Get an evidence bundle
/v1/trust/evidence-exports/{id}Get an evidence bundle.
One evidence bundle: its status, period, and once READY its SHA-256, size, signing key id, expiry and download path. Poll this after creating a bundle.
Requires an organization owner or admin. Errors: 403 for a caller who is not an organization owner or admin; 404 when the organization has no bundle with this id.
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Path parameters
idstring<uuid>requiredthe evidence bundle id (UUID)
Query parameters
organizationstringrequiredthe organization slug
Responses
idstring<uuid>The bundle id (UUID).
organizationstringThe organization slug.
statusenum<string>Where the bundle is in its life. PENDING: accepted, not started. RUNNING: being built. READY: built and signed, downloadable until expires_at. FAILED: could not be built; error says why. EXPIRED: past its retention, the zip has been deleted.
One of
"PENDING","RUNNING","READY","FAILED","EXPIRED"start_timestring<date-time>Start of the period the bundle covers (ISO 8601 date-time).
end_timestring<date-time>End of the period the bundle covers (ISO 8601 date-time).
errorstringWhy the bundle could not be built; FAILED only.
file_namestringThe zip's file name, evidence-{organization}-{start date}-{end date}.zip (dates in UTC).
sha256stringSHA-256 of the zip file, hex; set once READY.
bytesinteger<int64>Size of the zip file in bytes; set once READY.
key_idstringId of the key that signed the bundle; set once READY. The public key is at GET /v1/public/trust/evidence-signing-key.
regionstringThe AWS region that built the bundle; set once READY.
created_bystringWho started the export: the user id, or api-key:{key id} for a platform API key.
created_atstring<date-time>When the export was requested (ISO 8601 date-time).
completed_atstring<date-time>When the bundle was built (ISO 8601 date-time); absent until then.
expires_atstring<date-time>When the zip is deleted and the bundle becomes EXPIRED (ISO 8601 date-time), 30 days after it was built; absent until READY.
download_pathstringPath to download the zip, relative to the API base URL; READY only.