diff --git a/apps/api/src/app.module.ts b/apps/api/src/app.module.ts
index bf6d8b15fb..eff3454cf4 100644
--- a/apps/api/src/app.module.ts
+++ b/apps/api/src/app.module.ts
@@ -55,6 +55,7 @@ import { AdminFeatureFlagsModule } from './admin-feature-flags/admin-feature-fla
 import { TimelinesModule } from './timelines/timelines.module';
 import { BackgroundChecksModule } from './background-checks/background-checks.module';
 import { BillingModule } from './billing/billing.module';
+import { OffboardingChecklistModule } from './offboarding-checklist/offboarding-checklist.module';
 
 @Module({
   imports: [
@@ -122,6 +123,7 @@ import { BillingModule } from './billing/billing.module';
     AdminOrganizationsModule,
     AdminFeatureFlagsModule,
     TimelinesModule,
+    OffboardingChecklistModule,
   ],
   controllers: [AppController],
   providers: [
diff --git a/apps/api/src/integration-platform/services/generic-employee-sync.service.ts b/apps/api/src/integration-platform/services/generic-employee-sync.service.ts
index 9ee3c0c22c..1701daca73 100644
--- a/apps/api/src/integration-platform/services/generic-employee-sync.service.ts
+++ b/apps/api/src/integration-platform/services/generic-employee-sync.service.ts
@@ -294,7 +294,11 @@ export class GenericEmployeeSyncService {
         try {
           await db.member.update({
             where: { id: member.id },
-            data: { deactivated: true, isActive: false },
+            data: {
+              deactivated: true,
+              isActive: false,
+              offboardDate: member.offboardDate ?? new Date(),
+            },
           });
           results.deactivated++;
           results.details.push({
diff --git a/apps/api/src/offboarding-checklist/access-revocation.service.ts b/apps/api/src/offboarding-checklist/access-revocation.service.ts
new file mode 100644
index 0000000000..4ad2422d81
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/access-revocation.service.ts
@@ -0,0 +1,207 @@
+import {
+  BadRequestException,
+  Injectable,
+  NotFoundException,
+} from '@nestjs/common';
+import { db } from '@db';
+
+@Injectable()
+export class AccessRevocationService {
+  async getAccessRevocations(organizationId: string, memberId: string) {
+    const vendors = await db.vendor.findMany({
+      where: { organizationId },
+      select: { id: true, name: true },
+      orderBy: { name: 'asc' },
+    });
+
+    const revocations = await db.offboardingAccessRevocation.findMany({
+      where: { organizationId, memberId },
+      include: {
+        revokedBy: { select: { id: true, name: true, email: true } },
+      },
+    });
+
+    const revocationMap = new Map(
+      revocations.map((r) => [r.vendorId, r]),
+    );
+
+    const vendorList = vendors.map((vendor) => {
+      const revocation = revocationMap.get(vendor.id);
+      return {
+        vendorId: vendor.id,
+        vendorName: vendor.name,
+        revoked: !!revocation,
+        revokedAt: revocation?.revokedAt ?? null,
+        revokedBy: revocation?.revokedBy ?? null,
+        notes: revocation?.notes ?? null,
+      };
+    });
+
+    return {
+      vendors: vendorList,
+      totalVendors: vendors.length,
+      revokedCount: revocations.length,
+    };
+  }
+
+  async revokeVendorAccess({
+    organizationId,
+    memberId,
+    vendorId,
+    revokedById,
+    notes,
+  }: {
+    organizationId: string;
+    memberId: string;
+    vendorId: string;
+    revokedById: string;
+    notes?: string;
+  }) {
+    const vendor = await db.vendor.findFirst({
+      where: { id: vendorId, organizationId },
+    });
+
+    if (!vendor) {
+      throw new NotFoundException('Vendor not found in this organization');
+    }
+
+    const existing = await db.offboardingAccessRevocation.findUnique({
+      where: { memberId_vendorId: { memberId, vendorId } },
+    });
+
+    if (existing) {
+      throw new BadRequestException(
+        'Vendor access has already been revoked for this member',
+      );
+    }
+
+    const revocation = await db.offboardingAccessRevocation.create({
+      data: {
+        organizationId,
+        memberId,
+        vendorId,
+        revokedById,
+        notes,
+      },
+      include: {
+        revokedBy: { select: { id: true, name: true, email: true } },
+      },
+    });
+
+    await this.syncAccessRevocationCompletion(
+      organizationId,
+      memberId,
+      revokedById,
+    );
+
+    return revocation;
+  }
+
+  async undoVendorRevocation({
+    organizationId,
+    memberId,
+    vendorId,
+  }: {
+    organizationId: string;
+    memberId: string;
+    vendorId: string;
+  }) {
+    const revocation = await db.offboardingAccessRevocation.findUnique({
+      where: { memberId_vendorId: { memberId, vendorId } },
+    });
+
+    if (!revocation) {
+      throw new NotFoundException('Revocation record not found');
+    }
+
+    await db.offboardingAccessRevocation.delete({
+      where: { id: revocation.id },
+    });
+
+    await this.syncAccessRevocationCompletion(organizationId, memberId);
+
+    return { success: true };
+  }
+
+  async revokeAllVendorAccess({
+    organizationId,
+    memberId,
+    revokedById,
+  }: {
+    organizationId: string;
+    memberId: string;
+    revokedById: string;
+  }) {
+    const vendors = await db.vendor.findMany({
+      where: { organizationId },
+      select: { id: true },
+    });
+
+    const existing = await db.offboardingAccessRevocation.findMany({
+      where: { organizationId, memberId },
+      select: { vendorId: true },
+    });
+
+    const existingSet = new Set(existing.map((r) => r.vendorId));
+    const toCreate = vendors.filter((v) => !existingSet.has(v.id));
+
+    if (toCreate.length > 0) {
+      await db.offboardingAccessRevocation.createMany({
+        data: toCreate.map((v) => ({
+          organizationId,
+          memberId,
+          vendorId: v.id,
+          revokedById,
+        })),
+        skipDuplicates: true,
+      });
+    }
+
+    await this.syncAccessRevocationCompletion(organizationId, memberId, revokedById);
+
+    return { confirmed: toCreate.length };
+  }
+
+  private async syncAccessRevocationCompletion(
+    organizationId: string,
+    memberId: string,
+    completedById?: string,
+  ) {
+    const templateItem = await db.offboardingChecklistTemplate.findFirst({
+      where: { organizationId, isAccessRevocation: true, isEnabled: true },
+    });
+
+    if (!templateItem) {
+      return;
+    }
+
+    const { totalVendors, revokedCount } = await this.getAccessRevocations(
+      organizationId,
+      memberId,
+    );
+
+    const allRevoked = totalVendors > 0 && revokedCount === totalVendors;
+
+    const existingCompletion =
+      await db.offboardingChecklistCompletion.findFirst({
+        where: { organizationId, memberId, templateItemId: templateItem.id },
+      });
+
+    if (allRevoked && !existingCompletion && completedById) {
+      await db.offboardingChecklistCompletion.create({
+        data: {
+          organizationId,
+          memberId,
+          templateItemId: templateItem.id,
+          completedById,
+        },
+      });
+    }
+
+    if (!allRevoked && existingCompletion) {
+      await db.offboardingChecklistCompletion.delete({
+        where: { id: existingCompletion.id },
+      });
+    }
+  }
+}
diff --git a/apps/api/src/offboarding-checklist/default-checklist-items.ts b/apps/api/src/offboarding-checklist/default-checklist-items.ts
new file mode 100644
index 0000000000..4676fb4678
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/default-checklist-items.ts
@@ -0,0 +1,66 @@
+export const DEFAULT_OFFBOARDING_CHECKLIST_ITEMS = [
+  {
+    title: 'Revoke system access',
+    description:
+      "Disable or remove the employee's access to all company systems, applications, and cloud services.",
+    evidenceRequired: true,
+    isAccessRevocation: true,
+    sortOrder: 1,
+  },
+  {
+    title: 'Remove from identity provider',
+    description:
+      'Remove the employee from your identity provider (e.g., Okta, Azure AD, Google Workspace).',
+    evidenceRequired: true,
+    isAccessRevocation: false,
+    sortOrder: 2,
+  },
+  {
+    title: 'Retrieve company devices',
+    description:
+      'Collect all company-owned hardware including laptops, phones, access badges, and security keys.',
+    evidenceRequired: true,
+    isAccessRevocation: false,
+    sortOrder: 3,
+  },
+  {
+    title: 'Deactivate email and accounts',
+    description:
+      "Deactivate or redirect the employee's email account and remove from shared mailboxes and distribution lists.",
+    evidenceRequired: true,
+    isAccessRevocation: false,
+    sortOrder: 4,
+  },
+  {
+    title: 'Revoke privileged access',
+    description:
+      'Remove any elevated permissions, admin rights, SSH keys, API tokens, or shared credentials the employee had access to.',
+    evidenceRequired: true,
+    isAccessRevocation: false,
+    sortOrder: 5,
+  },
+  {
+    title: 'Notify relevant teams',
+    description:
+      "Inform the employee's team, IT, HR, and any relevant stakeholders of the departure.",
+    evidenceRequired: false,
+    isAccessRevocation: false,
+    sortOrder: 6,
+  },
+  {
+    title: 'Exit interview completed',
+    description:
+      'Conduct an exit interview covering security reminders and NDA obligations.',
+    evidenceRequired: false,
+    isAccessRevocation: false,
+    sortOrder: 7,
+  },
+  {
+    title: 'Update org chart and documentation',
+    description:
+      'Remove the employee from the org chart, on-call rotations, and internal documentation.',
+    evidenceRequired: false,
+    isAccessRevocation: false,
+    sortOrder: 8,
+  },
+] as const;
diff --git a/apps/api/src/offboarding-checklist/dto/complete-checklist-item.dto.ts b/apps/api/src/offboarding-checklist/dto/complete-checklist-item.dto.ts
new file mode 100644
index 0000000000..017b7614a2
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/dto/complete-checklist-item.dto.ts
@@ -0,0 +1,30 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsOptional, IsString, MaxLength, IsBase64 } from 'class-validator';
+import { IsMimeTypeField } from '../../utils/mime-type.validator';
+
+export class CompleteChecklistItemDto {
+  @ApiProperty({ description: 'Optional notes', required: false })
+  @IsOptional()
+  @IsString()
+  notes?: string;
+
+  @ApiProperty({ description: 'Evidence file name', required: false })
+  @IsOptional()
+  @IsString()
+  fileName?: string;
+
+  @ApiProperty({ description: 'Evidence file MIME type', required: false })
+  @IsOptional()
+  @IsMimeTypeField()
+  fileType?: string;
+
+  @ApiProperty({
+    description: 'Base64 encoded evidence file',
+    required: false,
+  })
+  @IsOptional()
+  @IsString()
+  @MaxLength(134_217_728)
+  @IsBase64()
+  fileData?: string;
+}
diff --git a/apps/api/src/offboarding-checklist/dto/create-template-item.dto.ts b/apps/api/src/offboarding-checklist/dto/create-template-item.dto.ts
new file mode 100644
index 0000000000..17ddd30d65
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/dto/create-template-item.dto.ts
@@ -0,0 +1,25 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsString, IsNotEmpty, IsOptional, IsBoolean } from 'class-validator';
+
+export class CreateTemplateItemDto {
+  @ApiProperty({
+    description: 'Checklist item title',
+    example: 'Collect access badges',
+  })
+  @IsString()
+  @IsNotEmpty()
+  title: string;
+
+  @ApiProperty({ description: 'Guidance text for the admin', required: false })
+  @IsOptional()
+  @IsString()
+  description?: string;
+
+  @ApiProperty({
+    description: 'Whether evidence upload is required',
+    required: false,
+  })
+  @IsOptional()
+  @IsBoolean()
+  evidenceRequired?: boolean;
+}
diff --git a/apps/api/src/offboarding-checklist/dto/update-template-item.dto.ts b/apps/api/src/offboarding-checklist/dto/update-template-item.dto.ts
new file mode 100644
