---
title: "Update Renewal Rules"
method: PUT
path: "/document-renewal-rules"
tags: ["document-renewal-rules"]
---

# Update Renewal Rules

`PUT /document-renewal-rules`

Replace the company's renewal rules with the set in the body.

The list is the whole configuration and its order is the precedence, so the
body carries every rule the company wants, the way the settings page sends
it. A rule omitted from the list is deleted.

## Request body

- DocumentRenewalRulesUpsert — Request body for replacing a company's document renewal rules. The list is the complete configuration and its order is the rules' precedence — the first rule that covers a document's type and whose condition holds for its vendor decides the schedule. A rule absent from the list is deleted, so send the full set the way the settings page does.
  - `rules` DocumentRenewalRuleInput[], required
    - `id` string, uuid, nullable
    - `name` string, nullable
    - `document_types` DocumentTypeEnum[], required
    - `condition_logic_id` string, uuid, nullable
    - `request_offset_days` integer
    - `request_due_in_days` integer
    - `subscribers` AssigneeSelectionInput[]
      - `mode` 'vendor_assignees' | 'user' | 'team', required — How responsibility for an entity is resolved to a set of users. Not every mode is valid for every entity — see ``ASSIGNEE_SCOPES``.
      - `user_id` string, uuid, nullable
      - `team_id` string, uuid, nullable

