event

Metadata about the delivery, not about the applicant.

{
  "event": {
    "nounce": "SjG5y60YsKnnTHBxiGWVrI8FDAcXC3",
    "type": "submit_form",
    "version": 2,
    "created_at": "2026-08-26T09:51:56.458646+00:00"
  }
}

Fields

Field	Type	Notes
type	string	Which event triggered the delivery.
nounce	string	Unique per delivery.
created_at	stringdate-time	When this delivery was generated — not when the applicant submitted. On a first delivery the two are seconds apart; on a re-delivery they can be far apart.
version	integer	Payload schema version. Currently 2.

type

Value	Fires when	Setup
submit_form	The applicant submitted the form. The only type that carries answers and extra.	Enabled by default
update_status	A status on the application changed — for example an operator changed it in the Portal.	Contact support
drop_off	The applicant started and did not finish before the form expired.	Contact support

Only submit_form carries answers and extra. Every other type is a lifecycle notification carrying event and application — treat answers, extra and event.version as absent on all of them. Further lifecycle types exist and can be enabled by support; branch on type and ignore values you do not handle.

submit_form, not on_submit

The on_* names — on_submit, on_drop_off and so on — are the internal event and Decision Flow trigger names. They never appear as an event.type. Handle submit_form.

nounce

Unique per delivery, not per application.

This cannot deduplicate a re-delivery

A resend — or an automatic retry after your receiver answered 5xx — arrives with a different nonce and passes any nonce-only check.

Key idempotency on application.slug + application.submitted_at. Use nounce only to collapse an immediate transport-level retry.

created_at

The time this delivery was generated.

First delivery	seconds after application.submitted_at
Re-delivery	can be much later — minutes or more

For when the applicant actually finished, read application.submitted_at.

created_at matters for one other reason: it starts the 15-minute clock on every signed image URL in the payload. See extra.ekyc.

version

Payload schema version, currently 2.

Present on submit_form. Absent from lifecycle events — do not require it.