Security
Webhook security
Tamanor verifies webhook signatures, deduplicates replays, derives the tenant from the connected account (never the payload), and stores invalid webhooks only for audit — never processing them.
Trusted by construction
Inbound webhooks are signature-verified; only valid events are processed. A stable dedup key rejects replays. The tenant is derived from the matched connected account, never from the payload, so a crafted body cannot cross tenants. Invalid or unsigned events are stored for audit but never processed.
Frequently asked questions
- Are unsigned webhooks acted on?
- No — they are stored for audit only and never processed.