Compliance Service

Port 11018 · 159 endpoints · micro-services/compliance-service/

Compliance Management - AI Decision

Method	Path	Summary
GET	`/admin/compliance/ai-decisions/{id}`	Get AI decision details	detail →

Compliance Management - AI Review

Method	Path	Summary
GET	`/admin/compliance/ai-decisions`	List AI decision records	detail →
POST	`/admin/compliance/ai-decisions`	Record AI automated decision	detail →
DELETE	`/admin/compliance/ai-decisions/{decision_id}`	Delete AI decision record	detail →
PUT	`/admin/compliance/ai-decisions/{decision_id}`	Update AI decision record	detail →
POST	`/admin/compliance/ai-decisions/{decision_id}/review`	Manually review AI decision	detail →

Compliance Management - Audit Findings

Method	Path	Summary
GET	`/admin/compliance/audit-findings`	List audit findings	detail →
POST	`/admin/compliance/audit-findings`	Create audit finding record	detail →
DELETE	`/admin/compliance/audit-findings/{decision_id}`	Delete audit finding record	detail →
GET	`/admin/compliance/audit-findings/{decision_id}`	Get audit finding details	detail →
PUT	`/admin/compliance/audit-findings/{decision_id}`	Update audit finding status	detail →

Compliance Management - Compliance Evidence

Method	Path	Summary
GET	`/admin/compliance/certifications`	List compliance certifications	detail →
POST	`/admin/compliance/certifications`	Create compliance certification record	detail →
DELETE	`/admin/compliance/certifications/{decision_id}`	Delete compliance certification record	detail →
GET	`/admin/compliance/certifications/{decision_id}`	Get compliance certification details	detail →
PUT	`/admin/compliance/certifications/{decision_id}`	Update compliance certification information	detail →
GET	`/admin/compliance/evidence`	List compliance evidence	detail →
POST	`/admin/compliance/evidence`	Upload compliance evidence	detail →
DELETE	`/admin/compliance/evidence/{decision_id}`	Delete compliance evidence	detail →
GET	`/admin/compliance/evidence/{decision_id}`	Get compliance evidence details	detail →
PUT	`/admin/compliance/evidence/{decision_id}`	Update compliance evidence	detail →

Compliance Management - Compliance Policy

Method	Path	Summary
POST	`/admin/compliance/privacy-policies`	Create/Update privacy policy	detail →
POST	`/admin/compliance/tenants/self/gap-analysis`	Run gap analysis for current tenant	detail →
GET	`/admin/compliance/tenants/self/overrides`	List compliance parameter overrides	detail →
POST	`/admin/compliance/tenants/self/overrides`	Create compliance parameter override	detail →
DELETE	`/admin/compliance/tenants/self/overrides/{param}`	Delete compliance parameter override	detail →
GET	`/admin/compliance/tenants/self/policy`	Get resolved policy for current tenant	detail →
POST	`/admin/compliance/tenants/self/readiness/{decision_id}`	Get readiness report for current tenant	detail →
GET	`/admin/compliance/tenants/self/score`	Get compliance score for current tenant	detail →
PUT	`/admin/compliance/tenants/self/standards`	Update compliance standards for current tenant	detail →
POST	`/admin/compliance/tenants/{tid}/gap-analysis`	Run compliance gap analysis	detail →
GET	`/admin/compliance/tenants/{tid}/policy`	Get resolved compliance policy	detail →
POST	`/admin/compliance/tenants/{tid}/readiness/{decision_id}`	Get certification readiness report	detail →
GET	`/admin/compliance/tenants/{tid}/score`	Get compliance score	detail →
PUT	`/admin/compliance/tenants/{tid}/standards`	Update tenant selected compliance standards	detail →
GET	`/internal/compliance/tenants/{tid}/resolved-policy`	Get parsed compliance policy (internal API)	detail →

Compliance Management - Compliance Standards

Method	Path	Summary
GET	`/admin/compliance/standards`	List all compliance standards	detail →
POST	`/admin/compliance/standards/reload`	Reload compliance standard files	detail →
GET	`/admin/compliance/standards/{decision_id}`	Get compliance standard details	detail →
GET	`/admin/compliance/standards/{decision_id}/controls`	List compliance standard control items	detail →

Method	Path	Summary
DELETE	`/admin/compliance/gdpr/consent`	Revoke data processing consent	detail →
GET	`/admin/compliance/gdpr/consent`	List consent records	detail →
POST	`/admin/compliance/gdpr/consent`	Create consent record	detail →
GET	`/admin/compliance/gdpr/consent/{decision_id}`	Get consent record details	detail →

