---
title: "Get Compliance Evidence Pack"
method: GET
path: "/api/v1/orgs/{org_id}/compliance/evidence-pack"
tags: ["compliance"]
---

# Get Compliance Evidence Pack

`GET /api/v1/orgs/{org_id}/compliance/evidence-pack`

## Request

- Base URL: `https://cp.xenovia.io` (the document declares no server; this is the origin it was published from)
- URL: `https://cp.xenovia.io/api/v1/orgs/{org_id}/compliance/evidence-pack`
- Auth: none declared

One framework's evidence pack, signed when an audit signing key is
configured (unsigned otherwise). Admins; audited.

## Path parameters

- `org_id` string, required

## Query parameters

- `framework` string, required

## Headers

- `Authorization` string, nullable

## Response `200`

Successful Response

- ComplianceEvidencePackRead: The pack's content, and the same content signed when the control plane has an audit signing key: `signed.payload` is the canonical JSON the signature covers.
  - `pack` object, required
  - `signed` SignedAuditExport, required
    - `payload` string, required
    - `signature` string, required
    - `key_id` string, required
    - `alg` 'ed25519', required
  - `public_key` AuditSigningKey, required
    - `alg` 'ed25519', required
    - `key_id` string, required
    - `public_key` string, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-04** `2f4b4b338b8f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/xenovia/apis/controlplane/changes/api/v1/orgs/:org_id/compliance/evidence-pack/get.md)

---

[API](https://skmtc.dev/xenovia/apis/controlplane.md) - [All operations](https://skmtc.dev/xenovia/apis/controlplane/llms.txt) - [OpenAPI document](https://skmtc.dev/xenovia/apis/controlplane/revisions/3e25bef24f8f?raw)