---
title: "Download Security Questionnaire"
method: GET
path: "/accounts/{account_id}/security-questionnaires/{questionnaire_id}/download"
tags: ["Documents"]
---

# Download Security Questionnaire

`GET /accounts/{account_id}/security-questionnaires/{questionnaire_id}/download`

## Request

- Base URL: `https://be.graph8.com/api/v1`
- URL: `https://be.graph8.com/api/v1/accounts/{account_id}/security-questionnaires/{questionnaire_id}/download`
- Auth: HTTP bearer

The FILLED workbook, as XLSX bytes.

Not the `ApiResponse` envelope - a spreadsheet wrapped in JSON is not a
spreadsheet. Same precedent as `GET /knowledge/export`.

Only available once the questionnaire is `completed` or `needs_review`;
asking earlier is refused rather than returning a half-filled file.

## Path parameters

- `account_id` string, required: The account.
- `questionnaire_id` string, required: Questionnaire id (UUID).

## Headers

- `Authorization` string, nullable
- `X-Target-Org-Id` string, nullable

## Response `200`

Successful Response

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graph8/apis/graph8-developer-api.md) · [All operations](https://skmtc.dev/graph8/apis/graph8-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/graph8/apis/graph8-developer-api/revisions/2e7cfa0ca921?raw)