---
title: "Get Evidence Packet Risk Areas"
method: GET
path: "/evidence-packets/{evidence_packet_id}/risk-areas"
tags: ["evidence-packets"]
---

# Get Evidence Packet Risk Areas

`GET /evidence-packets/{evidence_packet_id}/risk-areas`

## Request

- Base URL: `https://api.kobaltlabs.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.kobaltlabs.com/evidence-packets/{evidence_packet_id}/risk-areas`
- Auth: none declared

Get risk areas for an evidence packet, with associated document requests and uploaded files.

Each risk area entry includes the document types requested, the document requests
(with decline reasons if applicable), and any uploaded files linked to those requests.

For the internal reviewer (the requesting company), risk areas are limited to the
packet sections the user may review — sections owned by other teams/people are
hidden so they never surface as review tabs. The requestee (vendor) and
masquerade/`tprm.reviews.write_all` users are unaffected and see every section.
Document requests and uploaded files are intentionally NOT pruned, since a
requirement the user does own may cite a file uploaded under another section.

## Path parameters

- `evidence_packet_id` string, uuid, required

## Response `200`

Successful Response

- EvidencePacketRiskAreasResponse: Response model listing all risk areas for an evidence packet.
  - `risk_areas` EvidencePacketRiskAreaEntry[]
    - `risk_area_name` string, required
    - `document_type_slugs` string[], required
    - `uploaded_files` EvidencePacketFileResponse[]
      - `id` string, uuid, required
      - `upload_id` string, uuid, required
      - `file_id` string, uuid, required
      - `filename` string, nullable, required
      - `document_request_id` string, uuid, nullable, required
      - `requirement_id` string, uuid, nullable
      - `file_type_slug` string, nullable
      - `status` string, required
      - `created_at` string, date-time, nullable
    - `document_requests` BackendModelsPydanticApiResponsesEvidencePacketsDocumentRequestResponse[]
      - `id` string, uuid, required
      - `slug` string, required
      - `label` string, required
      - `required` boolean, required
      - `decline_reason` string, nullable, required
      - `index` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/fastapi.md) - [All operations](https://skmtc.dev/kobaltlabs/apis/fastapi/llms.txt) - [OpenAPI document](https://skmtc.dev/kobaltlabs/apis/fastapi/revisions/8587332d5e43?raw)