Drata Vendors API

openapi: 3.2.0
info:
  title: Drata Vendors API
  version: V2
  contact: {}
  description: 'Operations tagged Vendors across 2 of this provider''s published API definitions: drata-api-v2-openapi.json, drata-api-v2-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://public-api.drata.com/public/v2
- url: https://public-api.eu.drata.com/public/v2
- url: https://public-api.apac.drata.com/public/v2
tags:
- name: Vendors
  description: Vendors are third-parties that your organization is working with. Drata allows you to track and review risks associated with these third-parties. The [help docs](https://help.drata.com/en/articles/9676307-start-and-manage-security-reviews-for-your-vendors) have more information.
paths:
  /vendors:
    get:
      description: 'Find Vendors matching the provided filters.


        🔒 Requires **Vendors: List Vendors** permission.'
      operationId: VendorsPublicV2Controller_listVendors
      parameters:
      - name: cursor
        required: false
        in: query
        description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results
        schema:
          type: string
      - name: size
        required: false
        in: query
        description: Number of results to return
        schema:
          minimum: 1
          maximum: 500
          default: 50
          type: number
      - name: sort
        required: false
        in: query
        description: Which field to sort by
        schema:
          $ref: '#/components/schemas/SortTypeLimitedEnum'
      - name: sortDir
        required: false
        in: query
        description: The direction to sort the data
        schema:
          $ref: '#/components/schemas/SortDirectionEnum'
      - name: includeTotalCount
        required: false
        in: query
        description: Include total count of all matching records in response. Only honored on first page (when cursor is null).
        schema:
          default: false
          example: false
          type: boolean
      - name: category
        required: false
        in: query
        description: The category of the  Vendors
        schema:
          $ref: '#/components/schemas/VendorCategoryEnum'
      - name: categories[]
        required: false
        in: query
        description: Filter to Vendors in any of these categories (business unit). Multi-select is OR.
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorCategoryEnum'
      - name: expand[]
        required: false
        in: query
        description: List of subcollections and sub-objects to expand
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorExpandEnum'
      - name: impactLevel
        required: false
        in: query
        description: Overall Vendor impact level
        schema:
          $ref: '#/components/schemas/VendorImpactLevelEnum'
      - name: renewalDate
        required: false
        in: query
        description: Vendor renewal date (date-only YYYY-MM-DD, matched exactly)
        schema:
          format: date
          example: '2020-07-06'
          type: string
      - name: renewalScheduleType
        required: false
        in: query
        description: Vendor renewal schedule type
        schema:
          $ref: '#/components/schemas/RenewalScheduleTypeEnum'
      - name: risk
        required: false
        in: query
        description: Filter data to Vendors of this risk level
        schema:
          $ref: '#/components/schemas/VendorRiskEnum'
      - name: status
        required: false
        in: query
        description: The status of the Vendors
        schema:
          $ref: '#/components/schemas/VendorStatusEnum'
      - name: statuses[]
        required: false
        in: query
        description: Filter to Vendors in any of these statuses (multi-select is OR)
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorStatusEnum'
      - name: type
        required: false
        in: query
        description: Vendor type
        schema:
          $ref: '#/components/schemas/VendorTypeEnum'
      - name: types[]
        required: false
        in: query
        description: Filter to Vendors of any of these types (multi-select is OR)
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorTypeEnum'
      - name: isSubProcessor
        required: false
        in: query
        description: Filter to sub-processor vendors (true) or non-sub-processors (false)
        schema:
          example: true
          type: boolean
      - name: vendorTypeIds[]
        required: false
        in: query
        description: Filter to Vendors of any of these vendor-type ids (the tenant-defined vendor-type taxonomy from vendor settings; resolve names via GET /vendor-types). Multi-select is OR.
        schema:
          example:
          - 1
          - 2
          type: array
          items:
            type: number
      - name: nextReviewDeadlineStatus[]
        required: false
        in: query
        description: 'Filter by next-review-deadline status: NO_RENEWAL / DUE_SOON / OVERDUE (multi-select is OR)'
        schema:
          type: array
          items:
            $ref: '#/components/schemas/NextReviewDeadlineStatusEnum'
      - name: actionRequired
        required: false
        in: query
        description: 'Filter to "action required" vendors: current (not prospective/archived), with a directory entry and an owner email, whose renewal is due soon or overdue'
        schema:
          example: true
          type: boolean
      - name: vendorUserIds[]
        required: false
        in: query
        description: Filter to Vendors whose security owner is one of these user IDs. Mirrors the security-owner filter in the app.
        schema:
          example:
          - 1
          - 2
          - 3
          type: array
          items:
            type: number
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorsResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: List Vendors
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-get
      x-product-area:
      - VENDOR_PUBLIC_API
    post:
      description: 'Create a new Vendor


        🔒 Requires **Vendors: Create Vendor** permission.'
      operationId: VendorsPublicV2Controller_createVendor
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VendorCreateRequestPublicV2Dto'
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Create Vendor
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-post
      x-product-area:
      - VENDOR_PUBLIC_API
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /vendors-stats:
    get:
      description: 'Retrieve vendor statistics for specified scopes. At least one expand parameter is required. By default, archived vendors are excluded unless includeArchived is set to true.


