---
title: "Generate and persist a signed compliance evidence pack"
method: POST
path: "/v1/compliance/evidence-pack"
---

# Generate and persist a signed compliance evidence pack

`POST /v1/compliance/evidence-pack`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/compliance/evidence-pack`
- Auth: HTTP bearer

## Request body

- ComplianceEvidencePackRequest
  - `org_id` string, uuid, required
  - `session_id` string, required
  - `workflow_label` string, required
  - `window_days` integer, required
  - `frameworks` ComplianceFrameworkId[], required

## Response `201`

Signed evidence pack

- ComplianceEvidencePackResponse
  - `pack_id` string, uuid, required
  - `generated_at` string, date-time, required
  - `signature` string, required
  - `verification_url` string, uri, required
  - `metrics` ComplianceEvidencePackMetrics, required
    - `decisions` integer, required
    - `blocked` integer, required
    - `escalated` integer, required
    - `human_oversight` integer, required
    - `recordkeeping` integer, required
  - `frameworks` ComplianceEvidenceFramework[], required
    - `id` 'eu_ai_act' | 'gdpr' | 'soc2', required
    - `name` string, required
    - `controls` ComplianceEvidenceControl[], required
      - `ref` string, required
      - `name` string, required
      - `requirement` string, required
      - `evidence` string, required
      - `metric` 'decisions' | 'blocked' | 'escalated' | 'humanOversight' | 'recordkeeping'
      - `metric_value` integer, nullable, required
  - `download_url` string, uri, required

## Other responses

- `400`: Structured API error
- `401`: Structured API error
- `403`: Structured API error
- `503`: Structured API error

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)