Webhook Events
The four production webhook events: documented, takedown_requested, certificate_renewed, records_inspected.
EZ2257 delivers signed webhook events via HTTP POST to your callbackUrl. All webhooks are HMAC-signed and retried on delivery failure.
Every event uses the standard envelope — switch on type and read the event-specific fields from data:
{
"id": "evt_01HZABC...",
"type": "production.documented",
"created": 1714000000,
"data": { ... }
}production.documented
Fires when a producer completes documentation and the production transitions to documented status. The payload includes the freshly minted compliance certificate — store it.
{
"id": "evt_01HZABC...",
"type": "production.documented",
"created": 1714000000,
"data": {
"productionId": "prod_abc123",
"performerCount": 3,
"documentedAt": "2026-04-24T18:00:00Z",
"certificate": "eyJhbGc..."
}
}production.takedown_requested
Fires when a performer submits a removal request via the EZ2257 portal. Your platform must remove the content from all public surfaces by removalDeadline (7-day VIRP SLA). The performerEmail is a SHA-256 hex hash — use it to look up content without exposing raw PII.
{
"id": "evt_01HZABC...",
"type": "production.takedown_requested",
"created": 1714000000,
"data": {
"productionId": "prod_abc123",
"performerEmail": "b94d27b9934d3e...",
"requestedAt": "2026-04-24T18:00:00Z",
"removalDeadline": "2026-05-01T18:00:00Z"
}
}The certificate is not revoked at this point — revocation happens when EZ2257 admin confirms the takedown. Begin your removal process immediately on this webhook; do not wait for CRL confirmation.
production.certificate_renewed
Fires on annual re-attestation. The old certificate is revoked and a new one is issued. Replace your stored certificate with newCertificate.
{
"id": "evt_01HZABC...",
"type": "production.certificate_renewed",
"created": 1714000000,
"data": {
"productionId": "prod_abc123",
"newCertificate": "eyJhbGc...",
"previousCertificateExpiresAt": "2027-04-24T18:00:00Z"
}
}production.records_inspected
Fires when a federal inspector accesses the production records via the EZ2257 inspection portal. No action required — useful for your own compliance audit log.
{
"id": "evt_01HZABC...",
"type": "production.records_inspected",
"created": 1714000000,
"data": {
"productionId": "prod_abc123",
"inspectedAt": "2026-04-24T18:00:00Z",
"inspectorAgency": "FBI"
}
}