Background check webhooks

Background check triggered

Fired when a recruiter orders a background check for a candidate with a selected partner package. Delivery is at-least-once — partners handle duplicates idempotently using data.backgroundCheckRequestId.

After receiving this event, partners fetch <a href="https://apidocs.hibob.com/reference/get_hiring-background-checks-backgroundcheckrequestid">Get background check details</a> and then start processing at the provider.

Every webhook request carries a bob-signature header that partners verify before processing. See HiBob's <a href="https://apidocs.hibob.com/reference/getting-started-webhooks#how-does-bob-calculate-the-signature">webhook signature verification guide</a>.

postWebhookbackgroundCheckTriggered

Headers

bob-signaturestring required

Base64-encoded signature sent with each webhook request. Use it to verify that the request came from Bob.

Payload

versionstring required

Webhook payload schema version. Currently always "v2".

type'backgroundCheck.triggered' required
triggeredBystring required

Backend ID of the employee who triggered the event, or system.

triggeredAtstring required

When the event occurred, as an ISO 8601 timestamp with Z suffix (for example "2026-05-28T10:00:00Z").

Response

Webhook received successfully

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.