PolicyListEnvelope

okbooleanrequired

meta object

watermarkstring

Opaque leak-tracing token. Safe to ignore.

Possible values: Value must match regular expression ^wm_[0-9a-f]{8}$

Example: wm_a1b2c3d4

data object[]

Array [

codestringrequired

Example: SEC-1

titlestringrequired

categorystringrequired

Possible values: [security, access_control, data_integrity, architecture, monitoring, cost_management]

severitystringrequired

Possible values: [critical, high, medium, low]

compliance_frameworks object[]required

Array [

oneOf

• object
• object
• object
• object
• object

frameworkstringrequired

Possible values: [SOC 2]

controlstringrequired

Example: CC6.1

]

]

PolicyListEnvelope

{
  "ok": true,
  "meta": {
    "watermark": "wm_a1b2c3d4"
  },
  "data": [
    {
      "code": "SEC-1",
      "title": "string",
      "category": "security",
      "severity": "critical",
      "compliance_frameworks": [
        {
          "framework": "SOC 2",
          "control": "CC6.1"
        },
        {
          "framework": "GDPR",
          "article": "Art.32"
        },
        {
          "framework": "PCI-DSS",
          "requirement": "Req.3.4"
        },
        {
          "framework": "HIPAA",
          "section": "164.312(a)(1)"
        },
        {
          "framework": "ISO 27001",
          "control": "A.14.2"
        }
      ]
    }
  ]
}