Skip to main content
The leads pipeline in the platform console tracks inbound enterprise and government inquiries from first contact through to tenant onboarding. Use it to view new leads, update their status as conversations progress, export the pipeline to CSV, and convert qualified leads into fully onboarded Truthlocks tenants.
The leads pipeline tracks inbound inquiries — people who come to you. It is separate from the AI CMO outbound leads, which are discovered and managed by automated campaigns. The two systems use different status models and different console pages.

​
Prerequisites

  • Platform administrator access to the console

​
How leads enter the pipeline

Leads are created automatically when a prospect submits an inquiry through the Truthlocks website contact form or another integrated intake channel. Each lead captures the contact’s name, email, company, original message, and the source of the inquiry (for example, website or referral). New leads appear in the pipeline with a status of new and are ready for review.
There is no API endpoint for creating leads manually. Leads enter the pipeline through the website contact form and other integrated intake channels. To manage outbound prospecting leads, use the AI CMO instead.

​
Lead lifecycle

Every lead moves through four statuses:
StatusDescription
newA fresh inquiry that has not been reviewed yet
contactedYou have responded to the lead but qualification is still in progress
qualifiedThe lead meets your criteria and is ready for onboarding
archivedThe lead is no longer active — closed, disqualified, or converted
Transition a lead between statuses from the lead detail page or via the API. There are no enforced ordering rules — you can move a lead to any status at any time.

​
Viewing the pipeline

Open Leads in the platform console. The page displays a searchable, paginated table of all institutional leads. Each row shows:
ColumnDescription
NameFirst and last name of the contact
EmailContact email address
CompanyOrganization name, if provided
SourceWhere the inquiry originated (e.g. website form, referral)
StatusCurrent lifecycle status with a color-coded badge
DateWhen the lead was created
Use the search bar to filter by name, company, or email. Click any lead to open the detail page.

​
Lead detail

The detail page shows full contact information — name, email, company, source, and the original inquiry message — along with a timeline of status changes. From this page you can:
  • Update status — move the lead to contacted, qualified, or archived
  • Convert to tenant — send an enterprise onboarding invite to the lead’s email (see converting a lead below)

​
Converting a lead

When a lead is qualified and ready to onboard, click Convert / Onboard Customer on the lead detail page. This triggers an enterprise onboarding invite email to the lead’s contact address. The recipient receives a branded invitation with a link to the console onboarding wizard, where they can set up their organization, issuer, and signing keys. After conversion, the lead is marked as qualified. The new tenant follows the standard onboarding flow.
The same onboarding invite is sent when a platform admin creates a tenant with the GOVERNMENT type. See the B2G procurement pack for details on the government onboarding flow.

​
Capturing leads from your website

Use the public lead-capture endpoint to send inquiries from a contact form on your website directly into the leads pipeline. This endpoint does not require authentication, so you can call it from a client-side form without exposing API keys. 
curl -X POST https://api.truthlocks.com/v1/public/leads \
  -H "Content-Type: application/json" \
  -d '{
    "first_name": "Jane",
    "last_name": "Doe",
    "email": "jane@example.com",
    "company": "Acme Corp",
    "message": "Interested in enterprise attestation for our compliance workflow.",
    "source": "website"
  }'
FieldTypeRequiredDescription
first_namestringyesContact first name
last_namestringyesContact last name
emailstringyesContact email address
messagestringyesThe inquiry message
companystringnoOrganization name
sourcestringnoWhere the inquiry originated (defaults to www)
_gotchastringnoHoneypot field for spam prevention — see below
On success the endpoint returns HTTP 201 with the new lead’s id.

​
Spam prevention

The endpoint includes a hidden honeypot field called _gotcha. Add it as a hidden input in your HTML form. Legitimate users leave it empty, but automated bots tend to fill every field. If _gotcha contains a value, the request is silently discarded — the server returns a fake 201 success so the bot does not retry. 
<!-- Hidden honeypot — do not show to users -->
<input type="hidden" name="_gotcha" value="" />

​
Rate limiting

The public endpoint enforces a rate limit of 3 submissions per IP address per hour. If a client exceeds this limit, the server responds with HTTP 429 and a Retry-After header indicating when the next request will be accepted. This protects the pipeline from abuse without affecting normal form submissions.

​
Exporting the pipeline

Click Export Pipeline on the leads page to download a CSV containing all leads. The export includes ID, first name, last name, email, company, source, status, and creation date.

​
Managing leads via the API

​
List leads

Retrieve all leads. Requires platform administrator authentication. 
curl -X GET https://api.truthlocks.com/v1/platform/leads \
  -H "Authorization: Bearer <admin_token>"
Each lead in the response includes:
FieldTypeDescription
idstringUnique lead identifier
first_namestringContact first name
last_namestringContact last name
emailstringContact email address
companystring or nullOrganization name
messagestringThe original inquiry message
sourcestringLead source (e.g. website, referral)
statusstringOne of new, contacted, qualified, archived
created_atstringISO 8601 timestamp
updated_atstringISO 8601 timestamp

​
Get a lead

curl -X GET https://api.truthlocks.com/v1/platform/leads/{id} \
  -H "Authorization: Bearer <admin_token>"

​
Update lead status

curl -X PATCH https://api.truthlocks.com/v1/platform/leads/{id}/status \
  -H "Authorization: Bearer <admin_token>" \
  -H "Content-Type: application/json" \
  -d '{"status": "contacted"}'
Pass any valid status: new, contacted, qualified, or archived.

​
Convert a lead

Send an enterprise onboarding invite to the lead’s email and begin the tenant creation process: 
curl -X POST https://api.truthlocks.com/v1/platform/leads/{id}/convert \
  -H "Authorization: Bearer <admin_token>" \
  -H "Content-Type: application/json" \
  -d '{}'
On success, the response includes a confirmation message and the lead’s status is set to qualified.

AI CMO

Automated outbound campaigns with AI-driven lead discovery and scoring.

Console onboarding

The guided wizard new tenants follow after receiving an onboarding invite.

B2G procurement

Enterprise onboarding flow for government tenants.

Email delivery

Email templates and delivery infrastructure, including enterprise onboarding invites.