index 0000000000..5d7594fda4
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/dto/update-template-item.dto.ts
@@ -0,0 +1,29 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsString, IsOptional, IsBoolean, IsNumber } from 'class-validator';
+
+export class UpdateTemplateItemDto {
+  @ApiProperty({ required: false })
+  @IsOptional()
+  @IsString()
+  title?: string;
+
+  @ApiProperty({ required: false })
+  @IsOptional()
+  @IsString()
+  description?: string;
+
+  @ApiProperty({ required: false })
+  @IsOptional()
+  @IsBoolean()
+  evidenceRequired?: boolean;
+
+  @ApiProperty({ required: false })
+  @IsOptional()
+  @IsNumber()
+  sortOrder?: number;
+
+  @ApiProperty({ required: false })
+  @IsOptional()
+  @IsBoolean()
+  isEnabled?: boolean;
+}
diff --git a/apps/api/src/offboarding-checklist/offboarding-checklist.controller.ts b/apps/api/src/offboarding-checklist/offboarding-checklist.controller.ts
new file mode 100644
index 0000000000..ab989ea56b
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/offboarding-checklist.controller.ts
@@ -0,0 +1,207 @@
+import {
+  Controller,
+  Get,
+  Post,
+  Patch,
+  Delete,
+  Body,
+  Param,
+  UseGuards,
+} from '@nestjs/common';
+import { ApiOperation, ApiParam, ApiSecurity, ApiTags } from '@nestjs/swagger';
+import { AuthContext, OrganizationId } from '../auth/auth-context.decorator';
+import { HybridAuthGuard } from '../auth/hybrid-auth.guard';
+import { PermissionGuard } from '../auth/permission.guard';
+import { RequirePermission } from '../auth/require-permission.decorator';
+import type { AuthContext as AuthContextType } from '../auth/types';
+import { UploadAttachmentDto } from '../attachments/upload-attachment.dto';
+import { OffboardingChecklistService } from './offboarding-checklist.service';
+import { CreateTemplateItemDto } from './dto/create-template-item.dto';
+import { UpdateTemplateItemDto } from './dto/update-template-item.dto';
+import { CompleteChecklistItemDto } from './dto/complete-checklist-item.dto';
+
+@ApiTags('Offboarding Checklist')
+@Controller({ path: 'offboarding-checklist', version: '1' })
+@UseGuards(HybridAuthGuard, PermissionGuard)
+@ApiSecurity('apikey')
+export class OffboardingChecklistController {
+  constructor(
+    private readonly offboardingChecklistService: OffboardingChecklistService,
+  ) {}
+
+  @Get('template')
+  @RequirePermission('member', 'read')
+  async getTemplate(@OrganizationId() organizationId: string) {
+    return this.offboardingChecklistService.getTemplate(organizationId);
+  }
+
+  @Post('template')
+  @RequirePermission('member', 'update')
+  async createTemplateItem(
+    @OrganizationId() organizationId: string,
+    @Body() dto: CreateTemplateItemDto,
+  ) {
+    return this.offboardingChecklistService.createTemplateItem(
+      organizationId,
+      dto,
+    );
+  }
+
+  @Patch('template/:id')
+  @RequirePermission('member', 'update')
+  async updateTemplateItem(
+    @OrganizationId() organizationId: string,
+    @Param('id') id: string,
+    @Body() dto: UpdateTemplateItemDto,
+  ) {
+    return this.offboardingChecklistService.updateTemplateItem(
+      organizationId,
+      id,
+      dto,
+    );
+  }
+
+  @Delete('template/:id')
+  @RequirePermission('member', 'update')
+  async deleteTemplateItem(
+    @OrganizationId() organizationId: string,
+    @Param('id') id: string,
+  ) {
+    return this.offboardingChecklistService.deleteTemplateItem(
+      organizationId,
+      id,
+    );
+  }
+
+  @Get('member/:memberId')
+  @RequirePermission('member', 'read')
+  async getMemberChecklist(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+  ) {
+    return this.offboardingChecklistService.getMemberChecklist(
+      organizationId,
+      memberId,
+    );
+  }
+
+  @Post('member/:memberId/item/:templateItemId/complete')
+  @RequirePermission('member', 'update')
+  async completeItem(
+    @OrganizationId() organizationId: string,
+    @AuthContext() authContext: AuthContextType,
+    @Param('memberId') memberId: string,
+    @Param('templateItemId') templateItemId: string,
+    @Body() dto: CompleteChecklistItemDto,
+  ) {
+    return this.offboardingChecklistService.completeItem({
+      organizationId,
+      memberId,
+      templateItemId,
+      completedById: authContext.userId!,
+      dto,
+    });
+  }
+
+  @Delete('member/:memberId/item/:templateItemId/complete')
+  @RequirePermission('member', 'update')
+  async uncompleteItem(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+    @Param('templateItemId') templateItemId: string,
+  ) {
+    return this.offboardingChecklistService.uncompleteItem({
+      organizationId,
+      memberId,
+      templateItemId,
+    });
+  }
+
+  @Post('member/:memberId/item/:templateItemId/evidence')
+  @RequirePermission('member', 'update')
+  async uploadEvidence(
+    @OrganizationId() organizationId: string,
+    @AuthContext() authContext: AuthContextType,
+    @Param('memberId') memberId: string,
+    @Param('templateItemId') templateItemId: string,
+    @Body() uploadDto: UploadAttachmentDto,
+  ) {
+    return this.offboardingChecklistService.uploadEvidenceToCompletion({
+      organizationId,
+      memberId,
+      templateItemId,
+      uploadDto,
+      userId: authContext.userId!,
+    });
+  }
+
+  @Get('member/:memberId/access-revocations')
+  @RequirePermission('member', 'read')
+  @ApiOperation({
+    summary: 'Get vendor access revocation status for a member',
+  })
+  @ApiParam({ name: 'memberId', description: 'Member ID' })
+  async getAccessRevocations(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+  ) {
+    return this.offboardingChecklistService.getAccessRevocations(
+      organizationId,
+      memberId,
+    );
+  }
+
+  @Post('member/:memberId/access-revocations/:vendorId')
+  @RequirePermission('member', 'update')
+  @ApiOperation({ summary: 'Mark vendor access as revoked' })
+  @ApiParam({ name: 'memberId', description: 'Member ID' })
+  @ApiParam({ name: 'vendorId', description: 'Vendor ID' })
+  async revokeVendorAccess(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+    @Param('vendorId') vendorId: string,
+    @AuthContext() authContext: AuthContextType,
+    @Body() body: { notes?: string },
+  ) {
+    return this.offboardingChecklistService.revokeVendorAccess({
+      organizationId,
+      memberId,
+      vendorId,
+      revokedById: authContext.userId!,
+      notes: body?.notes,
+    });
+  }
+
+  @Delete('member/:memberId/access-revocations/:vendorId')
+  @RequirePermission('member', 'update')
+  @ApiOperation({ summary: 'Undo vendor access revocation' })
+  @ApiParam({ name: 'memberId', description: 'Member ID' })
+  @ApiParam({ name: 'vendorId', description: 'Vendor ID' })
+  async undoVendorRevocation(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+    @Param('vendorId') vendorId: string,
+  ) {
+    return this.offboardingChecklistService.undoVendorRevocation({
+      organizationId,
+      memberId,
+      vendorId,
+    });
+  }
+
+  @Post('member/:memberId/access-revocations/confirm-all')
+  @RequirePermission('member', 'update')
+  @ApiOperation({ summary: 'Confirm all vendor access as revoked' })
+  @ApiParam({ name: 'memberId', description: 'Member ID' })
+  async revokeAllVendorAccess(
+    @OrganizationId() organizationId: string,
+    @Param('memberId') memberId: string,
+    @AuthContext() authContext: AuthContextType,
+  ) {
+    return this.offboardingChecklistService.revokeAllVendorAccess({
+      organizationId,
+      memberId,
+      revokedById: authContext.userId!,
+    });
+  }
+}
diff --git a/apps/api/src/offboarding-checklist/offboarding-checklist.module.ts b/apps/api/src/offboarding-checklist/offboarding-checklist.module.ts
new file mode 100644
index 0000000000..19dcc3eece
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/offboarding-checklist.module.ts
@@ -0,0 +1,14 @@
+import { Module } from '@nestjs/common';
+import { AuthModule } from '../auth/auth.module';
+import { AttachmentsModule } from '../attachments/attachments.module';
+import { AccessRevocationService } from './access-revocation.service';
+import { OffboardingChecklistController } from './offboarding-checklist.controller';
+import { OffboardingChecklistService } from './offboarding-checklist.service';
+
+@Module({
+  imports: [AuthModule, AttachmentsModule],
+  controllers: [OffboardingChecklistController],
+  providers: [OffboardingChecklistService, AccessRevocationService],
+  exports: [OffboardingChecklistService],
+})
+export class OffboardingChecklistModule {}
diff --git a/apps/api/src/offboarding-checklist/offboarding-checklist.service.spec.ts b/apps/api/src/offboarding-checklist/offboarding-checklist.service.spec.ts
new file mode 100644
index 0000000000..b277a5f585
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/offboarding-checklist.service.spec.ts
@@ -0,0 +1,543 @@
+import { BadRequestException, NotFoundException } from '@nestjs/common';
+
+const mockDb = {
+  offboardingChecklistTemplate: {
+    findMany: jest.fn(),
+    findFirst: jest.fn(),
+    count: jest.fn(),
+    create: jest.fn(),
+    createMany: jest.fn(),
+    update: jest.fn(),
+    delete: jest.fn(),
+    aggregate: jest.fn(),
+  },
+  offboardingChecklistCompletion: {
+    findMany: jest.fn(),
+    findFirst: jest.fn(),
+    create: jest.fn(),
+    delete: jest.fn(),
+  },
+  offboardingAccessRevocation: {
+    findMany: jest.fn(),
+    findUnique: jest.fn(),
+    create: jest.fn(),
+    delete: jest.fn(),
+  },
+  vendor: {
+    findMany: jest.fn(),
+    findFirst: jest.fn(),
+  },
+};
+
+jest.mock('@db', () => ({
+  db: mockDb,
+  AttachmentEntityType: {
+    offboarding_checklist: 'offboarding_checklist',
+  },
+}));
+
+import { OffboardingChecklistService } from './offboarding-checklist.service';
+import { AccessRevocationService } from './access-revocation.service';
+import { DEFAULT_OFFBOARDING_CHECKLIST_ITEMS } from './default-checklist-items';
+
+describe('OffboardingChecklistService', () => {
+  const mockAttachmentsService = {
+    getAttachments: jest.fn(),
+    uploadAttachment: jest.fn(),
+    deleteAttachment: jest.fn(),
+  };
+
+  let service: OffboardingChecklistService;
+  let accessRevocationService: AccessRevocationService;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+    accessRevocationService = new AccessRevocationService();
+    service = new OffboardingChecklistService(
+      mockAttachmentsService as never,
+      accessRevocationService,
+    );
+  });
+
+  describe('getTemplate', () => {
+    it('seeds defaults when none exist', async () => {
+      mockDb.offboardingChecklistTemplate.count.mockResolvedValue(0);
+      mockDb.offboardingChecklistTemplate.createMany.mockResolvedValue({
+        count: DEFAULT_OFFBOARDING_CHECKLIST_ITEMS.length,
+      });
+      mockDb.offboardingChecklistTemplate.findMany.mockResolvedValue(
+        DEFAULT_OFFBOARDING_CHECKLIST_ITEMS.map((item, i) => ({
+          id: `oct_${i}`,
+          organizationId: 'org_1',
+          ...item,
+          isDefault: true,
+          isEnabled: true,
+        })),
+      );
+
+      const result = await service.getTemplate('org_1');
+
+      expect(
+        mockDb.offboardingChecklistTemplate.createMany,
+      ).toHaveBeenCalledWith({
+        data: expect.arrayContaining([
+          expect.objectContaining({
+            organizationId: 'org_1',
+            title: 'Revoke system access',
+            isDefault: true,
+            isEnabled: true,
+          }),
+        ]),
+      });
+      expect(result).toHaveLength(DEFAULT_OFFBOARDING_CHECKLIST_ITEMS.length);
+    });
+
+    it('returns existing items without seeding', async () => {
+      const existingItems = [
+        {
+          id: 'oct_1',
+          organizationId: 'org_1',
+          title: 'Custom item',
+          isDefault: false,
+          isEnabled: true,
+          sortOrder: 1,
+        },
+      ];
