STstrac
Controls

Mark a control Not Applicable

Marks a control N/A with a reason. Writes an append-only audit-log row (v1_mark_control_na).

Role gate: owner / admin.

Scope: evidence:write.

post/api/v1/companies/{companyId}/controls/{controlId}/mark-na

Request

  • Base URL
    https://comply.strac.io
  • Auth
    HTTP bearer

Path parameters

companyIdstring required

Your organization id.

controlIdstring required

The control id from the controls list, e.g. soc2-cc6.1. The short reference (CC6.1) is not accepted here.

Request body

reasonstring required

Why the control does not apply. Your auditor sees it word for word. ISO 27001 clauses 4 to 10 cannot be marked not applicable.

Response

Mark a control Not Applicable

Changes

No recorded changes to this operation across all 1 revision of this API.