Secure workflows with rule-based data access security

A system comprising:

• one or more processors;
• and
• one or more storage devices storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, from a client device, a digital component request comprising a set of data;
• and
• in response to receiving the digital component request:
• identifying a multi-stage workflow for selecting a digital component from candidate digital components of multiple content platforms based on the set of data, wherein the multi-stage workflow comprises one or more customizable stages;
• executing each stage of the multi-stage workflow in a sequence defined by the multi-stage workflow, each stage comprising executable instructions, the executing comprising:
• for each customizable stage:
• initiating, for each content platform, an isolated environment in which executable instructions provided by the content platform is executed;
• receiving, from at least one isolated environment, a data access request requesting data stored outside of the isolated environment;
• for each data access request:
• obtaining at least one access rule that is associated with the data access request;
• processing each access rule that is associated with the data access request to determine whether to return, to the isolated environment, the data requested by the data access request;
• and
• whenever it is determined to return the data requested by the data access request, providing the data to the isolated environment;
• receiving output data from one or more of the customizable stages;
• and
• selecting, using a selection stage of the multi-stage workflow and based on the output data received from each of the one or more customizable stages, the digital component from the candidate digital components;
• and
• sending the digital component to the client device.

One or more non-transitory computer-readable storage media storing instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:

• receiving, from a client device, a digital component request comprising a set of data;
• and
• in response to receiving the digital component request:
• identifying a multi-stage workflow for selecting a digital component from candidate digital components of multiple content platforms based on the set of data, wherein the multi-stage workflow comprises one or more customizable stages;
• executing each stage of the multi-stage workflow in a sequence defined by the multi-stage workflow, each stage comprising executable instructions, the executing comprising:
• for each customizable stage:
• initiating, for each content platform, an isolated environment in which executable instructions provided by the content platform is executed;
• receiving, from at least one isolated environment, a data access request requesting data stored outside of the isolated environment;
• for each data access request:
• obtaining at least one access rule that is associated with the data access request;
• processing each access rule that is associated with the data access request to determine whether to return, to the isolated environment, the data requested by the data access request;
• and
• whenever it is determined to return the data requested by the data access request, providing the data to the isolated environment;
• receiving output data from one or more of the customizable stages;
• and
• selecting, using a selection stage of the multi-stage workflow and based on the output data received from each of the one or more customizable stages, the digital component from the candidate digital components;
• and
• sending the digital component to the client device.