+      mockDb.offboardingChecklistTemplate.count.mockResolvedValue(1);
+      mockDb.offboardingChecklistTemplate.findMany.mockResolvedValue(
+        existingItems,
+      );
+
+      const result = await service.getTemplate('org_1');
+
+      expect(
+        mockDb.offboardingChecklistTemplate.createMany,
+      ).not.toHaveBeenCalled();
+      expect(result).toEqual(existingItems);
+    });
+  });
+
+  describe('getMemberChecklist', () => {
+    it('returns items with completion status', async () => {
+      mockDb.offboardingChecklistTemplate.count.mockResolvedValue(2);
+      mockDb.offboardingChecklistTemplate.findMany.mockResolvedValue([
+        {
+          id: 'oct_1',
+          organizationId: 'org_1',
+          title: 'Item 1',
+          isEnabled: true,
+          sortOrder: 1,
+        },
+        {
+          id: 'oct_2',
+          organizationId: 'org_1',
+          title: 'Item 2',
+          isEnabled: true,
+          sortOrder: 2,
+        },
+      ]);
+      mockDb.offboardingChecklistCompletion.findMany.mockResolvedValue([
+        {
+          id: 'occ_1',
+          templateItemId: 'oct_1',
+          memberId: 'mem_1',
+          completedById: 'usr_1',
+          completedBy: { id: 'usr_1', name: 'Test User' },
+        },
+      ]);
+      mockAttachmentsService.getAttachments.mockResolvedValue([
+        { id: 'att_1', name: 'evidence.pdf' },
+      ]);
+
+      const result = await service.getMemberChecklist('org_1', 'mem_1');
+
+      expect(result.totalItems).toBe(2);
+      expect(result.completedItems).toBe(1);
+      expect(result.items[0].completed).toBe(true);
+      expect(result.items[0].evidence).toHaveLength(1);
+      expect(result.items[1].completed).toBe(false);
+      expect(result.items[1].evidence).toHaveLength(0);
+    });
+  });
+
+  describe('completeItem', () => {
+    it('creates completion record', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue(null);
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue({
+        id: 'oct_1',
+        organizationId: 'org_1',
+        isEnabled: true,
+      });
+      mockDb.offboardingChecklistCompletion.create.mockResolvedValue({
+        id: 'occ_1',
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+        completedById: 'usr_1',
+        notes: 'Done',
+      });
+
+      const result = await service.completeItem({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+        completedById: 'usr_1',
+        dto: { notes: 'Done' },
+      });
+
+      expect(result.id).toBe('occ_1');
+      expect(
+        mockDb.offboardingChecklistCompletion.create,
+      ).toHaveBeenCalledWith({
+        data: {
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          templateItemId: 'oct_1',
+          completedById: 'usr_1',
+          notes: 'Done',
+        },
+      });
+    });
+
+    it('throws if already completed', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue({
+        id: 'occ_1',
+      });
+
+      await expect(
+        service.completeItem({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          templateItemId: 'oct_1',
+          completedById: 'usr_1',
+          dto: {},
+        }),
+      ).rejects.toBeInstanceOf(BadRequestException);
+    });
+
+    it('throws if template item not found', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue(null);
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue(null);
+
+      await expect(
+        service.completeItem({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          templateItemId: 'oct_invalid',
+          completedById: 'usr_1',
+          dto: {},
+        }),
+      ).rejects.toBeInstanceOf(NotFoundException);
+    });
+
+    it('uploads evidence when file data is provided', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue(null);
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue({
+        id: 'oct_1',
+        organizationId: 'org_1',
+        isEnabled: true,
+      });
+      mockDb.offboardingChecklistCompletion.create.mockResolvedValue({
+        id: 'occ_1',
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+        completedById: 'usr_1',
+      });
+      mockAttachmentsService.uploadAttachment.mockResolvedValue({
+        id: 'att_1',
+      });
+
+      await service.completeItem({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+        completedById: 'usr_1',
+        dto: {
+          fileName: 'evidence.pdf',
+          fileType: 'application/pdf',
+          fileData: 'base64data',
+        },
+      });
+
+      expect(mockAttachmentsService.uploadAttachment).toHaveBeenCalledWith(
+        'org_1',
+        'occ_1',
+        'offboarding_checklist',
+        {
+          fileName: 'evidence.pdf',
+          fileData: 'base64data',
+          fileType: 'application/pdf',
+        },
+        'usr_1',
+      );
+    });
+  });
+
+  describe('uncompleteItem', () => {
+    it('deletes completion and associated evidence', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue({
+        id: 'occ_1',
+      });
+      mockAttachmentsService.getAttachments.mockResolvedValue([
+        { id: 'att_1' },
+        { id: 'att_2' },
+      ]);
+      mockDb.offboardingChecklistCompletion.delete.mockResolvedValue({});
+
+      await service.uncompleteItem({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+      });
+
+      expect(mockAttachmentsService.deleteAttachment).toHaveBeenCalledTimes(2);
+      expect(
+        mockDb.offboardingChecklistCompletion.delete,
+      ).toHaveBeenCalledWith({ where: { id: 'occ_1' } });
+    });
+
+    it('throws if completion not found', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue(null);
+
+      await expect(
+        service.uncompleteItem({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          templateItemId: 'oct_1',
+        }),
+      ).rejects.toBeInstanceOf(NotFoundException);
+    });
+  });
+
+  describe('deleteTemplateItem', () => {
+    it('soft-disables default items', async () => {
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue({
+        id: 'oct_1',
+        organizationId: 'org_1',
+        isDefault: true,
+      });
+      mockDb.offboardingChecklistTemplate.update.mockResolvedValue({
+        id: 'oct_1',
+        isEnabled: false,
+      });
+
+      const result = await service.deleteTemplateItem('org_1', 'oct_1');
+
+      expect(
+        mockDb.offboardingChecklistTemplate.update,
+      ).toHaveBeenCalledWith({
+        where: { id: 'oct_1' },
+        data: { isEnabled: false },
+      });
+      expect(
+        mockDb.offboardingChecklistTemplate.delete,
+      ).not.toHaveBeenCalled();
+      expect(result.isEnabled).toBe(false);
+    });
+
+    it('hard-deletes custom items', async () => {
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue({
+        id: 'oct_2',
+        organizationId: 'org_1',
+        isDefault: false,
+      });
+      mockDb.offboardingChecklistTemplate.delete.mockResolvedValue({
+        id: 'oct_2',
+      });
+
+      await service.deleteTemplateItem('org_1', 'oct_2');
+
+      expect(
+        mockDb.offboardingChecklistTemplate.delete,
+      ).toHaveBeenCalledWith({ where: { id: 'oct_2' } });
+      expect(
+        mockDb.offboardingChecklistTemplate.update,
+      ).not.toHaveBeenCalled();
+    });
+
+    it('throws if item not found', async () => {
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue(null);
+
+      await expect(
+        service.deleteTemplateItem('org_1', 'oct_invalid'),
+      ).rejects.toBeInstanceOf(NotFoundException);
+    });
+  });
+
+  describe('uploadEvidenceToCompletion', () => {
+    it('uploads evidence to a completed item', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue({
+        id: 'occ_1',
+      });
+      mockAttachmentsService.uploadAttachment.mockResolvedValue({
+        id: 'att_1',
+      });
+
+      const result = await service.uploadEvidenceToCompletion({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        templateItemId: 'oct_1',
+        uploadDto: {
+          fileName: 'screenshot.png',
+          fileType: 'image/png',
+          fileData: 'base64data',
+        },
+        userId: 'usr_1',
+      });
+
+      expect(mockAttachmentsService.uploadAttachment).toHaveBeenCalledWith(
+        'org_1',
+        'occ_1',
+        'offboarding_checklist',
+        {
+          fileName: 'screenshot.png',
+          fileType: 'image/png',
+          fileData: 'base64data',
+        },
+        'usr_1',
+      );
+      expect(result.id).toBe('att_1');
+    });
+
+    it('throws if item not yet completed', async () => {
+      mockDb.offboardingChecklistCompletion.findFirst.mockResolvedValue(null);
+
+      await expect(
+        service.uploadEvidenceToCompletion({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          templateItemId: 'oct_1',
+          uploadDto: {
+            fileName: 'screenshot.png',
+            fileType: 'image/png',
+            fileData: 'base64data',
+          },
+          userId: 'usr_1',
+        }),
+      ).rejects.toBeInstanceOf(BadRequestException);
+    });
+  });
+
+  describe('getAccessRevocations', () => {
+    it('returns vendor list with revocation status', async () => {
+      mockDb.vendor.findMany.mockResolvedValue([
+        { id: 'vnd_1', name: 'Slack' },
+        { id: 'vnd_2', name: 'AWS' },
+      ]);
+      mockDb.offboardingAccessRevocation.findMany.mockResolvedValue([
+        {
+          vendorId: 'vnd_1',
+          revokedBy: { id: 'usr_1', name: 'Jane', email: 'jane@test.com' },
+          revokedAt: new Date(),
+          notes: null,
+        },
+      ]);
+
+      const result = await service.getAccessRevocations('org_1', 'mem_1');
+
+      expect(result.totalVendors).toBe(2);
+      expect(result.revokedCount).toBe(1);
+      expect(result.vendors[0].revoked).toBe(true);
+      expect(result.vendors[1].revoked).toBe(false);
+    });
+
+    it('returns empty when no vendors exist', async () => {
+      mockDb.vendor.findMany.mockResolvedValue([]);
+      mockDb.offboardingAccessRevocation.findMany.mockResolvedValue([]);
+
+      const result = await service.getAccessRevocations('org_1', 'mem_1');
+
+      expect(result.totalVendors).toBe(0);
+      expect(result.revokedCount).toBe(0);
+      expect(result.vendors).toHaveLength(0);
+    });
+  });
+
+  describe('revokeVendorAccess', () => {
+    it('creates revocation record', async () => {
+      mockDb.vendor.findFirst.mockResolvedValue({ id: 'vnd_1' });
+      mockDb.offboardingAccessRevocation.findUnique.mockResolvedValue(null);
+      mockDb.offboardingAccessRevocation.create.mockResolvedValue({
+        id: 'oar_1',
+        vendorId: 'vnd_1',
+        revokedBy: { id: 'usr_1', name: 'Jane', email: 'jane@test.com' },
+      });
+      // syncAccessRevocationCompletion mocks
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue(null);
+
+      const result = await service.revokeVendorAccess({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        vendorId: 'vnd_1',
+        revokedById: 'usr_1',
+      });
+
+      expect(mockDb.offboardingAccessRevocation.create).toHaveBeenCalled();
+      expect(result.id).toBe('oar_1');
+    });
+
+    it('throws if vendor not found', async () => {
+      mockDb.vendor.findFirst.mockResolvedValue(null);
+
+      await expect(
+        service.revokeVendorAccess({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          vendorId: 'vnd_invalid',
+          revokedById: 'usr_1',
+        }),
+      ).rejects.toBeInstanceOf(NotFoundException);
+    });
+
+    it('throws if already revoked', async () => {
+      mockDb.vendor.findFirst.mockResolvedValue({ id: 'vnd_1' });
+      mockDb.offboardingAccessRevocation.findUnique.mockResolvedValue({
+        id: 'oar_1',
+      });
+
+      await expect(
+        service.revokeVendorAccess({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          vendorId: 'vnd_1',
+          revokedById: 'usr_1',
