Endpoint
Authentication
Requires a developer API key in theAuthorization header.
Request Headers
| Header | Value |
|---|---|
Authorization | Bearer <api_key> |
Content-Type | application/json |
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
type | string | Yes | Export type: dpdp-audit, gdpr-article-15, or eu-ai-act-conformance |
dateFrom | string | Yes | ISO-8601 start date for the export window |
dateTo | string | Yes | ISO-8601 end date for the export window |
format | string | No | Output format (default: "json") |
includeActionLog | boolean | No | Include audit log entries (default: true) |
includeConsentRecords | boolean | No | Include consent records (default: true) |
dataPrincipalId | string | No | Filter export to a specific data principal |
Example Request
Response — 201 Created
Response Fields
| Field | Type | Description |
|---|---|---|
exportId | string | Unique export ID |
type | string | Export type |
format | string | Output format |
recordCount | number | Total number of records in the export |
data | object | The export data payload (see below) |
expiresAt | string | ISO-8601 expiry timestamp (7 days from creation) |
createdAt | string | ISO-8601 creation timestamp |
Export Data Object
| Field | Type | Description |
|---|---|---|
exportType | string | The export type |
dateRange | object | { from, to } ISO-8601 timestamps |
generatedAt | string | ISO-8601 generation timestamp |
developerId | string | Developer who generated the export |
consentRecords | object[] | Consent records in the date range (if includeConsentRecords) |
auditLog | object[] | Audit log entries in the date range (if includeActionLog, max 1000) |
grievances | object[] | Grievances in the date range (only for dpdp-audit type) |
Export Types
| Type | Description | Includes Grievances |
|---|---|---|
dpdp-audit | India DPDP Act compliance audit | Yes |
gdpr-article-15 | GDPR right of access (Article 15) report | No |
eu-ai-act-conformance | EU AI Act conformance assessment | No |
Error Responses
| Status | Code | Description |
|---|---|---|
| 400 | BAD_REQUEST | Missing required fields or invalid type |
| 401 | UNAUTHORIZED | Invalid or missing API key |