Can each call go to Zapier or our own system?
Yes. In Settings, under "Webhook", paste an address that starts with https:// and save. From then on, after every call except one marked as spam (even a suspected one), we send one POST request there with the call's details as JSON. "Send a test" sends one made-up call, marked as a test, so you can see the fields before a real call arrives.
With Zapier: make a Zap whose trigger is "Webhooks by Zapier", event "Catch Hook", copy the address Zapier gives you into Settings, send a test, then add the step that creates the lead or contact in your system (MyCase, Filevine, Lawmatics, PracticePanther, Google Sheets and so on) and map the fields. Webhooks by Zapier needs a paid Zapier plan.
What we send: "id" (the same on every retry of one call, so you can drop a repeat), "type" ("call.completed"; "form.submitted" for a message from your own website form, its "call" being the form, with no length; or "test"), "created_at", "call" (its id, start time, length in seconds, status, the caller's number and the link to the call in your dashboard), "intake" (each field the agent recorded, such as caller_name, caller_email, intake_type, urgency and the practice-area answers, flat, by its own name) and "summary". No recording and no transcript.
Checking it came from us: each request has an Intake-Gateway-Signature header like t=<the time in seconds>,v1=<the signature>. Compute HMAC-SHA256 of the t value, a full stop and the raw request body, keyed with the signing secret shown in Settings; it must equal the v1 value, and t should be within five minutes of now. Zapier users can skip this; your own system should do it.
- If your address does not answer with a 2xx status within 10 seconds, or answers 408, 429 or 5xx, we try again after 5 minutes, 30 minutes, 2, 6, 12 and 24 hours (seven tries over about two days), so a request can arrive twice: use the id to keep one.
- Any other answer (a wrong address, 404, 410, a redirect) stops the tries for that call. Settings shows the last delivery and what came back.
- We never send to an address inside a private network, and never follow a redirect.
Your call emails and Clio keep working exactly as before; the webhook is an extra copy. "Turn off the webhook" stops it, and "Start a new secret" replaces the secret at once if it was ever shared by mistake.