+        }),
+      ).rejects.toBeInstanceOf(BadRequestException);
+    });
+  });
+
+  describe('undoVendorRevocation', () => {
+    it('deletes revocation record', async () => {
+      mockDb.offboardingAccessRevocation.findUnique.mockResolvedValue({
+        id: 'oar_1',
+      });
+      mockDb.offboardingAccessRevocation.delete.mockResolvedValue({});
+      // syncAccessRevocationCompletion mocks
+      mockDb.offboardingChecklistTemplate.findFirst.mockResolvedValue(null);
+
+      const result = await service.undoVendorRevocation({
+        organizationId: 'org_1',
+        memberId: 'mem_1',
+        vendorId: 'vnd_1',
+      });
+
+      expect(
+        mockDb.offboardingAccessRevocation.delete,
+      ).toHaveBeenCalledWith({ where: { id: 'oar_1' } });
+      expect(result.success).toBe(true);
+    });
+
+    it('throws if revocation not found', async () => {
+      mockDb.offboardingAccessRevocation.findUnique.mockResolvedValue(null);
+
+      await expect(
+        service.undoVendorRevocation({
+          organizationId: 'org_1',
+          memberId: 'mem_1',
+          vendorId: 'vnd_1',
+        }),
+      ).rejects.toBeInstanceOf(NotFoundException);
+    });
+  });
+});
diff --git a/apps/api/src/offboarding-checklist/offboarding-checklist.service.ts b/apps/api/src/offboarding-checklist/offboarding-checklist.service.ts
new file mode 100644
index 0000000000..575a7566dc
--- /dev/null
+++ b/apps/api/src/offboarding-checklist/offboarding-checklist.service.ts
@@ -0,0 +1,335 @@
+import {
+  BadRequestException,
+  Injectable,
+  NotFoundException,
+} from '@nestjs/common';
+import { AttachmentEntityType, db } from '@db';
+import { AttachmentsService } from '../attachments/attachments.service';
+import { AccessRevocationService } from './access-revocation.service';
+import { DEFAULT_OFFBOARDING_CHECKLIST_ITEMS } from './default-checklist-items';
+
+interface CompleteChecklistItemDto {
+  notes?: string;
+  fileName?: string;
+  fileType?: string;
+  fileData?: string;
+}
+
+interface UploadEvidenceDto {
+  fileName: string;
+  fileType: string;
+  fileData: string;
+  description?: string;
+}
+
+@Injectable()
+export class OffboardingChecklistService {
+  constructor(
+    private readonly attachmentsService: AttachmentsService,
+    private readonly accessRevocationService: AccessRevocationService,
+  ) {}
+
+  async getTemplate(organizationId: string) {
+    await this.seedDefaultsIfNeeded(organizationId);
+
+    return db.offboardingChecklistTemplate.findMany({
+      where: { organizationId },
+      orderBy: { sortOrder: 'asc' },
+    });
+  }
+
+  async createTemplateItem(
+    organizationId: string,
+    dto: {
+      title: string;
+      description?: string;
+      evidenceRequired?: boolean;
+    },
+  ) {
+    const maxSortOrder = await db.offboardingChecklistTemplate.aggregate({
+      where: { organizationId },
+      _max: { sortOrder: true },
+    });
+
+    return db.offboardingChecklistTemplate.create({
+      data: {
+        organizationId,
+        title: dto.title,
+        description: dto.description,
+        evidenceRequired: dto.evidenceRequired ?? false,
+        sortOrder: (maxSortOrder._max.sortOrder ?? 0) + 1,
+        isDefault: false,
+        isEnabled: true,
+      },
+    });
+  }
+
+  async updateTemplateItem(
+    organizationId: string,
+    templateItemId: string,
+    dto: {
+      title?: string;
+      description?: string;
+      evidenceRequired?: boolean;
+      sortOrder?: number;
+      isEnabled?: boolean;
+    },
+  ) {
+    const item = await db.offboardingChecklistTemplate.findFirst({
+      where: { id: templateItemId, organizationId },
+    });
+
+    if (!item) {
+      throw new NotFoundException('Template item not found');
+    }
+
+    return db.offboardingChecklistTemplate.update({
+      where: { id: templateItemId },
+      data: dto,
+    });
+  }
+
+  async deleteTemplateItem(organizationId: string, templateItemId: string) {
+    const item = await db.offboardingChecklistTemplate.findFirst({
+      where: { id: templateItemId, organizationId },
+    });
+
+    if (!item) {
+      throw new NotFoundException('Template item not found');
+    }
+
+    if (item.isDefault) {
+      return db.offboardingChecklistTemplate.update({
+        where: { id: templateItemId },
+        data: { isEnabled: false },
+      });
+    }
+
+    return db.offboardingChecklistTemplate.delete({
+      where: { id: templateItemId },
+    });
+  }
+
+  async getMemberChecklist(organizationId: string, memberId: string) {
+    await this.seedDefaultsIfNeeded(organizationId);
+
+    const templateItems = await db.offboardingChecklistTemplate.findMany({
+      where: { organizationId, isEnabled: true },
+      orderBy: { sortOrder: 'asc' },
+    });
+
+    const completions = await db.offboardingChecklistCompletion.findMany({
+      where: { organizationId, memberId },
+      include: { completedBy: { select: { id: true, name: true } } },
+    });
+
+    const completionMap = new Map(
+      completions.map((c) => [c.templateItemId, c]),
+    );
+
+    const items = await Promise.all(
+      templateItems.map(async (template) => {
+        const completion = completionMap.get(template.id);
+        const evidence = completion
+          ? await this.attachmentsService.getAttachments(
+              organizationId,
+              completion.id,
+              AttachmentEntityType.offboarding_checklist,
+            )
+          : [];
+
+        return {
+          ...template,
+          completed: !!completion,
+          completion: completion ?? null,
+          evidence,
+        };
+      }),
+    );
+
+    return {
+      items,
+      totalItems: items.length,
+      completedItems: items.filter((i) => i.completed).length,
+    };
+  }
+
+  async completeItem({
+    organizationId,
+    memberId,
+    templateItemId,
+    completedById,
+    dto,
+  }: {
+    organizationId: string;
+    memberId: string;
+    templateItemId: string;
+    completedById: string;
+    dto: CompleteChecklistItemDto;
+  }) {
+    const existing = await db.offboardingChecklistCompletion.findFirst({
+      where: { organizationId, memberId, templateItemId },
+    });
+
+    if (existing) {
+      throw new BadRequestException('Item is already completed');
+    }
+
+    const template = await db.offboardingChecklistTemplate.findFirst({
+      where: { id: templateItemId, organizationId, isEnabled: true },
+    });
+
+    if (!template) {
+      throw new NotFoundException('Template item not found');
+    }
+
+    const completion = await db.offboardingChecklistCompletion.create({
+      data: {
+        organizationId,
+        memberId,
+        templateItemId,
+        completedById,
+        notes: dto.notes,
+      },
+    });
+
+    if (dto.fileName && dto.fileData && dto.fileType) {
+      await this.attachmentsService.uploadAttachment(
+        organizationId,
+        completion.id,
+        AttachmentEntityType.offboarding_checklist,
+        {
+          fileName: dto.fileName,
+          fileData: dto.fileData,
+          fileType: dto.fileType,
+        },
+        completedById,
+      );
+    }
+
+    return completion;
+  }
+
+  async uncompleteItem({
+    organizationId,
+    memberId,
+    templateItemId,
+  }: {
+    organizationId: string;
+    memberId: string;
+    templateItemId: string;
+  }) {
+    const completion = await db.offboardingChecklistCompletion.findFirst({
+      where: { organizationId, memberId, templateItemId },
+    });
+
+    if (!completion) {
+      throw new NotFoundException('Completion not found');
+    }
+
+    const attachments = await this.attachmentsService.getAttachments(
+      organizationId,
+      completion.id,
+      AttachmentEntityType.offboarding_checklist,
+    );
+
+    for (const attachment of attachments) {
+      await this.attachmentsService.deleteAttachment(
+        organizationId,
+        attachment.id,
+      );
+    }
+
+    await db.offboardingChecklistCompletion.delete({
+      where: { id: completion.id },
+    });
+  }
+
+  async uploadEvidenceToCompletion({
+    organizationId,
+    memberId,
+    templateItemId,
+    uploadDto,
+    userId,
+  }: {
+    organizationId: string;
+    memberId: string;
+    templateItemId: string;
+    uploadDto: UploadEvidenceDto;
+    userId: string;
+  }) {
+    const completion = await db.offboardingChecklistCompletion.findFirst({
+      where: { organizationId, memberId, templateItemId },
+    });
+
+    if (!completion) {
+      throw new BadRequestException(
+        'Item must be completed before uploading evidence',
+      );
+    }
+
+    return this.attachmentsService.uploadAttachment(
+      organizationId,
+      completion.id,
+      AttachmentEntityType.offboarding_checklist,
+      uploadDto,
+      userId,
+    );
+  }
+
+  async getAccessRevocations(organizationId: string, memberId: string) {
+    return this.accessRevocationService.getAccessRevocations(
+      organizationId,
+      memberId,
+    );
+  }
+
+  async revokeVendorAccess(params: {
+    organizationId: string;
+    memberId: string;
+    vendorId: string;
+    revokedById: string;
+    notes?: string;
+  }) {
+    return this.accessRevocationService.revokeVendorAccess(params);
+  }
+
+  async undoVendorRevocation(params: {
+    organizationId: string;
+    memberId: string;
+    vendorId: string;
+  }) {
+    return this.accessRevocationService.undoVendorRevocation(params);
+  }
+
+  async revokeAllVendorAccess(params: {
+    organizationId: string;
+    memberId: string;
+    revokedById: string;
+  }) {
+    return this.accessRevocationService.revokeAllVendorAccess(params);
+  }
+
+  private async seedDefaultsIfNeeded(organizationId: string) {
+    const count = await db.offboardingChecklistTemplate.count({
+      where: { organizationId },
+    });
+
+    if (count > 0) {
+      return;
+    }
+
+    await db.offboardingChecklistTemplate.createMany({
+      data: DEFAULT_OFFBOARDING_CHECKLIST_ITEMS.map((item) => ({
+        organizationId,
+        title: item.title,
+        description: item.description,
+        evidenceRequired: item.evidenceRequired,
+        isAccessRevocation: item.isAccessRevocation,
+        sortOrder: item.sortOrder,
+        isDefault: true,
+        isEnabled: true,
+      })),
+    });
+  }
+}
diff --git a/apps/api/src/people/dto/update-people.dto.ts b/apps/api/src/people/dto/update-people.dto.ts
index 951118b401..58b11dc533 100644
--- a/apps/api/src/people/dto/update-people.dto.ts
+++ b/apps/api/src/people/dto/update-people.dto.ts
@@ -54,4 +54,22 @@ export class UpdatePeopleDto extends PartialType(CreatePeopleDto) {
   @IsOptional()
   @IsBoolean()
   backgroundCheckExempt?: boolean;
+
+  @ApiProperty({
+    description: 'Employee onboard date',
+    example: '2026-01-15T00:00:00.000Z',
+    required: false,
+  })
+  @IsOptional()
+  @IsDateString()
+  onboardDate?: string | null;
+
+  @ApiProperty({
+    description: 'Employee offboard date',
+    example: '2026-04-30T00:00:00.000Z',
+    required: false,
+  })
+  @IsOptional()
+  @IsDateString()
+  offboardDate?: string | null;
 }
diff --git a/apps/api/src/people/people.controller.spec.ts b/apps/api/src/people/people.controller.spec.ts
index e93c62580d..b1751ad936 100644
--- a/apps/api/src/people/people.controller.spec.ts
+++ b/apps/api/src/people/people.controller.spec.ts
@@ -1,6 +1,7 @@
 import { Test, TestingModule } from '@nestjs/testing';
 import { PeopleService } from './people.service';
 import { PeopleInviteService } from './people-invite.service';
+import { AttachmentsService } from '../attachments/attachments.service';
 import type { AuthContext } from '../auth/types';
 import { HybridAuthGuard } from '../auth/hybrid-auth.guard';
 import { PermissionGuard } from '../auth/permission.guard';
@@ -83,6 +84,12 @@ describe('PeopleController', () => {
     inviteMembers: jest.fn(),
   };
 
