# Webhook `kyb_case.review_required`

A business case is waiting for a reviewer. Signed with the secuveri-signature header (HMAC-SHA256 of "<t>.<raw body>" with your endpoint's signing secret) and, when result signing is configured, a detached ES256 JWS in secuveri-jws.

Parameters:
- `secuveri-signature` (header, string, required)
- `secuveri-jws` (header, string)
- `secuveri-event-id` (header, string, required)
- `secuveri-event-type` (header, string, required)

Body:
- `id` (string, required): Stable across retries; use it to drop duplicates.
- `type` (string, required) One of `verification.completed`, `verification.review_required`, `verification.reviewed`, `verification.expired`, `kyb_case.completed`, `kyb_case.review_required`, `kyb_case.reviewed`, `documents.verify.completed`, `proof_of_address.read.completed`, `webhook.test`.
- `created_at` (string, required)
- `organization_id` (string, required)
- `data` (object, required)
  - `verification_id` (string, nullable)
  - `session_id` (string, nullable)
  - `workflow_id` (string, nullable)
  - `vendor_data` (string, nullable)
  - `metadata` (object, nullable)
  - `status` (string, nullable)
  - `verdict` (string, nullable)
  - `decision` (string, nullable): verification.reviewed and kyb_case.reviewed only. One of `APPROVE`, `REJECT`.
  - `manual_override` (boolean)
  - `identification_method` (string, nullable): How the person was identified, once the verification has a report. One of `swiss_eid`, `swiss_eid_age`, `reusable_credential`, `face_check`, `nfc`, `document`.
  - `swiss_eid_beta` (boolean): true when the result rests on a swiyu beta credential, which is not a proof of identity.
  - `test` (boolean)
  - `kyb_case_id` (string): kyb_case.* events only; verification_id and session_id are null.
  - `check_id` (string): Standalone check events only.
  - `product` (string): Standalone check events only.

Responses:
- 2XX: Received. Any other answer, a redirect or a timeout after 10 s is retried.