---
title: "Create assessment"
method: POST
path: "/v1/projects/{project_id}/compliance/systems/{system_id}/assessments"
tags: ["compliance"]
---

# Create assessment

`POST /v1/projects/{project_id}/compliance/systems/{system_id}/assessments`

## Request

- Base URL: `https://api.connic.co`
- URL: `https://api.connic.co/v1/projects/{project_id}/compliance/systems/{system_id}/assessments`
- Auth: HTTP bearer

Create a draft compliance assessment as the AI system's next version.

The result is derived from the submitted dimensions.

Required permission: `compliance.manage`.

## Path parameters

- `project_id` string, uuid, required
- `system_id` string, uuid, required

## Request body

- ComplianceAssessmentCreate: Records a new assessment version. The result is derived from the answers and is preliminary, not a legal determination.
  - `dimensions` ComplianceAssessmentDimensions, required: Assessment answers. Each yes/no question takes true, false, or null when the answer is uncertain.
    - `eu_scope` boolean, nullable: Whether the system is placed on the EU market, put into service in the EU, or used where its output affects people in the EU.
    - `roles` string[], required: Your organization's operator roles. Controls are generated for `provider` and `deployer` only.
    - `prohibited_practice` boolean, nullable: Whether the system may involve a prohibited AI practice under Article 5.
    - `annex_i_product` boolean, nullable: Whether the system is a safety component of, or itself, a product covered by Annex I legislation.
    - `annex_iii_use_case` boolean, nullable: Whether the intended use falls within an Annex III high-risk use case.
    - `annex_iii_profiling` boolean, nullable: Whether the system profiles natural persons in an Annex III use case.
    - `article_6_3_exemption` boolean, nullable: Whether an Article 6(3) exemption is relied on for an Annex III use case.
    - `fria_applicable` boolean, nullable: Whether a fundamental rights impact assessment (Article 27) is expected for this deployment.
    - `direct_interaction` boolean, nullable: Whether the system interacts directly with natural persons.
    - `synthetic_content` boolean, nullable: Whether the system generates or manipulates synthetic text, image, audio or video content.
    - `emotion_recognition` boolean, nullable: Whether the system performs emotion recognition.
    - `biometric_categorisation` boolean, nullable: Whether the system performs biometric categorisation.
    - `deepfake` boolean, nullable: Whether the system generates or manipulates content that may constitute a deepfake.
    - `public_interest_text` boolean, nullable: Whether the system generates or manipulates text published to inform the public on matters of public interest.
    - `human_editorial_review` boolean, nullable: Whether public-interest text undergoes human editorial review with an identified responsible person or entity.
    - `gpai_provider` boolean, nullable: Whether your organization places a general-purpose AI model on the market as its provider.
  - `rationale` string, required: Why these answers were recorded.
  - `regulatory_source_version` string, nullable: Legal source or internal policy version used. Defaults to the source reviewed for the current catalog.

## Response `201`

Successful Response

- ComplianceAssessmentResponse: An immutable, versioned role and risk assessment of an AI system. Its result is preliminary, not a legal determination.
  - `id` string, uuid, required
  - `project_id` string, uuid, required: Project the assessment belongs to.
  - `system_id` string, uuid, required: AI system that was assessed.
  - `version` integer, required: Version number for the system, starting at 1.
  - `status` 'draft' | 'approved' | 'changes_requested', required: `draft` until reviewed, then `approved` or `changes_requested`.
  - `dimensions` object, required: Assessment answers, in the shape of the create request's `dimensions`.
  - `result` object, required: Preliminary classification derived from `dimensions`, including `scope_status`, `high_risk_status`, `article_50_applicable_triggers`, `uncertain_dimensions` and `needs_review`.
  - `rationale` string, nullable, required: Why the answers were recorded.
  - `catalog_version` string, required: Version of the obligation catalog used to derive the result.
  - `regulatory_source_version` string, required: Legal source or internal policy version the assessment used.
  - `created_by` string, required: ID of the user who recorded the assessment.
  - `reviewed_by` string, nullable, required: ID of the reviewer. null until reviewed.
  - `review_notes` string, nullable, required: Reviewer notes.
  - `uncertainty_acknowledged` boolean, required: Whether the reviewer approved despite uncertain (null) answers.
  - `reviewed_at` string, date-time, nullable, required: When the assessment was reviewed. null until reviewed.
  - `created_at` string, date-time, required

## Other responses

- `401`: Missing or invalid API key.
- `403`: The API key lacks the required permission or access to the environment.
- `404`: The resource does not exist in this project.
- `422`: Validation Error
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/connic/apis/connic-api.md) · [All operations](https://skmtc.dev/connic/apis/connic-api/llms.txt) · [OpenAPI document](https://skmtc.dev/connic/apis/connic-api/revisions/482932da5fbe?raw)