Skip to content
Web Development11 min read

12 Practical Webhook Use Cases for Connecting Business Applications

Twelve event-driven workflows built on webhooks, from payment confirmations to signed contracts, and how to verify, deduplicate and reconcile them.

01

What are webhooks used for?

Webhooks let one application notify another the moment something happens, so the next step starts without anyone checking or re-typing. Common uses are confirming payments, syncing orders, filing signed contracts, routing form submissions, updating CRMs from bookings, alerting teams, triggering builds and keeping subscriptions in step with billing. To be dependable they need signature verification, fast acknowledgement, queued processing, deduplication and a reconciliation job.

This guide is for business owners, operations leads and developers connecting systems. It is not a list of integrations to buy (for that, see common website integrations); it is about event-driven workflows and how to make them reliable. Provider behaviour was checked in Stripe, Shopify, Razorpay and GitHub documentation on 28 October 2026. For the ecommerce-specific technical detail, see ecommerce webhooks.

02

How a webhook workflow works

You register an HTTPS URL with the sending service and choose which events you want. When an event happens, the service sends a POST request with a JSON payload and a signature header. Your endpoint verifies the signature, records the event, returns a 2xx response quickly and processes the work in the background. Stripe's documentation is explicit that you should return a successful status before complex logic that might time out, and recommends handling events through an asynchronous queue.

03

Payments and billing

1. Confirm payment before fulfilling. Do not rely on the customer's browser returning to a success page; it may close. Use the payment provider's success event (for example Stripe's payment_intent.succeeded or a Razorpay payment event) to mark the order paid and start fulfilment.

2. Handle failed and disputed payments. Events for failed renewals, refunds and disputes can pause access, notify the customer, open a task for finance or attach evidence. These often arrive days after the original payment.

3. Keep subscription access in step with billing. Renewal, cancellation and plan-change events update what the customer can use in your app, so access never depends on someone remembering to change it. See payment gateway integration.

04

Sales and customer data

4. Website form to CRM. A form or form-builder webhook creates or updates the lead in the CRM, assigns an owner and starts follow-up, with the source page attached. See CRM website integration.

5. Booking to CRM and calendar. When a meeting is booked, rescheduled or cancelled, the scheduling tool's webhook updates the CRM record and notifies the account owner.

6. Signed contract to the next step. When an e-signature platform reports a document as completed, the deal is marked won, the signed copy is filed and onboarding or invoicing begins.

05

Commerce and operations

7. Store orders to fulfilment and accounting. Shopify and other platforms send order and fulfilment events that can create shipments with a 3PL, update the ERP or post sales to accounting. Shopify notes that it does not guarantee ordering within a topic and that delivery is not always guaranteed, so it recommends reconciliation jobs.

8. Inventory and catalogue sync. Product and inventory update events keep marketplaces, search indexes and product feeds aligned with the source system.

9. Shipping and delivery updates. Carrier tracking webhooks update the order status and trigger customer notifications, rather than polling every carrier on a schedule.

06

Internal tools and engineering

10. Alerts into team chat. Events such as a large order, a failed payment, an urgent support ticket or a failed integration post a message to the right Slack or Teams channel. Alert only on things someone must act on.

11. Code and deployment events. GitHub and similar platforms send events for pushes, pull requests and releases that can trigger builds, previews and deployment notifications. GitHub's documentation notes that it does not automatically redeliver failed deliveries, so failures need monitoring or scripted redelivery.

12. Triggering AI and automation workflows. A new support ticket, email or uploaded document can trigger an automation that classifies it, extracts data or drafts a reply, with approval before anything is sent. See APIs, webhooks, MCP or RPA.

Connecting systems that keep falling out of sync?

ZSpace Labs builds integrations with signature verification, queues, retries, monitoring and reconciliation. See our web application development and workflow automation services.

