Shopify Compliance Webhook

Shopify Apps
1

Hi everyone,

I am setting up my Shopify app and need to add a compliance webhook. Earlier, there used to be an option in the Shopify Partner Dashboard to add it manually, but now the process seems to have changed.

I also tried subscribing to the webhook topics customers/data_request, customers/redact, and shop/redact, but I was not able to set them up successfully.

Can anyone guide me on the correct way to add or configure these compliance webhooks? Any examples, steps, or documentation links would be really helpful.

Thanks in advance! :folded_hands:

2

Hi @secureweb,

You’re right — Shopify updated how compliance webhooks are managed, so the old manual option is no longer available. Here’s the recommended approach:

1. Use the Webhooks API for compliance topics

  • Instead of manually adding them in the dashboard, you now subscribe via the Shopify Admin API.

  • Relevant topics: customers/data_request, customers/redact, shop/redact.

2. Example (REST API)

POST /admin/api/2025-10/webhooks.json
{
  "webhook": {
    "topic": "customers/data_request",
    "address": "https://yourapp.com/webhooks/customers/data_request",
    "format": "json"
  }
}

Repeat for the other topics with their respective endpoints.

3. Example (GraphQL API)

mutation webhookSubscriptionCreate($topic: WebhookSubscriptionTopic!, $webhookSubscription: WebhookSubscriptionInput!) {
  webhookSubscriptionCreate(topic: $topic, webhookSubscription: $webhookSubscription) {
    userErrors {
      field
      message
    }
  }
}

Set $topic to each compliance topic and $webhookSubscription with your endpoint.

4. Tips

  • Ensure your endpoints respond with 200 OK to Shopify’s verification request.

  • Check Shopify Compliance Webhooks Docs for detailed examples.

This method is now the standard way to handle GDPR / CCPA compliance webhooks for any app.

Have you tried creating the subscriptions via the API yet, or are you still looking for a step-by-step implementation guide?

3

**Thanks, but when I subscribe to the ‘customers/data_request’ webhook topic, I get a response saying it’s invalid.

Could you please test it on your side and let me know if it works with the compliance-related Shopify webhook topics?**

4

Hi!,

I’m getting a similar issue. I can’t find anything in the partner dashboard to manage this as told to do by the the chat assistant. When I try to register the hooks via REST or Graph it’s throwing an error saying invalid. I’m using Golang so the CLI doesn’t work for me as it says missing package.json.

Did you have any luck with this?

5 
[[webhooks.subscriptions]]
compliance_topics = ["customers/data_request", "customers/redact", "shop/redact"]
uri = "https://api.domain.com/v1/shopify/webhooks"

Add this to your shopify.app.toml and then run shopify app deploy
If you are not using node then create run

npm init -y
then the command should work fine.

6

Hello,

We’re having the same issue.

I added the compliance webhooks to the TOML file and deployed. I can see the URLs on the dev platform. Also, I can see the requests reaching to our ends and logs on Grafana shows this:

HMAC verification failed - possible webhook tampering

This screenshot is from the Partner dashboard

image
image1432×964 76.2 KB

Please note that when we trigger the webhook manually from our machines everything works well!

So we’re certain that the app review checker somehow is not picking up the right client secret.

This happened after the introduction of Shopify Dev platform in Sept 2025. At the time, we had prepared the app and submitted to the review team. The review team came back to say that the app is not verifying the webhooks.

Now we are not sure where the problem lies. Could you please assist us to a proper way to troubleshot this?

Thanks

7

how do u solve warnining on “immediately redirects to app ui after authentication”