        🔒 Requires **Vendors: Get Vendors Statistics** permission.'
      operationId: VendorsPublicV2Controller_getVendorStats
      parameters:
      - name: expand[]
        required: true
        in: query
        description: List of stat scopes to include. At least one scope is required.
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorStatsExpandEnum'
      - name: includeArchived
        required: false
        in: query
        description: Whether to include archived vendors in statistics. Defaults to false (excludes archived vendors).
        schema:
          default: false
          example: false
          type: boolean
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorStatsResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Get Vendor Statistics
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-get-stats
      x-product-area:
      - VENDOR_PUBLIC_API
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /vendors/{vendorId}:
    get:
      operationId: VendorsPublicV2Controller_getVendor
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      - name: expand[]
        required: false
        in: query
        description: List of subcollections and sub-objects to expand
        schema:
          type: array
          items:
            $ref: '#/components/schemas/VendorExpandEnum'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Get Vendor
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-get-vendor
      x-product-area:
      - VENDOR_PUBLIC_API
      description: '🔒 Requires **Vendors: Get Vendor** permission.'
    put:
      description: 'Update Vendor details


        🔒 Requires **Vendors: Update Vendor** permission.'
      operationId: VendorsPublicV2Controller_updateVendor
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VendorModifyRequestPublicV2Dto'
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Update Vendor
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-put
      x-product-area:
      - VENDOR_PUBLIC_API
    delete:
      operationId: VendorsPublicV2Controller_deleteVendor
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      responses:
        '204':
          description: No Content
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Remove Vendor
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-delete
      x-product-area:
      - VENDOR_PUBLIC_API
      description: '🔒 Requires **Vendors: Delete Vendor** permission.'
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /vendors/{vendorId}/questionnaires:
    get:
      description: 'Get Questionnaires sent to a Vendor.


        🔒 Requires **Vendors: List Vendor Questionnaire** permission.'
      operationId: VendorsPublicV2Controller_listVendorQuestionnaires
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      - name: cursor
        required: false
        in: query
        description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results
        schema:
          type: string
      - name: size
        required: false
        in: query
        description: Number of results to return
        schema:
          minimum: 1
          maximum: 500
          default: 50
          type: number
      - name: sort
        required: false
        in: query
        description: Which field to sort by
        schema:
          $ref: '#/components/schemas/SortTypeLimitedEnum'
      - name: sortDir
        required: false
        in: query
        description: The direction to sort the data
        schema:
          $ref: '#/components/schemas/SortDirectionEnum'
      - name: includeTotalCount
        required: false
        in: query
        description: Include total count of all matching records in response. Only honored on first page (when cursor is null).
        schema:
          default: false
          example: false
          type: boolean
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorQuestionnairesResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: List Vendor Questionnaires
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-get-questionnaires
      x-product-area:
      - VENDOR_PUBLIC_API
    post:
      description: 'Send a Questionnaire to a Vendor by email.


        🔒 Requires **Vendors: Send Questionnaire to Vendor** permission.'
      operationId: VendorsPublicV2Controller_sendQuestionnaireToVendor
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VendorQuestionnaireCreateRequestPublicV2Dto'
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorQuestionnaireSentResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Send Questionnaire to Vendor
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-post-questionnaires
      x-product-area:
      - VENDOR_PUBLIC_API
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /vendors/{vendorId}/questionnaires/{questionnaireId}:
    get:
      description: 'Get a specific Questionnaire sent to a Vendor.


