A JavaScript SDK, website intercepts with your own triggers, embedded data and real-time webhooks. The advanced layer on top of the distribution you already have, with every response processed centrally in Sendsteps.
JS SDK / Website intercepts / Embedded data / Event hooks / Outbound webhooks / HMAC signing
<!-- Install snippet -->
<script
src="…/sfi/v1/sfi.js"
data-site-key="sfi_…"
data-api="…"
data-fill-base="…"></script>
<script>
SFI.API.load().then(SFI.API.run);
</script>Outbound webhooks
POSTSurvey started
POSTProgress saved
POSTResponse completed · full payload
Whatever the channel or trigger, every response is processed and stored centrally in Sendsteps.
Included · no code changes
Campus licence · full control
In the browser
SFI.API
Load once, then run or open surveys from any route, component or event in your web app, including single-page apps.
click · time · scroll
Rules per page, plus your own triggers for click behaviour, time on page and scroll depth.
embedded data
User IDs, plan, page, form or CRM data, available in logic, piping and Results.
HTML · JS
Your own consent screen, form or context step in front of the survey.
in-question
Your own logic inside survey questions.
shown · closed · submitted
React in your own JavaScript, and overlay your brand colours per visit.
On the server
HTTPS · real time
Events at every key moment: survey started, progress saved, and completion with the full payload of answers.
HMAC
Every webhook is signed. Secrets live apart from the public site key, and only admins see them.
inbound
Receive data from your CRM, webshop or support tool in Sendsteps, and start workflows with it.
SFI.API
your triggers
embedded data
Surveys and logic
Every response, centrally
Results
Database or data warehouse
CRM
Webshop or support tool
Outbound and inbound hooks connect surveys to your existing stack. Sendsteps stays the single source of every response.
Ask after a key action, on scroll depth or after time on a page, with the user's context attached.
Load the feedback environment in your single-page app, exactly where and when you decide.
Starts, saved progress and completed responses stream to your systems as they happen.
Consent, a short form or product context first, then the survey with everything passed along.
Your site and Sendsteps stay on separate origins. We send the CORS headers on our side; you allowlist the exact origins and set your Content Security Policy if you use one. The site key is public by design. Webhook secrets are not.
ISO 27001:2022 · Hosted in the EU · GDPR by design
Still unsure? Contact us
No. Placing our snippet and choosing pages and a layout is part of standard distribution. Developer tools add your own triggers, embedded data, custom code and webhooks.
Survey started, progress saved, and response completed with the full payload of answers.
Every webhook is signed with HMAC. The docs show how to check the signature and handle retries.
Today you push data in with embedded data through the SDK.
No. It's public and appears in your HTML. Webhook secrets are separate and only visible to account admins.
Developer tools are available on a Campus licence. Request access through our contact form, tell us what you want to build, and we'll open the documentation for your team.
Request access and we'll open the SDK reference, webhook guide and examples for your team.
Request developer access