Start a Project
07

Use case table

Use caseTypical eventActionMust not happen
Confirm paymentPayment succeededMark paid, start fulfilmentFulfilling twice
Failed or disputed paymentPayment failed, dispute openedPause access, notify, open taskMissed dispute deadline
Subscription accessRenewed, cancelled, changedUpdate entitlementsAccess out of step with billing
Form to CRMForm submittedCreate lead, assign, follow upDuplicate leads
Booking to CRMBooked, rescheduled, cancelledUpdate record, notify ownerStale meeting times
Signed contractEnvelope completedMark won, file, start onboardingLost signed copy
Orders to fulfilmentOrder created or paidCreate shipment, post to ERPMissed or duplicate shipments
Inventory syncInventory updatedUpdate channels and feedsOverselling
Delivery updatesTracking status changedUpdate order, notify customerWrong status shown
Team alertsThreshold or failure eventPost to channelAlert fatigue
Code and deployPush, PR, releaseBuild, preview, notifyUnverified triggers
AI workflowsTicket, email or file createdClassify, extract, draftUnreviewed outbound actions
08

Making webhook workflows reliable

These practices come from the providers' own documentation and apply to every use case above.

  • Verify the signature on the raw body. Stripe signs with HMAC-SHA256 in the Stripe-Signature header; Shopify sends X-Shopify-Hmac-Sha256; Razorpay sends X-Razorpay-Signature. Both Stripe and Razorpay warn that parsing or changing the body before verification breaks it.
  • Reject stale events. Stripe includes a timestamp in the signature, and its libraries default to a five-minute tolerance to limit replay attacks.
  • Acknowledge fast, process later. Return 2xx after verifying and storing the event; do the work from a queue.
  • Deduplicate. Providers can send the same event more than once. Record event IDs (Stripe's event ID, Shopify's X-Shopify-Webhook-Id, Razorpay's x-razorpay-event-id) and skip ones already processed.
  • Do not assume order. Stripe, Shopify and Razorpay all say events can arrive out of order. Fetch the current state through the API, or compare timestamps, before acting.
  • Know each provider's retry policy. Stripe retries for up to three days in live mode; GitHub does not retry automatically. Design for the weakest provider you depend on.
  • Reconcile on a schedule. Run a periodic job that compares recent records through the API to catch missed events.
  • Monitor and alert. Track failed verifications, processing errors and queue age, and alert a person when they rise.
  • Protect secrets. Store signing secrets securely and rotate them; Stripe lets an old and new secret overlap for up to 24 hours.

Worth noting

Standard Webhooks is an open-source set of guidelines and libraries for sending webhooks consistently. If you are building a product that sends webhooks to others, it is worth reading before you design your own format.

09

When not to use a webhook

Use a scheduled API sync instead when the source system does not offer webhooks for the events you need, when you need a complete daily snapshot rather than individual changes, or when event volume is so high that batch processing is simpler. Many reliable integrations use both: webhooks for speed and a scheduled sync as a safety net. For the wider choice between APIs, events and queues, see integration architecture patterns.

10

Conclusion

Webhooks are the simplest way to make one system react to another the moment something happens, from confirming payments to filing contracts. The workflows are easy to sketch and easy to get subtly wrong, so verify signatures, acknowledge quickly, process from a queue, deduplicate, ignore ordering assumptions and reconcile. For securing the APIs on both sides, see API security best practices.

11

Sources

Stripe documentation, receive Stripe events in your webhook endpoint (signatures, retries, ordering, duplicates). Shopify developer documentation, webhooks (HMAC header, webhook ID, ordering, reconciliation). Razorpay documentation, validate and test webhooks. GitHub Docs, handling failed webhook deliveries. Standard Webhooks project site. Accessed 28 October 2026.

FAQ

Common questions.

An HTTP request that one application sends to a URL you provide when something happens, such as a payment succeeding. Instead of your system repeatedly asking "has anything changed?", the other system tells you when it does.

Get in touch

Have a project in mind?

Whether you're building a new digital product, improving an existing website, or looking to automate part of your business — let's talk.