---
title: "Duplicate an IRL audit"
method: POST
path: "/audits/duplicate"
tags: ["Audits"]
---

# Duplicate an IRL audit

`POST /audits/duplicate`

Duplicates an existing IRL audit into a new audit engagement with the supplied
displayName, audit dates, early access date, and auditor roster. Company, audit
type, and framework are copied from the source audit and cannot be changed.

Each email in `allowAuditorEmails` must match an active user in the
authenticated audit firm's domain. Provision auditors via `POST /auditors`
before referencing them here, or copy emails from `GET /audits/{sourceAuditId}`
→ `allowAuditorEmails` when duplicating with the same roster.

Information requests are copied from the source audit. After duplication:

- Requests with Vanta evidence will be pre-filled and marked as internal review.

  Review them before sharing with your customer.
- Requests where evidence was not available or was uploaded externally will need

  evidence added manually.
- Evidence capture dates and due dates can be modified after duplication.

Rate limit: 10 requests / minute.

## Request body

- DuplicateAuditRequest — Request body for duplicating an IRL audit into a new audit engagement.
  - `sourceAuditId` string, required — ID of the source IRL audit to duplicate.
  - `displayName` string, required — Display name for the new audit engagement.
  - `auditStartDate` string, date-time, required — Start of the audit window for the new audit.
  - `auditEndDate` string, date-time, required — End of the audit window for the new audit.
  - `earlyAccessStartsAt` string, date-time, required — When auditors gain access to the new audit.
  - `allowAuditorEmails` string[], required — Emails of auditors who may access the new audit. Minimum one entry required. Each email must match an active user in the authenticated audit firm's domain.

## Response `200`

Ok

- Audit
  - `id` string, required — The unique identifier for the audit.
  - `customerOrganizationName` string, required — The domain name of the customer organization being audited (e.g. vanta.com)
  - `customerDisplayName` string, nullable, required — The human readable name of the customer organization being audited (e.g. Vanta)
  - `customerOrganizationId` string, required — The uuid of the customer organization being audited
  - `auditStartDate` string, date-time, required — The start of the audit window. This is also when data collection for audit starts.
  - `auditEndDate` string, date-time, required — The end of the audit window.
  - `earlyAccessStartsAt` string, date-time, nullable, required — Timestamp at which auditors gain access to the audit. Occurs before the audit window begins
  - `framework` string, required — The name of the framework for the audit
  - `displayName` string, required — The display name for the audit. Returns the custom audit name if set, otherwise returns the framework name.
  - `allowAuditorEmails` string[], required — Emails of auditors with access to audit
  - `allowAllAuditors` boolean, required — Set to true if all auditors in audit firm have access
  - `deletionDate` string, date-time, nullable, required — Timestamp when the audit was deleted
  - `creationDate` string, date-time, required — Timestamp when the audit was created
  - `modificationDate` string, date-time, nullable, required — Timestamp when the audit was updated
  - `completionDate` string, date-time, nullable, required — Timestamp when the audit was marked completed, and report was uploaded
  - `auditFocus` 'EXTERNAL' | 'INTERNAL', required
  - `auditorRequestListMetadata` object — Metadata about the auditor request list. This field is only present for IRL (Information Request List) based audits and will be undefined for standard audits. Use the presence of this field to differentiate between IRL and non-IRL audits.
    - `requestsSharedWithCustomer` string, date-time, nullable, required — Timestamp when information requests were shared with the customer. Null if not shared.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/versions/6c1f7590538b/schema)