The Assessment Automation APIs provide functionality for managing assessment template lifecycle oper ations, including template export and import for cross-environment migration, retrieving published t emplate metadata with filtering by template type, and template deletion with comprehensive validatio n checks. (36 operations.)
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/privacy-automation-assessment-automation"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
{"openapi":"3.1.0","info":{"title":"Privacy Automation - Assessment Automation","version":"1.0","contact":{"name":"OneTrust Support","url":"https://my.onetrust.com/s/contactsupport"},"license":{"name":"Apache 2.0","url":"https://www.apache.org/licenses/LICENSE-2.0"},"description":"The Assessment Automation APIs provide functionality for managing assessment template lifecycle operations, including template export and import for cross-environment migration, retrieving published template metadata with filtering by template type, and template deletion with comprehensive validation checks."},"servers":[{"url":"https://{hostname}","variables":{"hostname":{"default":"hostname","description":"The OneTrust hostname such as app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, app-apac.onetrust.com, trial.onetrust.com, or uat.onetrust.com."}}}],"tags":[{"name":"Assessment Actions","description":"The Assessment Actions APIs are used to perform workflows on assessments, such as launching, approving, or creating tasks.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"x-displayName":"Assessment Actions"},{"name":"Assessment Management","description":"The Assessment Management APIs are used to modify, link, and manage existing assessments.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"x-displayName":"Assessment Management"},{"name":"Assessments","description":"The Assessments APIs are used to retrieve assessment data and details.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"x-displayName":"Assessments"},{"name":"Template","description":"APIs to manage assessment template operations including import and export functionality for cross-tenant migration, retrieval of published template listings with type-based filtering, and template deletion with dependency validation.","externalDocs":{"description":"OpenAPI 3.1.0 - Download Definition","url":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"x-displayName":"Template"}],"paths":{"/api/assessment/v1/assessments/{assessmentId}/review":{"post":{"operationId":"reviewAssessmentUsingPOST","summary":"Complete Assessment","description":"Use this API to complete review of an assessment using any active result option. This action will move the assessment to the **Completed** stage.\n\n> 🗒 Things to Know\n> \n> - The assessment must first be submitted for review before using this API. This can be done using the [Submit Assessment API](https://developer.onetrust.com/onetrust/reference/submitassessmentusingpost).\n> - Only active assessment result options can be used to complete assessments.","tags":["Assessment Actions"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[{"name":"assessmentId","in":"path","description":"UUID of the assessment to complete","required":true,"schema":{"type":"string","format":"uuid"},"example":"550e8400-e29b-41d4-a716-446655440000"}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_ClosureRequest"}}}},"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessment-tags":{"get":{"operationId":"getTagsUsingGET","summary":"Get List of Assessment Tags","description":"Use this API to retrieve all available assessment tags that can be used to categorize or label assessments.\n\n > 🗒 Things to Know \n > \n > - The list of tag IDs returned in the response can be used to update a specific assessment's tag using the [Update Assessment Tags](/onetrust/reference/addorupdatetagsusingput) API.\n","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_TagEntityDetail"}}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT_READ","ASSESSMENT"]}]}},"/api/assessment/v2/assessments":{"get":{"operationId":"getAllAssessmentBasicDetailsUsingGET","summary":"Get List of Assessments","description":"Use this API to retrieve a list of all assessments with basic assessment details. The response will include details such as the assessment ID, number, stage, result, and associated organization.\n\n > 🗒 Things to Know \n >\n > - All assessments regardless of their stage are returned in the response by default.\n >\n > - The assessments can be filtered by stage using the `assessmentStatuses` query parameter. \n >\n > - The `size` and `page` query parameters can be used to paginate the response (list of assessments). The `size` parameter defines the number of assessments to be returned in each page. The `page` parameter defines the page number. The first page and default `page` is page number 0. The `size` parameter is optional and default value is 20, but cannot exceed 2000. If you input a value greater than 2000, then 2000 will be used for the `size`.