---
title: "Add document to security review"
method: POST
path: "/vendors/{vendorId}/security-reviews/{securityReviewId}/documents"
tags: ["Vendors"]
---

# Add document to security review

`POST /vendors/{vendorId}/security-reviews/{securityReviewId}/documents`

## Request

- Base URL: `https://api.vanta.com`
- URL: `https://api.vanta.com/vendors/{vendorId}/security-reviews/{securityReviewId}/documents`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/vanta/apis/build-integrations/docs/vendors/:vendorId/security-reviews/:securityReviewId/documents/post.ts> (a function with typed inputs; its response is checked against the schema)

Add document to a security review.

## Path parameters

- `vendorId` string, required
- `securityReviewId` string, required

## Request body `multipart/form-data`

- object
  - `file` string, binary, required
  - `type` string, required: Type of the vendor document.
  - `title` string: The document's title.
  - `description` string: The document's description.

## Response `200`

Ok

- VendorDocument
  - `id` string, required: Unique identifier for the document.
  - `fileName` string, nullable, required: The file name of the document.
  - `title` string, required: The document's title.
  - `description` string, nullable, required: The document's description
  - `mimeType` string, required: Mime type of the document.
  - `uploadedBy` object, nullable, required: The actor who uploaded this document. It could be a user or an app.
    - `type` 'USER' | 'APPLICATION', required
    - `id` string, required
  - `creationDate` string, date-time, required: Date of when the document was uploaded.
  - `updatedDate` string, date-time, required: Date when the document was last updated.
  - `deletionDate` string, date-time, nullable, required: Date of when the document was deleted. Is set to null if the document has not been deleted.
  - `type` string, required: Type of the vendor document.
  - `url` string, required: URL link to the document

---

[API](https://skmtc.dev/vanta/apis/build-integrations.md) - [All operations](https://skmtc.dev/vanta/apis/build-integrations/llms.txt) - [OpenAPI document](https://skmtc.dev/vanta/apis/build-integrations/revisions/6c1f7590538b?raw)