In App Access → Email Notification Config (/secboard_admin/app_access/emailnotificationconfig/) you can create one or more notification configurations (with priority ordering) that control:

• Which events trigger an email (request created, status changed, admin status changed)
• Who receives the notification (owners, administrators, requester, approver, third-party)
• Which Mail Account to use for sending
• Optionally, custom HTML email templates per event type
• Scoping to specific companies or information systems

Email Log

Every email sent or received through SecBoard is logged in App Conf → Emails (/secboard_admin/app_conf/email/). Each record shows the account used, sender, recipient, subject, body, date, and read status. Use it to troubleshoot delivery problems.

Setup Checklist

Next Steps