---
title: "Create a finding"
method: POST
path: "/v1/findings"
tags: ["Findings"]
---

# Create a finding

`POST /v1/findings`

Create a new finding for a task (Auditor or Platform Admin only)

## Request body

- CreateFindingDto
  - `taskId` string — Task ID this finding is associated with
  - `evidenceSubmissionId` string — Evidence submission ID this finding is associated with
  - `evidenceFormType` 'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise' — Evidence form type this finding is associated with (e.g., access-request, whistleblower-report)
  - `type` 'soc2' | 'iso27001', required — Type of finding (SOC 2 or ISO 27001)
  - `templateId` string — Finding template ID (optional)
  - `content` string, required — Finding content/message

## Response `201`

The created finding

## Other responses

- `401` — Unauthorized
- `403` — Forbidden - Auditor or Platform Admin required
- `404` — Task not found

---

[API](https://skmtc.dev/trycompai/apis/comp-ai-api.md) · [All operations](https://skmtc.dev/trycompai/apis/comp-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/trycompai/comp-ai-api/revisions/2fc5a4abe081/schema)