Webhooks

Webhooks allow you to receive HTTP POST requests when specific events occur. Instead of polling the API, your application is notified immediately when data changes.

Revuloop supports 20+ event types across responses, survey lifecycle, smart sessions, analytics, and respondents. Webhooks require HTTPS endpoints and can be filtered by survey.

Signature Verification

All webhook requests include an HMAC-SHA256 signature in the X-Webhook-Signature header. Verify this signature to ensure the request is from Revuloop.

import crypto from 'crypto';

function verifyWebhookSignature(
  payload: string,
  signature: string,
  secret: string
): boolean {
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

Retry Policy

If your endpoint returns a non-2xx status code, we'll retry the delivery with exponential backoff:

After 5 failed attempts, the delivery is marked as failed. You can view delivery history and manually retry from the API.