Webhooks push events to your systems the moment they happen, so you can drive custom workflows without polling the API.
Available events
| Event | Fired when |
|---|
dsr.created | A new data subject request is received |
dsr.verified | Identity verification completes |
dsr.completed | A request is fulfilled and closed |
dsr.deadline_approaching | A request nears its regulatory deadline |
scan.completed | A website scan finishes |
scan.new_trackers | A scan detects trackers not seen before |
finding.created | A new DSPM or assessment finding is raised |
consent.recorded | A consent decision is recorded |
vendor.risk_changed | A vendor’s risk profile changes materially |
Setting up an endpoint
Create the endpoint
Under Settings → Webhooks, add an HTTPS URL and select the events to subscribe to.
Verify signatures
Every delivery includes a signature header computed with your endpoint’s signing secret. Verify it before trusting the payload.
Respond quickly
Return a 2xx within 10 seconds. Do heavy processing asynchronously after acknowledging.
Delivery example
{
"id": "evt_7d3f01ac",
"type": "dsr.completed",
"createdAt": "2026-07-24T09:15:31Z",
"data": {
"requestId": "dsr_42b8",
"requestType": "erasure",
"regulation": "gdpr",
"closedAt": "2026-07-24T09:15:29Z"
}
}
Retries and monitoring
Failed deliveries are retried with exponential backoff for up to 24 hours. The delivery log shows every attempt with status code and response time, and endpoints failing consistently are flagged in the dashboard.
Use dsr.deadline_approaching to page your on-call privacy owner through your incident tooling — deadline misses are the most avoidable compliance failure.
