---
title: "List security review documents"
method: GET
path: "/vendors/{vendorId}/security-reviews/{securityReviewId}/documents"
tags: ["Vendors"]
---

# List security review documents

`GET /vendors/{vendorId}/security-reviews/{securityReviewId}/documents`

## Request

- Base URL: `https://api.vanta.com`
- URL: `https://api.vanta.com/vendors/{vendorId}/security-reviews/{securityReviewId}/documents`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/vanta/apis/build-integrations/docs/vendors/:vendorId/security-reviews/:securityReviewId/documents/get.ts> (a function with typed inputs; its response is checked against the schema)

Lists a security review's documents.

## Path parameters

- `vendorId` string, required
- `securityReviewId` string, required

## Query parameters

- `pageSize` integer: Controls the maximum number of items returned in one response from the API.
- `pageCursor` string: A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

## Response `200`

Ok

- PaginatedResponseVendorDocument
  - `results` object, required
    - `data` VendorDocument[], required
      - `id` string, required: Unique identifier for the document.
      - `fileName` string, nullable, required: The file name of the document.
      - `title` string, required: The document's title.
      - `description` string, nullable, required: The document's description
      - `mimeType` string, required: Mime type of the document.
      - `uploadedBy` object, nullable, required: The actor who uploaded this document. It could be a user or an app.
        - `type` 'USER' | 'APPLICATION', required
        - `id` string, required
      - `creationDate` string, date-time, required: Date of when the document was uploaded.
      - `updatedDate` string, date-time, required: Date when the document was last updated.
      - `deletionDate` string, date-time, nullable, required: Date of when the document was deleted. Is set to null if the document has not been deleted.
      - `type` string, required: Type of the vendor document.
      - `url` string, required: URL link to the document
    - `pageInfo` PageInfo, required: Provides information about the pagination of a dataset.
      - `endCursor` string, nullable, required: The cursor that points to the end of the current page, or null if there is no such cursor.
      - `hasNextPage` boolean, required: Indicates if there is another page after the current page.
      - `hasPreviousPage` boolean, required: Indicates if there is a page before the current page.
      - `startCursor` string, nullable, required: The cursor that points to the start of the current page, or null if there is no such cursor.

---

[API](https://skmtc.dev/vanta/apis/build-integrations.md) - [All operations](https://skmtc.dev/vanta/apis/build-integrations/llms.txt) - [OpenAPI document](https://skmtc.dev/vanta/apis/build-integrations/revisions/6c1f7590538b?raw)