BackResto Audit API

openapi: 3.2.0
info:
  title: BackResto Public Audit API
  version: 1.0.0
  summary: Free public endpoints of BackResto, the HACCP compliance app for food service professionals.
  description: 'BackResto (https://backresto.com) is a digital HACCP compliance and hygiene tracking app for restaurants, bakeries, caterers, collective catering and hotel kitchens. This specification covers the free, unauthenticated endpoints of the marketing site: the HACCP express audit, the EU allergen table generator, markdown rendering of any page for AI agents, and the health check. The BackResto product app itself (app.backresto.com) has no public API yet. Errors are always structured JSON: `{ "error": string, "code"?: string, "hint"?: string }`. See https://backresto.com/developers for guides and examples.'
  contact:
    name: BackResto
    email: contact@backresto.com
    url: https://www.backresto.com/fr/contact
  termsOfService: https://www.backresto.com/fr/cgu
servers:
- url: https://www.backresto.com
  description: BackResto marketing site
tags:
- name: Audit
  description: Free HACCP express audit
paths:
  /api/haccp-audit:
    post:
      operationId: submitHaccpExpressAudit
      tags:
      - Audit
      summary: Submit a free HACCP express audit request
      description: Registers a food-service business for the free HACCP express compliance audit. The audit evaluates food safety practices (temperature control, cleaning, traceability, regulatory compliance) and the BackResto team follows up with a scored report and recommendations. No authentication required.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/HaccpAuditRequest'
      responses:
        '200':
          description: Audit request registered.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HaccpAuditResponse'
        '400':
          description: Validation error (missing required field, invalid email/phone/website format, or numberOfSites out of the 1-1000 range).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: Unexpected server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    HaccpAuditResponse:
      type: object
      required:
      - success
      properties:
        success:
          type: boolean
          const: true
        companyId:
          type:
          - string
          - 'null'
          description: CRM company id when the business record was created or matched.
    HaccpAuditRequest:
      type: object
      required:
      - businessName
      - firstName
      - lastName
      - email
      - establishmentType
      - numberOfSites
      properties:
        businessName:
          type: string
          maxLength: 100
          description: Restaurant or business name.
        firstName:
          type: string
          maxLength: 50
        lastName:
          type: string
          maxLength: 50
        email:
          type: string
          format: email
          maxLength: 100
        establishmentType:
          type: string
          maxLength: 50
          description: Type of establishment (e.g. restaurant, brasserie, traiteur, boulangerie).
        numberOfSites:
          type: integer
          minimum: 1
          maximum: 1000
        phone:
          type: string
          maxLength: 20
        website:
          type: string
          maxLength: 200
          description: Business website; https:// is added when the protocol is missing.
        jobTitle:
          type: string
          maxLength: 100
        numberOfEmployees:
          type: string
          maxLength: 20
        haccpMethod:
          type: string
          maxLength: 20
          description: Current HACCP method (e.g. paper, excel, software, none).
        address:
          type: string
          maxLength: 255
    Error:
      type: object
      required:
      - error
      description: Structured error returned by every BackResto endpoint on failure.
      properties:
        error:
          type: string
          description: Human-readable error message.
        code:
          type: string
          description: Stable machine-readable error code (e.g. not_found, invalid_path).
        hint:
          type: string
          description: How to resolve the error or where to look next.