{
"schemaVersion": "1.0",
"sourceEventId": "dlt_3e9a0c7b5f1d48e2a4c6b8d0f2e1a7c9",
"eventType": "investor.dlt_test.updated",
"occurredAt": "2026-10-22T10:00:00.000Z",
"data": {
"investorId": "6ace745fab21fd6924a19beb",
"externalInvestorId": "your-investor-0001",
"verificationStatus": "rejected"
}
}An investors dlt test verdict changed
Sent every time the verificationStatus of one of your investors’ DLT test changes, whoever changed it: Securitize’s compliance team, the investor, another partner or your own call. It carries the new verdict, the value GET /investors/{investorId}/dlt-test answers. Attempts and the lock send nothing: only the verdict does. Delivery is at least once and can be out of order: deduplicate on sourceEventId, keep the latest occurredAt per investor, and confirm with the GET before acting on a verdict.
{
"schemaVersion": "1.0",
"sourceEventId": "dlt_3e9a0c7b5f1d48e2a4c6b8d0f2e1a7c9",
"eventType": "investor.dlt_test.updated",
"occurredAt": "2026-10-22T10:00:00.000Z",
"data": {
"investorId": "6ace745fab21fd6924a19beb",
"externalInvestorId": "your-investor-0001",
"verificationStatus": "rejected"
}
}Authorizations
OAuth 2.0 client credentials. Exchange the client id and secret Securitize issued you for a bearer token at the token URL (the host root, not under the base URL), with grant_type=client_credentials; the token lasts 2 hours and goes in the Authorization: Bearer header of every request. No scope is needed. The token identifies your partner account, so you never send a partner id, and every record you create is scoped to you.
Body
The body of a DLT test webhook.
Response
Any 2xx within 10 seconds acknowledges the delivery. Anything else, or no answer, is retried with backoff for up to 72 hours.