---
title: "Get organization notification settings for an audit"
method: GET
path: "/audits/{auditId}/organization/notifications"
tags: ["Audits"]
---

# Get organization notification settings for an audit

`GET /audits/{auditId}/organization/notifications`

Retrieves organization notification settings for an audit.

This endpoint returns a single record containing the auditee
organization's notification configuration — schedule, personnel
reminder settings, and external notification subscriptions
(Compliance, Vendors, Access Reviews, Trust Center).

The response is a single aggregate object per domain. Sorting and
pagination are not applicable. Under a controlled audit view
(TRIMMED_DOWN), only CAV-approved fields are included.

Rate limit: 10 requests / minute.

## Path parameters

- `auditId` string, required

## Response `200`

Organization notifications record

- AuditOrganizationNotifications — Organization notifications record returned by the auditor API. Ad-hoc single-row payload per domain mirroring the shape of the Organization → Notifications page. Only `id` is guaranteed; every other field is optional because controlled audit views can strip any column from the response.
  - `id` string, required — Domain identifier of the audited organization.
  - `preferredTimeZone` string, nullable — IANA timezone identifier that determines when scheduled reminder notifications are sent. `null` means the organization has no configured preference ("Anytime" in the UI).
  - `employeeDigestFrequency` string, nullable — Frequency at which personnel reminder digests are sent (e.g. `DAILY`, `WEEKLY`, or `NEVER`). `null` when no notification settings have been configured for the organization.
  - `subscribedChannelTypes` string[] — Channels on which the personnel reminder digest is delivered (e.g. `["EMAIL"]` or `["EMAIL", "SLACK"]`).
  - `externalNotifications` AuditOrganizationNotificationSubscription[] — External notification subscriptions — one row per mailing-list address plus category pairing. Covers Compliance, Vendors, Access Reviews, and Trust Center categories.
    - `id` string, required — Subscription record identifier.
    - `address` string, required — Email address that receives notifications for this category.
    - `cadence` string, nullable, required — Cadence of summary notifications for this subscription, or null for non-summary (immediate / reminder) subscriptions.
    - `unsubSettingsKey` string, required — Notification category the subscription belongs to (e.g. `SUMMARY_EMPLOYEE`, `NEW_VENDORS_DISCOVERED_EMAIL`, `TRUST_REPORT_ACCESS_REQUEST_EMAIL`).
    - `toggleIsSubscribed` boolean, required — Whether the address is currently subscribed to receive this category's notifications.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/revisions/6c1f7590538b/schema)