---
title: "Get compliance overview"
method: GET
path: "/v1/projects/{project_id}/compliance/overview"
tags: ["compliance"]
---

# Get compliance overview

`GET /v1/projects/{project_id}/compliance/overview`

## Request

- Base URL: `https://api.connic.co`
- URL: `https://api.connic.co/v1/projects/{project_id}/compliance/overview`
- Auth: HTTP bearer

Return a project-wide summary of AI governance and compliance state.

Required permission: `compliance.view`.

## Path parameters

- `project_id` string, uuid, required

## Response `200`

Successful Response

- ComplianceOverviewResponse: Project-wide summary of AI governance state.
  - `systems` object, required: AI system counts: `total`, `draft`, `active`, `retired`, `unassessed`, `awaiting_review` and `reviewed`.
  - `controls` object, required: Control counts by status, plus `total`.
  - `transparency` object, required: Systems by Article 50 state: `applicable`, `configured`, `needs_configuration` and `not_applicable`, plus the number of `enabled_policies`.
  - `incidents` object, required: `open` incidents, and `overdue` open incidents past an unreported reporting deadline.
  - `monitoring` object, required: `due`: active monitoring plans whose next review date has passed.
  - `latest_snapshot` ComplianceEvidenceSnapshotResponse: Immutable, metadata-only capture of governance records and telemetry. Download it as a ZIP archive.
    - `id` string, uuid, required
    - `project_id` string, uuid, required: Project the snapshot belongs to.
    - `system_id` string, uuid, nullable, required: AI system the snapshot was limited to. null when it covers several systems.
    - `name` string, required
    - `scope` object, required: What was captured: `system_ids`, `environment_ids`, `system_agent_environment_pairs`, `telemetry_scope`, `time_from` and `time_to`.
    - `content_hash` string, required: SHA-256 hash of the canonical snapshot content, also sent as `X-Content-SHA256` on download.
    - `catalog_version` string, required: Version of the obligation catalog when the snapshot was taken.
    - `created_by` string, required: ID of the user who captured the snapshot.
    - `created_at` string, date-time, required
    - `coverage` object, required: Coverage summary: control counts by status, transparency record counts, `missing_items` and `missing_evidence`, the time and environment scope, and the plan's data retention in days.

## Other responses

- `401`: Missing or invalid API key.
- `403`: The API key lacks the required permission or access to the environment.
- `422`: Validation Error
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/connic/apis/connic-api.md) · [All operations](https://skmtc.dev/connic/apis/connic-api/llms.txt) · [OpenAPI document](https://skmtc.dev/connic/apis/connic-api/revisions/482932da5fbe?raw)