Skip to main content
GET
TypeScript

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

auditId
string
required
requestId
string
required
evidenceId
string
required

Response

200 - application/json

Ok

id
string
required

The unique identifier for the evidence within Vanta's system. Format: ObjectId as a string (e.g., "6890e473dce1da5d8406f5e7").

evidenceType
enum<string>
required

Type of evidence attached to this information request. Determines the structure of the evidence field.

Available options:
UPLOADED_DOCUMENT,
OBSERVATION,
LINK,
VANTA_DOCUMENT,
VANTA_POLICY,
VANTA_TEST,
VANTA_TEST_SNAPSHOT
creationDate
string<date-time>
required

Timestamp when the evidence was created/uploaded. Format: ISO 8601 UTC timestamp.

modificationDate
string<date-time>
required

Timestamp when the evidence was last modified. Format: ISO 8601 UTC timestamp.

evidence
object
required

The evidence content. Structure varies based on evidenceType.

visibleToAuditorDate
string<date-time> | null

Timestamp when the evidence was made visible to the auditor. Null if the customer has not yet shared this evidence with the auditor. Evidence must be shared before the auditor can review it. Format: ISO 8601 UTC timestamp.

deletionDate
string<date-time> | null

Timestamp when the evidence was soft-deleted. Null if the evidence has not been deleted. Soft deletes retain evidence in the system for audit history while hiding it from normal operations. Format: ISO 8601 UTC timestamp.