Alvys Webhooks Now Available for Tender Lifecycle Events

What’s New?

Alvys now supports Webhooks — a secure way to receive real-time event notifications directly from Alvys to your system.

Instead of polling the API for updates, your system can now subscribe to events and receive them automatically via secure HTTPS calls.

In this initial release, Webhooks support tender-related events only. Additional event domains (such as loads or trips) will be introduced in future releases.

This version establishes the foundation layer for real-time event distribution in Alvys.

What You Can Do

With Webhooks, you can:

  • Receive real-time tender lifecycle events
  • Automatically trigger workflows in your system
  • Improve integration speed and responsiveness

Included in This Release

Event Delivery

Alvys sends HTTPS POST requests to your configured endpoint whenever a subscribed tender event occurs.

Each delivery includes:

  • Event type
  • Unique event ID
  • Timestamp
  • Secure HMAC signature

Webhooks use an at-least-once delivery model with automatic retries to ensure reliability.

Automatic Retries

If your endpoint is temporarily unavailable, Alvys will retry delivery automatically.

Each event can be attempted up to four times.

Retries occur when:

  • Your endpoint returns a server error (5xx)
  • A timeout occurs
  • A temporary network failure happens

Retries do not occur for permanent client errors (most 4xx responses).

Security & Verification

Webhooks include:

  • HMAC-SHA256 signature verification
  • Replay protection using timestamps
  • HTTPS-only delivery
  • Endpoint ownership verification during setup

This ensures events are authentic and securely transmitted.

Why This Matters

Webhooks enable real-time, event-driven integrations between Alvys and your systems.

This release lays the foundation for:

  • EDI over API integrations
  • Automated tender workflows
  • Faster operational response
  • Secure third-party integrations

Future releases will expand webhook support to additional business domains.

Documentation

For full implementation details, please refer to:

These guides cover subscription setup, retry behavior, auto-disable rules, signature validation, and best practices for building robust integrations.