---
title: "Complete a Compliance Form"
method: PUT
path: "/compliance_forms/{compliance_form_id}"
tags: ["Compliance Forms"]
---

# Complete a Compliance Form

`PUT /compliance_forms/{compliance_form_id}`

As part of onboarding, your Merchants need to review and agree to their `Compliance Form`. Afterward, you need to update their `Compliance Form` with details about their digital signature. Finix will update their `Compliance Form` with those details, along with a reference to the new `signed_file` with their digital signature.

For more information, see [Managing Compliance Forms](/guides/managing-operations/security-compliance/managing-pci-compliance#completing-compliance-forms).

## Request body

- CompleteComplianceForm
  - `pci_saq_a` object, required — Details about the signee's digital signature.
    - `ip_address` string — The IP address of the signee.
    - `name` string — Full name of the signee
    - `signed_at` string — The timestamp of the signee's signature.
    - `title` string — The job title of the signee.
    - `user_agent` string — The User-Agent of the Merchant attesting to the form.

## Response `200`

A single `Compliance Form`

- ComplianceForm
  - `id` string — The ID of the resource.
  - `created_at` string, date-time — Timestamp of when the object was created.
  - `updated_at` string, date-time — Timestamp of when the object was last updated.
  - `application` string — ID of the `Application` to which the `Compliance Form` belongs.
  - `compliance_form_template` string — The ID of the template used to create the `Compliance Form`.
  - `due_at` string, date-time — Timestamp of when the `Compliance Form` is due. By default, this is 3 months after the form was created.
  - `files` object — IDs of the `File` resources for the signed and unsigned `Compliance Form` PDFs.
    - `signed_file` string, nullable — The ID of the `File` resource for the signed `Compliance Form` PDF.
    - `unsigned_file` string — The ID of the `File` resource for the unsigned `Compliance Form` PDF.
  - `linked_to` string — The ID of the resource to which the `Compliance Form` belongs.
  - `linked_type` 'MERCHANT' — Type of the resource to which the `Compliance Form` belongs.
  - `pci_saq_a` object — Details about the signee's digital signature
    - `ip_address` string, nullable — The IP address of the signee.
    - `is_accepted` boolean — Whether the signee has signed the form.
    - `name` string, nullable — The full name of the signee.
    - `signed_at` string, nullable — The timestamp of the signee's signature.
    - `title` string, nullable — The job title of the signee.
    - `user_agent` string, nullable — The User-Agent string of the signee's device.
  - `state` 'INCOMPLETE' | 'OVERDUE' | 'COMPLETE' | 'EXPIRED' | 'INVALID' — The state of the `Compliance Form`.
  - `tags` Tags, nullable — Include up to 50 `key: value` pairs to annotate requests with custom metadata. - Maximum character length for individual `keys` is 40. - Maximum character length for individual `values` is 500. (For example, `order_number: 25`, `item_type: produce`, `department: sales`)
  - `type` 'PCI_SAQ_A' — The type of the `Compliance Form`.
  - `valid_from` string, date-time, nullable — The timestamp of when the `Compliance Form` is valid from. This is set to the form's `signed_at` timestamp upon signature.
  - `valid_until` string, date-time, nullable — The timestamp of when the `Compliance Form` is valid until. This is set to one year after the form's `signed_at` timestamp upon signature.
  - `version` string — The version of the `Compliance Form`.

## Other responses

- `400` — Bad Request. The server cannot process the request due to malformed syntax or invalid data.
- `401` — Unauthorized. Authentication is required and has failed or has not been provided.
- `403` — Forbidden. The client is authenticated but does not have permission to access the resource.
- `404` — Not Found. The requested resource could not be found on the server.
- `406` — Not Acceptable. The server could not accept the submitted request. Confirm how the request was formatted and submitted.

---

[API](https://skmtc.net/finix/apis/finix-api-reference.md) · [All operations](https://skmtc.net/finix/apis/finix-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/finix/finix-api-reference/versions/67e4dc871bfc/schema)