Create a new vendor resource in the account
Record created!
Malformed data and/or validation errors
Invalid Authorization
You are not allowed to perform this action
Internal server error
Response Code: 412
You must accept the Drata terms and conditions to use the API
{- "name": "Acme",
- "category": "ENGINEERING",
- "risk": "MODERATE",
- "status": "UNDER_REVIEW",
- "critical": false,
- "isSubProcessor": false,
- "isSubProcessorActive": false,
- "userId": 1,
- "servicesProvided": "Perform security scans once a month",
- "dataStored": "resulting reports of security scans",
- "location": "San Diego",
- "hasPii": true,
- "passwordPolicy": "USERNAME_PASSWORD",
- "passwordRequiresMinLength": true,
- "passwordMinLength": 8,
- "passwordRequiresNumber": true,
- "passwordRequiresSymbol": true,
- "passwordMfaEnabled": true,
- "contactAtVendor": "John Doe",
- "notes": "Meeting once a month to adjust contract",
- "renewalDate": "2024-10-04",
- "renewalScheduleType": "ONE_YEAR",
- "confirmed": true,
- "type": "VENDOR",
- "accountId": 36,
- "operationalImpact": "IMPORTANT",
- "environmentAccess": "READ_ONLY",
- "impactLevel": "INSIGNIFICANT",
- "dataAccessedOrProcessedList": [
- "FINANCIAL",
- "GENERAL"
], - "integrations": [
- 1,
- 2,
- 3
], - "cost": "1088",
- "excludeIds": [
- 1,
- 2
]
}
{- "id": 1,
- "name": "Acme",
- "category": "ENGINEERING",
- "risk": "MODERATE",
- "type": "CONTRACTOR",
- "critical": false,
- "location": "USA",
- "servicesProvided": "Perform security scans once a month",
- "dataStored": "Resulting reports of security scans",
- "hasPii": true,
- "passwordPolicy": "USERNAME_PASSWORD",
- "passwordRequiresMinLength": true,
- "passwordMinLength": 8,
- "passwordRequiresNumber": true,
- "passwordRequiresSymbol": true,
- "passwordMfaEnabled": true,
- "contactAtVendor": "John Doe",
- "notes": "Meeting once a month to adjust contract",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000",
- "user": { },
- "documents": [
- {
- "id": 1,
- "name": "AWS SOC 2 2018",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000"
}
], - "lastQuestionnaire": { },
- "isSubProcessor": false,
- "isSubProcessorActive": false,
- "archivedAt": "2020-07-06 12:00:00.000000",
- "status": "ACTIVE",
- "renewalDate": "2020-07-06",
- "renewalScheduleType": "ONE_YEAR",
- "renewalDateStatus": "COMPLETED",
- "confirmedAt": "2020-07-06 12:00:00.000000",
- "reviews": [
- {
- "id": 1,
- "updatedAt": "2024-10-04",
- "reviewer": "John Doe",
- "reviewDate": "2024-10-04",
- "reportIssueDate": "2024-10-04",
- "socReport": "SOC_1",
- "socReportType1": true,
- "socReportType2": true,
- "socType1StartDate": "2024-10-04",
- "socType1EndDate": "2024-10-04",
- "socType2StartDate": "2024-10-04",
- "socType2EndDate": "2024-10-04",
- "reportOpinion": "UNQUALIFIED",
- "encompassBusinessNeeds": true,
- "followUpActivity": "User must proceed to...",
- "hasMaterialImpact": true,
- "cpaFirm": "CPA firm name",
- "cpaProcedurePerformed": "The following procedures were performed...",
- "subserviceOrganization": "Subservice Inc.",
- "subserviceOrganizationUsingInclusiveMethod": true,
- "subserviceOrganizationProcedurePerformed": "The following procedures were performed...",
- "trustServiceCategories": [
- {
- "id": 1,
- "category": "AVAILABILITY"
}
], - "userControls": [
- {
- "id": 1,
- "name": "End User Control 1",
- "inPlace": true
}
], - "services": [
- {
- "id": 1,
- "name": "Service 1"
}
], - "locations": [
- {
- "id": 1,
- "city": "San Diego",
- "stateCountry": "CA"
}
], - "findings": [
- {
- "id": 1,
- "description": "Finding 1"
}
]
}
], - "sharedAccountId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd",
- "isDrataUser": false,
- "events": 4,
- "integrations": [
- { }
], - "cost": "1088",
- "operationalImpact": "CRITICAL",
- "environmentAccess": "READ_ONLY",
- "impactLevel": "INSIGNIFICANT",
- "dataAccessedOrProcessedList": [
- { }
], - "latestSecurityReviews": [
- {
- "id": 1,
- "requestedAt": "2019-08-24T14:15:22Z",
- "reviewDeadlineAt": "2019-08-24T14:15:22Z",
- "decision": "APPROVED",
- "note": "string",
