Automate the Compliance Portal
Use scoped API tokens to manage records, evidence, backups, and supplier questionnaires in a Space.
Create a token for your Space in Dashio App. The Space needs an active Compliance entitlement. Grant the scopes your integration needs.
Read records and revisions
Read the Space's entitlements and the Compliance catalog. Use each collection's read scope for paginated inventory and individual records. Continue a list with its returned cursor. If a newer workspace revision invalidates the cursor, restart the list.
Send the current revision when creating, editing, or deleting a control, risk, or training policy. If the revision changed, read the current record and review the intended edit before retrying. A linked record can block deletion.
Save a workspace
Read the current workspace, edit the intended records, and save all 16 collections with the revision you read. Set DASHIO_REQUEST_JSON to the path of your prepared JSON body when running a generated example. A successful save returns the new revision.
Adding, changing, or removing attachments also needs compliance:evidence:write. Approving a Trust Center disclosure also needs compliance:trust-access-requests:approve. Use the OpenAPI downloads for the complete collection schema.
Download evidence and exports
List evidence to find the record ID and check attachment availability. Use the separate attachment scope for file contents. Prepare an export by sending a supported selector. Questionnaire responses and Trust disclosures require approval. Check Content-Type and Content-Disposition, then save the response bytes to a private file.
Back up and import
Download a portable backup and protect it as private workspace data. Preview an import to review counts, conflicts, schedules to pause, blockers, and additional scopes. Commit the import with the same backup and the preview revision. Imports add missing records. Conflicting saved IDs and new Trust disclosure approvals block the commit. Use a workspace save with the approval scope to approve a current Trust disclosure.
Deliver supplier questionnaires
Read a supplier's delivery status to find the current case and version. Use separate scopes to change a case or pause delivery and queue email delivery. Persist an Idempotency-Key for each write and reuse it for an identical retry within seven days. Verify the supplier contact in the Portal before queuing email. Use the separate scope to list submitted case evidence and download verified files.
Was this helpful?