At any change of disbursement request state, {{tenantCompany}} will send a webhook notification to the URLs registered. The request will be done via HTTPS (TLS 1.2 or newer required) and a valid SSL certificate by a trusted CA (Certificate Authority) is mandatory.


The payload will be sent as the request body and will be formatted in either JSON or XML (if integrating our ISO 20022 XML API).


Hint: {{tenantCompany}} will also generate and send a X-Request-ID. This remains the same between requests of the same state. If you receive a request with an X-Request-ID you have already successfully processed, return HTTP 200 OK.

## PKCS#7 Webhooks

Identical to the API endpoints - the webhook payload will be encrypted (using your X.509 certificate) and signed (using {{tenantCompany}}'s certificate). Read more about decrypting at Handle a response.