Skip to main content
POST
/
v1
/
trust-portal
/
compliance-resources
/
upload
Upload compliance certificate
curl --request POST \
  --url https://api.trycomp.ai/v1/trust-portal/compliance-resources/upload \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "organizationId": "org_6914cd0e16e4c7dccbb54426",
  "fileName": "iso-27001-certificate.pdf",
  "fileType": "application/pdf",
  "fileData": "<string>"
}
'
{
  "customFrameworkId": {},
  "fileName": "<string>",
  "fileSize": 123,
  "updatedAt": "<string>"
}

Authorizations

​
X-API-Key
string
header
required

API key for authentication

Body

application/json
​
organizationId
string
required

Organization ID that owns the compliance resource

Example:

"org_6914cd0e16e4c7dccbb54426"

​
fileName
string
required

Original file name (PDF only)

Example:

"iso-27001-certificate.pdf"

​
fileType
string
required

MIME type of the file

Example:

"application/pdf"

​
fileData
string
required

Base64 encoded PDF content

​
framework
enum<string>

Native compliance framework identifier

Available options:
iso_27001,
iso_42001,
gdpr,
hipaa,
soc2_type1,
soc2_type2,
soc3,
pci_dss,
nen_7510,
iso_9001,
pipeda,
ccpa
Example:

"iso_27001"

​
customFrameworkId
string

Org-authored custom framework ID (alternative to framework)

Example:

"cfrm_6914cd0e16e4c7dccbb54426"

Response

Compliance certificate uploaded successfully

​
framework
enum<string> | null
required

Set for native-framework certificates; null for custom ones

Available options:
iso_27001,
iso_42001,
gdpr,
hipaa,
soc2_type1,
soc2_type2,
soc3,
pci_dss,
nen_7510,
iso_9001,
pipeda,
ccpa
​
customFrameworkId
object
required

Set for custom-framework certificates; null for native ones

​
fileName
string
required
​
fileSize
number
required

File size in bytes

​
updatedAt
string
required

ISO timestamp when the certificate was last updated