> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a comment for an information request

> Creates a new comment for an information request. The comment author must be an auditor
in the audit firm making the request. The comment will be associated with the information
request and visible to all authorized users.

Rate limit: 50 requests / minute.



## OpenAPI

````yaml https://spec.speakeasy.com/vanta/vanta/conduct-an-audit-with-code-samples post /audits/{auditId}/information-requests/{requestId}/comments
openapi: 3.0.0
info:
  title: Conduct an audit
  version: 1.0.0
  description: >-
    The Auditor API lets audit firms conduct audits from a tool outside of
    Vanta. Unlock data syncing with Vanta through this API.


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /audits/{auditId}/information-requests/{requestId}/comments:
    post:
      tags:
        - Audits
      summary: Create a comment for an information request
      description: >-
        Creates a new comment for an information request. The comment author
        must be an auditor

        in the audit firm making the request. The comment will be associated
        with the information

        request and visible to all authorized users.


        Rate limit: 50 requests / minute.
      operationId: CreateCommentForInformationRequest
      parameters:
        - in: path
          name: auditId
          required: true
          schema:
            type: string
        - in: path
          name: requestId
          required: true
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddInformationRequestCommentInput'
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InformationRequestComment'
              examples:
                Example 1:
                  value:
                    id: 65fc81a3359c8508c9af880f
                    text: Some comment
                    creationDate: '2024-03-07T21:25:56.000Z'
                    modificationDate: '2024-03-07T21:25:56.000Z'
                    deletionDate: '2024-03-07T21:25:56.000Z'
                    email: vlad@vantaroo.com
                    authorName: Vlad Vantaroo
      security:
        - bearerAuth: []
      x-codeSamples:
        - lang: typescript
          label: CreateCommentForInformationRequest
          source: |-
            import { Vanta } from "vanta-auditor-api-sdk";

            const vanta = new Vanta({
              bearerAuth: process.env["VANTA_BEARER_AUTH"] ?? "",
            });

            async function run() {
              const result = await vanta.audits.createCommentForInformationRequest({
                auditId: "<id>",
                requestId: "<id>",
                addInformationRequestCommentInput: {
                  text: "<value>",
                  email: "Daryl.Bartell38@gmail.com",
                  creationDate: new Date("2024-06-25T05:04:31.105Z"),
                },
              });

              console.log(result);
            }

            run();
        - lang: java
          label: CreateCommentForInformationRequest
          source: >-
            package hello.world;


            import com.vanta.vanta_auditor_api.Vanta;

            import
            com.vanta.vanta_auditor_api.models.components.AddInformationRequestCommentInput;

            import
            com.vanta.vanta_auditor_api.models.operations.CreateCommentForInformationRequestResponse;

            import java.lang.Exception;

            import java.time.OffsetDateTime;


            public class Application {

                public static void main(String[] args) throws Exception {

                    Vanta sdk = Vanta.builder()
                            .bearerAuth(System.getenv().getOrDefault("BEARER_AUTH", ""))
                        .build();

                    CreateCommentForInformationRequestResponse res = sdk.audits().createCommentForInformationRequest()
                            .auditId("<id>")
                            .requestId("<id>")
                            .addInformationRequestCommentInput(AddInformationRequestCommentInput.builder()
                                .text("<value>")
                                .email("Daryl.Bartell38@gmail.com")
                                .creationDate(OffsetDateTime.parse("2024-06-25T05:04:31.105Z"))
                                .build())
                            .call();

                    if (res.informationRequestComment().isPresent()) {
                        System.out.println(res.informationRequestComment().get());
                    }
                }
            }
components:
  schemas:
    AddInformationRequestCommentInput:
      description: |-
        Comments enable communication between auditors and customers about
        evidence requirements and submissions. All comments are immediately
        visible to both parties once created.
      properties:
        text:
          type: string
          description: |-
            The text content of the comment.
            Must be at least 1 character. Can include questions, clarifications,
            or explanations related to the information request.
        email:
          type: string
          description: >-
            Email address of the comment author.

            Must match an existing Vanta user who belongs to the audit firm
            making the API request.

            This email uniquely identifies the author across systems.
        creationDate:
          type: string
          format: date-time
          description: >-
            Timestamp when the comment was created in the external audit
            management system.

            This allows synchronizing comment timestamps from external systems.

            Format: ISO 8601 UTC timestamp.
      required:
        - text
        - email
        - creationDate
      type: object
      additionalProperties: false
    InformationRequestComment:
      description: >-
        A comment on an information request enables communication between
        auditors

        and customers regarding evidence requirements and submissions.


        These threaded discussions help clarify requests, explain or resolve
        questions about evidence,

        and are always visible to both parties once created.
      properties:
        id:
          type: string
          description: |-
            The unique identifier for the comment within Vanta's system.
            Format: ObjectId as a string (e.g., "6890e473dce1da5d8406f5e7").
        text:
          type: string
          description: >-
            The comment message content.

            Can include explanations, questions, or clarifications about the
            information request.
        creationDate:
          type: string
          format: date-time
          description: |-
            Timestamp when the comment was created.
            Format: ISO 8601 UTC timestamp.
        modificationDate:
          type: string
          format: date-time
          nullable: true
          description: |-
            Timestamp when the comment was last edited.
            Null if the comment has never been modified.
            Format: ISO 8601 UTC timestamp.
        deletionDate:
          type: string
          format: date-time
          nullable: true
          description: >-
            Timestamp when the comment was soft-deleted.

            Null if the comment has not been deleted.

            Soft deletes retain the comment for audit history while hiding it
            from normal operations.

            Format: ISO 8601 UTC timestamp.
        email:
          type: string
          nullable: true
          description: >-
            Email address of the comment author.

            This email uniquely identifies users between Vanta and external
            audit systems.

            Null when the comment author can't be matched to a Vanta user.
        authorName:
          type: string
          nullable: true
          description: >-
            Human-readable display name of the comment author.

            Null if the author's name is not available (e.g., user was deleted).

            This enables correct author attribution in integrations where users
            cannot

            be reliably matched across systems by email alone.
      required:
        - id
        - text
        - creationDate
        - modificationDate
        - deletionDate
        - email
        - authorName
      type: object
      additionalProperties: false
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````