- "status": "NOT_YET_STARTED",
- "type": "SECURITY",
- "requesterUser": {
- "id": 1,
- "firstName": "Sally",
- "lastName": "Smith",
- "jobTitle": "CEO",
- "drataTermsAgreedAt": "2020-07-06 12:00:00.000000",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000",
- "roles": [
- "ROLE",
- "ANOTHER_ROLE"
], - "backgroundChecks": [
- {
- "id": 1,
- "userId": 1,
- "status": "OK",
- "caseId": "abc123",
- "caseInvitationId": "abc123",
- "manualCheckDate": "2020-07-06",
- "manuallyCheckUrl": "url.com",
- "type": "CERTN",
- "source": "DRATA",
- "reportData": "string",
- "user": { },
- "outOfScopeReason": "abc123",
- "outOfScopeAt": "2020-07-06 12:00:00.000000",
- "linkedAt": "2020-07-06 12:00:00.000000",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000"
}
], - "identities": [
- {
- "id": 1,
- "identityId": "1a2b3c",
- "username": "Username",
- "connectedAt": "2020-07-06 12:00:00.000000",
- "disconnectedAt": "2020-07-06 12:00:00.000000",
- "hasMfa": true,
- "user": { },
- "connection": {
- "id": "1",
- "clientType": "GOOGLE",
- "state": "ACTIVE",
- "connected": false,
- "connectedAt": "2020-07-06 12:00:00.000000",
- "failedAt": "2020-07-06 12:00:00.000000",
- "companyId": "12341234",
- "assignmentId": "FLk12AsS",
- "user": { },
- "accountId": "string",
- "clientId": "drata.com",
- "clientAlias": "My-connection-alias-1",
- "manuallyUpdatedAt": "2020-07-06 12:00:00.000000",
- "aliasUpdatedAt": "2020-07-06 12:00:00.000000",
- "deletedAt": "2020-07-06 12:00:00.000000",
- "requestorId": "328d3016-71f3-4485-af20-06ce8044da18",
- "product": "",
- "writeAccessEnabled": false,
- "sourcePreference": "LABEL",
- "securityLabel": "Jira Security Label",
- "jqlQuery": "project = IT AND type = \"Offboarding\"",
- "authorized": true,
- "workspaces": [
- {
- "id": 1,
- "name": "Drata",
- "description": "Platform to track SOC 2 compliance within the organization",
- "howItWorks": null,
- "primary": true
}
], - "providerTypes": [
- 5
], - "code": 10010,
- "groupLabel": "Everyone"
}, - "hasIdp": true
}
]
}, - "user": {
- "id": 1,
- "firstName": "Sally",
- "lastName": "Smith",
- "jobTitle": "CEO",
- "drataTermsAgreedAt": "2020-07-06 12:00:00.000000",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000",
- "roles": [
- "ROLE",
- "ANOTHER_ROLE"
], - "backgroundChecks": [
- {
- "id": 1,
- "userId": 1,
- "status": "OK",
- "caseId": "abc123",
- "caseInvitationId": "abc123",
- "manualCheckDate": "2020-07-06",
- "manuallyCheckUrl": "url.com",
- "type": "CERTN",
- "source": "DRATA",
- "reportData": "string",
- "user": { },
- "outOfScopeReason": "abc123",
- "outOfScopeAt": "2020-07-06 12:00:00.000000",
- "linkedAt": "2020-07-06 12:00:00.000000",
- "createdAt": "2020-07-06 12:00:00.000000",
- "updatedAt": "2020-07-06 12:00:00.000000"
}
], - "identities": [
- {
- "id": 1,
- "identityId": "1a2b3c",
- "username": "Username",
- "connectedAt": "2020-07-06 12:00:00.000000",
- "disconnectedAt": "2020-07-06 12:00:00.000000",
- "hasMfa": true,
- "user": { },
- "connection": {
- "id": "1",
- "clientType": "GOOGLE",
- "state": "ACTIVE",
- "connected": false,
- "connectedAt": "2020-07-06 12:00:00.000000",
- "failedAt": "2020-07-06 12:00:00.000000",
- "companyId": "12341234",
- "assignmentId": "FLk12AsS",
- "user": { },
- "accountId": "string",
- "clientId": "drata.com",
- "clientAlias": "My-connection-alias-1",
- "manuallyUpdatedAt": "2020-07-06 12:00:00.000000",
- "aliasUpdatedAt": "2020-07-06 12:00:00.000000",
- "deletedAt": "2020-07-06 12:00:00.000000",
- "requestorId": "328d3016-71f3-4485-af20-06ce8044da18",
- "product": "",
- "writeAccessEnabled": false,
- "sourcePreference": "LABEL",
- "securityLabel": "Jira Security Label",
- "jqlQuery": "project = IT AND type = \"Offboarding\"",
- "authorized": true,
- "workspaces": [
- {
- "id": 1,
- "name": "Drata",
- "description": "Platform to track SOC 2 compliance within the organization",
- "howItWorks": null,
- "primary": true
}
], - "providerTypes": [
- 5
], - "code": 10010,
- "groupLabel": "Everyone"
}, - "hasIdp": true
}
]
}, - "vendor": { }
}
], - "riskCount": 0
}