Developer Compliance Exports1.0.0-beta.1

Prepare and download a Compliance export

Generates a report from saved records in the token Space and returns the downloadable file. Questionnaire responses require approval. Approved Trust request downloads require approval for the current resource. Internal review copies are distinct from approved disclosures. The response omits storage URLs and the API never fetches user-supplied external sources. The request is limited to 512 KiB and the file to 2 MB. Table reports contain only the selected columns and at most 2,000 rows.

POST/api/v1/compliance/exports

Workspace automation for approved Dashio products. Each token is scoped to one Space and independently granted operations. Requests spend shared minute credits, and selected operation groups also share hourly quotas.

Required token scope is compliance:exports:create. Scopes are independent.

This operation uses 12 credits from a shared budget of 60 credits per token and 300 per Space each UTC minute. The compliance bulk group shares 15 requests per token and 40 per Space each UTC hour.

Run these examples on a trusted server with DASHIO_API_TOKEN configured. Use a private terminal when inspecting response data. Examples send one request with a bounded timeout and do not retry automatically.

Examples write successful response bytes to standard output. Redirect the output to a private file and verify the HTTP status before using it.

Authentication

Dashio developer token (HTTP Bearer) API authentication guide

Path parameters

None documented.

Query parameters

None documented.

Header parameters

None documented.

Request body

application/json · Required

Select one saved report. For a table, supply the exact saved record IDs in the desired order. auditScope is accepted only for the Audit Preparation table.

type = "statement"

Object shape 2

type = "trust-security-package"

Object shape 4

type = "table"

type = "risks"

Request & response examples

Copy an example in your preferred language.

request.sh

: "${DASHIO_API_TOKEN:?Set DASHIO_API_TOKEN before running this example}"

curl --fail --dump-header /dev/stderr --output - --silent --show-error --connect-timeout 10 --max-time 30 \
  --request POST 'https://app.dashio.net/api/v1/compliance/exports' \
  --header "Authorization: Bearer $DASHIO_API_TOKEN" \
  --header 'Content-Type: application/json' \
  --data '{
  "type": "table",
  "exportKey": "controls",
  "format": "csv",
  "scope": "selected",
  "recordIds": [
    "DP-04"
  ],
  "columns": [
    "id",
    "title",
    "status"
  ]
}'

Replace URL parameters, credentials, and schema placeholders before running. No request is sent by this page.

This response contains file bytes. Save the body to a file.

Run examples on a trusted server. Configure the environment variables and replace URL or schema placeholders. For a write, reuse its saved idempotency key only when retrying the identical request.

Responses

Headers on every response

X-Request-Idstring (uuid)Optional: Server-generated ID to include in a support request.

200

The audited report in its native format. Save the response body to a file.

Response headers

RateLimit-LimitintegerOptional: Per-token capacity in the reported gateway window, expressed in requests of this operation. A shared Space budget also applies. Present when the request reaches the authenticated gateway. Minimum: 1.
RateLimit-RemainingintegerOptional: Requests of this operation remaining under the current token, Space and applicable operation-group quotas. Present when the request reaches the authenticated gateway. Minimum: 0.
RateLimit-ResetintegerOptional: Unix timestamp in seconds when the reported gateway quota resets. Present when the request reaches the authenticated gateway. Minimum: 0.
Content-DispositionstringOptional: An attachment disposition with a safe filename.

application/json, text/csv, text/plain, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet, application/octet-stream

valuearray of object | objectOptional: No field description supplied.

400

Invalid export selector, malformed JSON or unexpected query parameter.

application/json

statusCodeintegerRequired: Minimum: 400. Maximum: 599.
statusMessagestringOptional: A safe explanation suitable for display.
dataobjectRequired: No field description supplied.

401

A valid developer token is required.