---
title: "Create Evidence Packet"
method: POST
path: "/evidence-packet-configuration/validations"
tags: ["evidence-packet-configuration"]
---

# Create Evidence Packet

`POST /evidence-packet-configuration/validations`

Create a new evidence validation request.

This creates an EvidenceValidation record, associates it with the selected
evidence packets, and optionally sends an email to the recipient.

## Request body

- EvidencePacketCreateRequest — Request model for creating an evidence packet request.
  - `vendor_id` string, uuid, required
  - `due_date` string, nullable
  - `recipient` EvidencePacketRequestee — Recipient information for evidence validation request.
    - `user_id` string, uuid, nullable
    - `email` string, required
    - `first_name` string, required
    - `last_name` string, required
  - `document_types` DocumentTypeEntryInput[]
    - `slug` 'GENERIC_POLICY' | 'CONTRACT' | 'QUESTIONNAIRE' | 'MASTER_SERVICES_AGREEMENT_MSA' | 'AML_POLICIES_AND_PROCEDURES' | 'PRIVACY_POLICY' | 'INSURANCE_CERTIFICATE' | 'SOC_1_REPORT' | 'SOC_2_REPORT' | 'DISASTER_RECOVERY_PLAN' | 'INFORMATION_SECURITY_POLICY' | 'ACCEPTABLE_USE_POLICY' | 'ACCESS_CONTROL_POLICY' | 'DATA_CLASSIFICATION_POLICY' | 'INCIDENT_RESPONSE_PROCEDURES' | 'THIRD_PARTY_SECURITY_POLICY' | 'MARKETING_MATERIAL' | 'SOC_3_REPORT' | 'BRIDGE_LETTER' | 'PCI_DSS_ATTESTATION_OF_COMPLIANCE' | 'GDPR_COMPLIANCE_STATEMENT' | 'CCPA_COMPLIANCE_STATEMENT' | 'HIPAA_COMPLIANCE_ATTESTATION' | 'FFIEC_COMPLIANCE_ATTESTATION' | 'PENETRATION_TEST_RESULTS' | 'VULNERABILITY_SCAN_REPORTS' | 'RISK_ASSESSMENT_REPORT' | 'THREAT_MODELING_DOCUMENTATION' | 'APPLICATION_SECURITY_ASSESSMENT' | 'ISO_27001_CERTIFICATION' | 'ISO_27701_CERTIFICATION' | 'ISO_9001_CERTIFICATION' | 'ISO_22301_CERTIFICATION' | 'CSA_STAR_CERTIFICATION' | 'HITRUST_CERTIFICATION' | 'FEDRAMP_AUTHORIZATION' | 'CHANGE_MANAGEMENT_POLICY' | 'SDLC_POLICY' | 'NETWORK_SECURITY_POLICY' | 'DATA_SECURITY_POLICY' | 'ENDPOINT_SECURITY_POLICY' | 'MOBILE_DEVICE_MANAGEMENT_POLICY' | 'PASSWORD_POLICY' | 'ENCRYPTION_POLICY' | 'PATCH_MANAGEMENT_POLICY' | 'CLOUD_SECURITY_POLICY' | 'DATA_RETENTION_POLICY' | 'DATA_DESTRUCTION_POLICY' | 'SYSTEM_ARCHITECTURE_OVERVIEW' | 'SHARED_RESPONSIBILITY_MATRIX' | 'DATA_FLOW_DIAGRAMS' | 'SYSTEM_NETWORK_DIAGRAM' | 'API_DOCUMENTATION' | 'IT_ASSET_MANAGEMENT_POLICY' | 'PHYSICAL_SECURITY_POLICY' | 'PRODUCT_ARCHITECTURE_DOCUMENTATION' | 'DATA_ACCESS_AND_ENCRYPTION_PROTOCOLS' | 'LOCALIZATION_DATA_RESIDENCY_DOCUMENTATION' | 'AUDITED_FINANCIAL_STATEMENTS' | 'BUSINESS_CONTINUITY_PLAN' | 'BUSINESS_IMPACT_ASSESSMENT' | 'BCP_DR_TEST_RESULTS' | 'CORPORATE_STRUCTURE_DOCUMENTATION' | 'ARTICLES_OF_INCORPORATION' | 'BUSINESS_LICENSE' | 'TAX_COMPLIANCE_DOCUMENTATION' | 'DNB_REPORT' | 'REFERENCES_FROM_OTHER_FINANCIAL_INSTITUTIONS' | 'CERTIFICATE_OF_GOOD_STANDING' | 