> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhook events

> Reference for every webhook event including payloads, schemas, and examples.

This reference documents every **event type** Vanta can deliver to a registered webhook endpoint, along with its payload schema and an example body. The payload documented for each event is the event body.

<Info>
  New to webhooks? Follow the step-by-step [Subscribe to webhook events](/docs/webhooks) guide to register an endpoint, verify signatures, and handle retries.
</Info>

## Domains

Every event type is a stable identifier in the form `v1.<domain>.<entity>.<action>`. Events are grouped into the following domains — browse each domain in the sidebar to see its individual events, payloads, and schemas.

| Domain                  | What it covers                                                       |
| ----------------------- | -------------------------------------------------------------------- |
| **Questionnaire**       | Questionnaire lifecycle and export events                            |
| **Trust Center**        | Trust Center access request events                                   |
| **Vendor**              | Vendor risk decision events                                          |
| **Information Request** | Audit information request (IRL) status, comment, and evidence events |
| **Evidence**            | Audit evidence status and comment events                             |
| **Control**             | Audit control comment events                                         |

<Note>
  The **Information Request**, **Evidence**, and **Control** domains are auditor-specific — these events are only delivered to [Audit Partner](/reference/audits/overview) accounts during an active audit engagement. All other domains are delivered to your own Vanta account.
</Note>

## Delivery format

Vanta sends each event as an HTTP `POST` with the event payload as the JSON body. Every delivery includes the following headers:

| Header           | Description                                                                                                                                       |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| `svix-id`        | The unique message identifier. Use it to deduplicate events.                                                                                      |
| `svix-timestamp` | The timestamp of the message attempt (seconds since epoch).                                                                                       |
| `svix-signature` | The Base64-encoded signature(s), space-delimited. Use it to [verify the request](/docs/webhooks#verify-webhook-signatures) originated from Vanta. |

<Warning>
  Treat IDs in payloads as opaque strings. To fetch the full object referenced by an event, call the corresponding [Manage Vanta API](/reference/manage-vanta/overview) endpoint with the ID from the payload.
</Warning>

## Retry schedule

A delivery is considered failed if your endpoint doesn't respond with a `2xx` status code within 15 seconds, including network timeouts. Vanta automatically retries failed deliveries using an exponential backoff schedule:

| Attempt | Delay after previous attempt |
| ------- | ---------------------------- |
| 1       | Immediately                  |
| 2       | 5 seconds                    |
| 3       | 5 minutes                    |
| 4       | 30 minutes                   |
| 5       | 2 hours                      |
| 6       | 8 hours                      |
| 7       | 1 day                        |
| 8       | 2 days                       |

After all retry attempts are exhausted (approximately 5 days total), the message is marked as failed. You can also manually retry failed messages from the webhook dashboard, or recover missed events as described in the [Webhooks guide](/docs/webhooks#troubleshooting).

## Next steps

<CardGroup cols={2}>
  <Card title="Set up webhooks" icon="bell" href="/docs/webhooks">
    Register an endpoint, verify signatures, and handle retries.
  </Card>

  <Card title="Manage Vanta API" icon="bolt" href="/reference/manage-vanta/overview">
    Look up the full objects referenced in webhook payloads.
  </Card>
</CardGroup>