## Response `200`

Successful Response

- DocumentRenewalRulesResponse — A company's document renewal rules, in precedence order. The first rule covering an expiring document's type whose condition holds for its vendor decides the schedule. An empty list means vendor outreach is off entirely, and nobody internally is told about an expiry either — there is no company-wide switch behind either half.
  - `rules` DocumentRenewalRuleResponse[]
    - `id` string, uuid, required
    - `name` string, nullable
    - `document_types` DocumentTypeReference[]
      - `slug` 'GENERIC_POLICY' | 'CONTRACT' | 'QUESTIONNAIRE' | 'MASTER_SERVICES_AGREEMENT_MSA' | 'AML_POLICIES_AND_PROCEDURES' | 'PRIVACY_POLICY' | 'INSURANCE_CERTIFICATE' | 'SOC_1_REPORT' | 'SOC_2_REPORT' | 'DISASTER_RECOVERY_PLAN' | 'INFORMATION_SECURITY_POLICY' | 'ACCEPTABLE_USE_POLICY' | 'ACCESS_CONTROL_POLICY' | 'DATA_CLASSIFICATION_POLICY' | 'INCIDENT_RESPONSE_PROCEDURES' | 'THIRD_PARTY_SECURITY_POLICY' | 'MARKETING_MATERIAL' | 'SOC_3_REPORT' | 'BRIDGE_LETTER' | 'PCI_DSS_ATTESTATION_OF_COMPLIANCE' | 'GDPR_COMPLIANCE_STATEMENT' | 'CCPA_COMPLIANCE_STATEMENT' | 'HIPAA_COMPLIANCE_ATTESTATION' | 'FFIEC_COMPLIANCE_ATTESTATION' | 'PENETRATION_TEST_RESULTS' | 'VULNERABILITY_SCAN_REPORTS' | 'RISK_ASSESSMENT_REPORT' | 'THREAT_MODELING_DOCUMENTATION' | 'APPLICATION_SECURITY_ASSESSMENT' | 'ISO_27001_CERTIFICATION' | 'ISO_27701_CERTIFICATION' | 'ISO_9001_CERTIFICATION' | 'ISO_22301_CERTIFICATION' | 'CSA_STAR_CERTIFICATION' | 'HITRUST_CERTIFICATION' | 'FEDRAMP_AUTHORIZATION' | 'CHANGE_MANAGEMENT_POLICY' | 'SDLC_POLICY' | 'NETWORK_SECURITY_POLICY' | 'DATA_SECURITY_POLICY' | 'ENDPOINT_SECURITY_POLICY' | 'MOBILE_DEVICE_MANAGEMENT_POLICY' | 'PASSWORD_POLICY' | 'ENCRYPTION_POLICY' | 'PATCH_MANAGEMENT_POLICY' | 'CLOUD_SECURITY_POLICY' | 'DATA_RETENTION_POLICY' | 'DATA_DESTRUCTION_POLICY' | 'SYSTEM_ARCHITECTURE_OVERVIEW' | 'SHARED_RESPONSIBILITY_MATRIX' | 'DATA_FLOW_DIAGRAMS' | 'SYSTEM_NETWORK_DIAGRAM' | 'API_DOCUMENTATION' | 'IT_ASSET_MANAGEMENT_POLICY' | 'PHYSICAL_SECURITY_POLICY' | 'PRODUCT_ARCHITECTURE_DOCUMENTATION' | 'DATA_ACCESS_AND_ENCRYPTION_PROTOCOLS' | 'LOCALIZATION_DATA_RESIDENCY_DOCUMENTATION' | 'AUDITED_FINANCIAL_STATEMENTS' | 'BUSINESS_CONTINUITY_PLAN' | 'BUSINESS_IMPACT_ASSESSMENT' | 'BCP_DR_TEST_RESULTS' | 'CORPORATE_STRUCTURE_DOCUMENTATION' | 'ARTICLES_OF_INCORPORATION' | 'BUSINESS_LICENSE' | 'TAX_COMPLIANCE_DOCUMENTATION' | 'DNB_REPORT' | 'REFERENCES_FROM_OTHER_FINANCIAL_INSTITUTIONS' | 'CERTIFICATE_OF_GOOD_STANDING' | 'W9_TAX_IDENTIFICATION_FORM' | 'OPERATING_AGREEMENTS' | 'BYLAWS' | 'PARTNERSHIP_AGREEMENT' | 'IRS_EIN_EVIDENCE' | 'PROOF_OF_HEADQUARTERS_ADDRESS' | 'BENEFICIAL_OWNERSHIP_DOCUMENTATION' | 'BOARD_OF_DIRECTORS_LIST_AND_BIOS' | 'MANAGEMENT_ORGANIZATIONAL_CHART' | 'KEY_ROLES_LIST_AND_SUCCESSION_PLAN' | 'FUNDING_PLAN_OR_SOURCES' | 'LITIGATION_LIST' | 'GOVERNMENT_REGULATOR_INQUIRIES' | 'LEGAL_DISCLOSURES' | 'BANK_CHARTER' | 'FINTECH_SPONSOR_AGREEMENT' | 'SOURCE_CODE_ESCROW_AGREEMENT' | 'REGULATION_E_POLICY' | 'REGULATION_Z_POLICY' | 'OFAC_COMPLIANCE_POLICY' | 'KYC_PROCEDURES' | 'FAIR_LENDING_POLICY' | 'UDAAP_COMPLIANCE_POLICY' | 'CRA_COMPLIANCE_POLICY' | 'GLBA_COMPLIANCE_POLICY' | 'TCPA_TSR_POLICY' | 'ADA_POLICY' | 'CIP_DOCUMENTATION' | 'CDD_EDD_ONBOARDING_PROCEDURES' | 'SAR_ESCALATION_AND_REPORTING_PROCEDURES' | 'AI_POLICY' | 'AI_GOVERNANCE_DOCUMENTATION' | 'AI_RISK_ASSESSMENT' | 'MODEL_RISK_MANAGEMENT_POLICY' | 'MODEL_INVENTORY' | 'MODEL_VALIDATION_REPORT' | 'AUDIT_POLICY' | 'VENDOR_MANAGEMENT_POLICY' | 'VENDOR_LIST_WITH_CUSTOMER_DATA_ACCESS' | 'VENDOR_ONBOARDING_AND_DUE_DILIGENCE_PROCEDURE' | 'CLOUD_PROVIDER_DUE_DILIGENCE_DOCUMENTATION' | 'VENDOR_RISK_ASSESSMENT_EXAMPLES' | 'REGULATORY_EXAMINATION_REPORTS' | 'RIGHT_TO_AUDIT_CLAUSE_CONFIRMATION' | 'PRIVACY_IMPACT_ASSESSMENT' | 'BOARD_OR_COMMITTEE_OVERSIGHT_DOCUMENTATION' | 'COMPLIANCE_COMMITTEE_CHARTER' | 'BSA_AML_COMPLIANCE_OVERSIGHT_EVIDENCE' | 'COMPLIANCE_STAFF_RESUMES_AND_JOB_DESCRIPTIONS' | 