---
title: "Create Document"
method: POST
path: "/v1/{complianceType}/create"
tags: ["Documents"]
---

# Create Document

`POST /v1/{complianceType}/create`

## Request

- Base URL: `https://hostname/api/enterprise-policy`
- URL: `https://hostname/api/enterprise-policy/v1/{complianceType}/create`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `POLICY`

Use this API to create a policy, standard, procedure, or privacy notice.

## Path parameters

- `complianceType` 'policies' | 'standards' | 'procedures' | 'privacynotices', required

## Request body

- PolicyCreationApiRequest
  - `orgGroup` OrgGroupAssignmentRequest, required
    - `id` string, uuid, required: The unique identifier of the organization responsible for the policy, standard, procedure, or privacy notice.. This value is obtained using the [Get List of Organizations API](/onetrust/reference/organizationtreestructureusingget).
    - `name` string, required: The name of the organization responsible for the policy, standard, procedure, or privacy notice.
  - `name` string, required: The name of the policy, standard, procedure, or privacy notice.
  - `description` string: The description of the policy, standard, procedure, or privacy notice.
  - `effectiveDate` string, date: The date on which the policy, standard, procedure, or privacy notice takes effect.
  - `expirationDate` string, date: The date on which the policy, standard, procedure, or privacy notice expires.
  - `approvers` ApproverAssignmentRequest[], required: The details of the user(s) responsible for approving all drafts and changes made to the policy, standard, procedure, or privacy notice.
    - `id` string, uuid, required: The unique identifier of the policy, standard, procedure, or privacy notice approver. This value is obtained using the [Get List of Users API](/onetrust/reference/getusers).
  - `owners` OwnerAssignmentRequest[], required: The details of the user(s) responsible for creating and updating the policy, standard, procedure, or privacy notice.
    - `id` string, uuid, required: The unique identifier of the policy, standard, procedure, or privacy notice owner. This value is obtained using the [Get List of Users API](/onetrust/reference/getusers).
  - `defaultLanguageCode` string, required: The default language of the policy, standard, procedure, or privacy notice.

## Response `201`

Created

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-enterprise-policy-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-enterprise-policy-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-enterprise-policy-management/revisions/a6c00f076594?raw)