---
title: "DSR Export (GDPR Art.15/20) — JSON bundle with all personal data"
method: GET
path: "/api/v1/account/dsr/export"
tags: ["Account"]
---

# DSR Export (GDPR Art.15/20) — JSON bundle with all personal data

`GET /api/v1/account/dsr/export`

## Request

- Base URL: `https://legal.nexusquantum.legal`
- URL: `https://legal.nexusquantum.legal/api/v1/account/dsr/export`
- Auth: HTTP bearer

Downloads the complete DSR bundle of the data subject associated with the authenticated api_key. Meets GDPR Art.15 (Right of access) and Art.20 (Data portability).

For api_keys with `role=master` and `organization_id`: pass `?for_sub_key=<uuid>` to download the bundle of a specific sub-key (it must belong to the same org). The bundle includes 14 tables: profile, auth, outputs, cases, support_tickets, ticket_messages, disputes, credits_ledger, api_keys metadata, consent_log, alert_subscriptions, firm_memory, admin_audit_entries, notifications.

## Query parameters

- `for_sub_key` string, uuid

## Response `200`

DSR bundle. `Content-Disposition: attachment` + `X-Dsr-Export-Bundle-Counts` header with the counts.

- object

## Other responses

- `403`: Forbidden (sub-key from another org, or not a master).
- `404`: Sub-key not found.

---

[API](https://skmtc.dev/nexusquantum/apis/nexus-legal-api.md) · [All operations](https://skmtc.dev/nexusquantum/apis/nexus-legal-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nexusquantum/apis/nexus-legal-api/revisions/4084d8d4eb0b?raw)