Webhooks: react to compliance events in real time

Register a webhook under Settings → API keys & webhooks so downstream tools react in real time instead of polling. Webhooks are a Growth feature and up, the same as API keys.

Register a webhook

1. Paste your endpoint URL (e.g. https://your-server.com/webhook).
2. Click Add. A signing secret is shown once — copy it.
3. Verify each delivery: payloads are HMAC-SHA256 signed with that secret. Failed deliveries retry 3× with backoff, and the recent-delivery list shows status codes so you can debug.

Events you can subscribe to

system.created, system.classified, obligation.status_changed, obligation.overdue, evidence.uploaded, form.completed, incident.created, incident.deadline_approaching.

Use these to post to Slack when an incident deadline approaches, open a ticket when an obligation goes overdue, or sync classification changes into your own systems of record.