Compliance reports

Generate audit-ready compliance reports for DISA STIG, CIS, NIST 800-53, PCI DSS, HIPAA, ISO 27001, SOC 2, and GDPR.

Get framework status

bash

GET /api/v1/compliance/frameworks
Authorization: Bearer <token>
X-Tenant-Slug: my-company

json

[
  {
    "framework": "soc2",
    "display_name": "SOC 2",
    "total_controls": 89,
    "passing": 71,
    "failing": 18,
    "score_pct": 79.8
  },
  {
    "framework": "pci_dss",
    "display_name": "PCI DSS 4.0",
    "total_controls": 64,
    "passing": 48,
    "failing": 16,
    "score_pct": 75.0
  }
]

Generate a report

bash

POST /api/v1/reports
Authorization: Bearer <token>
X-Tenant-Slug: my-company
Content-Type: application/json

{
  "framework": "soc2",
  "format": "pdf",
  "title": "SOC 2 Evidence Report Q1 2026"
}

json

{
  "id": "report_abc123",
  "status": "generating",
  "framework": "soc2",
  "created_at": "2026-04-12T10:00:00Z"
}

Download a report

bash

GET /api/v1/reports/report_abc123/download
Authorization: Bearer <token>
X-Tenant-Slug: my-company

Returns a signed download URL valid for 15 minutes, or the PDF content directly.

Supported frameworks

DISA STIG

CIS Benchmarks

NIST 800-53

PCI DSS 4.0

HIPAA

ISO 27001

SOC 2

GDPR