Setting up webhooks and API keys

Folelse provides a REST API and webhooks for integrating with your other systems — for example, syncing processing activities from another register, or pushing compliance events to your SIEM.

Creating an API key

1. 1 Go to Dashboard → API Keys.
2. 2 Click + Create API Key.
3. 3 Enter a descriptive name (e.g. "CRM Integration", "Asset Sync").
4. 4 Select the permissions scope: Read Only, Read/Write, or Admin (Admin can modify settings).
5. 5 Click Create.
6. 6 Copy the API key immediately — it is shown only once. Store it in your password manager or secrets vault.

Using the API

Include your API key in the Authorization header of every request: Authorization: Bearer YOUR_API_KEY. API documentation is available at your account's /api-docs endpoint. Key endpoints include:

• GET /api/ropa — retrieve your full ROPA.
• GET /api/assets — retrieve your asset register.
• POST /api/people — add a person record.

Setting up a webhook

1. 1 Go to Dashboard → Webhooks.
2. 2 Click + Add Webhook.
3. 3 Enter your endpoint URL (must be HTTPS).
4. 4 Select the events to subscribe to: policy.published, risk.created, dpia.approved, ropa.updated, etc.
5. 5 Click Save. Folelse will send a test payload to verify the endpoint.
6. 6 Your endpoint must respond with HTTP 200 within 10 seconds, otherwise the webhook is marked as failed.