Findings
Create a finding (auditor or platform admin only)
post/v1/findings
Request body
taskIdstring
Task ID
evidenceSubmissionIdstring
Evidence submission ID
evidenceFormType'board-meeting' | 'it-leadership-meeting' | 'risk-committee-meeting' | 'meeting' | 'access-request' | 'whistleblower-report' | 'penetration-test' | 'rbac-matrix' | 'infrastructure-inventory' | 'employee-performance-evaluation' | 'network-diagram' | 'tabletop-exercise'
Evidence form type
policyIdstring
Policy ID
vendorIdstring
Vendor ID
riskIdstring
Risk ID
memberIdstring
Member ID (person this finding targets)
deviceIdstring
Device ID
area'people' | 'documents' | 'compliance' | 'risks' | 'vendors' | 'policies' | 'other'
Broad area when the finding is not tied to a specific item
type'soc2' | 'iso27001' required
Type of finding (SOC 2 or ISO 27001)
severity'low' | 'medium' | 'high' | 'critical'
Severity
templateIdstring
Finding template ID
contentstring required
Finding content/message