Secureframe

Monitor compliance readiness, manage controls, and coordinate evidence collection.

Create evidence request

Create an evidence request for a control or audit requirement.

Parameters

Parameter	Type	Required	Description
`title`	string	Yes	Evidence request title.
`description`	string	No	Evidence request description.
`assignee_email`	string	No	Assignee email address.
`due_date`	string	No	Due date (YYYY-MM-DD).

Response

{
  "evidence_request_id": "evreq_001",
  "status": "success"
}

Create vendor

Create a new vendor entry in Secureframe.

Parameters

Parameter	Type	Required	Description
`name`	string	Yes	Vendor name.
`category`	string	No	Vendor category.
`website`	string	No	Vendor website.
`status`	string	No	Vendor status.

Response

{
  "status": "success",
  "vendor_id": "vendor_002"
}

Get framework details

Retrieve detailed information about a specific Secureframe framework.

Parameters

Parameter	Type	Required	Description
`framework_id`	string	Yes	Framework ID obtained from list_frameworks. Use to fetch metadata and associated controls for the compliance program.

Response

{
  "framework": {
    "description": "SOC 2 Type II compliance framework.",
    "id": "f_001",
    "name": "SOC 2",
    "status": "active"
  },
  "status": "success"
}

List controls

List compliance controls for a framework or organization.

Parameters

Parameter	Type	Required	Description
`framework_id`	string	No	Optional framework ID to filter controls to a specific compliance framework.
`status`	string	No	Optional status filter for controls (e.g., in_progress, completed).
`limit`	number	No	Maximum number of controls to return.

Response

{
  "controls": [
    {
      "id": "ctl_001",
      "name": "Access control policy",
      "status": "in_progress"
    }
  ],
  "status": "success"
}

List frameworks

Retrieve compliance frameworks visible to the organization.

Parameters

Parameter	Type	Required	Description
`status`	string	No	Optional status filter such as active or archived.
`limit`	number	No	Maximum number of frameworks to return.

Response

{
  "frameworks": [
    {
      "id": "f_001",
      "name": "SOC 2",
      "status": "active"
    },
    {
      "id": "f_002",
      "name": "ISO 27001",
      "status": "active"
    }
  ],
  "status": "success"
}

List vendors

List vendors tracked in Secureframe.

Parameters

Parameter	Type	Required	Description
`limit`	number	No	Maximum number of vendors to return.

Response

{
  "status": "success",
  "vendors": [
    {
      "id": "vendor_001",
      "name": "Acme Cloud",
      "status": "active"
    }
  ]
}

Update control status

Update the status of a Secureframe control.

Parameters

Parameter	Type	Required	Description
`control_id`	string	Yes	Control ID to update.
`status`	string	Yes	New status for the control.
`note`	string	No	Optional note to add to the control update.

Response

{
  "status": "success"
}

Secureframe

On this page