Three endpoints. Deterministic responses. Test and live keys.

POST /v1/compliance/check

Runs the full Delaware applicability, sensitive-data, profiling/automated-decision, consumer-rights, and breach-notification rule check against your submitted questionnaire. Returns an Automated Readiness Score, per-rule findings with statutory citations, automated-decision risk classification, and the required disclaimer.

curl -X POST https://hq.amberoneai.com/api/v1/compliance/check \
  -H "Authorization: Bearer wrap_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "company_name": "Acme Inc.",
    "does_business_in_delaware": true,
    "estimated_number_of_consumers": 25000,
    "collects_personal_data": true,
    "collects_sensitive_data": false,
    "sells_personal_data": false,
    "shares_personal_data": true,
    "uses_profiling": true,
    "uses_automated_decision_making": true,
    "employment_decisions": true,
    "human_review_available": true,
    "consumer_opt_out_available": true,
    "data_access_request_process": true,
    "data_deletion_process": true,
    "data_correction_process": true,
    "data_portability_process": true,
    "third_party_disclosure_process": true,
    "security_breach_process": true
  }'

POST /v1/scan/privacy-policy

Scans a publicly reachable privacy-policy URL, or accepts raw policy text directly. Returns PASS / WARNING / POTENTIAL_GAP / NOT_FOUND / NOT_ENOUGH_INFORMATION per disclosure check, each with the actual evidence text — never a claim of absence just because a page failed to load or parse.

curl -X POST https://hq.amberoneai.com/api/v1/scan/privacy-policy \
  -H "Authorization: Bearer wrap_live_..." \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com/privacy"}'

POST /v1/scan/site

Given a homepage URL, discovers and scans publicly linked privacy/terms/cookie/opt-out/data-request pages (no login, CAPTCHA, or robots bypass — public pages only) and returns findings per discovered page.

Authentication

Authorization: Bearer <key> or X-API-Key: <key>. Create and rotate keys from your dashboard after subscribing to a plan.

Full API reference

See the platform-wide OpenAPI spec for the complete request/response schema, including every field validated on /v1/compliance/check.