API access and webhooks
The platform holds your pipeline, your broker register and your reconciled commission data. Some groups want that data in something else as well: a data warehouse, a board pack, an internal tool, a lender portal. API access and webhooks are how that is done. This is custom enterprise work rather than a self serve product, and it is running in production for clients today.
What the API exposes
Contacts, licence and accreditation records, onboarding state and cohort membership, as JSON over HTTPS.
Reconciled commission runs, settled volume and trail by broker, lender and period, from the same figures your own reports use.
Candidates, stages, sources and campaign attribution, so recruitment activity can be reported alongside whatever else you measure.
Each token is issued against one business and one set of scopes. Row level security still applies underneath, so a token cannot read past the boundary even if the request asks it to.
What the webhooks do
Subscribe to the things that matter: a commission run loaded and reconciled, a candidate signed, a broker onboarded, an accreditation approaching expiry, a goal met.
Every delivery is signed so you can verify it came from us, and retried with backoff if your endpoint is down. Deliveries and failures are visible to you rather than silent.
Clients use them to trigger their own onboarding automations, post to internal channels, keep a warehouse current and drive their own reporting on their own schedule.
How it is delivered
We agree what is exposed, to whom and for what, then quote it once. It is not a line item you switch on from a settings page.
A contract you build against does not change under you. Breaking changes get a new version and advance notice.
API and webhook access is subject to the isolation, logging and authentication described in the security overview. Nothing bypasses row level security.
Tell us what you need it to talk to
Bring the system on the other side and what you need out of it. We will tell you whether it is a webhook, an API read or something we have already built for another client, and quote it as part of your package.