Compliance Management - Cross-Border Transfer

Method	Path	Summary
GET	`/admin/compliance/cross-border-transfers`	List cross-border data transfers	detail →
POST	`/admin/compliance/cross-border-transfers`	Create cross-border data transfer record	detail →
DELETE	`/admin/compliance/cross-border-transfers/{decision_id}`	Delete cross-border data transfer record	detail →
PUT	`/admin/compliance/cross-border-transfers/{decision_id}`	Update cross-border data transfer record	detail →
GET	`/admin/compliance/cross-border-transfers/{id}`	Get cross-border data transfer details	detail →

Compliance Management - DSAR

Method	Path	Summary
GET	`/admin/compliance/gdpr/dsar`	List DSARs	detail →
POST	`/admin/compliance/gdpr/dsar`	Create DSAR	detail →
DELETE	`/admin/compliance/gdpr/dsar/{decision_id}`	Delete DSAR	detail →
GET	`/admin/compliance/gdpr/dsar/{decision_id}`	Get DSAR details	detail →
PUT	`/admin/compliance/gdpr/dsar/{decision_id}`	Update DSAR	detail →
GET	`/compliance/gdpr/dsar/me`	Query my DSAR list	detail →
POST	`/compliance/gdpr/dsar/me`	Submit my DSAR	detail →
GET	`/compliance/gdpr/dsar/{decision_id}/status`	Get DSAR status	detail →

Compliance Management - Data Breach

Method	Path	Summary
GET	`/admin/compliance/breach-notifications`	List data breach notifications	detail →
POST	`/admin/compliance/breach-notifications`	Create data breach notification	detail →
DELETE	`/admin/compliance/breach-notifications/{decision_id}`	Delete data breach notification	detail →
PUT	`/admin/compliance/breach-notifications/{decision_id}`	Update data breach notification	detail →
GET	`/admin/compliance/breach-notifications/{id}`	Get data breach notification details	detail →

Compliance Management - Data Classification

Method	Path	Summary
GET	`/admin/compliance/data-classifications`	List data classifications	detail →
POST	`/admin/compliance/data-classifications`	Create data classification rule	detail →
DELETE	`/admin/compliance/data-classifications/{decision_id}`	Delete data classification rule	detail →
PUT	`/admin/compliance/data-classifications/{decision_id}`	Update data classification rule	detail →
GET	`/admin/compliance/data-classifications/{id}`	Get data classification details	detail →

Compliance Management - Data Cleanup

Method	Path	Summary
GET	`/compliance/cleanup-records`	Query data cleanup history	detail →

Compliance Management - Data Purging

Method	Path	Summary
POST	`/admin/compliance/cleanup-records`	Create data purging record	detail →

Compliance Management - Data Retention

Method	Path	Summary
GET	`/admin/compliance/retention-policies`	List retention policies	detail →
POST	`/admin/compliance/retention-policies`	Create data retention policy	detail →
DELETE	`/admin/compliance/retention-policies/{decision_id}`	Delete data retention policy	detail →
PUT	`/admin/compliance/retention-policies/{decision_id}`	Update data retention policy	detail →

Compliance Management - Dengbao

Method	Path	Summary
GET	`/admin/compliance/dengbao/controls`	List Dengbao control items	detail →
POST	`/admin/compliance/dengbao/controls`	Create Dengbao control item	detail →
DELETE	`/admin/compliance/dengbao/controls/{decision_id}`	Delete Dengbao control item	detail →
PUT	`/admin/compliance/dengbao/controls/{decision_id}`	Update Dengbao control item	detail →

Compliance Management - Erasure

Method	Path	Summary
GET	`/admin/compliance/gdpr/right-to-erasure`	List erasure requests	detail →
POST	`/admin/compliance/gdpr/right-to-erasure`	Create erasure request	detail →
GET	`/admin/compliance/gdpr/right-to-erasure/{decision_id}`	Get erasure request details	detail →
PUT	`/admin/compliance/gdpr/right-to-erasure/{decision_id}`	Update erasure request status	detail →
POST	`/admin/compliance/gdpr/right-to-erasure/{decision_id}/execute`	Execute data erasure	detail →

