Give users a direct link that takes them straight into creating a Risk Cloud record — no navigation instructions required. Instead of telling someone "log in, navigate the Third-Party Risk application, click Create, select Add New Third Party" you share a single link. When they click it, Risk Cloud handles the rest.
You can share this link anywhere outside (or inside) Risk Cloud — a Slack workflow, a SharePoint or intranet page, an email campaign, or any portal where the person just needs to create one record without learning the platform.
Availability: Record creation URLs are available only for origin steps (the first step of a workflow, where new records begin). The legacy record experience does not support this feature — steps must be on the current, reimagined record experience.
Before you begin
- You need Build permissions to access the step builder and copy a creation URL.
- The link only works for a recipient who has permission to create a record at that step. Recipients without permission see a generic error (see What recipients experience).
- This URL should not be used for Public Steps
- A creation URL exists for every origin step — there's nothing to activate or configure.
- The URL is generated by Risk Cloud; it is not configurable or editable.
- This URL can only be
Copy a record creation URL
- Open the workflow in the builder and select the origin step for which users will create a record.
- In the step builder, locate the creation URL field, displayed just below the step description. It appears the same way a public access / token link does.
- Click Copy to copy the URL to your clipboard.
- Paste the link wherever you want to distribute it — a Slack message, an intranet page, an email, or another system.
Set the welcome message recipients see
Before a record is created, recipients see a welcome modal that introduces what they're about to do. The record isn't created until they click Begin.
The modal's text is controlled by the step description on the origin step:
- In the step builder, open the origin step.
- Enter the message you want recipients to see in the step description field. Keep it action-oriented — for example, "You're about to submit a third-party risk request. Click Begin to get started."
- Save the step.
What recipients experience
When someone clicks a record creation URL:
- If they aren't signed in, they're prompted to log in first, then returned to the link automatically — they don't have to click it again.
- They see the welcome modal with the message you configured.
- When they click Begin, the record is created and they land on the full record page, ready to complete and submit.
If the recipient doesn't have permission, or the link is invalid (for example, the step was deleted), they see a single generic error message. Risk Cloud intentionally does not distinguish between "no permission" and "doesn't exist," so the link never reveals whether a given record or step exists.
Considerations
- Origin steps only. Creation URLs exist only for origin steps — the step where records begin — not for steps in the middle of a workflow.
- Permissions still apply. The URL is a shortcut, not a bypass. Recipients must already have permission to create records at that step.
- The welcome modal always appears. Every recipient who arrives via the link sees it before the record opens.
- One record per click-through. The link starts a new record each time it's used and completed.
- A record is not created until user clicks the create button. This is intentional to prevent the errant creation of records
Frequently asked questions
Who can access a record with this link?
Any internal user who has a Risk Cloud login and permission to create records at the step. For collecting information from people outside your organization or without logins, use public records instead.
How is this different from public record links?
Public record links are for external, unauthenticated submissions (for example, a whistleblower form). Record creation URLs are for internal, authenticated users — the recipient logs in and creates a normal record they own.
What happens if I delete the origin step later?
Existing links to a deleted step will show the generic error message. Point people to a different origin step's creation URL instead.
Can I pre-fill fields in the record through the URL?
No. The link takes the recipient to a new, empty record at the step; they fill it out from there. However, users can use Spark AI autofill to populate fields once they're in the record.
Will users see the welcome modal every time they create a record?
No — the welcome modal only appears when a user reaches the record via a creation URL. Users who create a record the usual way (for example, the create record button on their home page) won't see it.
Related articles
- Public Records — for external, unauthenticated submissions