Create a finding for an organization (admin)

POST /v1/admin/organizations/{orgId}/findings

Create a finding for an organization (admin)

cURL

curl --request POST \
  --url http://localhost:3333/v1/admin/organizations/{orgId}/findings \
  --header 'Content-Type: application/json' \
  --data '
{
  "type": "soc2",
  "content": "The uploaded evidence does not clearly show the Organization Name or URL.",
  "taskId": "tsk_abc123",
  "evidenceSubmissionId": "evs_abc123",
  "evidenceFormType": "access-request",
  "templateId": "fnd_t_abc123"
}
'

Path Parameters

orgId · string · required

Body

application/json

type · enum<string> · default: soc2 · required

Type of finding (SOC 2 or ISO 27001)

Available options: soc2, iso27001

content · string · required

Finding content/message

Maximum string length: 5000

Example:

"The uploaded evidence does not clearly show the Organization Name or URL."

taskId · string

Task ID this finding is associated with

Example:

"tsk_abc123"

evidenceSubmissionId · string

Evidence submission ID this finding is associated with

Example:

"evs_abc123"

evidenceFormType · enum<string>

Evidence form type this finding is associated with (e.g., access-request, whistleblower-report)

Available options: board-meeting, it-leadership-meeting, risk-committee-meeting, meeting, access-request, whistleblower-report, penetration-test, rbac-matrix, infrastructure-inventory, employee-performance-evaluation, network-diagram, tabletop-exercise

Example:

"access-request"

templateId · string

Finding template ID (optional)

Example:

"fnd_t_abc123"

Response

201 - undefined