Every time an Order changes its status, {{tenantCompany}} will send a webhook notification to the URLs provided by the Merchant for such purpose. Those URLs need to be configured at {{tenantCompany}}'s back-office.

The request will be sent via HTTPS (TLS 1.2 or newer required), hence a valid SSL certificate by trusted CA (Certificate Authority) is mandatory.

The information (payload) will be sent in the body of a POST request and will be formatted in JSON. The payload will follow the same structure as per the response to the [GetOrder](/reference/collections#collections-order-get) details end point.

Identical to the API endpoints - the payload will be encrypted (using your certificate) and signed (using {{tenantCompany}}'s certificate). [Read more about handling the response](/reference/getting-started#handle-a-response).

<div class="hint">
<b>Hint:</b> {{tenantCompany}} will also generate and send a X-Request-ID. This remains the same between requests of same state. If you receive a request with an X-Request-ID you've already successfully processed, return HTTP 200 OK.
</div>