/api/v1/privacy/assessmentsCreate DPIA
Creates a privacy / AI impact assessment row. Requires `orgId` (query or body — both must agree with the gate's resolution), `assessment_type` (one of `dpia`, `tia`, `lia`, `ai_ia`, `pia`) and `title`; optional `ai_risk_class` (minimal|limited|high|unacceptable), `overall_risk` (low|medium|high|critical) and `status` (draft|in_review|approved|requires_changes|archived) are validated when present, and any other supplied column is passed through. Server-controlled fields (`id`, `org_id`, `created_at`, `created_by`, `updated_at`, `approved_at`, `reviewer_id`) are stripped from the payload — `org_id` is set from the verified request scope and `created_by` from the authenticated caller, so authorship and sign-off cannot be forged. Returns 201 with the inserted row. This is a record insert only; no workflow, review or notification is triggered. Requires `compliance:create` and org membership.
Authentication
Send Authorization: Bearer YOUR_API_KEY on every request. Generate API keys at /dashboard/settings/api-keys.
Response
200 example
{
"success": true
}All status codes
Code samples
cURL
curl -X POST \ https://evalguard.ai/api/v1/privacy/assessments \ -H "Authorization: Bearer $EVALGUARD_API_KEY"
TypeScript
// The TypeScript SDK (@evalguard/sdk) exposes TYPED methods — runEval,
// getEval, runSecurityScan, checkFirewall, … — not a generic request().
// For an arbitrary endpoint, call it directly:
const res = await fetch("https://evalguard.ai/api/v1/privacy/assessments", {
method: "POST",
headers: { Authorization: `Bearer ${process.env.EVALGUARD_API_KEY}` },
});
console.log(res.status, await res.json());Python
# The Python SDK (pip install evalguardai) exposes TYPED methods on
# EvalGuardClient — run_eval, get_eval, … — not a generic request().
# For an arbitrary endpoint, call it directly:
import os
import requests
headers = {"Authorization": f"Bearer {os.environ['EVALGUARD_API_KEY']}"}
response = requests.request("POST", "https://evalguard.ai/api/v1/privacy/assessments", headers=headers)
print(response.status_code, response.json())Go
package main
import (
"context"
"fmt"
"net/http"
"os"
)
func main() {
req, _ := http.NewRequestWithContext(context.Background(), "POST", "https://evalguard.ai/api/v1/privacy/assessments", nil)
req.Header.Set("Authorization", "Bearer "+os.Getenv("EVALGUARD_API_KEY"))
resp, err := http.DefaultClient.Do(req)
if err != nil { panic(err) }
defer resp.Body.Close()
fmt.Println(resp.Status)
}