Compliance Management - HIPAA

Method	Path	Summary
GET	`/admin/compliance/hipaa/controls`	List HIPAA control items	detail →
POST	`/admin/compliance/hipaa/controls`	Create HIPAA control item	detail →
DELETE	`/admin/compliance/hipaa/controls/{decision_id}`	Delete HIPAA control item	detail →
PUT	`/admin/compliance/hipaa/controls/{decision_id}`	Update HIPAA control item	detail →

Compliance Management - ISO27001

Method	Path	Summary
GET	`/admin/compliance/iso27001/controls`	List ISO27001 control items	detail →
POST	`/admin/compliance/iso27001/controls`	Create ISO27001 control item	detail →
DELETE	`/admin/compliance/iso27001/controls/{decision_id}`	Delete ISO27001 control item	detail →
PUT	`/admin/compliance/iso27001/controls/{decision_id}`	Update ISO27001 control item	detail →
GET	`/admin/compliance/iso27001/controls/{id}`	Get ISO27001 control item details	detail →

Compliance Management - PCI DSS

Method	Path	Summary
GET	`/admin/compliance/pcidss/controls`	List PCI DSS control items	detail →
POST	`/admin/compliance/pcidss/controls`	Create PCI DSS control item	detail →
DELETE	`/admin/compliance/pcidss/controls/{decision_id}`	Delete PCI DSS control item	detail →
PUT	`/admin/compliance/pcidss/controls/{decision_id}`	Update PCI DSS control item	detail →

Compliance Management - PIPL

Method	Path	Summary
GET	`/admin/compliance/pipl/controls`	List PIPL control items	detail →
POST	`/admin/compliance/pipl/controls`	Create PIPL control item	detail →
DELETE	`/admin/compliance/pipl/controls/{decision_id}`	Delete PIPL control item	detail →
PUT	`/admin/compliance/pipl/controls/{decision_id}`	Update PIPL control item	detail →

Compliance Management - PSD2

Method	Path	Summary
GET	`/admin/compliance/psd2/controls`	List PSD2 control items	detail →
POST	`/admin/compliance/psd2/controls`	Create PSD2 control item	detail →
DELETE	`/admin/compliance/psd2/controls/{decision_id}`	Delete PSD2 control item	detail →
PUT	`/admin/compliance/psd2/controls/{decision_id}`	Update PSD2 control item	detail →

Compliance Management - Penetration Testing

Method	Path	Summary
GET	`/admin/compliance/penetration-test-reports`	List penetration test reports	detail →
POST	`/admin/compliance/penetration-test-reports`	Create penetration test report	detail →
DELETE	`/admin/compliance/penetration-test-reports/{decision_id}`	Delete penetration test report	detail →
PUT	`/admin/compliance/penetration-test-reports/{decision_id}`	Update penetration test report	detail →

Compliance Management - Privacy Impact Assessment

Method	Path	Summary
GET	`/admin/compliance/privacy-impact`	List Privacy Impact Assessments	detail →
POST	`/admin/compliance/privacy-impact`	Create Privacy Impact Assessment	detail →
DELETE	`/admin/compliance/privacy-impact/{decision_id}`	Delete Privacy Impact Assessment	detail →
PUT	`/admin/compliance/privacy-impact/{decision_id}`	Update Privacy Impact Assessment	detail →
GET	`/admin/compliance/privacy-impact/{id}`	Get Privacy Impact Assessment details	detail →

Compliance Management - Regulatory Monitoring

Method	Path	Summary
GET	`/admin/compliance/regulatory-watch`	List regulatory monitoring items	detail →
POST	`/admin/compliance/regulatory-watch`	Create regulatory monitoring item	detail →
DELETE	`/admin/compliance/regulatory-watch/{decision_id}`	Delete regulatory monitoring item	detail →
PUT	`/admin/compliance/regulatory-watch/{decision_id}`	Update regulatory monitoring item	detail →

Compliance Management - SOX

Method	Path	Summary
GET	`/admin/compliance/sox/itgc`	List SOX ITGC control items	detail →
POST	`/admin/compliance/sox/itgc`	Create SOX ITGC control item	detail →
DELETE	`/admin/compliance/sox/itgc/{decision_id}`	Delete SOX ITGC control item	detail →
PUT	`/admin/compliance/sox/itgc/{decision_id}`	Update SOX ITGC control item	detail →
GET	`/admin/compliance/sox/itgc/{id}`	Get SOX ITGC control item details	detail →

