PATCH
/api/v1/privacy/incidents/{id}Update incident details (root cause, corrective actions, status, resolution date)
Partial update of a breach incident. Use POST /notify for the load-bearing authority-notification event; this endpoint is for routine investigation updates.
Authentication
Send Authorization: Bearer YOUR_API_KEY on every request. Generate API keys at /dashboard/settings/api-keys.
Parameters
id in pathrequiredstringRequest body required
Example
{
"root_cause": "string",
"corrective_actions": [
"string"
],
"status": "draft",
"resolution_date": "2026-01-01T00:00:00.000Z"
}Schema
{
"application/json": {
"schema": {
"type": "object",
"properties": {
"root_cause": {
"type": "string"
},
"corrective_actions": {
"type": "array",
"items": {
"type": "string"
}
},
"status": {
"type": "string",
"enum": [
"draft",
"open",
"notified",
"resolved"
]
},
"resolution_date": {
"type": "string",
"format": "date-time"
}
}
}
}
}Response
All status codes
200Updated
400Bad Request — INVALID_ID, INVALID_STATUS_TRANSITION, VALIDATION_ERROR.
401Unauthorized — no valid credential was presented (AUTH_REQUIRED).
403Forbidden — the credential is valid but lacks the API-key scope, member role, or plan entitlement this operation requires.
404Not Found — NOT_FOUND.
409Conflict — CONFLICT.
429Too Many Requests — the per-key or per-organization rate limit was exceeded. Honour the Retry-After header.
500Internal Server Error — DB_ERROR.
Code samples
cURL
# {id} is shown with an EXAMPLE value — replace it with real values.
curl -X PATCH \
https://evalguard.ai/api/v1/privacy/incidents/00000000-0000-0000-0000-000000000000 \
-H "Authorization: Bearer $EVALGUARD_API_KEY" \
-H "Content-Type: application/json" \
-d '{ "root_cause": "string", "corrective_actions": [ "string" ], "status": "draft", "resolution_date": "2026-01-01T00:00:00.000Z" }'TypeScript
// The TypeScript SDK (@evalguard/sdk) exposes TYPED methods — runEval,
// getEval, runSecurityScan, checkFirewall, … — not a generic request().
// For an arbitrary endpoint, call it directly:
// {id} is shown with an EXAMPLE value — replace it with real values.
const res = await fetch("https://evalguard.ai/api/v1/privacy/incidents/00000000-0000-0000-0000-000000000000", {
method: "PATCH",
headers: {
Authorization: `Bearer ${process.env.EVALGUARD_API_KEY}`,
"Content-Type": "application/json",
},
body: JSON.stringify({
"root_cause": "string",
"corrective_actions": [
"string"
],
"status": "draft",
"resolution_date": "2026-01-01T00:00:00.000Z"
}),
});
console.log(res.status, await res.json());Python
# The Python SDK (pip install evalguardai) exposes TYPED methods on
# EvalGuardClient — run_eval, get_eval, … — not a generic request().
# For an arbitrary endpoint, call it directly:
# {id} is shown with an EXAMPLE value — replace it with real values.
import os
import requests
headers = {"Authorization": f"Bearer {os.environ['EVALGUARD_API_KEY']}"}
headers["Content-Type"] = "application/json"
response = requests.request(
"PATCH",
"https://evalguard.ai/api/v1/privacy/incidents/00000000-0000-0000-0000-000000000000",
headers=headers,
json={
"root_cause": "string",
"corrective_actions": [
"string"
],
"status": "draft",
"resolution_date": "2026-01-01T00:00:00.000Z"
},
)
print(response.status_code, response.json())Go
package main
import (
"context"
"fmt"
"net/http"
"os"
"strings"
)
// {id} is shown with an EXAMPLE value — replace it with real values.
func main() {
body := strings.NewReader(`{"root_cause":"string","corrective_actions":["string"],"status":"draft","resolution_date":"2026-01-01T00:00:00.000Z"}`)
req, _ := http.NewRequestWithContext(context.Background(), "PATCH", "https://evalguard.ai/api/v1/privacy/incidents/00000000-0000-0000-0000-000000000000", body)
req.Header.Set("Authorization", "Bearer "+os.Getenv("EVALGUARD_API_KEY"))
req.Header.Set("Content-Type", "application/json")
resp, err := http.DefaultClient.Do(req)
if err != nil { panic(err) }
defer resp.Body.Close()
fmt.Println(resp.Status)
}Errors
400401403404409429500