---
title: "Update (merge) the company compliance profile."
method: PATCH
path: "/api/v1/company/compliance-profile"
tags: ["Regulatory"]
---

# Update (merge) the company compliance profile.

`PATCH /api/v1/company/compliance-profile`

## Request

- Base URL: `https://app.tracepass.eu`
- URL: `https://app.tracepass.eu/api/v1/company/compliance-profile`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://app.tracepass.eu/api/oauth/authorize`, token URL `https://app.tracepass.eu/api/oauth/token`, scopes: `passports:write`)

Merges the provided fields into the stored compliance profile and
returns the updated profile with `updatedAt`. Fields not included
in the request are left unchanged. Set a field to `null` to remove
it.

Auth: Bearer API key OR OAuth with `passports:write`. For OAuth
principals, the user must have the `admin` or `owner` role.
API-key callers are not role-gated. Does not count as a scope
answer.

## Headers

- `Authorization` string, required

## Request body

- object
  - `role` 'manufacturer' | 'importer' | 'distributor' | 'authorised_representative' | 'fulfilment_service_provider' | 'null', nullable: Company's role in the supply chain.
  - `ownBrand` boolean, nullable: Whether the company sells under its own brand.
  - `categories` string[], nullable: Template category keys the company deals with.
  - `markets` string[], nullable: ISO-3166-1 alpha-2 codes or `EU` for all EU markets.
  - `sizeBand` 'sme' | 'large' | 'null', nullable: Company size.
  - `salesChannels` string[], nullable
  - `dataSystems` string, nullable: Short description of data systems (ERP, PIM, etc.).

## Response `200`

Updated compliance profile.

- object
  - `complianceProfile` object, required: The full profile after the merge.
  - `updatedAt` string, date-time, required

## Other responses

- `400`: Invalid field value. `field` names the offending key; `allowed` lists valid options for enum fields.
- `401`: Missing or invalid API key.
- `403`: Admin or owner role required (OAuth principals only).

---

[API](https://skmtc.dev/tracepass/apis/tracepass-api.md) · [All operations](https://skmtc.dev/tracepass/apis/tracepass-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tracepass/apis/tracepass-api/revisions/60ddeb25638b?raw)