Connect Hibiscus HR to Zapier
Send Hibiscus HR events to Slack, Notion, Trello, Asana, Google Sheets, Mailchimp, HubSpot, JIRA, Twilio, Calendly, and any of Zapier's 6,000+ other apps.
How it works
Live in about ten minutes.
No code. No Zapier app submission to wait on. Just paste a URL and pick your events.
Catch a hook in Zapier
In Zapier, create a new Zap. Pick "Webhooks by Zapier" as the trigger and "Catch Hook" as the event. Zapier gives you a URL.
Add the webhook in Hibiscus HR
Open Settings → Integrations → Webhooks. Click "New webhook". Paste the Zapier URL, pick the HR events you want, save. We give you a signing secret once — copy it now.
Pick your action in Zapier
Choose what happens next: post to Slack, add a row in Google Sheets, create a Trello card, send a SMS via Twilio, anything in Zapier's 6,000-app catalog. Turn on the Zap.
Done — events fire in real time
Hibiscus HR signs every POST with HMAC-SHA256 in the X-Hibiscus-Signature header so you can verify it really came from us. Failures auto-retry; you can watch deliveries in the Webhooks panel.
Events you can subscribe to
Seven events. Six thousand destinations.
Each event arrives at your Zap with the relevant payload (employee details, dates, totals) ready to use.
New employee added
employee.createdPost to #welcome in Slack with the new hire's name and team.
Employee record updated
employee.updatedSync the new role/department to your CRM.
Employee offboarded
employee.terminatedCreate a JIRA ticket to deactivate accounts.
Leave request submitted
leave.requestedDM the manager in Microsoft Teams with the dates.
Leave approved
leave.approvedBlock the dates in the shared Google Calendar.
Leave denied
leave.deniedEmail the requester with the manager's notes.
Payroll run completed
payroll.run.completedAppend the gross/net totals to a "Monthly Payroll" Google Sheet.
More events are wired into the platform code. We'll surface onboarding, performance reviews, and document signatures here once they've been pressure-tested.
Security
Every webhook is signed.
We sign every POST with HMAC-SHA256 using a secret unique to that subscription. The signature lives in the X-Hibiscus-Signature header as sha256=<hex>. To verify a request really came from Hibiscus HR, recompute the HMAC over the raw request body with your secret and constant-time compare.
Hardening built in:
- • Failed deliveries retry automatically at 1 min, 5 min, and 30 min before being marked terminal.
- • A subscription auto-disables after 10 consecutive failures so a broken target URL doesn't burn quota.
- • Recent deliveries are visible in the Webhooks panel so you can debug live without DM-ing support.
- • All webhook payloads stay in Canadian data centres — the only outbound traffic is the POST to your URL.
Wire Hibiscus HR to everything else your team uses.
Zapier is included on every plan. No add-on fee, no app-store wait, no per-Zap charge from us.