+  const mockAttachmentsService = {
+    getAttachments: jest.fn(),
+    uploadAttachment: jest.fn(),
+    deleteAttachment: jest.fn(),
+  };
+
   const mockGuard = { canActivate: jest.fn().mockReturnValue(true) };
 
   const mockAuthContext: AuthContext = {
@@ -101,6 +108,7 @@ describe('PeopleController', () => {
       providers: [
         { provide: PeopleService, useValue: mockPeopleService },
         { provide: PeopleInviteService, useValue: mockPeopleInviteService },
+        { provide: AttachmentsService, useValue: mockAttachmentsService },
       ],
     })
       .overrideGuard(HybridAuthGuard)
@@ -136,6 +144,7 @@ describe('PeopleController', () => {
       expect(peopleService.findAllByOrganization).toHaveBeenCalledWith(
         'org_123',
         false,
+        undefined,
       );
     });
 
@@ -147,6 +156,7 @@ describe('PeopleController', () => {
       expect(peopleService.findAllByOrganization).toHaveBeenCalledWith(
         'org_123',
         true,
+        undefined,
       );
     });
 
diff --git a/apps/api/src/people/people.controller.ts b/apps/api/src/people/people.controller.ts
index e0ee6eee3b..aa506661f6 100644
--- a/apps/api/src/people/people.controller.ts
+++ b/apps/api/src/people/people.controller.ts
@@ -36,6 +36,9 @@ import { BulkCreatePeopleDto } from './dto/bulk-create-people.dto';
 import { InvitePeopleDto } from './dto/invite-people.dto';
 import { PeopleResponseDto, UserResponseDto } from './dto/people-responses.dto';
 import { UpdateEmailPreferencesDto } from './dto/update-email-preferences.dto';
+import { AttachmentsService } from '../attachments/attachments.service';
+import { UploadAttachmentDto } from '../attachments/upload-attachment.dto';
+import { AttachmentEntityType } from '@db';
 import { PeopleService } from './people.service';
 import { PeopleInviteService } from './people-invite.service';
 import { GET_ALL_PEOPLE_RESPONSES } from './schemas/get-all-people.responses';
@@ -58,8 +61,18 @@ export class PeopleController {
   constructor(
     private readonly peopleService: PeopleService,
     private readonly peopleInviteService: PeopleInviteService,
+    private readonly attachmentsService: AttachmentsService,
   ) {}
 
+  private resolveEventType(eventType: string): AttachmentEntityType {
+    if (eventType === 'onboard') return AttachmentEntityType.employment_onboard;
+    if (eventType === 'offboard')
+      return AttachmentEntityType.employment_offboard;
+    throw new BadRequestException(
+      `Invalid event type "${eventType}". Must be "onboard" or "offboard".`,
+    );
+  }
+
   @Post('invite')
   @RequirePermission('member', 'create')
   @ApiOperation({ summary: 'Invite members to the organization' })
@@ -99,10 +112,24 @@ export class PeopleController {
     @OrganizationId() organizationId: string,
     @AuthContext() authContext: AuthContextType,
     @Query('includeDeactivated') includeDeactivated?: string,
+    @Query('onboardAfter') onboardAfter?: string,
+    @Query('onboardBefore') onboardBefore?: string,
+    @Query('offboardAfter') offboardAfter?: string,
+    @Query('offboardBefore') offboardBefore?: string,
   ) {
+    const filters = {
+      ...(onboardAfter ? { onboardAfter: new Date(onboardAfter) } : {}),
+      ...(onboardBefore ? { onboardBefore: new Date(onboardBefore) } : {}),
+      ...(offboardAfter ? { offboardAfter: new Date(offboardAfter) } : {}),
+      ...(offboardBefore ? { offboardBefore: new Date(offboardBefore) } : {}),
+    };
+
+    const hasFilters = Object.keys(filters).length > 0;
+
     const people = await this.peopleService.findAllByOrganization(
       organizationId,
       includeDeactivated === 'true',
+      hasFilters ? filters : undefined,
     );
 
     return {
@@ -529,6 +556,66 @@ export class PeopleController {
     };
   }
 
+  @Get(':id/employment-evidence/:eventType')
+  @RequirePermission('member', 'read')
+  @ApiOperation({ summary: 'Get employment evidence attachments' })
+  @ApiParam(PEOPLE_PARAMS.memberId)
+  @ApiParam({ name: 'eventType', enum: ['onboard', 'offboard'] })
+  async getEmploymentEvidence(
+    @Param('id') memberId: string,
+    @Param('eventType') eventType: string,
+    @OrganizationId() organizationId: string,
+  ) {
+    const entityType = this.resolveEventType(eventType);
+    await this.peopleService.findById(memberId, organizationId);
+    return this.attachmentsService.getAttachments(
+      organizationId,
+      memberId,
+      entityType,
+    );
+  }
+
+  @Post(':id/employment-evidence/:eventType')
+  @RequirePermission('member', 'update')
+  @ApiOperation({ summary: 'Upload employment evidence' })
+  @ApiParam(PEOPLE_PARAMS.memberId)
+  @ApiParam({ name: 'eventType', enum: ['onboard', 'offboard'] })
+  async uploadEmploymentEvidence(
+    @Param('id') memberId: string,
+    @Param('eventType') eventType: string,
+    @OrganizationId() organizationId: string,
+    @AuthContext() authContext: AuthContextType,
+    @Body() uploadDto: UploadAttachmentDto,
+  ) {
+    const entityType = this.resolveEventType(eventType);
+    await this.peopleService.findById(memberId, organizationId);
+    return this.attachmentsService.uploadAttachment(
+      organizationId,
+      memberId,
+      entityType,
+      uploadDto,
+      authContext.userId,
+    );
+  }
+
+  @Delete(':id/employment-evidence/:eventType/:attachmentId')
+  @RequirePermission('member', 'delete')
+  @ApiOperation({ summary: 'Delete employment evidence' })
+  @ApiParam(PEOPLE_PARAMS.memberId)
+  @ApiParam({ name: 'eventType', enum: ['onboard', 'offboard'] })
+  @ApiParam({ name: 'attachmentId', description: 'Attachment ID' })
+  async deleteEmploymentEvidence(
+    @Param('id') memberId: string,
+    @Param('eventType') eventType: string,
+    @Param('attachmentId') attachmentId: string,
+    @OrganizationId() organizationId: string,
+  ) {
+    this.resolveEventType(eventType);
+    await this.peopleService.findById(memberId, organizationId);
+    await this.attachmentsService.deleteAttachment(organizationId, attachmentId);
+    return { success: true };
+  }
+
   @Get('me/email-preferences')
   @ApiOperation({ summary: 'Get current user email notification preferences' })
   async getEmailPreferences(
diff --git a/apps/api/src/people/people.module.ts b/apps/api/src/people/people.module.ts
index 8d26064f9f..9590239747 100644
--- a/apps/api/src/people/people.module.ts
+++ b/apps/api/src/people/people.module.ts
@@ -1,5 +1,6 @@
 import { Module } from '@nestjs/common';
 import { AuthModule } from '../auth/auth.module';
+import { AttachmentsModule } from '../attachments/attachments.module';
 import { TimelinesModule } from '../timelines/timelines.module';
 import { FleetService } from '../lib/fleet.service';
 import { PeopleController } from './people.controller';
@@ -7,7 +8,7 @@ import { PeopleService } from './people.service';
 import { PeopleInviteService } from './people-invite.service';
 
 @Module({
-  imports: [AuthModule, TimelinesModule],
+  imports: [AuthModule, AttachmentsModule, TimelinesModule],
   controllers: [PeopleController],
   providers: [PeopleService, PeopleInviteService, FleetService],
   exports: [PeopleService],
diff --git a/apps/api/src/people/people.service.ts b/apps/api/src/people/people.service.ts
index 09e712a772..3be40dd442 100644
--- a/apps/api/src/people/people.service.ts
+++ b/apps/api/src/people/people.service.ts
@@ -36,12 +36,19 @@ export class PeopleService {
   async findAllByOrganization(
     organizationId: string,
     includeDeactivated?: boolean,
+    filters?: {
+      onboardAfter?: Date;
+      onboardBefore?: Date;
+      offboardAfter?: Date;
+      offboardBefore?: Date;
+    },
   ): Promise<PeopleResponseDto[]> {
     try {
       await MemberValidator.validateOrganization(organizationId);
       const members = await MemberQueries.findAllByOrganization(
         organizationId,
         includeDeactivated,
+        filters,
       );
 
       this.logger.log(
@@ -395,7 +402,11 @@ export class PeopleService {
 
     await db.member.update({
       where: { id: memberId, organizationId },
-      data: { deactivated: true, isActive: false },
+      data: {
+        deactivated: true,
+        isActive: false,
+        offboardDate: member.offboardDate ?? new Date(),
+      },
     });
 
     // Direct DB session deletion is correct here — the API server IS the auth server,
diff --git a/apps/api/src/people/utils/member-queries.ts b/apps/api/src/people/utils/member-queries.ts
index 05ced2524c..aff280ee0d 100644
--- a/apps/api/src/people/utils/member-queries.ts
+++ b/apps/api/src/people/utils/member-queries.ts
@@ -21,6 +21,8 @@ export class MemberQueries {
     isActive: true,
     deactivated: true,
     backgroundCheckExempt: true,
+    onboardDate: true,
+    offboardDate: true,
     fleetDmLabelId: true,
     user: {
       select: {
@@ -52,11 +54,33 @@ export class MemberQueries {
   static async findAllByOrganization(
     organizationId: string,
     includeDeactivated = false,
+    filters?: {
+      onboardAfter?: Date;
+      onboardBefore?: Date;
+      offboardAfter?: Date;
+      offboardBefore?: Date;
+    },
   ): Promise<PeopleResponseDto[]> {
     return db.member.findMany({
       where: {
         organizationId,
         ...(includeDeactivated ? {} : { deactivated: false }),
+        ...(filters?.onboardAfter || filters?.onboardBefore
+          ? {
+              onboardDate: {
+                ...(filters.onboardAfter ? { gte: filters.onboardAfter } : {}),
+                ...(filters.onboardBefore ? { lte: filters.onboardBefore } : {}),
+              },
+            }
+          : {}),
+        ...(filters?.offboardAfter || filters?.offboardBefore
+          ? {
+              offboardDate: {
+                ...(filters.offboardAfter ? { gte: filters.offboardAfter } : {}),
+                ...(filters.offboardBefore ? { lte: filters.offboardBefore } : {}),
+              },
+            }
+          : {}),
       },
       select: this.MEMBER_SELECT,
       orderBy: { createdAt: 'desc' },
@@ -110,7 +134,7 @@ export class MemberQueries {
     updateData: UpdatePeopleDto,
   ): Promise<PeopleResponseDto> {
     // Separate user-level fields from member-level fields
-    const { name, email, createdAt, ...memberFields } = updateData;
+    const { name, email, createdAt, onboardDate, offboardDate, ...memberFields } = updateData;
 
