Create a new information request
Creates a new information request for an audit during audit setup or as requirements evolve.
After creating all information requests, use POST /audits//share-information-request-list to make them visible to the customer organization. Until shared, requests remain in draft state visible only to auditors.
New requests are created in an initial state indicating evidence is needed. The status progresses through the workflow: initial state → awaiting review → approved or flagged.
Rate limit: 600 requests / minute.
Authorizations
Body
Input for creating a new information request. New requests are created in an initial state by default.
Control IDs to link directly to this request, beyond those automatically
mapped from framework codes. Each must be the id of an existing control in
the customer's organization (the identifier returned by the controls endpoints).
Unknown IDs and controls without an active mapping to a framework in the audit are skipped.
Omit or pass an empty array for no direct control links.
Response
Information request created
Information Request resource representing a single request for audit evidence from a customer.
An information request is created by an auditor and shared with the customer organization. The customer then uploads evidence, which the auditor reviews and either approves or flags for issues.
Deprecated control-linkage field retained for response compatibility. It
may contain control IDs supplied directly to the request, but it is not a
complete or guaranteed-current list of controls linked to the request. Use
linkedControlIds for the complete current list.
Audit segments this request is assigned to. Empty means unassigned. Resolved against the current audit scope — stale IDs are dropped.
This field is a current-scope projection, not a stored watermark. An
audit-scope change that drops or adds IDs here does not update
creationDate, modificationDate, or deletionDate, so it does not appear in
changedSinceDate delta sync on its own. Re-fetch the list without that
parameter, or GET the request by id, to see the current projection.