INTEGRATIONS & API

A correspondence layer that can connect.

An organisation should not have to abandon the systems it already uses to gain better correspondence records. Epistles is planning controlled integrations so authorised software can create letters, retrieve references, receive event updates and connect correspondence to existing customer or case records.

Client workspace available · Postal services quoted separately
EPISTLES / INTEGRATIONS & API
E.
Documented. Organised. Understood.✳
PRACTICAL GUIDANCE

The correspondence workflow in practice.

Imagine a CRM creating a draft for an authorised customer account. The final letter should still go through appropriate approval and delivery controls. If the CRM retries its request after a network problem, Epistles should avoid accidentally posting the same letter twice.

External email and postal providers must be integrated as untrusted event sources until their callbacks are verified. API keys should be scoped and revocable, and organisational permissions should apply whether a user acts through the portal or an API.

An integration should begin by asking which system is authoritative for each piece of information. A CRM may own customer contact details, while Epistles owns the issued letter reference, final PDF and correspondence events. Keeping those boundaries explicit avoids confusing conflicts when a contact address changes after a letter was posted. It also helps staff understand which system to correct when information is wrong.

Operational resilience matters as much as API design. If a webhook is temporarily unavailable, the event should be queued and delivered again according to a documented policy rather than lost. If an API client retries a submission, idempotency controls should prevent accidental duplicate orders. Every integration should be auditable, permission-aware and revocable, and the public developer documentation must match the actual supported endpoints rather than an aspirational specification. Before any integration is listed as supported, it should pass permission, concurrency, failure-recovery and data-isolation tests. A reliable connector should be helpful to an administrator while remaining invisible to unrelated customers and service components.

01 / 02

An example: a request originating in an existing CRM

A CRM may hold the customer relationship while a correspondence service handles an approved letter. Decide which system supplies the recipient details, which one identifies the final document and where the relevant status needs to be displayed. Retain the references needed to connect the records in both directions.

Then consider an ordinary failure: the connection is interrupted after a request is submitted, so the CRM tries again. The integration needs a way to recognise the same intended action rather than create another dispatch unintentionally. Explain these retry and ownership questions when discussing an integration with Epistles. Public pages are planning guidance, not a published production API contract. Endpoint details, authentication, event formats and availability need to be confirmed through the implementation process before a connection is built.

02 / 02

Keep external systems connected without losing control

Organisations may already use a CRM, ERP, accounting system or case-management platform. An integration should be able to create or retrieve authorised correspondence records without moving confidential data through uncontrolled channels. API keys need restricted scopes, event delivery must be verifiable, and automated requests should be idempotent so retries do not accidentally generate duplicate letters.

The external system may initiate an action, but Epistles should remain clear about which document was finalised and which delivery operations actually occurred. Webhooks and status updates should preserve event timestamps and sources. The interface should also make it possible for administrators to revoke a connection without affecting unrelated tenant data.

GOOD TO KNOW

Questions worth asking.

Clear answers about the workflow and its limits. The service described is being developed; availability is confirmed only when a feature is launched and tested.

Does Epistles have a live public API?

The integration API is planned; endpoints will only be published as available after authentication and security testing.

Could a CRM create letters?

That is a proposed use case for scoped integrations and approved workflows.

What happens with duplicate requests?

The technical design calls for idempotent operations and durable references.

Will webhooks be signed?

Verified webhook delivery and replay protection are planned security controls.

Can API keys be restricted?

Scoped credentials, revocation and per-tenant permissions are baseline requirements.

Public resources are available now.

The client workspace, document records and QR verification are available at my.epistles.uk. Postal requests start with a quotation. Contact Epistles to discuss your requirements.

CONTACT EPISTLES

Bring us the correspondence task you want to improve.

Tell us what you need, who is involved and the outcome you want to achieve. We will discuss the right next step.