     // Prepare member update data
     const updatePayload: any = { ...memberFields };
@@ -120,6 +144,13 @@ export class MemberQueries {
       updatePayload.createdAt = new Date(createdAt);
     }
 
+    if (onboardDate !== undefined) {
+      updatePayload.onboardDate = onboardDate ? new Date(onboardDate) : null;
+    }
+    if (offboardDate !== undefined) {
+      updatePayload.offboardDate = offboardDate ? new Date(offboardDate) : null;
+    }
+
     // Handle fleetDmLabelId: convert undefined to null for database
     if (
       memberFields.fleetDmLabelId === undefined &&
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/AccessRevocationList.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/AccessRevocationList.tsx
new file mode 100644
index 0000000000..f633739ef3
--- /dev/null
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/AccessRevocationList.tsx
@@ -0,0 +1,314 @@
+'use client';
+
+import { useAccessRevocations } from '@/hooks/use-access-revocations';
+import {
+  Button,
+  InputGroup,
+  InputGroupAddon,
+  InputGroupInput,
+  Text,
+} from '@trycompai/design-system';
+import {
+  Checkmark,
+  DocumentAttachment,
+  Search,
+} from '@trycompai/design-system/icons';
+import { format } from 'date-fns';
+import { useMemo, useState } from 'react';
+import { toast } from 'sonner';
+
+const MONOGRAM_COLORS = [
+  'bg-blue-500',
+  'bg-green-500',
+  'bg-purple-500',
+  'bg-amber-500',
+  'bg-red-500',
+  'bg-teal-500',
+  'bg-indigo-500',
+  'bg-pink-500',
+];
+
+function getMonogramColor(name: string): string {
+  let hash = 0;
+  for (let i = 0; i < name.length; i++) {
+    hash = name.charCodeAt(i) + ((hash << 5) - hash);
+  }
+  return MONOGRAM_COLORS[Math.abs(hash) % MONOGRAM_COLORS.length];
+}
+
+interface AccessRevocationListProps {
+  memberId: string;
+  canEdit: boolean;
+  onRevocationChange?: () => void;
+}
+
+export function AccessRevocationList({
+  memberId,
+  canEdit,
+  onRevocationChange,
+}: AccessRevocationListProps) {
+  const { revocations, isLoading, revokeAccess, undoRevocation, revokeAll } =
+    useAccessRevocations(memberId);
+  const [processingVendorId, setProcessingVendorId] = useState<string | null>(
+    null,
+  );
+  const [isConfirmingAll, setIsConfirmingAll] = useState(false);
+  const [searchQuery, setSearchQuery] = useState('');
+
+  const { remaining, revoked } = useMemo(() => {
+    if (!revocations) return { remaining: [], revoked: [] };
+    const filtered = revocations.vendors.filter((v) =>
+      v.vendorName.toLowerCase().includes(searchQuery.toLowerCase()),
+    );
+    return {
+      remaining: filtered.filter((v) => !v.revoked),
+      revoked: filtered.filter((v) => v.revoked),
+    };
+  }, [revocations, searchQuery]);
+
+  const handleRevoke = async (vendorId: string) => {
+    setProcessingVendorId(vendorId);
+    try {
+      await revokeAccess(vendorId);
+      toast.success('Access removal confirmed');
+      onRevocationChange?.();
+    } catch {
+      toast.error('Failed to confirm access removal');
+    } finally {
+      setProcessingVendorId(null);
+    }
+  };
+
+  const handleUndo = async (vendorId: string) => {
+    setProcessingVendorId(vendorId);
+    try {
+      await undoRevocation(vendorId);
+      toast.success('Revocation undone');
+      onRevocationChange?.();
+    } catch {
+      toast.error('Failed to undo revocation');
+    } finally {
+      setProcessingVendorId(null);
+    }
+  };
+
+  const handleConfirmAll = async () => {
+    setIsConfirmingAll(true);
+    try {
+      await revokeAll();
+      toast.success('All vendor access removals confirmed');
+      onRevocationChange?.();
+    } catch {
+      toast.error('Failed to confirm all');
+    } finally {
+      setIsConfirmingAll(false);
+    }
+  };
+
+  if (isLoading) {
+    return (
+      <div className="border-t bg-muted py-4 pl-11 pr-3.5">
+        <Text variant="muted">Loading vendor access list...</Text>
+      </div>
+    );
+  }
+
+  if (!revocations || revocations.vendors.length === 0) {
+    return (
+      <div className="border-t bg-muted py-4 pl-11 pr-3.5">
+        <Text variant="muted">
+          No vendors configured. Add vendors to your organization to track
+          access revocation.
+        </Text>
+      </div>
+    );
+  }
+
+  const allConfirmed = revocations.revokedCount === revocations.totalVendors;
+
+  return (
+    <div className="border-t bg-muted">
+      <div className="flex items-center gap-2 border-b bg-background py-2 pl-11 pr-3.5">
+        <InputGroup>
+          <InputGroupAddon variant="icon">
+            <Search size={16} />
+          </InputGroupAddon>
+          <InputGroupInput
+            placeholder="Search vendors..."
+            value={searchQuery}
+            onChange={(e) => setSearchQuery(e.target.value)}
+          />
+        </InputGroup>
+        {canEdit && !allConfirmed && (
+          <div className="shrink-0">
+            <Button
+              size="sm"
+              onClick={handleConfirmAll}
+              disabled={isConfirmingAll}
+              loading={isConfirmingAll}
+            >
+              Bulk confirm
+            </Button>
+          </div>
+        )}
+      </div>
+
+      {remaining.length > 0 && (
+        <>
+          <SectionHeader label="Remaining" count={remaining.length} />
+          <div className="max-h-[280px] overflow-y-auto">
+            {remaining.map((vendor) => (
+              <VendorRow
+                key={vendor.vendorId}
+                vendor={vendor}
+                canEdit={canEdit}
+                isProcessing={processingVendorId === vendor.vendorId}
+                onRevoke={() => handleRevoke(vendor.vendorId)}
+              />
+            ))}
+          </div>
+        </>
+      )}
+
+      {revoked.length > 0 && (
+        <>
+          <SectionHeader label="Revoked" count={revoked.length} />
+          <div className="max-h-[280px] overflow-y-auto">
+            {revoked.map((vendor) => (
+              <RevokedVendorRow
+                key={vendor.vendorId}
+                vendor={vendor}
+                canEdit={canEdit}
+                isProcessing={processingVendorId === vendor.vendorId}
+                onUndo={() => handleUndo(vendor.vendorId)}
+              />
+            ))}
+          </div>
+        </>
+      )}
+
+      {remaining.length === 0 && revoked.length === 0 && (
+        <div className="py-4 pl-11 pr-3.5">
+          <Text size="sm" variant="muted">
+            {searchQuery ? 'No matching vendors' : 'No vendors found'}
+          </Text>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function SectionHeader({ label, count }: { label: string; count: number }) {
+  return (
+    <div className="bg-muted py-2 pl-11 pr-3.5">
+      <span className="text-[10px] font-bold uppercase tracking-[0.08em] text-muted-foreground">
+        {label}
+        <span className="text-muted-foreground/60"> &middot; {count}</span>
+      </span>
+    </div>
+  );
+}
+
+function VendorMark({ name }: { name: string }) {
+  const color = getMonogramColor(name);
+  const letter = name.charAt(0).toUpperCase();
+  return (
+    <div
+      className={`flex h-[22px] w-[22px] shrink-0 items-center justify-center rounded-sm text-[10px] font-bold text-white ${color}`}
+    >
+      {letter}
+    </div>
+  );
+}
+
+interface VendorRowProps {
+  vendor: { vendorId: string; vendorName: string };
+  canEdit: boolean;
+  isProcessing: boolean;
+  onRevoke: () => void;
+}
+
+function VendorRow({ vendor, canEdit, isProcessing, onRevoke }: VendorRowProps) {
+  return (
+    <div className="flex items-center justify-between border-b bg-background py-2.5 pl-11 pr-3.5">
+      <div className="flex items-center gap-2.5">
+        <VendorMark name={vendor.vendorName} />
+        <span className="text-[13px] font-normal">{vendor.vendorName}</span>
+      </div>
+      {canEdit && (
+        <div className="flex shrink-0 items-center gap-3">
+          <button
+            type="button"
+            className="flex items-center gap-1 text-xs text-primary hover:underline"
+          >
+            <DocumentAttachment size={12} />
+            Attach evidence
+          </button>
+          <div>
+            <Button
+              variant="outline"
+              size="xs"
+              onClick={onRevoke}
+              disabled={isProcessing}
+              loading={isProcessing}
+            >
+              Confirm revoked
+            </Button>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+interface RevokedVendorRowProps {
+  vendor: {
+    vendorId: string;
+    vendorName: string;
+    revokedAt: string | null;
+    revokedBy: { id: string; name: string; email: string } | null;
+  };
+  canEdit: boolean;
+  isProcessing: boolean;
+  onUndo: () => void;
+}
+
+function RevokedVendorRow({
+  vendor,
+  canEdit,
+  isProcessing,
+  onUndo,
+}: RevokedVendorRowProps) {
+  return (
+    <div className="flex items-center justify-between border-b bg-background py-2.5 pl-11 pr-3.5">
+      <div className="flex items-center gap-2.5">
+        <VendorMark name={vendor.vendorName} />
+        <span className="text-[13px] font-normal">{vendor.vendorName}</span>
+      </div>
+      <div className="flex shrink-0 items-center gap-3">
+        {vendor.revokedBy && vendor.revokedAt && (
+          <span className="font-mono text-xs text-muted-foreground">
+            {vendor.revokedBy.name} &middot;{' '}
+            {format(new Date(vendor.revokedAt), 'MMM d, yyyy')}
+          </span>
+        )}
+        {canEdit && (
+          <div>
+            <Button
+              variant="outline"
+              size="xs"
+              onClick={onUndo}
+              disabled={isProcessing}
+              loading={isProcessing}
+            >
+              Undo
+            </Button>
+          </div>
+        )}
+        <div className="flex h-5 w-5 items-center justify-center rounded-full bg-primary text-primary-foreground">
+          <Checkmark size={12} />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/Employee.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/Employee.tsx
index 1a0e8e19f4..9bd3062ae0 100644
--- a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/Employee.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/Employee.tsx
@@ -10,8 +10,8 @@ import {
   TabsList,
   TabsTrigger,
 } from '@trycompai/design-system';
-import { useSearchParams } from 'next/navigation';
-import { useEffect, useState } from 'react';
+import { usePathname, useRouter, useSearchParams } from 'next/navigation';
+import { useCallback, useState } from 'react';
 import type { DeviceWithChecks, FleetPolicy, Host } from '../../devices/types';
 import type { BackgroundCheckBillingStatus, BackgroundCheckRecord } from './backgroundCheckTypes';
 import { EmployeeBackgroundCheck } from './EmployeeBackgroundCheck';
@@ -20,8 +20,16 @@ import { EmployeeDevice } from './EmployeeDevice';
 import { EmployeePageHeader } from './EmployeePageHeader';
 import { EmployeePolicies } from './EmployeePolicies';
 import { EmployeeHipaaTraining, EmployeeTrainingVideos } from './EmployeeTraining';
+import { OffboardingChecklist } from './OffboardingChecklist';
 