'W9_TAX_IDENTIFICATION_FORM' | 'OPERATING_AGREEMENTS' | 'BYLAWS' | 'PARTNERSHIP_AGREEMENT' | 'IRS_EIN_EVIDENCE' | 'PROOF_OF_HEADQUARTERS_ADDRESS' | 'BENEFICIAL_OWNERSHIP_DOCUMENTATION' | 'BOARD_OF_DIRECTORS_LIST_AND_BIOS' | 'MANAGEMENT_ORGANIZATIONAL_CHART' | 'KEY_ROLES_LIST_AND_SUCCESSION_PLAN' | 'FUNDING_PLAN_OR_SOURCES' | 'LITIGATION_LIST' | 'GOVERNMENT_REGULATOR_INQUIRIES' | 'LEGAL_DISCLOSURES' | 'BANK_CHARTER' | 'FINTECH_SPONSOR_AGREEMENT' | 'SOURCE_CODE_ESCROW_AGREEMENT' | 'REGULATION_E_POLICY' | 'REGULATION_Z_POLICY' | 'OFAC_COMPLIANCE_POLICY' | 'KYC_PROCEDURES' | 'FAIR_LENDING_POLICY' | 'UDAAP_COMPLIANCE_POLICY' | 'CRA_COMPLIANCE_POLICY' | 'GLBA_COMPLIANCE_POLICY' | 'TCPA_TSR_POLICY' | 'ADA_POLICY' | 'CIP_DOCUMENTATION' | 'CDD_EDD_ONBOARDING_PROCEDURES' | 'SAR_ESCALATION_AND_REPORTING_PROCEDURES' | 'AI_POLICY' | 'AI_GOVERNANCE_DOCUMENTATION' | 'AI_RISK_ASSESSMENT' | 'MODEL_RISK_MANAGEMENT_POLICY' | 'MODEL_INVENTORY' | 'MODEL_VALIDATION_REPORT' | 'AUDIT_POLICY' | 'VENDOR_MANAGEMENT_POLICY' | 'VENDOR_LIST_WITH_CUSTOMER_DATA_ACCESS' | 'VENDOR_ONBOARDING_AND_DUE_DILIGENCE_PROCEDURE' | 'CLOUD_PROVIDER_DUE_DILIGENCE_DOCUMENTATION' | 'VENDOR_RISK_ASSESSMENT_EXAMPLES' | 'REGULATORY_EXAMINATION_REPORTS' | 'RIGHT_TO_AUDIT_CLAUSE_CONFIRMATION' | 'PRIVACY_IMPACT_ASSESSMENT' | 'BOARD_OR_COMMITTEE_OVERSIGHT_DOCUMENTATION' | 'COMPLIANCE_COMMITTEE_CHARTER' | 'BSA_AML_COMPLIANCE_OVERSIGHT_EVIDENCE' | 'COMPLIANCE_STAFF_RESUMES_AND_JOB_DESCRIPTIONS' | 'BOARD_COMPLIANCE_TRAINING_MATERIALS' | 'COMPLIANCE_ESCALATION_AND_REPORTING_PROCESS' | 'CMS_PROGRAM_OVERVIEW' | 'REGULATORY_CHANGE_MANAGEMENT_PROCEDURE' | 'COMPLIANCE_MONITORING_AND_TESTING_PROCEDURE' | 'TESTING_PROCEDURES_AND_WORKSHEETS' | 'RISK_MANAGEMENT_FRAMEWORK' | 'GOVERNANCE_POLICY' | 'ACH_PAYMENTS_PROGRAM_OVERVIEW' | 'VALIDATE_IDENTITY_CLEAR' | 'INSIDER_TRADING_POLICY' | 'IDENTITY_THEFT_PROCEDURES' | 'UNUSUAL_ACTIVITY_REPORT_PROCEDURES' | 'TRANSACTION_MONITORING' | 'FRAUD_MONITORING_METHODOLOGY' | 'FRAUD_POLICIES_AND_PROCEDURES' | 'PRIOR_YEAR_FRAUD_REPORTING_METRICS' | 'BACKGROUND_CHECK_PROCEDURES' | 'EMPLOYEE_SECURITY_AWARENESS_TRAINING_PROGRAM' | 'CODE_OF_CONDUCT' | 'ETHICS_POLICY' | 'WHISTLEBLOWER_POLICY' | 'DIVERSITY_INCLUSION_POLICY' | 'OFFBOARDING_AND_ONBOARDING_POLICY' | 'HUMAN_RESOURCE_SECURITY_POLICY' | 'SEXUAL_HARASSMENT_POLICY' | 'COMMUNICATION_DOCUMENTS' | 'NON_DISCLOSURE_AGREEMENT_NDA' | 'SERVICE_LEVEL_AGREEMENT_SLA' | 'DATA_PROCESSING_AGREEMENT_DPA' | 'BUSINESS_ASSOCIATE_AGREEMENT_BAA' | 'INTELLECTUAL_PROPERTY_RIGHTS_DOCUMENTATION' | 'MATERIAL_SOFTWARE_LICENSES_LIST' | 'IMPLEMENTATION_PLAN' | 'SUPPORT_SLA_DOCUMENTATION' | 'OPERATIONAL_PROCEDURES_MANUAL' | 'USER_DOCUMENTATION' | 'TRAINING_MATERIALS' | 'LIST_OF_SUBCONTRACTORS' | 'AUDIT_SUMMARY_OR_REPORTS' | 'INTERNAL_AUDIT_CHARTER' | 