Skip to content
UltimateTeam.ai Docs

Real-time SOC 2 control status

GET
/api/v1/compliance/soc2/status

Returns the most recent evidence status for every SOC 2 control (37 controls across 5 trust principles) plus aggregate counts and the latest hash chain verification result.

Authorizations

Responses

200

Successful Response

Typed envelope for GET /api/v1/compliance/soc2/status.

object
data
required

Response body for GET /api/v1/compliance/soc2/status.

object
controls
Array<object>

One row in the SOC 2 dashboard table.

Attributes: id: Canonical control id (e.g. SEC-CC-01). trust_principle: One of Security, Availability, Processing Integrity, Confidentiality, Privacy. status: Current operational status of the control’s evidence. last_collected: ISO timestamp of the most recent evidence upload. last_entry_hash: 64-char hex digest of the latest hash chain entry. evidence_excerpt: Trimmed stdout/stderr from the latest run.

object
evidence_excerpt
Any of:
string
id
required

Canonical control id

string
last_collected
Any of:
string
last_entry_hash
Any of:
string
status
required

Operational status

string
Allowed values: passing failing stale no_data
trust_principle
required

SOC 2 Trust Services Criterion

string
summary
required

Aggregate counts for the SOC 2 status snapshot.

object
by_principle

Per-principle status counts

object
key
additional properties

Pass/fail counts grouped by trust principle.

object
failing
integer
no_data
integer
passing
integer
stale
integer
expected_total
required

Expected control count from controls-mapping.md

integer
failing
integer
hash_chain_verified

Whether the recent hash chain window verifies cleanly

boolean
latest_collection_at
Any of:
string
no_data
integer
passing
integer
stale
integer
total_controls
required

Total number of controls (37)

integer
meta
required

Standard metadata attached to every API response.

object
request_id
required

Unique request identifier

string
timestamp
required

Server timestamp of the response

string format: date-time