-type EmployeeTab = 'details' | 'policies' | 'training' | 'hipaa' | 'device' | 'background-check';
+type EmployeeTab =
+  | 'details'
+  | 'policies'
+  | 'training'
+  | 'hipaa'
+  | 'device'
+  | 'offboarding'
+  | 'background-check';
 
 interface EmployeeProps {
   employee: Member & {
@@ -63,12 +71,43 @@ export function Employee({
   memberBackgroundCheckExempt,
 }: EmployeeProps) {
   const searchParams = useSearchParams();
-  const querySelectedTab: EmployeeTab =
-    backgroundCheckStepEnabled &&
-    (searchParams.get('background_check_step') || searchParams.get('background_check_billing'))
-      ? 'background-check'
-      : 'details';
-  const [activeTab, setActiveTab] = useState<EmployeeTab>(querySelectedTab);
+  const pathname = usePathname();
+  const router = useRouter();
+
+  const VALID_TABS: EmployeeTab[] = ['details', 'policies', 'training', 'hipaa', 'device', 'offboarding', 'background-check'];
+
+  const resolveTab = (): EmployeeTab => {
+    if (
+      backgroundCheckStepEnabled &&
+      (searchParams.get('background_check_step') || searchParams.get('background_check_billing'))
+    ) {
+      return 'background-check';
+    }
+    const tabParam = searchParams.get('tab');
+    if (tabParam && VALID_TABS.includes(tabParam as EmployeeTab)) {
+      return tabParam as EmployeeTab;
+    }
+    return 'details';
+  };
+
+  const activeTab = resolveTab();
+
+  const handleTabChange = useCallback(
+    (value: string) => {
+      const params = new URLSearchParams(searchParams.toString());
+      if (value === 'details') {
+        params.delete('tab');
+      } else {
+        params.set('tab', value);
+      }
+      params.delete('background_check_step');
+      params.delete('background_check_billing');
+      const query = params.toString();
+      router.replace(query ? `${pathname}?${query}` : pathname, { scroll: false });
+    },
+    [pathname, router, searchParams],
+  );
+
   const [memberExempt, setMemberExempt] = useState(memberBackgroundCheckExempt);
   const [lastSyncedExempt, setLastSyncedExempt] = useState(memberBackgroundCheckExempt);
 
@@ -77,12 +116,6 @@ export function Employee({
     setMemberExempt(memberBackgroundCheckExempt);
   }
 
-  useEffect(() => {
-    if (querySelectedTab === 'background-check') {
-      setActiveTab('background-check');
-    }
-  }, [querySelectedTab]);
-
   return (
     <PageLayout
       header={
@@ -98,7 +131,7 @@ export function Employee({
       <Tabs
         value={activeTab}
         onValueChange={(value) => {
-          if (value) setActiveTab(value as EmployeeTab);
+          if (value) handleTabChange(value);
         }}
       >
         <Stack gap="4">
@@ -108,6 +141,9 @@ export function Employee({
             <TabsTrigger value="training">Training Videos</TabsTrigger>
             {hasHipaaFramework && <TabsTrigger value="hipaa">HIPAA Training</TabsTrigger>}
             <TabsTrigger value="device">Device</TabsTrigger>
+            {employee.offboardDate && (
+              <TabsTrigger value="offboarding">Offboarding</TabsTrigger>
+            )}
             {backgroundCheckStepEnabled && (
               <TabsTrigger value="background-check">Background Check</TabsTrigger>
             )}
@@ -142,6 +178,15 @@ export function Employee({
               fleetPolicies={fleetPolicies}
             />
           </TabsContent>
+          {employee.offboardDate && (
+            <TabsContent value="offboarding">
+              <OffboardingChecklist
+                memberId={employee.id}
+                canEdit={canEdit}
+                offboardDate={employee.offboardDate?.toISOString() ?? ''}
+              />
+            </TabsContent>
+          )}
           {backgroundCheckStepEnabled && (
             <TabsContent value="background-check">
               <EmployeeBackgroundCheck
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/EmployeeDetails.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/EmployeeDetails.tsx
index 9fd736404c..cb4f0fcf29 100644
--- a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/EmployeeDetails.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/EmployeeDetails.tsx
@@ -53,6 +53,14 @@ export const EmployeeDetails = ({
   const [status, setStatus] = useState<string>(employee.isActive ? 'active' : 'inactive');
   const [joinDate, setJoinDate] = useState<Date>(new Date(employee.createdAt));
   const [datePickerOpen, setDatePickerOpen] = useState(false);
+  const [onboardDate, setOnboardDate] = useState<Date | undefined>(
+    employee.onboardDate ? new Date(employee.onboardDate) : undefined,
+  );
+  const [offboardDate, setOffboardDate] = useState<Date | undefined>(
+    employee.offboardDate ? new Date(employee.offboardDate) : undefined,
+  );
+  const [onboardDatePickerOpen, setOnboardDatePickerOpen] = useState(false);
+  const [offboardDatePickerOpen, setOffboardDatePickerOpen] = useState(false);
   const [isLoading, setIsLoading] = useState(false);
   const api = useApi();
 
@@ -62,9 +70,15 @@ export const EmployeeDetails = ({
     const departmentChanged = department !== (employee.department ?? 'none');
     const statusChanged = status !== (employee.isActive ? 'active' : 'inactive');
     const dateChanged = joinDate.toISOString() !== new Date(employee.createdAt).toISOString();
+    const onboardDateChanged =
+      (onboardDate?.toISOString() ?? null) !==
+      (employee.onboardDate ? new Date(employee.onboardDate).toISOString() : null);
+    const offboardDateChanged =
+      (offboardDate?.toISOString() ?? null) !==
+      (employee.offboardDate ? new Date(employee.offboardDate).toISOString() : null);
 
-    return nameChanged || jobTitleChanged || departmentChanged || statusChanged || dateChanged;
-  }, [name, jobTitle, department, status, joinDate, employee]);
+    return nameChanged || jobTitleChanged || departmentChanged || statusChanged || dateChanged || onboardDateChanged || offboardDateChanged;
+  }, [name, jobTitle, department, status, joinDate, onboardDate, offboardDate, employee]);
 
   const handleSubmit = async (e: React.FormEvent<HTMLFormElement>) => {
     e.preventDefault();
@@ -80,6 +94,8 @@ export const EmployeeDetails = ({
       isActive?: boolean;
       createdAt?: string;
       jobTitle?: string;
+      onboardDate?: string | null;
+      offboardDate?: string | null;
     } = {};
 
     if (name !== (employee.user.name ?? '')) {
@@ -100,6 +116,20 @@ export const EmployeeDetails = ({
       updateData.isActive = isActive;
     }
 
+    const onboardDateChanged =
+      (onboardDate?.toISOString() ?? null) !==
+      (employee.onboardDate ? new Date(employee.onboardDate).toISOString() : null);
+    if (onboardDateChanged) {
+      updateData.onboardDate = onboardDate ? onboardDate.toISOString() : null;
+    }
+
+    const offboardDateChanged =
+      (offboardDate?.toISOString() ?? null) !==
+      (employee.offboardDate ? new Date(employee.offboardDate).toISOString() : null);
+    if (offboardDateChanged) {
+      updateData.offboardDate = offboardDate ? offboardDate.toISOString() : null;
+    }
+
     if (Object.keys(updateData).length === 0) {
       toast.info('No changes to save');
       return;
@@ -237,6 +267,74 @@ export const EmployeeDetails = ({
                 </PopoverContent>
               </Popover>
             </Stack>
+
+            {/* Onboard Date Field */}
+            <Stack gap="sm">
+              <Label htmlFor="onboardDate">Onboard Date</Label>
+              <Popover
+                open={!canEdit ? false : onboardDatePickerOpen}
+                onOpenChange={!canEdit ? undefined : setOnboardDatePickerOpen}
+              >
+                <PopoverTrigger asChild>
+                  <button
+                    type="button"
+                    id="onboardDate"
+                    disabled={!canEdit}
+                    className="border-border bg-background text-foreground hover:bg-muted flex h-9 w-full items-center justify-between rounded-md border px-3 py-2 text-sm disabled:cursor-not-allowed disabled:opacity-50"
+                  >
+                    {onboardDate ? format(onboardDate, 'PPP') : 'Not set'}
+                    <ChevronDown size={16} />
+                  </button>
+                </PopoverTrigger>
+                <PopoverContent className="w-auto p-0" align="start">
+                  <Calendar
+                    mode="single"
+                    selected={onboardDate}
+                    onSelect={(date) => {
+                      setOnboardDate(date ?? undefined);
+                      setOnboardDatePickerOpen(false);
+                    }}
+                    captionLayout="dropdown"
+                    fromYear={2000}
+                    toYear={new Date().getFullYear() + 1}
+                  />
+                </PopoverContent>
+              </Popover>
+            </Stack>
+
+            {/* Offboard Date Field */}
+            <Stack gap="sm">
+              <Label htmlFor="offboardDate">Offboard Date</Label>
+              <Popover
+                open={!canEdit ? false : offboardDatePickerOpen}
+                onOpenChange={!canEdit ? undefined : setOffboardDatePickerOpen}
+              >
+                <PopoverTrigger asChild>
+                  <button
+                    type="button"
+                    id="offboardDate"
+                    disabled={!canEdit}
+                    className="border-border bg-background text-foreground hover:bg-muted flex h-9 w-full items-center justify-between rounded-md border px-3 py-2 text-sm disabled:cursor-not-allowed disabled:opacity-50"
+                  >
+                    {offboardDate ? format(offboardDate, 'PPP') : 'Not set'}
+                    <ChevronDown size={16} />
+                  </button>
+                </PopoverTrigger>
+                <PopoverContent className="w-auto p-0" align="start">
+                  <Calendar
+                    mode="single"
+                    selected={offboardDate}
+                    onSelect={(date) => {
+                      setOffboardDate(date ?? undefined);
+                      setOffboardDatePickerOpen(false);
+                    }}
+                    captionLayout="dropdown"
+                    fromYear={2000}
+                    toYear={new Date().getFullYear() + 1}
+                  />
+                </PopoverContent>
+              </Popover>
+            </Stack>
           </Grid>
 