'INDEPENDENT_AUDIT_REVIEW_RESULTS' | 'AUDIT_PLAN_AND_SCHEDULE' | 'AUDIT_REPORTING_TO_MANAGEMENT_AND_BOARD' | 'UAT_PROCEDURES' | 'ISSUE_MANAGEMENT_REMEDIATION_TRACKER' | 'COMPLAINT_HANDLING' | 'COMPLAINT_LOG_AND_ANALYSIS' | 'COMPLAINT_RESOLUTION_ESCALATION' | 'CUSTOMER_SUPPORT_OVERVIEW' | 'END_USER_ONBOARDING_WORKFLOW' | 'END_USER_TERMS_AND_FEE_DISCLOSURES' | 'E_SIGN_POLICY' | 'PERFORMANCE_REPORTS' | 'EXIT_STRATEGY_OFFBOARDING_PLAN' | 'PROJECTIONS' | 'MARKETING_POLICY_AND_PROCEDURE' | 'CAN_SPAM_POLICY' | 'SOCIAL_MEDIA_POLICY' | 'PUBLISHED_DATA_BREACH_HISTORY' | 'ESG_REPORT' | 'SUSTAINABILITY_POLICY' | 'CORPORATE_SOCIAL_RESPONSIBILITY_STATEMENT' | 'ENVIRONMENTAL_COMPLIANCE_CERTIFICATION' | 'APPROVALS' | 'ASSESSMENTS' | 'MISCELLANEOUS' | 'SIG_QUESTIONNAIRE' | 'FINANCIALS' | 'COMPANY_OVERVIEW' | 'KOBALT_GENERATED_REPORT' | 'ANNUAL_FINANCIAL_REPORT' | 'SEC_FORM_10K' | 'SEC_FORM_10Q' | 'INTERNAL_GENERAL' | 'INTERNAL_PRIVACY_POLICY' | 'INTERNAL_AML_POLICY' | 'INTERNAL_MARKETING_STANDARDS' | 'REPORT_TEMPLATE' | 'INTERNAL_INFORMATION_SECURITY_POLICY' | 'INTERNAL_ACCESS_CONTROL_POLICY' | 'INTERNAL_DATA_CLASSIFICATION_POLICY' | 'INTERNAL_INCIDENT_RESPONSE_PROCEDURES' | 'INTERNAL_THIRD_PARTY_SECURITY_POLICY' | 'INTERNAL_RECORDS_MANAGEMENT_POLICY' | 'INTERNAL_INFORMATION_GOVERNANCE_POLICY' | 'INTERNAL_THIRD_PARTY_RISK_MANAGEMENT_POLICY' | 'INTERNAL_KNOW_YOUR_COUNTERPARTY_SCREENING_GUIDELINES' | 'INTERNAL_INCIDENT_MANAGEMENT_POLICY' | 'INTERNAL_JURISDICTION_RATINGS' | 'INTERNAL_ACCEPTABLE_USE_POLICY' | 'INTERNAL_GLOSSARY' | 'INTERNAL_INHERENT_RISK_ASSESSMENT_GUIDELINES' | 'RISK_ASSESSMENT_GUIDELINES' | 'KOBALT_MIGRATION', required
    - `required` boolean
  - `selected_block_ids` string[]
  - `instructions` string, nullable

## Response `200`

Successful Response

- EvidencePacketCreateResponse — Response model for evidence packet.
  - `request_id` string, uuid, required
  - `requesting_company_id` string, uuid, required
  - `requestee_company_id` string, uuid, required
  - `initiated_by_user_id` string, uuid, nullable, required
  - `requestee_user_id` string, uuid, nullable, required
  - `document_requests` BackendModelsPydanticApiResponsesEvidencePacketsDocumentRequestResponse[]
    - `id` string, uuid, required
    - `slug` string, required
    - `label` string, required
    - `required` boolean, required
    - `decline_reason` string, nullable, required
    - `index` integer, required
  - `instructions` string, nullable, required
  - `due_date` string, nullable, required
  - `status` string, required
  - `created_at` string, required
  - `selected_block_ids` string[]

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/fastapi.md) · [All operations](https://skmtc.dev/kobaltlabs/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kobaltlabs/fastapi/revisions/425d5b8a3c17/schema)