\n","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[{"name":"templateTypes","in":"query","description":"List of template types to filter assessments by. Available options:\n\n- **PIA** (PIA & DPIA Automation)\n- **VENDOR** (Third-Party Risk Management)\n- **ITRM** (IT & Security Risk Management)\n- **CONTROL** (Risk and Controls)\n- **INCIDENT** (Incident Management)\n- **EXCHANGE** (Third-Party Risk Exchange)\n- **ESG** (ESG Program Reporting)\n- **DISCLOSURE** (Disclosure Management)\n- **DISCLOSURE_YOY** (Year Over Year Disclosures)\n- **ERM** (Enterprise Risk Management)\n- **TPDD** (Third-Party Due Diligence)\n- **AIGOVERNANCE** (AI Governance)","required":false,"schema":{"type":"array","items":{"type":"string","description":"Template types used in assessments","enum":["PIA","VENDOR","ITRM","CONTROL","INCIDENT","EXCHANGE","ESG","DISCLOSURE","DISCLOSURE_YOY","ERM","TPDD","AIGOVERNANCE"]}},"example":["PIA","VENDOR","ITRM"]},{"name":"assessmentStatuses","in":"query","description":"List of assessment statuses to filter by","required":false,"schema":{"type":"array","items":{"type":"string","enum":["NOT_STARTED","IN_PROGRESS","UNDER_REVIEW","COMPLETED"]}},"example":["NOT_STARTED","IN_PROGRESS","UNDER_REVIEW","COMPLETED"]},{"name":"assessmentArchivalState","in":"query","description":"Filter by archival state","required":false,"schema":{"type":"string","enum":["ALL","ARCHIVED","NON_ARCHIVED"]},"example":"NON_ARCHIVED"},{"name":"page","in":"query","description":"Results page to be retrieved (0..N). Example- '?page=1","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":1},{"name":"size","in":"query","description":"Number of records per page (1…N).","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending. Multiple sort criteria are supported.","schema":{"type":"string","default":"createdDate,desc","enum":["number,asc","number,desc","status,asc","status,desc","createdDate,asc","createdDate,desc","name,asc","name,desc","result,asc","result,desc","orgGroupName,asc","orgGroupName,desc","deadline,asc","deadline,desc","openRiskCount,asc","openRiskCount,desc","openInfoRequestCount,asc","openInfoRequestCount,desc"]},"example":"createdDate,desc"}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_PageAssessmentListViewBasicDto"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT_READ","ASSESSMENT"]}]},"post":{"operationId":"createAssessmentUsingPOST_1","summary":"Launch Assessment","description":"Use this API to launch a new assessment. The new assessment will be created with the details provided in the request body and assigned to the indicated respondents. If the selected template includes an Approver-only section, a user with the Project Owner role can be assigned to that section.\n\n> 🗒 Things to Know \n> \n> - The `inventoryDetails` information can be added in order to set a primary record and pre-populate inventory information on the assessment.\n> - Within the `inventoryDetails` object of the request, certain parameters are interchangeably required. This means that only one identifier parameter and one type parameter is required to make a successful API call:\n> - Inventory identifier (choose one): `inventoryId`, `inventoryNumber`, or `inventoryName`\n> - Inventory type (choose one): `inventoryTypeId` or `inventoryTypeName`\n> - The `templateRootVersionId` parameter can be used instead of the `templateId` parameter to create the new assessment using the latest published version of a template.","tags":["Assessment Actions"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_AssessmentCreateRequest"}}}},"responses":{"201":{"description":"Created","content":{"application/json":{"schema":{"type":"string","format":"uuid"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessments/activities/types/assessmentdelete":{"get":{"operationId":"getAssessmentDeleteLogsUsingGET","summary":"Export Deleted Assessment Audit Log","description":"Use this API to export a log of all deleted assessments. The response will include details such as the assessment name, assessment ID, user who deleted the assessment, and deletion timestamp.\n\n > 🗒 Things to Know \n >\n > - The exported log only includes assessments deleted after OneTrust 4.1.\n","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_AssessmentDeleteLogInformation"}}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT_READ","ASSESSMENT"]}]}},"/api/assessment/v2/assessments/archive":{"put":{"operationId":"archiveAssessmentsUsingPUT","summary":"Archive Assessment","description":"Use this API to archive a single assessment or multiple assessments. Multiple assessment IDs can be provided in the API request to archive assessments in bulk.\n\n > 🗒 Things to Know \n > \n > - Archived assessments will be moved into the Archive list after archiving.\n > \n > - Archived assessments will be read-only.\n > \n > - Dynamic Incident Notification Assessments, Program Benchmarking Assessments, and Maturity & Planning Assessments cannot be archived.\n","tags":["Assessment Management"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"array","items":{"type":"string","format":"uuid"}},"examples":{"Assessment IDs":{"description":"Assessment IDs","value":["550e8400-e29b-41d4-a716-446655440000","550e8400-e29b-41d4-a716-446655440001"]}}}}},"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessments/assessment-links":{"post":{"operationId":"addManualAssessmentLinksUsingPOST","summary":"Link Assessments","description":"Use this API to link an assessment to multiple assessments.