Which events fire webhooks?

Order events, stock events, workflow state changes, and compliance milestones (depollution complete, CoD issued, audit export run).

How are webhook payloads secured?

Every payload is signed with HMAC using a per-endpoint secret. Consumers verify the signature before acting on the event.

What happens if my endpoint is unreachable?

Deliveries retry with exponential back-off for a configurable window, then dead-letter. The dead-letter queue is visible per tenant and is replayable from the UI.

Integration · Platform

Webhooks

Webhooks let downstream systems react to Sustain360 events without polling. Outbound deliveries are signed, retried with exponential back-off, and dead-lettered if a target stays unreachable.

Specification

How the integration runs

Direction of data flow: Outbound (Sustain360 → external)
Sync cadence: Real-time on event.
Authentication: Signed payload (HMAC), per-endpoint secret.
Setup time: One to two hours per consumer.
What syncs: Order events
Stock events
Workflow state changes
Compliance milestones