Sign in

v50

latestOpenAPI 3.0.0raw.githubusercontent.com2026-06-15367117899.6 KB
Vendors

Update vendor record

Update vendor ownership, risk attributes, review metadata, and third-party compliance context for an organization.

patch/v1/vendors/{id}

Path parameters

idstring required
Example:vnd_abc123def456

Vendor ID

Request body

namestring

Vendor name

descriptionstring

Vendor description

category'cloud' | 'infrastructure' | 'software_as_a_service' | 'finance' | 'marketing' | 'sales' | 'hr' | 'other'

Vendor category

status'not_assessed' | 'in_progress' | 'assessed'

Assessment status

inherentProbability'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'

Inherent probability

inherentImpact'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'

Inherent impact

residualProbability'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'

Residual probability

residualImpact'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'

Residual impact

treatmentStrategy'accept' | 'avoid' | 'mitigate' | 'transfer'

Risk treatment strategy

treatmentStrategyDescriptionobject

Description of the treatment strategy

websitestring

Vendor website URL

isSubProcessorboolean

Whether the vendor is a sub-processor

assigneeIdstring

Assignee member ID

Example request

{
  "treatmentStrategy": "mitigate"
}

Response

Vendor updated successfully

idstring

Vendor ID

namestring

Vendor name

descriptionstring

Vendor description

category'cloud' | 'infrastructure' | 'software_as_a_service' | 'finance' | 'marketing' | 'sales' | 'hr' | 'other'
status'not_assessed' | 'in_progress' | 'assessed'
inherentProbability'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'
inherentImpact'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'
residualProbability'very_unlikely' | 'unlikely' | 'possible' | 'likely' | 'very_likely'
residualImpact'insignificant' | 'minor' | 'moderate' | 'major' | 'severe'
websitestring nullable
organizationIdstring
assigneeIdstring nullable

ID of the user assigned to manage this vendor

createdAtstring date-time

When the vendor was created

updatedAtstring date-time

When the vendor was last updated

authType'api-key' | 'session'

How the request was authenticated

Example response

{
  "id": "vnd_abc123def456",
  "name": "CloudTech Solutions Inc.",
  "description": "Cloud infrastructure provider offering AWS-like services including compute, storage, and networking solutions for enterprise customers.",
  "category": "cloud",
  "status": "assessed",
  "inherentProbability": "possible",
  "inherentImpact": "moderate",
  "residualProbability": "unlikely",
  "residualImpact": "minor",
  "website": "https://www.cloudtechsolutions.com",
  "organizationId": "org_abc123def456",
  "assigneeId": "mem_abc123def456",
  "authenticatedUser": {
    "id": "usr_def456ghi789",
    "email": "user@example.com"
  }
}