---
title: "Place or lift a legal hold on a compliance record (REW-1088)"
method: PATCH
path: "/api/admin/compliance/legal-hold"
tags: ["Admin"]
---

# Place or lift a legal hold on a compliance record (REW-1088)

`PATCH /api/admin/compliance/legal-hold`

## Request

- Base URL: `https://api.rewritelifestyle.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.rewritelifestyle.ai/api/admin/compliance/legal-hold`
- Auth: HTTP bearer

A held record is skipped by the three-year retention purge (PP v2.4 §9: "unless … reasonably necessary for a pending claim, dispute, investigation, or legal hold"). Pass exactly one of `userId` (live account) or `subjectRef` (deleted account). Recorded in admin_activity_log.

## Request body

- ComplianceLegalHoldDto
  - `userId` number: Live account
  - `subjectRef` string: Deleted account (compliance_subject_archive.subject_ref)
  - `hold` boolean, required: true places the hold, false lifts it

## Response `200`

## Changes

- **2026-10-26** `75d60d8470b6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/changes/api/admin/compliance/legal-hold/patch.md)

---

[API](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api.md) - [All operations](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/revisions/28695827f27a?raw)
