Alvys Webhooks Now Available for Tender Lifecycle Events
What’s New?
Alvys now supports Webhooks — a secure way to receive real-time event notifications directly from Alvys to your system.
Instead of polling the API for updates, your system can now subscribe to events and receive them automatically via secure HTTPS calls.
In this initial release, Webhooks support tender-related events only. Additional event domains (such as loads or trips) will be introduced in future releases.
This version establishes the foundation layer for real-time event distribution in Alvys.
What You Can Do
With Webhooks, you can:
- Receive real-time tender lifecycle events
- Automatically trigger workflows in your system
- Improve integration speed and responsiveness
Included in This Release
Event Delivery
Alvys sends HTTPS POST requests to your configured endpoint whenever a subscribed tender event occurs.
Each delivery includes:
- Event type
- Unique event ID
- Timestamp
- Secure HMAC signature
Webhooks use an at-least-once delivery model with automatic retries to ensure reliability.
Automatic Retries
If your endpoint is temporarily unavailable, Alvys will retry delivery automatically.
Each event can be attempted up to four times.
Retries occur when:
- Your endpoint returns a server error (5xx)
- A timeout occurs
- A temporary network failure happens
Retries do not occur for permanent client errors (most 4xx responses).
Security & Verification
Webhooks include:
- HMAC-SHA256 signature verification
- Replay protection using timestamps
- HTTPS-only delivery
- Endpoint ownership verification during setup
This ensures events are authentic and securely transmitted.
Why This Matters
Webhooks enable real-time, event-driven integrations between Alvys and your systems.
This release lays the foundation for:
- EDI over API integrations
- Automated tender workflows
- Faster operational response
- Secure third-party integrations
Future releases will expand webhook support to additional business domains.
Documentation
For full implementation details, please refer to:
These guides cover subscription setup, retry behavior, auto-disable rules, signature validation, and best practices for building robust integrations.