{
  "note": "Every event a subscription can name. Delivery is at least once (dedupe by event_id), unordered, success is HTTP 2xx within timeout_seconds; after max_attempts the delivery is recorded as dead. Subscriptions are managed by a signed-in person, not by a personal token. Prose: /docs/webhooks.",
  "events": [
    {
      "event": "design.changed",
      "sensitivity": "public",
      "owner_only": false
    },
    {
      "event": "key.issued",
      "sensitivity": "pii",
      "owner_only": true
    },
    {
      "event": "lead.created",
      "sensitivity": "pii",
      "owner_only": true
    },
    {
      "event": "order.created",
      "sensitivity": "pii",
      "owner_only": true
    },
    {
      "event": "order.paid",
      "sensitivity": "financial",
      "owner_only": true
    },
    {
      "event": "order.status_changed",
      "sensitivity": "pii",
      "owner_only": true
    },
    {
      "event": "pricing_rule.activated",
      "sensitivity": "commercial",
      "owner_only": true
    },
    {
      "event": "pricing_rule.changed",
      "sensitivity": "commercial",
      "owner_only": true
    },
    {
      "event": "product.updated",
      "sensitivity": "public",
      "owner_only": false
    },
    {
      "event": "promotion.changed",
      "sensitivity": "commercial",
      "owner_only": true
    },
    {
      "event": "review.created",
      "sensitivity": "public",
      "owner_only": false
    }
  ],
  "delivery": {
    "max_attempts": 8,
    "backoff_seconds": [
      1,
      5,
      30,
      120,
      600,
      1800,
      1800
    ],
    "timeout_seconds": 10,
    "signature": "X-Vizen-Signature: sha256=hex(HMAC-SHA256(secret, raw body))",
    "headers": [
      "X-Vizen-Event",
      "X-Vizen-Event-Id",
      "X-Vizen-Delivery-Id",
      "X-Vizen-Attempt",
      "X-Vizen-Timestamp",
      "X-Vizen-Signature"
    ],
    "test_event": "webhook.test",
    "max_events_per_subscription": 32,
    "follow_redirects": false
  }
}