---
title: "Get vendor compliance data"
method: GET
path: "/api/v1/infrastructure/vendors/{vendor}/compliance"
tags: ["Compliance"]
---

# Get vendor compliance data

`GET /api/v1/infrastructure/vendors/{vendor}/compliance`

## Request

- Base URL: `https://www.huntertech.io`
- URL: `https://www.huntertech.io/api/v1/infrastructure/vendors/{vendor}/compliance`
- Auth: API key in header `X-API-Key`

Returns certifications, frameworks, and scorecard statistics for a vendor compliance snapshot.

**Requires Standard plan or higher** (same as the web compliance pages). Use `GET /vendor-capabilities/{vendor}` to see whether compliance is available for a slug.

Example: `/api/v1/infrastructure/vendors/zscaler/compliance`

Legacy alias: `/api/v1/infrastructure/zscaler-compliance` (same response).

## Path parameters

- `vendor` string, required

## Response `200`

Success

- ComplianceResponse
  - `success` boolean, required
  - `vendor` string
  - `sourceUrl` string, uri, nullable
  - `sourceType` string
  - `lastUpdated` string, date-time, nullable
  - `itemCount` integer
  - `message` string, nullable: Present when the vendor has no certifications in the current snapshot.
  - `items` object[], required
    - `name` string
    - `description` string
    - `category` string
    - `compliancePageLink` string, uri, nullable
    - `researchedAt` string, date-time, nullable
  - `scorecard` object: Rollup counts by certification category.

## Other responses

- `400`: Bad Request
- `401`: Missing or invalid API key
- `403`: Direct API call blocked without a valid key or browser Origin
- `404`: Unknown vendor or unsupported data type
- `429`: Plan rate limit exceeded
- `500`: Internal Server Error

---

[API](https://skmtc.dev/huntertech/apis/huntertech-public-api.md) · [All operations](https://skmtc.dev/huntertech/apis/huntertech-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/huntertech/apis/huntertech-public-api/revisions/39973a440052?raw)