Setting up webhooks and API keys

Folelse provides a REST API and webhooks for integrating with your other systems — for example, automatically creating a SAR record when a request is submitted via your website, or pushing breach notifications to your SIEM.

Creating an API key

1. 1 Go to Dashboard → API Keys.
2. 2 Click + Create API Key.
3. 3 Enter a descriptive name (e.g. "CRM Integration", "Website SAR Form").
4. 4 Select the permissions scope: Read Only, Read/Write, or Admin (Admin can modify settings).
5. 5 Click Create.
6. 6 Copy the API key immediately — it is shown only once. Store it in your password manager or secrets vault.

Using the API

Include your API key in the Authorization header of every request: Authorization: Bearer YOUR_API_KEY. API documentation is available at your account's /api-docs endpoint. Key endpoints include:

• POST /api/sars — create a new data subject request.
• POST /api/breaches — log a new breach.
• GET /api/ropa — retrieve your full ROPA.
• GET /api/assets — retrieve your asset register.
• POST /api/people — add a person record.

Setting up a webhook

1. 1 Go to Dashboard → Webhooks.
2. 2 Click + Add Webhook.
3. 3 Enter your endpoint URL (must be HTTPS).
4. 4 Select the events to subscribe to: breach.created, sar.created, sar.overdue, policy.published, risk.created, etc.
5. 5 Click Save. Folelse will send a test payload to verify the endpoint.
6. 6 Your endpoint must respond with HTTP 200 within 10 seconds, otherwise the webhook is marked as failed.