        🔒 Requires **Vendors: List Vendor Questionnaire** permission.'
      operationId: VendorsPublicV2Controller_getVendorQuestionnaire
      parameters:
      - name: vendorId
        required: true
        in: path
        schema:
          type: number
      - name: questionnaireId
        required: true
        in: path
        schema:
          type: number
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorQuestionnaireSentResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Get Vendor Questionnaire
      tags:
      - Vendors
      x-drata-permissions:
      - vendors-get-questionnaires
      x-product-area:
      - VENDOR_PUBLIC_API
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
components:
  schemas:
    VendorReminderStatsItemPublicV2Dto:
      type: object
      properties:
        count:
          type: number
          description: Number of vendors in this category
          example: 25
          minimum: 0
        key:
          example: RENEWAL_DUE
          description: Renewal reminder status. Use this to prioritize vendor renewals and avoid service interruptions.
          allOf:
          - $ref: '#/components/schemas/RenewalDateStatusEnum'
      required:
      - count
      - key
    VendorImpactLevelForStatsEnum:
      type: string
      enum:
      - INSIGNIFICANT
      - MINOR
      - MODERATE
      - MAJOR
      - CRITICAL
      - UNSCORED
    VendorStatusStatsItemPublicV2Dto:
      type: object
      properties:
        count:
          type: number
          description: Number of vendors in this category
          example: 25
          minimum: 0
        key:
          example: ACTIVE
          description: Vendor status category. Use this to track vendor lifecycle stages.
          allOf:
          - $ref: '#/components/schemas/VendorStatusEnum'
      required:
      - count
      - key
    VendorStatusEnum:
      type: string
      enum:
      - PROSPECTIVE
      - ACTIVE
      - ARCHIVED
      - APPROVED
      - REJECTED
      - FLAGGED
      - ON_HOLD
      - OFFBOARDED
      - UNDER_REVIEW
      - NONE
    TrustCenterProviderEnum:
      type: string
      enum:
      - ANECDOTES
      - CONVEYOR
      - DRATA
      - HYPERCOMPLY
      - SAFEBASE
      - SCRUT
      - SECUREFRAME
      - SECURITYPAL
      - SKYPHER
      - SPRINTO
      - TRUSTARC
      - TRUSTCLOUD
      - VANTA
      - WHISTIC
      - ZENGRC
    VendorCriticalityEnum:
      type: string
      enum:
      - 'Yes'
      - 'No'
      - None
    VendorBusinessUnitStatsItemPublicV2Dto:
      type: object
      properties:
        count:
          type: number
          description: Number of vendors in this category
          example: 25
          minimum: 0
        key:
          example: ENGINEERING
          description: Business unit or category. Helps track vendor usage and costs by department.
          allOf:
          - $ref: '#/components/schemas/VendorCategoryEnum'
      required:
      - count
      - key
    VendorReviewTrustServiceCategoryMapResponsePublicDto:
      type: object
      properties:
        id:
          type: number
          example: 1
          description: Vendor review trust service category ID
        category:
          type:
          - number
          - 'null'
          example: AVAILABILITY
          description: Vendor review trust service category
      required:
      - id
      - category
    VendorOperationalImpactEnum:
      type: string
      enum:
      - NONE
      - LOW
      - NORMAL
      - IMPORTANT
      - CRITICAL
    ExceptionResponseDto:
      type: object
      properties:
        statusCode:
          type: number
        message:
          type: string
        code:
          type: number
        debugInfo:
          type: object
          properties:
            name:
              type: string
            message:
              type: string
            stack:
              type: string
          required:
          - name
          - message
      required:
      - statusCode
      - message
      - code
    HateoasLinkPublicV2Dto:
      type: object
      properties:
        href:
          type: string
          description: The URL of the linked resource
          example: https://app.drata.com/risk/vendors/profile/1/overview
      required:
      - href
    VendorReviewServiceResponsePublicDto:
      type: object
      properties:
        id:
          type: number
          example: 1
          description: Vendor review service ID
        name:
          type: string
          example: Service 1
          description: Vendor review service name
      required:
      - id
      - name
    VendorExpandEnum:
      type: string
      enum:
      - customFields
      - documents
      - integrations
      - lastQuestionnaire
      - latestSecurityReviews
      - reviews
      - vendorUser
      - vendorRelationshipContact
      - dataAccessedOrProcessed
      - scheduleConfiguration
      - customVendorType
    VendorReviewLocationResponsePublicDto:
      type: object
      properties:
        id:
          type: number
          example: 1
          description: Vendor review location ID
        city:
          type: string
          example: San Diego
          description: Vendor review location city
        stateCountry:
          type: string
          example: CA
          description: Vendor review location state
      required:
      - id
      - city
      - stateCountry
    VendorTypeStatsItemPublicV2Dto:
      type: object
      properties:
        count:
          type: number
          description: Number of vendors in this category
          example: 25
          minimum: 0
        key:
          example: VENDOR
          description: Vendor classification type
          allOf:
          - $ref: '#/components/schemas/VendorTypeEnum'
      required:
      - count
      - key
    VendorReviewFindingResponsePublicDto:
      type: object
      properties:
        id:
          type: number
          example: 1
          description: Vendor review finding ID
        description:
          type: string
          example: Finding 1
          description: Vendor review finding description
      required:
      - id
      - description
    UserCompactResponsePublicV2Dto:
      type: object
      properties:
        id:
          type: number
          example: 1
          description: User ID
        email:
          type: string
          example: email@example.com
          description: User email
        firstName:
          type:
          - string
          - 'null'
          example: Sally
          description: User first name
        lastName:
          type:
          - string
          - 'null'
          example: Smith
          description: User last name
        createdAt:
          type: string
          format: date-time
          example: '2025-07-01T16:45:55.246Z'
          description: User created at
        updatedAt:
          type: string
          format: date-time
          example: '2025-07-01T16:45:55.246Z'
          description: User last updated at
      required:
      - id
      - email
      - firstName
      - lastName
      - createdAt
      - updatedAt
    VendorDocumentTypeEnum:
      type: string
      enum:
      - COMPLIANCE_REPORT
      - COMPLIANCE_REPORT_REVIEW
      - BRIDGE_LETTER
      - UPLOADED_COMPLIANCE_REPORT_REVIEW
      - QUESTIONNAIRE_ATTACHMENT
      -

# --- truncated at 32 KB (87 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/openapi/drata-vendors-api-openapi.yml