Subscribe to order and quote lifecycle events from external systems. Order created, status changed, shipped, cancelled, refunded—all in real time via SNS and configurable webhooks.
Order webhooks already live
Webhooks for order events are already active in Veendo. It's not a coming feature—you can subscribe to them today from the admin panel. Every event (ORDER_CREATED, ORDER_STATUS_UPDATED, ORDER_SHIPPED, ORDER_CANCELLED, ORDER_REFUNDED) is published to SNS Topics and forwarded to HTTP endpoints you configure.
Lifecycle events
Each event contains the complete JSON body of the order: ID, customer, items, prices, address, payment status and shipment status. Endpoints receive data immediately after the event: no lag, everything is real-time via SNS publish/subscribe.
Supported events: - ORDER_CREATED: new order inserted - ORDER_STATUS_UPDATED: status change (pre-order, confirmed, shipped, cancelled, refunded) - ORDER_SHIPPED: order shipped (tracking info included) - ORDER_CANCELLED: order cancelled by customer or admin - ORDER_REFUNDED: full or partial refund processed
- Event containing complete order data (customer, items, price, taxes, shipping)
- SNS Topic for multiple subscriptions (you can link multiple webhooks)
- Automatic retry on endpoint failure (exponential backoff)
- HMAC-SHA256 signature to verify webhook authenticity
- Support for SQS, Lambda, HTTP endpoint
ERP/WMS integration in real time
Use webhooks to sync orders with ERP (SAP, NetSuite, Zucchetti, etc.) or WMS in real time. When an order is created in Veendo, your system receives it instantly and can start picking.
Always verify the HMAC signature of the webhook to avoid replay attack; your webhook secret is generated from the panel and shown only once.
Webhook configuration from panel
From Admin > Integrations > Webhooks, add a public HTTPS endpoint that will receive the POST JSON. Select the events you care about, copy the webhook secret and test with a trial order.
Each webhook can be enabled/disabled separately, and you have visibility into every delivery: timestamp, body sent, response received, retry status.
- HTTPS endpoint with HMAC-SHA256 authentication
- Structured JSON body, UTF-8 encoded
- Retry up to 5 attempts with exponential backoff (5s, 10s, 20s, 40s, 80s)
- Console log for direct debugging on Veendo panel
Security and reliability
Every webhook includes HMAC signature computed with your secret; verify timestamp to avoid replay attack. If your endpoint doesn't respond, SNS retries automatically. If that doesn't work either, the event stays in queue to be synced on next polling.
- HMAC-SHA256 signature (header: X-Veendo-Signature) for authentication
- Endpoint timeout: 30 seconds
- Dead letter queue for persistent failures (contact support)
- Multi-region support: webhook resilient to regional failures