---
title: "List assessments"
method: GET
path: "/v1/projects/{project_id}/compliance/systems/{system_id}/assessments"
tags: ["compliance"]
---

# List assessments

`GET /v1/projects/{project_id}/compliance/systems/{system_id}/assessments`

## Request

- Base URL: `https://api.connic.co`
- URL: `https://api.connic.co/v1/projects/{project_id}/compliance/systems/{system_id}/assessments`
- Auth: HTTP bearer

List compliance assessments for an AI system, newest first.

Required permission: `compliance.view`.

## Path parameters

- `project_id` string, uuid, required
- `system_id` string, uuid, required

## Response `200`

Successful Response

- ComplianceAssessmentResponse[]
  - `id` string, uuid, required
  - `project_id` string, uuid, required: Project the assessment belongs to.
  - `system_id` string, uuid, required: AI system that was assessed.
  - `version` integer, required: Version number for the system, starting at 1.
  - `status` 'draft' | 'approved' | 'changes_requested', required: `draft` until reviewed, then `approved` or `changes_requested`.
  - `dimensions` object, required: Assessment answers, in the shape of the create request's `dimensions`.
  - `result` object, required: Preliminary classification derived from `dimensions`, including `scope_status`, `high_risk_status`, `article_50_applicable_triggers`, `uncertain_dimensions` and `needs_review`.
  - `rationale` string, nullable, required: Why the answers were recorded.
  - `catalog_version` string, required: Version of the obligation catalog used to derive the result.
  - `regulatory_source_version` string, required: Legal source or internal policy version the assessment used.
  - `created_by` string, required: ID of the user who recorded the assessment.
  - `reviewed_by` string, nullable, required: ID of the reviewer. null until reviewed.
  - `review_notes` string, nullable, required: Reviewer notes.
  - `uncertainty_acknowledged` boolean, required: Whether the reviewer approved despite uncertain (null) answers.
  - `reviewed_at` string, date-time, nullable, required: When the assessment was reviewed. null until reviewed.
  - `created_at` string, date-time, required

## Other responses

- `401`: Missing or invalid API key.
- `403`: The API key lacks the required permission or access to the environment.
- `404`: The resource does not exist in this project.
- `422`: Validation Error
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/connic/apis/connic-api.md) · [All operations](https://skmtc.dev/connic/apis/connic-api/llms.txt) · [OpenAPI document](https://skmtc.dev/connic/apis/connic-api/revisions/482932da5fbe?raw)