Request payload containing filters, pagination and sorting options.

Minimum required payload :
{}

Since this is a POST search endpoint, an empty JSON object is accepted.

Filtering

Filters must be passed inside the filter object.

Supported fields:
code, title, owner.email, program_name

• program_name — scopes to entities with at least one objective in that program. Unknown name → 400.

Search results include linked objectives[] (JSON key; evidence uses program on each objective) and top-level programs[{id,name}].

Examples

"filter": {
  "code": "eq:EV-30",
  "title": "eq:Provide evidence that HTTPS / TLS and other",
  "owner.email": "[email protected]",
  "program_name": "eq:ISO-27001:2022"
}

Supported operators

• eq — exact match
• in — comma-separated list

Example:

"code": "in:EV-30,EV-31"

Optional Flags

• fetch_items

  • true (default): Include evidence items
  • false: Return summary only

• evidence_request

  • true: Include evidence request metadata
  • false (default): Exclude evidence-request metadata

Pagination

• page_size default = 50
• page_size max = 200

Cursor Pagination

• cursor must be Base64 encoded.

Sorting

Allowed fields:

created_at, updated_at

Sorting rules:

• Ascending → created_at or +created_at
• Descending → -created_at