Skip to main content
POST
Submit evidence form

Authorizations

X-API-Key
string
header
required

API key for authentication

Headers

X-Organization-Id
string

Organization ID (required for session auth, optional for API key auth)

Path Parameters

formType
enum<string>
required

Slug of the evidence form. Call GET /v1/evidence-forms to see every form with its title.

Available options:
board-meeting,
it-leadership-meeting,
risk-committee-meeting,
meeting,
access-request,
whistleblower-report,
penetration-test,
rbac-matrix,
infrastructure-inventory,
employee-performance-evaluation,
network-diagram,
tabletop-exercise,
account-types

Body

application/json

Answers keyed by the form definition's field keys. Call GET /v1/evidence-forms/{formType} first — its form.fields lists every key, type and whether it is required. matrix fields take an array of row objects keyed by column key; file fields take the {fileName, fileKey, downloadUrl} object returned by POST /v1/evidence-forms/uploads. Forms whose submissionDateMode is auto set submissionDate server-side.

The body is of type object.

Response

201 - undefined