---
title: "Data policy (admin): what may leave PhilForms and what it may keep — only ever stricter than the defaults"
method: PUT
path: "/api/v1/organizations/{id}/policy"
tags: ["Organizations"]
---

# Data policy (admin): what may leave PhilForms and what it may keep — only ever stricter than the defaults

`PUT /api/v1/organizations/{id}/policy`

## Request

- Base URL: `https://philforms.com`
- URL: `https://philforms.com/api/v1/organizations/{id}/policy`
- Auth: HTTP bearer

## Path parameters

- `id` string, required

## Request body

- Policy
  - `ai_reading` 'allowed' | 'off'
  - `saved_value` 'allowed' | 'off'
  - `allowed_form` string[]: [] = every form
  - `job_retention_day` integer
  - `is_test_key_allowed` boolean

## Response `200`

{ policy }

---

[API](https://skmtc.dev/philforms/apis/philforms-api.md) · [All operations](https://skmtc.dev/philforms/apis/philforms-api/llms.txt) · [OpenAPI document](https://skmtc.dev/philforms/apis/philforms-api/revisions/a43bf313729c?raw)