General API Services Information

Introduction

Dokobit APIs are RESTful, which means:

• Uses resource-oriented URLs;
• Uses GET and POST methods to perform actions on resources;
• Responds with standard HTTP response codes;
• Returns JSON.

You can find our code examples and SDKs on our GitHub repository.

SSL/TLS Requirements

Since security is one of our top priorities, our solutions follow the most up-to-date security practices. Establishing secure communication would require using the TLS 1.2 or TLS 1.3 security protocol and up-to-date ciphers. Supported port: 443 (HTTPS).

Our current SSL certificate *.dokobit.com is valid until 15th of January 2027, 23:59:59 UTC. It can be found here.

We update certificate information in advance, 14 days before the expiration date.

Qualified time-stamping service providers

We use time-stamping services from different providers to ensure a reliable and stable service. We work with providers from the trusted list of qualified trust service providers in accordance with the eIDAS Regulation.

Signicat AS, Qualified electronic time-stamps (signicat-p-tsa) are used by default.

To ensure uninterrupted service availability, we also work with:

• SK ID Solutions AS, SK Time-Stamping Authority for qualified electronic time stamps;
• Asseco Data Systems S.A., Time Stamping Authority.

Load balancing

Because we are focusing on our services' high uptime and performance, all of our solutions use load balancing, meaning that all our client-facing IP addresses are dynamic. As IP addresses constantly change, we suggest you refrain from IP pinning, which could disturb your access to our services.

Rate Limiting

We incorporate rate limits for API requests originating from specific locations to prevent overwhelming of our services and maintain service stability.

The rate limit is the maximum number of requests allowed in a defined period. Reaching the limit will result in your request failing with an HTTP 429 Too Many Requests response. If your servers are calling our services from countries listed below, we ask you to stay within the 100 requests per two-minute range.

Rate limits do not apply to other locations.

Webhook support

Universal API, Portal API, and Documents Gateway can send webhooks to your defined URL to notify you about noteworthy document signing changes (e.g., a document has been signed). Before using it successfully, ensure the URL is accessible to our services. You can limit accessibility by allowing only our IP addresses to reach your URL. Webhooks are delivered over TLS 1.2. More information can be found here: Dokobit Webhooks.

List of IP addresses used to deliver webhooks: