Sign inBook a demo
Features/Shared/Webhooks

Webhooks.

Send events to your own systems as they happen.

Send SAMRISK events to your other tools.

£10 a month on its own, or included in Business

Portfolio
Halden Estates
Shown
Illustrative

What it does.

  1. Pick the events you care about.

    Building created, task completed, audit completed, visitor signed in, incident reported. Choose which of the 98 events each webhook receives.

    • Subscribe to single events, or a whole group at once
    • Several webhooks per company
    • Send a test from settings to check your endpoint
    • Pause and resume without deleting
  2. Every payload signed.

    Each request carries an X-Webhook-Signature header: an HMAC-SHA256 of the body, made with your webhook's secret. Check it to know the request came from SAMRISK.

    • HMAC-SHA256 signature in X-Webhook-Signature
    • X-Webhook-Event and X-Webhook-Timestamp headers
    • A secret for each webhook, shown when you create it
    • HTTPS addresses only
  3. Every delivery logged.

    Deliveries go out from a queue checked every 30 seconds, with a 10-second timeout. Each attempt is logged with its status code, response and time taken. There are no automatic retries.

    • The last 20 deliveries for each webhook in settings
    • Status code, response body and duration for each
    • A failure count that rises with each failed delivery
    • The count resets on the next successful delivery

Real screens

In the app.

How webhooks looks in SAMRISK, on the example estate.

app.samrisk.co.uk/company-settings/webhooks
Send events to your own systems, signed, with every delivery logged. Illustrative records.
WebhooksSend events to your own systems, signed, with every delivery logged. Illustrative records.

The example estate; records are illustrative.

Connects to.

Feeds it

  • Every tool's eventsHands it records.
WebhooksShared

It feeds

  • Your own systemsWhere it sends them, as they change.

Questions.

How do I verify the signature?

Compute an HMAC-SHA256 of the raw request body with your webhook's secret and compare the hex result with the X-Webhook-Signature header.

What's in the payload?

JSON with event, data, timestamp and company_id. The data holds the record's id, its table, the operation and a few key fields.

What if my endpoint is temporarily down?

The delivery fails, it is logged with its response, and the webhook's failure count goes up. There are no retries, so that event is not sent again. The count resets on the next successful delivery.

Is there a Zapier app?

No. You can point a webhook at any HTTPS address that accepts a POST, including a Zapier catch hook.

Is there a REST API for reading data?

Not yet. A public API is coming. For now, use webhooks to send events to other systems, and export buildings, tasks, audits, documents, incidents, items, visitors and material call-offs to CSV or XLSX.

Related tools.

  • TasksEvery action from every tool, on one board, with owners and due dates.Free
  • DocumentsVersioned files and folders, the evidence behind everything.Free
  • CalendarInspections, deadlines and visits from every tool in one calendar, with an iCal feed.Free
  • TrainingWho is certified for what, and when it runs out.In Business, or £15

Integrate SAMRISK with your stack.