---
title: "Create a compliance review"
method: POST
path: "/api/compliance/{organizationId}/reviews"
tags: ["Compliance"]
---

# Create a compliance review

`POST /api/compliance/{organizationId}/reviews`

Creates a compliance review for organization onboarding submissions.

## Path parameters

- `organizationId` string, uuid, required

## Headers

- `idempotency-key` string, uuid

## Request body

- union
  - CreateIndividualComplianceReviewRequest
    - `tier` 'LIGHT' | 'STANDARD', required — Individual review tier — Light (reduced KYC) or Standard.
    - `type` 'individual', required — Set to `individual` for an individual compliance review.
  - CreateBusinessComplianceReviewRequest
    - `tier` 'US_STANDARD' | 'FULL', required — Business review tier — US Standard (USD-only, reduced document set) or Full (complete Know Your Business document set).
    - `type` 'business', required — Set to `business` for a business compliance review.

## Response `201`

Compliance review created.

- union
  - CreateIndividualComplianceReviewResponse
    - `id` string, uuid, required — Unique review ID
    - `tier` 'LIGHT' | 'STANDARD', required — The tier this review is for.
    - `type` 'individual', required
    - `status` ComplianceReviewStatusDraft, required — The review has been created and is awaiting attestation uploads.
      - `type` 'draft', required
    - `createdAt` string, required — ISO 8601 timestamp when the review was created.
    - `requiredAttestations` AttestationRequirement[], required — Attestation types required to submit this review.
      - `attestationType` 'individualPersonalInfoLight' | 'individualPersonalInfo' | 'individualContactInfo' | 'individualResidentialAddress' | 'individualIdentityDocument' | 'individualFinancialInfo' | 'individualTaxInfo' | 'individualEeaInfo' | 'individualProofOfAddress' | 'individualSourceOfFunds' | 'individualSelfiePhoto' | 'businessIdentification' | 'businessTaxInfo' | 'businessAddress' | 'businessContactInfo' | 'businessDetails' | 'businessOperations' | 'businessFinancialInfo' | 'businessFormationDocuments' | 'businessUboOwnershipDocuments' | 'businessProofOfAddressDocuments' | 'businessFlowOfFundsDocument' | 'businessAssociatedPersons', required — Attestation type required to submit the compliance review.
    - `uploadedAttestations` AttestationSummary[], required — Attestations already uploaded for this review.
      - `attestationType` 'individualPersonalInfoLight' | 'individualPersonalInfo' | 'individualContactInfo' | 'individualResidentialAddress' | 'individualIdentityDocument' | 'individualFinancialInfo' | 'individualTaxInfo' | 'individualEeaInfo' | 'individualProofOfAddress' | 'individualSourceOfFunds' | 'individualSelfiePhoto' | 'businessIdentification' | 'businessTaxInfo' | 'businessAddress' | 'businessContactInfo' | 'businessDetails' | 'businessOperations' | 'businessFinancialInfo' | 'businessFormationDocuments' | 'businessUboOwnershipDocuments' | 'businessProofOfAddressDocuments' | 'businessFlowOfFundsDocument' | 'businessAssociatedPersons', required — Which attestation this summary refers to.
      - `id` string, uuid, required — Unique attestation ID
      - `validationStatus` union, required — Validations lifecycle state for this attestation.
        - AttestationValidationStatusPending — Validations in progress.
          - `type` 'pending', required
        - AttestationValidationStatusApproved — Attestation passed validations.
          - `type` 'approved', required
        - AttestationValidationStatusFailed — Attestation failed validations.
          - `failures` AttestationValidationFailure[], required — Information about the failed validations for this attestation.
            - `failureCode` 'INCORRECT_DOCUMENT' | 'POOR_QUALITY' | 'MISSING_INFORMATION' | 'INCONSISTENT_DATA' | 'EXPIRED_DOCUMENT' | 'OTHER', required — A reason the validation failed.
            - `severity` 'BLOCKING' | 'WARNING', required — `BLOCKING` must be addressed before submit can succeed; `WARNING` can be resolved by acknowledging warnings at submit-time.
          - `type` 'failed', required
  - CreateBusinessComplianceReviewResponse
    - `id` string, uuid, required — Unique review ID
    - `tier` 'US_STANDARD' | 'FULL', required — The tier this review is for.
    - `type` 'business', required
    - `status` ComplianceReviewStatusDraft, required — The review has been created and is awaiting attestation uploads.
      - `type` 'draft', required
    - `createdAt` string, required — ISO 8601 timestamp when the review was created.
    - `requiredAttestations` AttestationRequirement[], required — Attestation types required to submit this review.