'BOARD_COMPLIANCE_TRAINING_MATERIALS' | 'COMPLIANCE_ESCALATION_AND_REPORTING_PROCESS' | 'CMS_PROGRAM_OVERVIEW' | 'REGULATORY_CHANGE_MANAGEMENT_PROCEDURE' | 'COMPLIANCE_MONITORING_AND_TESTING_PROCEDURE' | 'TESTING_PROCEDURES_AND_WORKSHEETS' | 'RISK_MANAGEMENT_FRAMEWORK' | 'GOVERNANCE_POLICY' | 'ACH_PAYMENTS_PROGRAM_OVERVIEW' | 'VALIDATE_IDENTITY_CLEAR' | 'INSIDER_TRADING_POLICY' | 'IDENTITY_THEFT_PROCEDURES' | 'UNUSUAL_ACTIVITY_REPORT_PROCEDURES' | 'TRANSACTION_MONITORING' | 'FRAUD_MONITORING_METHODOLOGY' | 'FRAUD_POLICIES_AND_PROCEDURES' | 'PRIOR_YEAR_FRAUD_REPORTING_METRICS' | 'BACKGROUND_CHECK_PROCEDURES' | 'EMPLOYEE_SECURITY_AWARENESS_TRAINING_PROGRAM' | 'CODE_OF_CONDUCT' | 'ETHICS_POLICY' | 'WHISTLEBLOWER_POLICY' | 'DIVERSITY_INCLUSION_POLICY' | 'OFFBOARDING_AND_ONBOARDING_POLICY' | 'HUMAN_RESOURCE_SECURITY_POLICY' | 'SEXUAL_HARASSMENT_POLICY' | 'COMMUNICATION_DOCUMENTS' | 'NON_DISCLOSURE_AGREEMENT_NDA' | 'SERVICE_LEVEL_AGREEMENT_SLA' | 'DATA_PROCESSING_AGREEMENT_DPA' | 'BUSINESS_ASSOCIATE_AGREEMENT_BAA' | 'INTELLECTUAL_PROPERTY_RIGHTS_DOCUMENTATION' | 'MATERIAL_SOFTWARE_LICENSES_LIST' | 'IMPLEMENTATION_PLAN' | 'SUPPORT_SLA_DOCUMENTATION' | 'OPERATIONAL_PROCEDURES_MANUAL' | 'USER_DOCUMENTATION' | 'TRAINING_MATERIALS' | 'LIST_OF_SUBCONTRACTORS' | 'AUDIT_SUMMARY_OR_REPORTS' | 'INTERNAL_AUDIT_CHARTER' | 'INDEPENDENT_AUDIT_REVIEW_RESULTS' | 'AUDIT_PLAN_AND_SCHEDULE' | 'AUDIT_REPORTING_TO_MANAGEMENT_AND_BOARD' | 'UAT_PROCEDURES' | 'ISSUE_MANAGEMENT_REMEDIATION_TRACKER' | 'COMPLAINT_HANDLING' | 'COMPLAINT_LOG_AND_ANALYSIS' | 'COMPLAINT_RESOLUTION_ESCALATION' | 'CUSTOMER_SUPPORT_OVERVIEW' | 'END_USER_ONBOARDING_WORKFLOW' | 'END_USER_TERMS_AND_FEE_DISCLOSURES' | 'E_SIGN_POLICY' | 'PERFORMANCE_REPORTS' | 'EXIT_STRATEGY_OFFBOARDING_PLAN' | 'PROJECTIONS' | 'MARKETING_POLICY_AND_PROCEDURE' | 'CAN_SPAM_POLICY' | 'SOCIAL_MEDIA_POLICY' | 'PUBLISHED_DATA_BREACH_HISTORY' | 'ESG_REPORT' | 'SUSTAINABILITY_POLICY' | 'CORPORATE_SOCIAL_RESPONSIBILITY_STATEMENT' | 'ENVIRONMENTAL_COMPLIANCE_CERTIFICATION' | 'APPROVALS' | 'ASSESSMENTS' | 'MISCELLANEOUS' | 'SIG_QUESTIONNAIRE' | 'FINANCIALS' | 'COMPANY_OVERVIEW' | 'KOBALT_GENERATED_REPORT' | 'ANNUAL_FINANCIAL_REPORT' | 'SEC_FORM_10K' | 'SEC_FORM_10Q' | 'INTERNAL_GENERAL' | 'INTERNAL_PRIVACY_POLICY' | 'INTERNAL_AML_POLICY' | 'INTERNAL_MARKETING_STANDARDS' | 'REPORT_TEMPLATE' | 'INTERNAL_INFORMATION_SECURITY_POLICY' | 'INTERNAL_ACCESS_CONTROL_POLICY' | 'INTERNAL_DATA_CLASSIFICATION_POLICY' | 'INTERNAL_INCIDENT_RESPONSE_PROCEDURES' | 'INTERNAL_THIRD_PARTY_SECURITY_POLICY' | 'INTERNAL_RECORDS_MANAGEMENT_POLICY' | 'INTERNAL_INFORMATION_GOVERNANCE_POLICY' | 'INTERNAL_THIRD_PARTY_RISK_MANAGEMENT_POLICY' | 'INTERNAL_KNOW_YOUR_COUNTERPARTY_SCREENING_GUIDELINES' | 'INTERNAL_INCIDENT_MANAGEMENT_POLICY' | 'INTERNAL_JURISDICTION_RATINGS' | 'INTERNAL_ACCEPTABLE_USE_POLICY' | 'INTERNAL_GLOSSARY' | 'INTERNAL_INHERENT_RISK_ASSESSMENT_GUIDELINES' | 'RISK_ASSESSMENT_GUIDELINES' | 'KOBALT_MIGRATION', required
      - `label` string, required
    - `condition_logic_id` string, uuid, nullable
    - `condition_name` string, nullable
    - `request_offset_days` integer, required
    - `request_due_in_days` integer, required
    - `subscribers` AssigneeSelectionResponse[]
      - `mode` 'vendor_assignees' | 'user' | 'team', required — How responsibility for an entity is resolved to a set of users. Not every mode is valid for every entity — see ``ASSIGNEE_SCOPES``.
      - `user_id` string, uuid, nullable
      - `team_id` string, uuid, nullable
      - `label` string, required
  - `available_assignee_modes` AssigneeMode[]
  - `default_assignee_mode` 'vendor_assignees' | 'user' | 'team', required — How responsibility for an entity is resolved to a set of users. Not every mode is valid for every entity — see ``ASSIGNEE_SCOPES``.

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/fastapi.md) · [All operations](https://skmtc.dev/kobaltlabs/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kobaltlabs/fastapi/revisions/425d5b8a3c17/schema)