List audit findings
curl --request GET \
--url https://api.trycomp.ai/v1/findings \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)[
{
"id": "fnd_abc123def456",
"organizationId": "org_abc123def456",
"type": "soc2",
"status": "open",
"severity": "medium",
"content": "Access review evidence is missing for Q3.",
"revisionNote": null,
"area": null,
"createdAt": "2026-01-01T00:00:00.000Z",
"updatedAt": "2026-01-15T00:00:00.000Z",
"taskId": "tsk_abc123def456",
"task": {
"id": "tsk_abc123def456",
"title": "Review access logs"
},
"evidenceSubmissionId": null,
"evidenceSubmission": null,
"evidenceFormType": null,
"policyId": null,
"vendorId": null,
"riskId": null,
"memberId": null,
"deviceId": null,
"templateId": null,
"createdById": "mem_abc123def456",
"createdByAdminId": null
}
]Findings
List audit findings | Comp AI API
List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.
GET
/
v1
/
findings
List audit findings
curl --request GET \
--url https://api.trycomp.ai/v1/findings \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.trycomp.ai/v1/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.trycomp.ai/v1/findings"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)[
{
"id": "fnd_abc123def456",
"organizationId": "org_abc123def456",
"type": "soc2",
"status": "open",
"severity": "medium",
"content": "Access review evidence is missing for Q3.",
"revisionNote": null,
"area": null,
"createdAt": "2026-01-01T00:00:00.000Z",
"updatedAt": "2026-01-15T00:00:00.000Z",
"taskId": "tsk_abc123def456",
"task": {
"id": "tsk_abc123def456",
"title": "Review access logs"
},
"evidenceSubmissionId": null,
"evidenceSubmission": null,
"evidenceFormType": null,
"policyId": null,
"vendorId": null,
"riskId": null,
"memberId": null,
"deviceId": null,
"templateId": null,
"createdById": "mem_abc123def456",
"createdByAdminId": null
}
]Authorizations
API key for authentication
Query Parameters
Available options:
open, ready_for_review, needs_revision, closed Available options:
low, medium, high, critical Available options:
people, documents, compliance, risks, vendors, policies, other Available options:
board-meeting, it-leadership-meeting, risk-committee-meeting, meeting, access-request, whistleblower-report, penetration-test, rbac-matrix, infrastructure-inventory, employee-performance-evaluation, network-diagram, tabletop-exercise, account-types Response
200 - application/json
Findings retrieved successfully. Returned as a bare JSON array (no data envelope), ordered by status then newest first.
Example:
"fnd_abc123def456"
Example:
"org_abc123def456"
Available options:
soc2, iso27001, pci_dss, hipaa, gdpr, iso9001, iso42001 Available options:
open, ready_for_review, needs_revision, closed Available options:
low, medium, high, critical The finding text
Auditor's note when revision was requested
Set when the finding is not tied to a specific item
Available options:
people, documents, compliance, risks, vendors, policies, other Available options:
board-meeting, it-leadership-meeting, risk-committee-meeting, meeting, access-request, whistleblower-report, penetration-test, rbac-matrix, infrastructure-inventory, employee-performance-evaluation, network-diagram, tabletop-exercise, account-types Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
The member the finding is about
Show child attributes
Show child attributes
Member who raised the finding (null for platform admins)
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Was this page helpful?