\n\n > 🗒 Things to Know \n > \n > - This API can be used for linking active and archived assessments.\n > \n > - Only assessments with the following template types can be linked: PIA, Vendor, ITRM, Control, Exchange, Incident and ESG.","tags":["Assessment Management"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_AssessmentManualLinkRequest"}}}},"responses":{"201":{"description":"Created"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessments/assessment-results":{"get":{"operationId":"getAssessmentResultsUsingGET","summary":"Get List of Assessment Results","description":"Use this API to retrieve a list of all assessment result options that can be used to complete an assessment. The `id` corresponding to each result option in the response can be used to complete assessments using the [Complete Assessment](/onetrust/reference/reviewassessmentusingpost) API.\n","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[{"name":"filterValue","in":"query","description":"Filter to apply when retrieving assessment results. Use ACTIVE_EXCLUDING_INTERNAL to exclude internal results.","required":false,"schema":{"type":"string","enum":["ACTIVE_EXCLUDING_INTERNAL"]},"example":"ACTIVE_EXCLUDING_INTERNAL"},{"name":"templateTypes","in":"query","description":"List of template types to filter assessment results by. Available options:\n\n- **PIA** (PIA & DPIA Automation)\n- **VENDOR** (Third-Party Risk Management)\n- **ITRM** (IT & Security Risk Management)\n- **CONTROL** (Risk and Controls)\n- **INCIDENT** (Incident Management)\n- **EXCHANGE** (Third-Party Risk Exchange)\n- **ESG** (ESG Program Reporting)\n- **ERM** (Enterprise Risk Management)\n- **TPDD** (Third-Party Due Diligence)\n- **AIGOVERNANCE** (AI Governance)","required":false,"schema":{"type":"array","items":{"type":"string","description":"Template types used in assessments","enum":["PIA","VENDOR","ITRM","CONTROL","INCIDENT","EXCHANGE","ESG","DISCLOSURE","DISCLOSURE_YOY","ERM","TPDD","AIGOVERNANCE"]}},"example":["PIA","VENDOR","ITRM"]},{"name":"includeMasterResults","in":"query","description":"Flag to include master results","required":false,"schema":{"type":"boolean","default":true},"example":false}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_AssessmentResultDto"}}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT_READ","ASSESSMENT"]}]}},"/api/assessment/v2/assessments/bulk":{"post":{"operationId":"createBulkAssessmentUsingPOST","summary":"Launch Assessments in Bulk","description":"Use this API to create assessments in bulk. One assessment will be created for each inventory ID passed in the request body. The assessments will be created with the details provided in the request body and assigned to the indicated respondents.\n\n > 🗒 Things to Know \n > \n > - The same template or different templates can be used per inventory ID in the API response body.\n > - The `templateRootVersionId` parameter can be used instead of the `templateId` parameter to use the latest published version of a template for the new assessment.","tags":["Assessment Actions"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"description":"List of assessment creation details including template, respondents, and metadata","type":"array","items":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_AssessmentCreateRequest"}}}}},"responses":{"202":{"description":"Accepted","content":{"application/json":{}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessments/reference-objects/{id}/assessments":{"get":{"operationId":"getLinkedAssessmentsInformationUsingGET","summary":"Get List of Linked Assessments","description":"Use this API to retrieve a list of all assessments linked to a particular record. The linked assessments list will support all copied, reassessed, and rule triggered related assessments.\n\n > 🗒 Things to Know \n > \n > - The following APIs can be used to retrieve the record ID (`id`): \n > \n > - For Assets, Processing Activities, & Entities, use the [Get List of Inventories](/onetrust/reference/getlistofinventoriesusingget) API.\n > \n > - For Vendors, use the [List Vendors](/onetrust/reference/getlistofinventoriesusingget-1) API.\n > \n > - For Engagements, use the [Get List of Engagements](/onetrust/reference/loadengagementusingget) API.\n > \n > - For Incidents, use the [List Incidents](/onetrust/reference/searchincidentsusingpost) API.\n > \n > - For Control Implementations, use the [List Controls](/onetrust/reference/findallcontrolimplementationsusingpost) API.\n > \n > - If the ID does not match the entered reference-object from the URL, 0 results will be returned.