---
title: "Fetch a Compliance Form"
method: GET
path: "/compliance_forms/{compliance_form_id}"
tags: ["Compliance Forms"]
---

# Fetch a Compliance Form

`GET /compliance_forms/{compliance_form_id}`

Finix sends a [webhook](/additional-resources/developers/webhooks/webhook-events#compliance-form-created) whenever a new `Compliance Form` is created for your Merchant. Using the ID, you can retrieve the `Compliance Form`.

## Headers

- `Finix-Version` string

## Response `200`

A single `Compliance Form`

- ComplianceForm
  - `id` string — The ID of the resource.
  - `created_at` string, date-time — Timestamp of when the object was created.
  - `updated_at` string, date-time — Timestamp of when the object was last updated.
  - `application` string — ID of the `Application` to which the `Compliance Form` belongs.
  - `compliance_form_template` string — The ID of the template used to create the `Compliance Form`.
  - `due_at` string, date-time — Timestamp of when the `Compliance Form` is due. By default, this is 3 months after the form was created.
  - `files` object — IDs of the `File` resources for the signed and unsigned `Compliance Form` PDFs.
    - `signed_file` string, nullable — The ID of the `File` resource for the signed `Compliance Form` PDF.
    - `unsigned_file` string — The ID of the `File` resource for the unsigned `Compliance Form` PDF.
  - `linked_to` string — The ID of the resource to which the `Compliance Form` belongs.
  - `linked_type` 'MERCHANT' — Type of the resource to which the `Compliance Form` belongs.
  - `pci_saq_a` object — Details about the signee's digital signature
    - `ip_address` string, nullable — The IP address of the signee.
    - `is_accepted` boolean — Whether the signee has signed the form.
    - `name` string, nullable — The full name of the signee.
    - `signed_at` string, nullable — The timestamp of the signee's signature.
    - `title` string, nullable — The job title of the signee.
    - `user_agent` string, nullable — The User-Agent string of the signee's device.
  - `state` 'INCOMPLETE' | 'OVERDUE' | 'COMPLETE' | 'EXPIRED' | 'INVALID' — The state of the `Compliance Form`.
  - `tags` Tags, nullable — Include up to 50 `key: value` pairs to annotate requests with custom metadata. - Maximum character length for individual `keys` is 40. - Maximum character length for individual `values` is 500. (For example, `order_number: 25`, `item_type: produce`, `department: sales`)
  - `type` 'PCI_SAQ_A' — The type of the `Compliance Form`.
  - `valid_from` string, date-time, nullable — The timestamp of when the `Compliance Form` is valid from. This is set to the form's `signed_at` timestamp upon signature.
  - `valid_until` string, date-time, nullable — The timestamp of when the `Compliance Form` is valid until. This is set to one year after the form's `signed_at` timestamp upon signature.
  - `version` string — The version of the `Compliance Form`.

## Other responses

- `401` — Unauthorized. Authentication is required and has failed or has not been provided.
- `403` — Forbidden. The client is authenticated but does not have permission to access the resource.
- `404` — Not Found. The requested resource could not be found on the server.
- `406` — Not Acceptable. The server could not accept the submitted request. Confirm how the request was formatted and submitted.

---

[API](https://skmtc.net/finix/apis/finix-api-reference.md) · [All operations](https://skmtc.net/finix/apis/finix-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/finix/finix-api-reference/versions/5426f6f99c52/schema)