Subject-access export (gdpr:admin, live mode only)

GET 
/api/v1/gdpr/access

Required scope: gdpr:admin. GDPR Art. 15: returns the company account's full subject-access snapshot — identical to the Company Portal privacy-page export (same shared core): user, company, products, audit trail, notifications, preferences, deletion-request history, AI consent, support tickets, signatures, API-key METADATA (never hashes or secrets), data requests and change logs. Categories cap at 10,000 rows with an explicit truncationWarning. Response is personal data: served Cache-Control: private, no-store.

Live mode only (403 CROSS_MODE_DENIED for sandbox keys).

Request

Responses

200

The subject-access snapshot.

401

Missing or invalid API key

403

FORBIDDEN_SCOPE or CROSS_MODE_DENIED.

404

404 — not found OR owned by another tenant (NOT_FOUND; IDOR-safe).

429

429 — RATE_LIMITED (per-key limit, reads and writes alike; fails closed, so a limiter outage also returns 429). A limiter-down 429 is deliberately indistinguishable from a quota 429. Carries Retry-After (seconds).

Response Headers

Retry-After

Seconds to wait before retrying (429 only).

RateLimit-Limit

Per-minute request ceiling for this key's tier.

RateLimit-Remaining

Requests left in the current window (floored at 0).

RateLimit-Reset

Seconds until the window resets.

503

503 — the API is not enabled on this environment (FEATURE_DISABLED).