Illizeo — Header EN (preview mega-menus)
Login Try for free →

Platform · Webhooks

Webhooks: Illizeo tells you

An API token lets a third-party tool read; a webhook notifies it. Subscribe an https endpoint of your information system to HR events: each time one happens, Illizeo sends it a signed message.

Try for freeTalk to us

14 events in 6 families

Employees
employee.created created · employee.updated updated · employee.contract_ended contract ended
Absences
absence.requested requested · absence.approved approved · absence.rejected rejected · absence.cancelled cancelled
Time and attendance
attendance.day_closed attendance day closed
Documents
document.uploaded uploaded · document.generated generated
Signatures
signature.completed completed · signature.declined declined · signature.cancelled cancelled
Scheduled exports
export.ready file ready to download

A subscription listens to one event, a whole family (employee.*) or everything (*). The “Send a test” button delivers a ping message to check your receiver.

What a message contains

Identifiers, not sensitive data

The message carries a unique ID, the event name, its date, your workspace and identifiers and statuses. Never a social security number, a salary or an attachment: your system fills in the rest by reading the API with its token.

A signature to verify

Header Illizeo-Signature: t=…,v1=…: an HMAC-SHA256, with the subscription secret, of the timestamp, a dot and the raw body received. Compare in constant time and reject an old timestamp (5 minutes recommended) to block replays.

POST https://your-system.example/illizeo
Illizeo-Event: absence.approved
Illizeo-Event-Id: 6f1c…
Illizeo-Delivery: 4821
Illizeo-Signature: t=1791820800,v1=5d2a…

{"id":"6f1c…","event":"absence.approved","occurred_at":"2026-10-12T09:14:03+02:00","tenant":"acme","data":{"absence_id":912,"employee_id":148,"absence_type_id":3,"from":"2026-10-20","to":"2026-10-24","status":"approved"}}

Delivery and reliability

Endpoint
https required. Internal network addresses are refused and redirects are not followed.
When it is sent
After the record is committed: a cancelled change sends nothing. A webhook never makes an HR record fail.
Timeout
10 seconds per attempt. Any 2xx response counts as received.
Retries
6 attempts in total: immediately, then after 1 min, 5 min, 30 min, 2 h and 12 h. After that the delivery is abandoned and can be retried by hand.
Deactivation
A subscription failing continuously for 72 hours is deactivated, and its creator is notified.
Log
Every delivery is logged (response code, duration, error) for 30 days.
Secret
One secret per subscription, which can be rotated at any time.

Webhooks are set up in your Illizeo workspace (Settings menu), with two separate permissions: view and manage. They depend on your subscription. To read the data itself, see the REST API.

Plug your tools into HR events

Talk to us