Get audit by ID
Returns a single audit by ID, scoped to the audit firm.
To identify IRL (Information Request List) audits, check for the presence of the
auditorRequestListMetadata field. This field is only present for IRL-based audits
and will be undefined for standard audits.
The response includes segments, the audit’s scope. It returns every
in-scope program and system segment; more than one segment does not by
itself imply more than one framework. The top-level framework field is
deprecated; use segments for in-scope frameworks.
This endpoint returns 404 for a soft-deleted audit.
Rate limit: 250 requests / minute.
Authorizations
Response
Ok
Generation status of this audit's Vanta-generated information request list
(IRL). PENDING/RUNNING defer initial sync, READY permits a full sync,
and FAILED is terminal. Null means the audit has no generated IRL.
PENDING, RUNNING, READY, FAILED The audit's scope as a list of segments. Always present. A live audit
returns every in-scope program and system segment; more than one segment
does not by itself imply more than one framework. Soft-deleted audits
return an empty list. Prefer this over the deprecated top-level framework
field.