STstrac
Controls

List controls with completion

All controls for the company with completion % and the binary readiness signal. If an input could not be read, the response names it in degradedReads: treat those verdicts as not fully evaluated. ackSignalBasis: "not-evaluated" means the policy acknowledgment check did not run.

Scope: compliance:read.

get/api/v1/companies/{companyId}/controls

Request

  • Base URL
    https://comply.strac.io
  • Auth
    HTTP bearer

Path parameters

companyIdstring required

Your organization id.

Query parameters

frameworkstring

Filter by framework id (e.g. soc2).

categorystring

Filter by control category (exact match on the category field).

status'Unassigned' | 'Assigned' | 'Needs reassignment' | 'In progress' | 'Needs evidence' | 'Completed'

Exact-match on the workflow status label (URL-encode the space). NOT about people: Unassigned/Assigned/Needs reassignment track whether the control has TESTS linked to it, not who owns it. Human ownership is the separate assignedTo field. Needs evidence and In progress are derived at read time from a stored Completed that readiness contradicts, so they never appear in stored data. The readiness signal is the separate auditReadiness field.

Response

List controls with completion

Changes

No recorded changes to this operation across all 1 revision of this API.