Register an HTTPS endpoint and choose your events. GewapeSign sends a signed JSON message for each one.
Events
document.sent, document.viewed, document.signed, document.declined,
document.completed, document.expired, document.voided.
Verify every message
Each request carries GewapeSign-Signature: t=<unix time>,v1=<hex>, an HMAC-SHA256 of
<t>.<raw body> with your endpoint's secret. Reject messages with a wrong signature or an old
timestamp. GewapeSign-Delivery is unique per event; use it to ignore repeats.
Retries
Any non-2xx response is retried with increasing delays over several hours. Every attempt appears in the delivery log, and you can resend any delivery from the API or from Developers in the app.