> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get assessment type rules

> Gets an assessment type's rules for each vendor risk level: the evidence and questionnaires requested from vendors at that level, and how often they are reassessed.



## OpenAPI

````yaml /reference/manage-vanta.json get /vendor-assessment-types/{assessmentTypeId}/rules
openapi: 3.0.0
info:
  title: Manage Vanta
  version: 1.0.0
  description: >-
    The REST API lets customers query and mutate Vanta's data. Use this API to
    automate bulk actions, query data for custom workflows and dashboards, and
    bolster your security operations


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /vendor-assessment-types/{assessmentTypeId}/rules:
    get:
      tags:
        - Vendor Assessment Types
      summary: Get assessment type rules
      description: >-
        Gets an assessment type's rules for each vendor risk level: the evidence
        and questionnaires requested from vendors at that level, and how often
        they are reassessed.
      operationId: GetVendorAssessmentTypeRules
      parameters:
        - in: path
          name: assessmentTypeId
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorAssessmentTypeRules'
              examples:
                Example 1:
                  value:
                    assessmentTypeId: 6696ea0595df50d5cd6ec3b8
                    rules:
                      - riskLevel: CRITICAL
                        preferredEvidenceTypes:
                          - SOC2_REPORT
                          - PENETRATION_TEST_REPORT
                        preferredQuestionnaireIds:
                          - 6696ea0595df50d5cd6ec3c1
                        cadence: P12M
                      - riskLevel: HIGH
                        preferredEvidenceTypes:
                          - SOC2_REPORT
                        preferredQuestionnaireIds:
                          - 6696ea0595df50d5cd6ec3c1
                        cadence: P12M
                      - riskLevel: MEDIUM
                        preferredEvidenceTypes:
                          - SOC2_REPORT
                        preferredQuestionnaireIds: []
                        cadence: P24M
                      - riskLevel: LOW
                        preferredEvidenceTypes: []
                        preferredQuestionnaireIds: []
                        cadence: null
                      - riskLevel: UNSCORED
                        preferredEvidenceTypes: []
                        preferredQuestionnaireIds: []
                        cadence: null
      security:
        - bearerAuth: []
components:
  schemas:
    VendorAssessmentTypeRules:
      properties:
        assessmentTypeId:
          type: string
          description: The ID of the assessment type the rules belong to.
        rules:
          items:
            $ref: '#/components/schemas/VendorAssessmentTypeRiskLevelRules'
          type: array
          description: >-
            The rules for each vendor risk level, ordered from CRITICAL to
            UNSCORED.
      required:
        - assessmentTypeId
        - rules
      type: object
      additionalProperties: false
    VendorAssessmentTypeRiskLevelRules:
      properties:
        riskLevel:
          $ref: '#/components/schemas/VendorRiskLevel'
          description: The vendor risk level these rules apply to.
        preferredEvidenceTypes:
          items:
            type: string
          type: array
          description: >-
            Document types requested as evidence from vendors at this risk
            level. Values match the `type` field returned by the list vendor
            document types endpoint.
        preferredQuestionnaireIds:
          items:
            type: string
          type: array
          description: >-
            IDs of the in-app and spreadsheet questionnaires sent to vendors at
            this risk level.
        cadence:
          type: string
          nullable: true
          description: >-
            How often vendors at this risk level are reassessed, as an ISO 8601
            duration (e.g. `P12M`). Null when no recurring assessment is
            required.
      required:
        - riskLevel
        - preferredEvidenceTypes
        - preferredQuestionnaireIds
        - cadence
      type: object
      additionalProperties: false
    VendorRiskLevel:
      description: |-
        The risk level of a vendor:
        - CRITICAL: The vendor has a critical security risk
        - HIGH: The vendor has a high security risk
        - MEDIUM: The vendor has a medium security risk
        - LOW: The vendor has a low security risk
        - UNSCORED: The vendor has not been given a risk level
      enum:
        - CRITICAL
        - HIGH
        - LOW
        - MEDIUM
        - UNSCORED
      type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````

## Related topics

- [Get assessment type by ID](https://developer.vanta.com/api-reference/vendor-assessment-types/get-assessment-type-by-id.md)
- [Get assessment by ID](https://developer.vanta.com/api-reference/vendors/get-assessment-by-id.md)
- [List assessment types](https://developer.vanta.com/api-reference/vendor-assessment-types/list-assessment-types.md)
- [Get security review by ID](https://developer.vanta.com/api-reference/vendors/get-security-review-by-id.md)
- [Vanta API changelog](https://developer.vanta.com/docs/changelog.md)