# API and webhooks for your whistleblowing channel

> Connect EthicsPortal to your GRC, ticketing or reporting tools. The API gives report status and deadlines, and webhooks report changes. Report content never leaves EthicsPortal.

Canonical: https://ethicsportal.eu/changelog/api-and-webhooks/
Last updated: 2026-11-11

You can now connect EthicsPortal to your GRC, ticketing or reporting tools. The REST API gives the status and deadlines of reports, and webhooks tell your systems when a case changes. Report content, messages, notes and attachments are never available through the API.

![Webhook settings in EthicsPortal, with the destination address and buttons to send a test event and rotate the signing secret](https://ethicsportal.eu/images/screenshots/en-changelog-api-and-webhooks.webp)

Administrators create organisation tokens and webhook endpoints in the organisation settings. Each webhook shows its delivery history. You can retry a delivery, rotate the signing secret and send a test event. API access starts when the organisation has accepted the current Data Processing Agreement.

Start with the [quickstart](https://ethicsportal.eu/developers/quickstart/) or read about [webhooks](https://ethicsportal.eu/developers/webhooks/) in the developer documentation.