Compliance Management - Segregation of Duties

Method	Path	Summary
GET	`/admin/compliance/sod-checks`	Execute segregation of duties check	detail →
GET	`/admin/compliance/sod-rules`	List segregation of duties rules	detail →
POST	`/admin/compliance/sod-rules`	Create segregation of duties rule	detail →
DELETE	`/admin/compliance/sod-rules/{decision_id}`	Delete segregation of duties rule	detail →
PUT	`/admin/compliance/sod-rules/{decision_id}`	Update segregation of duties rule	detail →

Compliance Management - Trust Center

Method	Path	Summary
PUT	`/admin/compliance/profile`	Create or update compliance configuration	detail →
GET	`/compliance/privacy/policy`	Get current privacy policy	detail →
GET	`/compliance/privacy/policy/versions`	Get privacy policy version history	detail →
GET	`/compliance/privacy/retention`	Get data retention policy disclosure	detail →
GET	`/compliance/profile`	Get compliance configuration	detail →
GET	`/compliance/public/audit-findings`	Get public audit findings	detail →
GET	`/compliance/public/breach-notifications`	Get public breach notifications	detail →
GET	`/compliance/public/certifications`	Get public compliance certification list	detail →
GET	`/compliance/public/cross-border-transfers`	Get public cross-border data transfers	detail →
GET	`/compliance/public/data-classifications`	Get public data classifications	detail →
GET	`/compliance/public/dengbao/controls`	Get public Dengbao control items	detail →
GET	`/compliance/public/evidence`	Get public compliance evidence	detail →
GET	`/compliance/public/hipaa/controls`	Get public HIPAA control items	detail →
GET	`/compliance/public/iso27001/controls`	Get public ISO27001 control items	detail →
GET	`/compliance/public/pcidss/controls`	Get public PCI DSS control items	detail →
GET	`/compliance/public/penetration-test-reports`	Get public penetration test reports	detail →
GET	`/compliance/public/pipl/controls`	Get public PIPL control items	detail →
GET	`/compliance/public/privacy-impact`	Get public privacy impact assessments	detail →
GET	`/compliance/public/psd2/controls`	Get public PSD2 control items	detail →
GET	`/compliance/public/regulatory-watch`	Get public regulatory monitoring	detail →
GET	`/compliance/public/security-score`	Get public security score	detail →
GET	`/compliance/public/status`	Get public compliance status	detail →
GET	`/compliance/public/subprocessors`	Get public sub-processor list	detail →
GET	`/compliance/status`	Get compliance status overview	detail →

Compliance Management - Vendor Risk

Method	Path	Summary
GET	`/admin/compliance/subprocessors`	List sub-processors	detail →
POST	`/admin/compliance/subprocessors`	Create sub-processor record	detail →
DELETE	`/admin/compliance/subprocessors/{decision_id}`	Delete sub-processor record	detail →
GET	`/admin/compliance/subprocessors/{decision_id}`	Get sub-processor details	detail →
PUT	`/admin/compliance/subprocessors/{decision_id}`	Update sub-processor information	detail →
GET	`/admin/compliance/vendor-risk-assessment`	List vendor risk assessments	detail →
POST	`/admin/compliance/vendor-risk-assessment`	Create vendor risk assessment	detail →
DELETE	`/admin/compliance/vendor-risk-assessment/{decision_id}`	Delete vendor risk assessment	detail →
PUT	`/admin/compliance/vendor-risk-assessment/{decision_id}`	Update vendor risk assessment	detail →

Compliance Service

Compliance Management - AI Decision

Compliance Management - AI Review

Compliance Management - Audit Findings

Compliance Management - Compliance Evidence

Compliance Management - Compliance Policy

Compliance Management - Compliance Standards

Compliance Management - Consent

Compliance Management - Cross-Border Transfer

Compliance Management - DSAR

Compliance Management - Data Breach

Compliance Management - Data Classification

Compliance Management - Data Cleanup

Compliance Management - Data Purging

Compliance Management - Data Retention

Compliance Management - Dengbao

Compliance Management - Erasure

Compliance Management - HIPAA

Compliance Management - ISO27001

Compliance Management - PCI DSS

Compliance Management - PIPL

Compliance Management - PSD2

Compliance Management - Penetration Testing

Compliance Management - Privacy Impact Assessment

Compliance Management - Regulatory Monitoring

Compliance Management - SOX

Compliance Management - Segregation of Duties

Compliance Management - Trust Center

Compliance Management - Vendor Risk