Get the data handling report

GET/v1/trust/data-handling

Get the data handling report.

What VectorAxis keeps of your organization's AI data and for how long, read from its current settings: request log retention (age and count rules, whether request and response bodies are stored, the monthly logging limit and the regions that hold the logs), the response caches (how long entries live and where), and what you asked providers to keep (files not yet deleted, and batches and stored responses created in the window). statements restates the same facts as plain sentences, ready for a questionnaire.

The window (default the 90 days up to now, at most 366 days) applies to the provider-side counts; the retention and cache settings are those in force when the report is generated. Without workspace_id it requires an organization owner or admin; with it, any member of that workspace.

Errors: 400 when start_time is not before end_time or the window is longer than 366 days; 402 when the organization's plan does not include the AI Trust Pack; 403 without the access above.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Query parameters

organizationstringrequired
the organization slug
workspace_idstring<uuid>
limit the provider-side counts to this workspace's keys (UUID); omit for the whole organization
start_timestring<date-time>
start of the window, ISO 8601 date-time; default 90 days before end_time
end_timestring<date-time>
end of the window, ISO 8601 date-time; default now

Responses

200application/json

organizationstring
The organization slug the report is for.
workspace_idstring<uuid>
The workspace the report is limited to (UUID); absent for an organization-wide report.
start_timestring<date-time>
Start of the report window (ISO 8601 date-time).
end_timestring<date-time>
End of the report window (ISO 8601 date-time).
generated_atstring<date-time>
When the report was generated (ISO 8601 date-time).
account_data_storagestring
Where the organization's account and settings are stored: the primary database and its region, and any read-only copies.
logsobject
How long the gateway keeps the organization's request logs, and what they hold.
Child attributes
- retention_daysinteger<int32>
  Rows older than this are deleted; null = no age limit.
- max_rowsinteger<int32>
  Only the newest this many rows are kept; null = no count limit.
- retain_foreverboolean
  Logs are never deleted on a schedule: kept until the organization is closed.
- bodies_storedboolean
  Request and response bodies (and MCP tool-call arguments and results) are stored with the rows.
- monthly_row_limitinteger<int32>
  Most rows written a month; null = unlimited.
- sweep_interval_secondsinteger<int64>
  How often the scheduled deletion applies the age and count rules, in seconds.
- storagestring
  Where the logs are stored.
- regionsstring[]
  AWS regions whose local databases hold the organization's logs (each request is logged in the region that served it), within the retention period. Empty before its first logged request.
cacheobject
How long cached responses are kept, and where. Responses are cached only when a request asks for it (the x-cache-mode header).
Child attributes
- semantic_caching_allowedboolean
  Whether the semantic cache is available to the organization. When false, the semantic_* fields are absent.
- exact_ttl_secondsinteger<int64>
  Longest an exact-match entry is kept, in seconds: the organization's ceiling, else the platform default.
- exact_ttl_cappedboolean
  True when the organization sets its own exact-match TTL, a ceiling a request's x-cache-ttl can shorten but not raise; false when a request may set any TTL.
- exact_storagestring
  Where exact-match entries are stored, as a phrase.
- semantic_ttl_secondsinteger<int64>
  Longest a semantic entry is served after its last use, in seconds.
- semantic_ttl_cappedboolean
  True when the organization sets its own semantic TTL, a ceiling a request cannot raise.
- semantic_max_idle_secondsinteger<int64>
  A semantic entry unused this long is deleted, in seconds.
- semantic_sweep_interval_secondsinteger<int64>
  How often unused semantic entries are deleted, in seconds.
- semantic_storagestring
  Where semantic cache entries are stored, as a phrase (the regional databases that serve the organization's requests).
provider_storageobject[]
Data the organization asked a provider to keep (files, batches, stored responses), per provider and feature; empty when there is none.
Child attributes
- providerstring
  The provider id (for example OPENAI, ANTHROPIC).
- provider_namestring
  Catalogue name of the provider, when catalogued.
- featurestring
  FILES, MESSAGE_BATCHES, BATCHES or RESPONSES.
- itemsinteger<int64>
  Files currently stored, batches created, or responses created (in the window for responses and batches).
- descriptionstring
  What the provider holds and why, as a sentence.
- provider_retentionstring
  The provider's published retention for API data, from the catalogue.
statementsstring[]
The same facts as plain sentences, ready for a questionnaire or a trust page.
notesstring[]
How to read the report: what is and is not counted.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.