---
title: "Create a GDPR request."
method: POST
path: "/v1/compliance/gdpr/requests"
tags: ["Compliance"]
---

# Create a GDPR request.

`POST /v1/compliance/gdpr/requests`

## Request

- Base URL: `https://api.scalix.world`
- URL: `https://api.scalix.world/v1/compliance/gdpr/requests`
- Auth: HTTP bearer

Files a GDPR data-subject request (access / erasure / rectification). This is
intake only: the request is persisted with status `pending`; export and
erasure are fulfilled out of band.

## Request body

- CreateGdprRequest
  - `subject_email` string, required
  - `request_type` 'export' | 'erasure' | 'rectification' | 'access', required
  - `notes` string, nullable

## Response `201`

Data-subject request created

- DataSubjectRequest
  - `id` string, uuid, required
  - `tenant_id` string, required
  - `subject_email` string, required
  - `request_type` 'export' | 'erasure' | 'rectification' | 'access', required
  - `status` 'pending' | 'in_progress' | 'completed' | 'rejected', required
  - `notes` string, nullable
  - `created_at` string, date-time, required
  - `completed_at` string, date-time, nullable

## Other responses

- `401`: Missing or invalid credentials
- `403`: Token lacks the compliance:write scope
- `500`: Internal error

---

[API](https://skmtc.dev/scalix/apis/scalix-cloud-api.md) · [All operations](https://skmtc.dev/scalix/apis/scalix-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalix/apis/scalix-cloud-api/revisions/2c04ca0a90bb?raw)