Accept evidence for an information request
Accepts evidence for an information request, confirming that all submitted evidence meets audit requirements. This action changes the request’s approvalStatus to an approved state and creates an activity log entry.
Acceptance workflow:
- Auditor reviews submitted evidence
- If evidence is satisfactory, auditor calls this endpoint
- Request status changes to approved state and is considered complete for this audit cycle
Use this endpoint when:
- All required evidence has been submitted
- Evidence quality meets audit standards
- Evidence addresses all specified framework codes
- No additional information is needed
Rate limit: 50 requests / minute.
Authorizations
Body
Input for accepting evidence on an information request, indicating that the submitted evidence meets requirements. This changes the request's approvalStatus to an approved state and creates an activity log entry.
Response
Ok
Information Request resource representing a single request for audit evidence from a customer.
An information request is created by an auditor and shared with the customer organization. The customer then uploads evidence, which the auditor reviews and either approves or flags for issues.
Deprecated control-linkage field retained for response compatibility. It
may contain control IDs supplied directly to the request, but it is not a
complete or guaranteed-current list of controls linked to the request. Use
linkedControlIds for the complete current list.
Audit segments this request is assigned to. Empty means unassigned. Resolved against the current audit scope — stale IDs are dropped.
This field is a current-scope projection, not a stored watermark. An
audit-scope change that drops or adds IDs here does not update
creationDate, modificationDate, or deletionDate, so it does not appear in
changedSinceDate delta sync on its own. Re-fetch the list without that
parameter, or GET the request by id, to see the current projection.