Sign in

v1

latestOpenAPI 3.0.1Vanta Terms of Service2026-07-26327517821.8 KB
Audits

List evidence for an information request

Retrieves a paginated list of all evidence attached to an information request, enabling auditors to review evidence submitted by customers.

This endpoint always includes soft-deleted records (where deletionDate !== null). Clients should check the deletionDate field to identify and handle deleted records appropriately in their systems.

This endpoint supports delta synchronization via the changedSinceDate parameter, allowing efficient polling for changes without retrieving the entire dataset.

Pagination usage:

  1. Make initial request with desired pageSize
  2. Check results.pageInfo.hasNextPage to see if more data exists
  3. If true, use results.pageInfo.endCursor as pageCursor in next request
  4. Repeat until hasNextPage is false

Delta sync usage:

  1. Store the timestamp of your last sync
  2. Pass that timestamp as changedSinceDate
  3. Only evidence created, modified, shared, or deleted since that timestamp is returned
  4. Process updates, including soft-deletes (deletionDate !== null)
  5. Update your last sync timestamp to the current time

Rate limit: 50 requests / minute.

get/audits/{auditId}/information-requests/{requestId}/evidence

Path parameters

auditIdstring required
requestIdstring required

Query parameters

pageSizeinteger

Controls the maximum number of items returned in one response from the API.

Maximum number of evidence entries to return per page.

pageCursorstring

A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.

Pagination cursor from a previous response. Provide to fetch the next page of evidence.

changedSinceDatestring date-time

Includes all evidence that have changed since changedSinceDate. Considers creationDate, modificationDate, deletionDate, and visibleToAuditorDate timestamps when determining changes.

evidenceTypeMatchesAnyInformationRequestSupportedEvidenceType[]

Limits results to the provided evidence types. Must include at least one of: UPLOADED_DOCUMENT, OBSERVATION, LINK, VANTA_DOCUMENT, VANTA_POLICY, VANTA_TEST, VANTA_TEST_SNAPSHOT.

Response

Ok