---
title: "Create audit finding"
method: POST
path: "/v1/findings"
tags: ["Findings"]
---

# Create audit finding

`POST /v1/findings`

Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.

## Request body

- CreateFindingDto
  - `taskId` string — Task ID
  - `evidenceSubmissionId` string — Evidence submission ID
  - `evidenceFormType` 'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise' | 'account-types' — Evidence form type
  - `policyId` string — Policy ID
  - `vendorId` string — Vendor ID
  - `riskId` string — Risk ID
  - `memberId` string — Member ID (person this finding targets)
  - `deviceId` string — Device ID
  - `area` 'people' | 'documents' | 'compliance' | 'risks' | 'vendors' | 'policies' | 'other' — Broad area when the finding is not tied to a specific item
  - `type` 'soc2' | 'iso27001' | 'pci_dss' | 'hipaa' | 'gdpr' | 'iso9001' | 'iso42001', required — Framework this finding is attributed to (must match a framework the organization has enabled)
  - `severity` 'low' | 'medium' | 'high' | 'critical' — Severity
  - `content` string, required — Finding content/message

## Response `201`

## Changes

> 56 revisions in range; 4 could not be searched.

- **2026-06-11** `a87e7c0c5c25` — 1 info
  - added the new `account-types` enum value to the request property `evidenceFormType`
- **2026-06-04** `d7d0199d846f` — 1 info
  - the endpoint scheme security `oauth2` was removed from the API
- **2026-05-29** `5382c53ab431` — 1 info
  - the endpoint scheme security `oauth2` was added to the API
- **2026-05-28** `73c1d2d2da5d` — 5 info
  - added the new `gdpr` enum value to the request property `type`
  - added the new `hipaa` enum value to the request property `type`
  - added the new `iso42001` enum value to the request property `type`
  - added the new `iso9001` enum value to the request property `type`
  - …1 more
- **2026-05-10** `912fecc0177c` — 1 warning
  - removed the request property `templateId`

[Full history](https://skmtc.dev/trycompai/apis/comp-ai-api/changes/v1/findings/post.md)

---

[API](https://skmtc.dev/trycompai/apis/comp-ai-api.md) · [All operations](https://skmtc.dev/trycompai/apis/comp-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/trycompai/comp-ai-api/revisions/726b9523fb22/schema)