A read-only REST API for every DPO account: pull companies, compliance scores, tickets, breaches, ROPA and DPIA records into your own reporting, dashboards or client portals.
Generate a personal API key from Account → API once you're signed in, no OAuth dance, just a bearer token.
Every endpoint is scoped to companies your account manages. Your key can never see another DPO's data.
Every response is JSON over HTTPS. No SDK required: curl, a browser, or any HTTP client works.
Send your key in an Authorization header (or X-API-Key) on every request:
Get a key: create a free account, then generate one from Account → API once logged in. Keys are shown once at creation and stored hashed. If you lose one, revoke it and generate a new one.
| Endpoint | Params | Returns |
|---|---|---|
GET /companies.php |
— | All companies you manage, with overall compliance %. |
GET /compliance.php |
company_id (required) |
Full compliance breakdown (per-module score, weight, contribution) for one company. |
GET /tickets.php |
company_id (required), status (optional) |
Data subject support tickets for one company. |
GET /breaches.php |
company_id (required), status (optional) |
Data breach incidents for one company. |
GET /ropa.php |
company_id (required) |
Record of Processing Activities entries, including custom-field answers. |
GET /dpia.php |
company_id (required) |
DPIA assessments, including custom-field/table answers. |
Example: https://datatrust.co.zw/api/v1/tickets.php?company_id=12&status=Open
Errors come back as {"error": "..."} with a matching HTTP status: 401 for a missing/invalid key, 404 for a company that doesn't exist or isn't yours, 400 for a missing required parameter.