Upload or replace a compliance certificate (PDF only)

Stores the compliance certificate in the organization assets bucket and replaces any previous file for the same framework.

POST /v1/trust-portal/compliance-resources/upload

Upload or replace a compliance certificate (PDF only)

cURL

curl --request POST \
  --url http://localhost:3333/v1/trust-portal/compliance-resources/upload \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "organizationId": "org_6914cd0e16e4c7dccbb54426",
  "framework": "iso_27001",
  "fileName": "iso-27001-certificate.pdf",
  "fileType": "application/pdf",
  "fileData": "<string>"
}
'

201

{
  "fileName": "<string>",
  "fileSize": 123,
  "updatedAt": "<string>"
}

Authorizations

X-API-Key · string · header · required

API key for authentication

Headers

X-Organization-Id · string

Organization ID (required for session auth, optional for API key auth)

Body

application/json

organizationId · string · required

Organization ID that owns the compliance resource

Example:

"org_6914cd0e16e4c7dccbb54426"

framework · enum<string> · required

Compliance framework identifier

Available options: iso_27001, iso_42001, gdpr, hipaa, soc2_type1, soc2_type2, pci_dss, nen_7510, iso_9001

Example:

"iso_27001"

fileName · string · required

Original file name (PDF only)

Example:

"iso-27001-certificate.pdf"

fileType · string · required

MIME type of the file

Example:

"application/pdf"

fileData · string · required

Base64 encoded PDF content

Response

201

application/json

Compliance certificate uploaded successfully

framework · enum<string> · required

Available options: iso_27001, iso_42001, gdpr, hipaa, soc2_type1, soc2_type2, pci_dss, nen_7510, iso_9001

fileName · string · required

fileSize · number · required

File size in bytes

updatedAt · string · required

ISO timestamp when the certificate was last updated