v1

latestOpenAPI 3.0.1Vanta Terms of Service2026-07-26327517821.8 KB

Audits

Get audit by ID

Returns a single audit by ID, scoped to the audit firm.

To identify IRL (Information Request List) audits, check for the presence of the auditorRequestListMetadata field. This field is only present for IRL-based audits and will be undefined for standard audits.

Rate limit: 250 requests / minute.

get/audits/{auditId}

Path parameters

auditIdstring required

Response

idstring required

The unique identifier for the audit.

customerOrganizationNamestring required

The domain name of the customer organization being audited (e.g. vanta.com)

customerDisplayNamestring nullable required

The human readable name of the customer organization being audited (e.g. Vanta)

customerOrganizationIdstring required

The uuid of the customer organization being audited

auditStartDatestring date-time required

The start of the audit window. This is also when data collection for audit starts.

auditEndDatestring date-time required

The end of the audit window.

earlyAccessStartsAtstring date-time nullable required

Timestamp at which auditors gain access to the audit. Occurs before the audit window begins

frameworkstring required

The name of the framework for the audit

displayNamestring required

The display name for the audit. Returns the custom audit name if set, otherwise returns the framework name.

allowAuditorEmailsstring[] required

Emails of auditors with access to audit

allowAllAuditorsboolean required

Set to true if all auditors in audit firm have access

deletionDatestring date-time nullable required

Timestamp when the audit was deleted

creationDatestring date-time required

Timestamp when the audit was created

modificationDatestring date-time nullable required

Timestamp when the audit was updated

completionDatestring date-time nullable required

Timestamp when the audit was marked completed, and report was uploaded

auditFocus'EXTERNAL' | 'INTERNAL' required