Findings

Create a finding

Create a new finding for a task (Auditor or Platform Admin only)

post/v1/findings

Request body

taskIdstring

Task ID this finding is associated with

evidenceSubmissionIdstring

Evidence submission ID this finding is associated with

evidenceFormType'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise'

Evidence form type this finding is associated with (e.g., access-request, whistleblower-report)

type'soc2' | 'iso27001' required

Type of finding (SOC 2 or ISO 27001)

templateIdstring

Finding template ID (optional)

contentstring required

Finding content/message

Example request

{
  "taskId": "tsk_abc123",
  "evidenceSubmissionId": "evs_abc123",
  "evidenceFormType": "access-request",
  "templateId": "fnd_t_abc123",
  "content": "The uploaded evidence does not clearly show the Organization Name or URL."
}

Response

The created finding

Changes