Production Webhook Events
The four production events: documented, takedown_requested, certificate_renewed, records_inspected.
These four events cover the Verification API. The full event reference documents every Easy2257 event, and Webhooks covers the envelope, signatures, and retries.
Deliveries go only to endpoints registered at partner.easy2257.com/webhooks. The callbackUrl field on a resource is stored for your reference and subscribes you to nothing.
Every delivery uses the same envelope. Switch on type and read the event fields from data, and deduplicate on id:
{
"id": "evt_m2k9x1_a7f3qz",
"type": "production.documented",
"created": 1714000000,
"data": { }
}production.documented
Documentation completed and the production moved to documented. The payload carries the compliance certificate that now stands, so store it. This event fires again when a producer reissues the sealed package after a correction: the certificate on the newer delivery replaces the one you hold, and the one it replaces is marked superseded, not revoked.
{
"productionId": "cmd3p8w1k0002qz8h9j4r7v5s",
"performerCount": 3,
"documentedAt": "2026-04-24T18:00:00Z",
"certificate": "eyJhbGc..."
}production.takedown_requested
A depicted person submitted a removal request through the Easy2257 portal. Remove the content from every public surface by removalDeadline.
{
"productionId": "cmd3p8w1k0002qz8h9j4r7v5s",
"removalRequestId": "cmd7v3n8y0001qz8h2b6k4m1p",
"legalBasis": "NCII_TAKE_IT_DOWN",
"performerEmailHash": "b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9",
"requestedAt": "2026-04-24T18:00:00Z",
"removalDeadline": "2026-04-26T18:00:00Z"
}Despite the name, performerEmailHash is the SHA-256 hex digest of the lowercased, trimmed address the claimant filed the removal request with. The claimant is whoever submitted the request: often the depicted person, but possibly a parent, attorney, or other representative, and possibly the performer using a different address than the one you hold. Hashing your own records and comparing digests is therefore a correlation hint, not an identifier: a miss does not mean the request is invalid. productionId and removalDeadline are what govern the takedown. No raw address is ever sent, and there is no lookup that turns the hash back into an address.
removalDeadline reflects the legal basis: 48 hours for NCII_TAKE_IT_DOWN, 72 hours for NCII_STATE, 7 business days for DMCA, AN_5196_APPEAL, and OTHER.
The certificate is not revoked at this point. Revocation follows when an Easy2257 admin confirms the takedown was actioned. Start removing on this event; do not wait for the revocation list to confirm it.
production.certificate_renewed
Annual re-attestation superseded the old certificate and issued a new one. Replace your stored copy with newCertificate; the content stays up, and the superseded certificate does not enter the revocation list.
{
"productionId": "cmd3p8w1k0002qz8h9j4r7v5s",
"newCertificate": "eyJhbGc...",
"previousCertificateExpiresAt": "2027-04-24T18:00:00Z"
}production.records_inspected
A federal inspector accessed the records for that production through the Easy2257 inspection portal. No action is required from you, because Easy2257 answered as Custodian of Records. Log it for your own audit trail.
{
"productionId": "cmd3p8w1k0002qz8h9j4r7v5s",
"inspectedAt": "2026-04-24T18:00:00Z",
"inspectorAgency": "FBI"
}