Liveness Verdict

​

Events

​

Delivery

POST <your configured webhook URL>
Content-Type: application/json
x-embedly-signature: <hex HMAC-SHA512 of the raw JSON body, keyed with your webhook secret>

• Signature: HMACSHA512(key = your webhook secret, message = raw request body bytes), hex-encoded, lowercase. Recompute it over the exact bytes received (before any re-serialization) and compare to the x-embedly-signature header to verify authenticity.
• Timeout: 10 seconds per attempt.
• Retries: up to 5 attempts total on non-2xx response or timeout. Production backoff: 5 min → 5 min → 60 min → 240 min after attempts 1–4 (attempt 5 is final — no further retry). Staging/Development use a flat 2-minute delay between every retry. After the 5th failed attempt the event is marked Failed and not retried again.
• Delivery is at-least-once — treat handlers as idempotent; use data.submissionId + event to dedupe if you log deliveries on your side.

​

Payload

{
  "event": "customer.liveness.approved",
  "organizationId": "3f1a9c2e-7b44-4e9a-9d21-5c8e0a1b2f3d",
  "data": {
    "customerId": "8d3e2c4a-19b7-4f2e-9c61-2a78b0f31c45",
    "submissionId": "4c9b1a7e-2d3f-4a8b-9e6c-1f2a3b4c5d6e",
    "status": "completed",
    "attemptNumber": 1,
    "failureReason": null,
    "reviewedAt": "2026-06-25T10:16:02.114Z",
    "reviewerEmail": null
  }
}

"failureReason": { "text": "Face match below threshold", "id": "FACE_MATCH_LOW" }