      - `attestationType` 'individualPersonalInfoLight' | 'individualPersonalInfo' | 'individualContactInfo' | 'individualResidentialAddress' | 'individualIdentityDocument' | 'individualFinancialInfo' | 'individualTaxInfo' | 'individualEeaInfo' | 'individualProofOfAddress' | 'individualSourceOfFunds' | 'individualSelfiePhoto' | 'businessIdentification' | 'businessTaxInfo' | 'businessAddress' | 'businessContactInfo' | 'businessDetails' | 'businessOperations' | 'businessFinancialInfo' | 'businessFormationDocuments' | 'businessUboOwnershipDocuments' | 'businessProofOfAddressDocuments' | 'businessFlowOfFundsDocument' | 'businessAssociatedPersons', required — Attestation type required to submit the compliance review.
    - `uploadedAttestations` AttestationSummary[], required — Attestations already uploaded for this review.
      - `attestationType` 'individualPersonalInfoLight' | 'individualPersonalInfo' | 'individualContactInfo' | 'individualResidentialAddress' | 'individualIdentityDocument' | 'individualFinancialInfo' | 'individualTaxInfo' | 'individualEeaInfo' | 'individualProofOfAddress' | 'individualSourceOfFunds' | 'individualSelfiePhoto' | 'businessIdentification' | 'businessTaxInfo' | 'businessAddress' | 'businessContactInfo' | 'businessDetails' | 'businessOperations' | 'businessFinancialInfo' | 'businessFormationDocuments' | 'businessUboOwnershipDocuments' | 'businessProofOfAddressDocuments' | 'businessFlowOfFundsDocument' | 'businessAssociatedPersons', required — Which attestation this summary refers to.
      - `id` string, uuid, required — Unique attestation ID
      - `validationStatus` union, required — Validations lifecycle state for this attestation.
        - AttestationValidationStatusPending — Validations in progress.
          - `type` 'pending', required
        - AttestationValidationStatusApproved — Attestation passed validations.
          - `type` 'approved', required
        - AttestationValidationStatusFailed — Attestation failed validations.
          - `failures` AttestationValidationFailure[], required — Information about the failed validations for this attestation.
            - `failureCode` 'INCORRECT_DOCUMENT' | 'POOR_QUALITY' | 'MISSING_INFORMATION' | 'INCONSISTENT_DATA' | 'EXPIRED_DOCUMENT' | 'OTHER', required — A reason the validation failed.
            - `severity` 'BLOCKING' | 'WARNING', required — `BLOCKING` must be addressed before submit can succeed; `WARNING` can be resolved by acknowledging warnings at submit-time.
          - `type` 'failed', required
    - `associatedPersons` AssociatedPersonResource[], required — Associated persons (beneficial owners and the control person) for this business review. Up to four beneficial owners plus one control person, who may be the same individual as one of the beneficial owners.
      - `associatedPersonId` string, uuid, required — Associated person UUID.
      - `relationships` string[], required — The relationship(s) of this associated person to the business. A person can be both a beneficial owner and a control person.
      - `createdAt` string, required — ISO 8601 timestamp when the associated person was created.
      - `updatedAt` string, required — ISO 8601 timestamp when the associated person was last updated.
      - `requiredAttestations` AssociatedPersonAttestationRequirement[] — Attestation types this associated person still needs before the review can be submitted.
        - `attestationType` 'associatedPersonPersonalInfo' | 'associatedPersonContactInfo' | 'associatedPersonResidentialAddress' | 'associatedPersonTaxInfo' | 'associatedPersonIdentityDocument' | 'associatedPersonProofOfAddress' | 'associatedPersonEeaInfo' | 'associatedPersonProofOfSignatoryAuthority', required — Associated person attestation type required before submitting the compliance review.
      - `uploadedAttestations` AssociatedPersonAttestationSummary[], required — Attestations uploaded for this associated person.
        - `attestationType` 'associatedPersonPersonalInfo' | 'associatedPersonContactInfo' | 'associatedPersonResidentialAddress' | 'associatedPersonTaxInfo' | 'associatedPersonIdentityDocument' | 'associatedPersonProofOfAddress' | 'associatedPersonEeaInfo' | 'associatedPersonProofOfSignatoryAuthority', required — Which associated person attestation this summary refers to.
        - `id` string, uuid, required — Unique attestation ID
        - `validationStatus` union, required — Validations lifecycle state for this attestation.
          - AttestationValidationStatusPending — Validations in progress.
            - `type` 'pending', required
          - AttestationValidationStatusApproved — Attestation passed validations.
            - `type` 'approved', required
          - AttestationValidationStatusFailed — Attestation failed validations.
            - `failures` AttestationValidationFailure[], required — Information about the failed validations for this attestation.
              - …
            - `type` 'failed', required

## Other responses

- `401` — Unauthorized
- `403` — SignedAgreementRequiredException
- `409` — IdempotencyConflictError
- `422` — IdempotencyKeyExpiredError

---

[API](https://skmtc.net/muralpay/apis/mural-api.md) · [All operations](https://skmtc.net/muralpay/apis/mural-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/muralpay/mural-api/revisions/437d277f5948/schema)