\n","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[{"name":"id","in":"path","description":"UUID of the reference object","required":true,"schema":{"type":"string","format":"uuid"},"example":"550e8400-e29b-41d4-a716-446655440000"},{"name":"referenceType","in":"query","description":"Type of reference object","required":true,"schema":{"type":"string","enum":["INVENTORY","CONTROL_IMPLEMENTATION","ENGAGEMENT","INCIDENT","CUSTOM_ENTITY","DYNAMIC"]},"example":"INVENTORY"},{"name":"linkTypes","in":"query","description":"Types of links to filter by","required":false,"schema":{"type":"array","items":{"type":"string","enum":["PRIMARY","AUTO","MANUAL"]}},"example":["PRIMARY","AUTO"]},{"name":"page","in":"query","description":"Results page to be retrieved (0..N)","schema":{"type":"integer","format":"int32","default":0,"minimum":0},"example":0},{"name":"size","in":"query","description":"Number of records per page (1…N)","schema":{"type":"integer","format":"int32","default":20,"maximum":2000,"minimum":1},"example":20},{"name":"sort","in":"query","description":"Sorting criteria in the format: property(,asc|desc). Default sort order is ascending. Multiple sort criteria are supported.","schema":{"type":"string","default":"createdDate,desc","enum":["number,asc","number,desc","status,asc","status,desc","createdDate,asc","createdDate,desc","name,asc","name,desc","result,asc","result,desc","orgGroupName,asc","orgGroupName,desc","deadline,asc","deadline,desc","openRiskCount,asc","openRiskCount,desc","openInfoRequestCount,asc","openInfoRequestCount,desc"]},"example":"createdDate,desc"}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrivacyAutomation-AssessmentAutomation_PageLinkedAssessmentInformation"}}}},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT_READ","ASSESSMENT"]}]}},"/api/assessment/v2/assessments/un-archive":{"put":{"operationId":"unarchiveAssessmentsUsingPUT","summary":"Unarchive Assessment","description":"Use this API to unarchive a single assessment or multiple assessments. Multiple assessment IDs can be provided in the API request to unarchive assessments in bulk.\n\n > 🗒 Things to Know \n > \n > - Unarchived assessments will be moved back to the Active list after unarchiving.\n > \n > - Unarchived assessments will be editable.\n > \n > - Dynamic Incident Notification Assessments, Program Benchmarking Assessments, and Maturity & Planning Assessments cannot be unarchived.\n","tags":["Assessment Management"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"array","items":{"type":"string","format":"uuid"}},"examples":{"Single Assessment":{"summary":"Unarchive a single assessment","description":"Single Assessment","value":["550e8400-e29b-41d4-a716-446655440000"]},"Multiple Assessments":{"summary":"Unarchive multiple assessments in bulk","description":"Multiple Assessments","value":["550e8400-e29b-41d4-a716-446655440000","550e8400-e29b-41d4-a716-446655440001","550e8400-e29b-41d4-a716-446655440002"]}}}}},"responses":{"204":{"description":"No Content"},"400":{"description":"Bad Request"},"401":{"description":"Unauthorized"},"403":{"description":"Forbidden"},"429":{"description":"Too Many Requests. \nFor more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).","headers":{"Retry-After":{"schema":{"description":"The number of seconds after which requests will be allowed again.","format":"int32"}},"ot-period":{"schema":{"description":"The unit of time for which the rate limit applies","enum":["HOUR","MINUTE"]}},"ot-ratelimit-event-id":{"schema":{"description":"The unique identifier for the rate-limiting event.","format":"uuid"}},"ot-request-made":{"schema":{"description":"The number of requests made within the specified period.","format":"int32"}},"ot-requests-allowed":{"schema":{"description":"The number of requests allowed within the specified period.","format":"int32"}}}},"500":{"description":"Internal Server Error"}},"security":[{"PrivacyAutomation-AssessmentAutomation_OAUTH2":["ASSESSMENT"]}]}},"/api/assessment/v2/assessments/{assessmentId}/export":{"get":{"operationId":"exportAssessmentUsingGET","summary":"Get Assessment","description":"Use this API to retrieve details of a specific assessment. The response will include details such as basic assessment information, respondents, approvers, assessment questions and responses, and assessment risks.\n\n> 🗒 Things to Know\n> \n> - The API response body will include all assessment responses received for that assessment after the assessment was launched. If a response record references an object (such as vendors, engagements, or assets) that was subsequently deleted from the OneTrust Platform after the assessment was launched, that record would still be included within the response body but would no longer exist in the OneTrust Platform.","tags":["Assessments"],"x-onetrust":{"spec-label":"https://developer.onetrust.com/onetrust/openapi/privacy-automation-assessment-automation.json"},"parameters":[{"name":"assessmentId","in":"path","description":"UUID of the assessment to export","required":true,"schema":{"type":"string","format":"uuid"},"example":"550e8400-e29b-41d4-a716-446655440000"},{"name":"excludeSkippedQuestions","in":"query","description":"Flag to exclude skipped questions from the export","required":false,"schema":{"type":"b
# --- truncated at 32 KB (218 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/onetrust/refs/heads/main/openapi/onetrust-privacy-automation-assessment-automation-openapi.json