Developer Compliance Evidence1.0.0-beta.1

Download verified Compliance evidence

Downloads the private file linked to a saved evidence record in Verified status. The file is checked and the disclosure is audited before release. Supplier questionnaire quarantine, inline previews and external source URLs are outside this operation.

GET/api/v1/compliance/evidence/{evidenceId}/attachment

Workspace automation for approved Dashio products. Each token is scoped to one Space and independently granted operations. Requests spend shared minute credits, and selected operation groups also share hourly quotas.

Required token scope is compliance:evidence:download. Scopes are independent.

This operation uses 10 credits from a shared budget of 60 credits per token and 300 per Space each UTC minute. The file transfer group shares 24 requests per token and 60 per Space each UTC hour.

Run these examples on a trusted server with DASHIO_API_TOKEN configured. Use a private terminal when inspecting response data. Examples send one request with a bounded timeout and do not retry automatically.

Examples write successful response bytes to standard output. Redirect the output to a private file and verify the HTTP status before using it.

Authentication

Dashio developer token (HTTP Bearer) API authentication guide

Path parameters

evidenceIdstringRequired: Evidence record ID from the evidence index. Encode it as one URL path segment.

Query parameters

None documented.

Header parameters

None documented.

Request body

No content type declared

No request body schema is documented.

Request & response examples

Copy an example in your preferred language.

request.sh

: "${DASHIO_API_TOKEN:?Set DASHIO_API_TOKEN before running this example}"

curl --fail --dump-header /dev/stderr --output - --silent --show-error --connect-timeout 10 --max-time 30 \
  --request GET 'https://app.dashio.net/api/v1/compliance/evidence/{evidenceId}/attachment' \
  --header "Authorization: Bearer $DASHIO_API_TOKEN"

Replace URL parameters, credentials, and schema placeholders before running. No request is sent by this page.

This response contains file bytes. Save the body to a file.

Run examples on a trusted server. Configure the environment variables and replace URL or schema placeholders. For a write, reuse its saved idempotency key only when retrying the identical request.

Responses

Headers on every response

X-Request-Idstring (uuid)Optional: Server-generated ID to include in a support request.

200

The verified private file, up to 1 MB, sent as an attachment.

Response headers

RateLimit-LimitintegerOptional: Per-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.
RateLimit-RemainingintegerOptional: Requests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.
RateLimit-ResetintegerOptional: Unix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.
Content-DispositionstringOptional: An attachment disposition with a safe filename.

application/octet-stream

valuestring (binary)Optional: No field description supplied.

400

Invalid evidence ID or unexpected query parameter.

application/json

statusCodeintegerRequired: Minimum: 400. Maximum: 599.
statusMessagestringOptional: A safe explanation suitable for display.
dataobjectRequired: No field description supplied.

401

A valid developer token is required.