           <HStack justify="end">
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklist.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklist.tsx
new file mode 100644
index 0000000000..efe230edcb
--- /dev/null
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklist.tsx
@@ -0,0 +1,166 @@
+'use client';
+
+import { useOffboardingChecklist } from '@/hooks/use-offboarding-checklist';
+import { HStack, Label, Section, Stack, Switch, Text } from '@trycompai/design-system';
+import { useCallback, useState } from 'react';
+import { toast } from 'sonner';
+import { OffboardingChecklistItem } from './OffboardingChecklistItem';
+import { OffboardingSummaryCard } from './OffboardingSummaryCard';
+
+interface OffboardingChecklistProps {
+  memberId: string;
+  canEdit: boolean;
+  offboardDate: string;
+}
+
+export function OffboardingChecklist({
+  memberId,
+  canEdit,
+  offboardDate,
+}: OffboardingChecklistProps) {
+  const {
+    checklist,
+    isLoading,
+    completeItem,
+    uncompleteItem,
+    uploadEvidence,
+    getDownloadUrl,
+    refreshChecklist,
+  } = useOffboardingChecklist(memberId);
+
+  const [showOnlyRemaining, setShowOnlyRemaining] = useState(false);
+
+  const handleComplete = useCallback(
+    async ({ templateItemId, file }: { templateItemId: string; file?: File }) => {
+      try {
+        await completeItem({ templateItemId, file });
+        toast.success('Item completed');
+      } catch {
+        toast.error('Failed to complete item');
+      }
+    },
+    [completeItem],
+  );
+
+  const handleUncomplete = useCallback(
+    async (templateItemId: string) => {
+      try {
+        await uncompleteItem(templateItemId);
+        toast.success('Item uncompleted');
+      } catch {
+        toast.error('Failed to uncomplete item');
+      }
+    },
+    [uncompleteItem],
+  );
+
+  const handleUploadEvidence = useCallback(
+    async (templateItemId: string, file: File) => {
+      try {
+        await uploadEvidence(templateItemId, file);
+        toast.success('Evidence uploaded');
+      } catch {
+        toast.error('Failed to upload evidence');
+      }
+    },
+    [uploadEvidence],
+  );
+
+  const handleDownload = useCallback(
+    async (attachmentId: string) => {
+      try {
+        const url = await getDownloadUrl(attachmentId);
+        window.open(url, '_blank');
+      } catch {
+        toast.error('Failed to download file');
+      }
+    },
+    [getDownloadUrl],
+  );
+
+  if (isLoading) {
+    return (
+      <Section
+        title="Offboarding Checklist"
+        description="Track tasks required to complete this offboarding."
+      >
+        <Text variant="muted">Loading checklist...</Text>
+      </Section>
+    );
+  }
+
+  if (!checklist || checklist.items.length === 0) {
+    return (
+      <Section
+        title="Offboarding Checklist"
+        description="Track tasks required to complete this offboarding."
+      >
+        <Text variant="muted">
+          No checklist items configured. Add items in the offboarding checklist
+          settings.
+        </Text>
+      </Section>
+    );
+  }
+
+  const filteredItems = showOnlyRemaining
+    ? checklist.items.filter((item) => !item.completed)
+    : checklist.items;
+
+  return (
+    <Stack gap="6">
+      {offboardDate && (
+        <OffboardingSummaryCard
+          offboardDate={offboardDate}
+          totalItems={checklist.totalItems}
+          completedItems={checklist.completedItems}
+        />
+      )}
+
+      <Stack gap="4">
+        <div className="flex items-center justify-between">
+          <div>
+            <h3 className="text-lg font-normal">Offboarding checklist</h3>
+            <p className="text-sm text-muted-foreground">
+              Track tasks required to complete this offboarding.
+            </p>
+          </div>
+          <HStack gap="2" align="center">
+            <Label htmlFor="show-remaining">
+              <Text size="sm">Show only remaining</Text>
+            </Label>
+            <Switch
+              id="show-remaining"
+              checked={showOnlyRemaining}
+              onCheckedChange={setShowOnlyRemaining}
+              size="sm"
+            />
+          </HStack>
+        </div>
+
+        <div className="flex flex-col gap-2">
+          {filteredItems.map((item) => (
+            <OffboardingChecklistItem
+              key={item.templateItemId}
+              item={item}
+              memberId={memberId}
+              canEdit={canEdit}
+              onComplete={handleComplete}
+              onUncomplete={handleUncomplete}
+              onUploadEvidence={handleUploadEvidence}
+              onDownload={handleDownload}
+              onChecklistRefresh={() => refreshChecklist()}
+            />
+          ))}
+          {filteredItems.length === 0 && showOnlyRemaining && (
+            <div className="rounded-lg border px-4 py-8 text-center">
+              <Text variant="muted">
+                All tasks completed. Turn off the filter to see all items.
+              </Text>
+            </div>
+          )}
+        </div>
+      </Stack>
+    </Stack>
+  );
+}
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklistItem.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklistItem.tsx
new file mode 100644
index 0000000000..42261ba64a
--- /dev/null
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingChecklistItem.tsx
@@ -0,0 +1,408 @@
+'use client';
+
+import type { ChecklistItem } from '@/hooks/use-offboarding-checklist';
+import { useAccessRevocations } from '@/hooks/use-access-revocations';
+import {
+  Badge,
+  Button,
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+  HStack,
+  Stack,
+  Text,
+} from '@trycompai/design-system';
+import {
+  Checkmark,
+  ChevronDown,
+  DocumentDownload,
+  Upload,
+} from '@trycompai/design-system/icons';
+import { useRef, useState } from 'react';
+import { AccessRevocationList } from './AccessRevocationList';
+
+interface OffboardingChecklistItemProps {
+  item: ChecklistItem;
+  memberId: string;
+  canEdit: boolean;
+  onComplete: (args: { templateItemId: string; file?: File }) => Promise<void>;
+  onUncomplete: (templateItemId: string) => Promise<void>;
+  onUploadEvidence: (templateItemId: string, file: File) => Promise<void>;
+  onDownload: (attachmentId: string) => Promise<void>;
+  onChecklistRefresh?: () => void;
+}
+
+function StatusCircle({ done, total }: { done: number; total: number }) {
+  const allDone = done === total && total > 0;
+  const partial = done > 0 && !allDone;
+
+  if (allDone) {
+    return (
+      <div className="flex h-[18px] w-[18px] shrink-0 items-center justify-center rounded-full bg-primary text-primary-foreground">
+        <Checkmark size={11} />
+      </div>
+    );
+  }
+  if (partial) {
+    return (
+      <div className="flex h-[18px] w-[18px] shrink-0 items-center justify-center rounded-full border-[1.5px] border-primary">
+        <div className="h-2 w-2 rounded-full bg-primary" />
+      </div>
+    );
+  }
+  return (
+    <div
+      className="h-[18px] w-[18px] shrink-0 rounded-full border-[1.5px]"
+      style={{ borderColor: 'oklch(0.85 0 0)' }}
+    />
+  );
+}
+
+function ChecklistStatusCircle({
+  item,
+  memberId,
+}: {
+  item: ChecklistItem;
+  memberId: string;
+}) {
+  if (item.isAccessRevocation) {
+    return <AccessRevocationStatusCircle memberId={memberId} />;
+  }
+  const done = item.completed ? 1 : 0;
+  return <StatusCircle done={done} total={1} />;
+}
+
+function AccessRevocationStatusCircle({ memberId }: { memberId: string }) {
+  const { revocations } = useAccessRevocations(memberId);
+  if (!revocations) return <StatusCircle done={0} total={0} />;
+  return (
+    <StatusCircle
+      done={revocations.revokedCount}
+      total={revocations.totalVendors}
+    />
+  );
+}
+
+function ItemBadges({
+  item,
+}: {
+  item: ChecklistItem;
+}) {
+  return (
+    <>
+      {item.isAccessRevocation && (
+        <div>
+          <Badge variant="accent">Critical</Badge>
+        </div>
+      )}
+      {item.evidenceRequired && (
+        <div>
+          <Badge variant="outline">Evidence</Badge>
+        </div>
+      )}
+    </>
+  );
+}
+
+function ItemProgress({
+  item,
+  memberId,
+}: {
+  item: ChecklistItem;
+  memberId: string;
+}) {
+  if (item.isAccessRevocation) {
+    return <AccessRevocationProgress memberId={memberId} />;
+  }
+  const done = item.completed ? 1 : 0;
+  const total = 1;
+  const pct = done / total;
+  return (
+    <div className="flex items-center gap-2">
+      <span className="min-w-[56px] text-right font-mono text-xs tabular-nums text-muted-foreground">
+        {done}/{total}
+      </span>
+      <div className="h-1 w-[60px] overflow-hidden rounded-full bg-muted">
+        <div
+          className="h-full bg-primary transition-all"
+          style={{ width: `${pct * 100}%` }}
+        />
+      </div>
+    </div>
+  );
+}
+
+function AccessRevocationProgress({ memberId }: { memberId: string }) {
+  const { revocations } = useAccessRevocations(memberId);
+  if (!revocations) return null;
+  const pct =
+    revocations.totalVendors > 0
+      ? revocations.revokedCount / revocations.totalVendors
+      : 0;
+  return (
+    <div className="flex items-center gap-2">
+      <span className="min-w-[56px] text-right font-mono text-xs tabular-nums text-muted-foreground">
+        {revocations.revokedCount}/{revocations.totalVendors}
+      </span>
+      <div className="h-1 w-[60px] overflow-hidden rounded-full bg-muted">
+        <div
+          className="h-full bg-primary transition-all"
+          style={{ width: `${pct * 100}%` }}
+        />
+      </div>
+    </div>
+  );
+}
+
+export function OffboardingChecklistItem({
+  item,
+  memberId,
+  canEdit,
+  onComplete,
+  onUncomplete,
+  onUploadEvidence,
+  onDownload,
+  onChecklistRefresh,
+}: OffboardingChecklistItemProps) {
+  const [isOpen, setIsOpen] = useState(false);
+  const [isProcessing, setIsProcessing] = useState(false);
+  const dropzoneInputRef = useRef<HTMLInputElement>(null);
+
+  const handleComplete = async () => {
+    if (isProcessing) return;
+    setIsProcessing(true);
+    try {
+      await onComplete({ templateItemId: item.templateItemId });
+    } finally {
+      setIsProcessing(false);
+    }
+  };
+
+  const handleUncomplete = async () => {
+    if (isProcessing) return;
+    setIsProcessing(true);
+    try {
+      await onUncomplete(item.templateItemId);
+    } finally {
+      setIsProcessing(false);
+    }
+  };
+
+  const handleFileDrop = async (e: React.DragEvent<HTMLDivElement>) => {
+    e.preventDefault();
+    const file = e.dataTransfer.files[0];
+    if (!file) return;
+    await handleFileUpload(file);
+  };
+
+  const handleFileSelect = async (e: React.ChangeEvent<HTMLInputElement>) => {
+    const file = e.target.files?.[0];
+    if (!file) return;
+    await handleFileUpload(file);
+    if (dropzoneInputRef.current) dropzoneInputRef.current.value = '';
+  };
+
+  const handleFileUpload = async (file: File) => {
+    setIsProcessing(true);
+    try {
+      if (!item.completed) {
+        await onComplete({ templateItemId: item.templateItemId, file });
+      } else {
+        await onUploadEvidence(item.templateItemId, file);
+      }
+    } finally {
+      setIsProcessing(false);
+    }
+  };
+
+  const isExpandable =
+    item.isAccessRevocation || item.evidenceRequired || canEdit;
+
+  return (
+    <Collapsible open={isOpen} onOpenChange={setIsOpen}>
+      <div className="overflow-hidden rounded-lg border bg-background">
+        <CollapsibleTrigger className="flex w-full items-center gap-2 px-3.5 py-3 text-left transition-colors hover:bg-muted/50">
+          <ChecklistStatusCircle item={item} memberId={memberId} />
+          <div className="flex min-w-0 flex-1 flex-col gap-0.5">
+            <div className="flex items-center gap-2">
+              <span className="text-sm font-normal">{item.title}</span>
+              <ItemBadges item={item} />
+            </div>
+            {item.description && (
+              <span className="truncate text-xs text-muted-foreground">
+                {item.description}
+              </span>
+            )}
+          </div>
+          {isExpandable && (
+            <div className="flex shrink-0 items-center gap-3">
+              <ItemProgress item={item} memberId={memberId} />
+              <ChevronDown
+                size={14}
+                className={`text-muted-foreground transition-transform ${isOpen ? 'rotate-180' : ''}`}
+              />
+            </div>
+          )}
+        </CollapsibleTrigger>
+
+        <CollapsibleContent>
+          {item.isAccessRevocation ? (
+            <AccessRevocationList
+              memberId={memberId}
+              canEdit={canEdit}
+              onRevocationChange={onChecklistRefresh}
+            />
+          ) : (
+            <div className="border-t px-3.5 py-3">
+              {item.evidenceRequired ? (
+                <EvidenceContent
+                  item={item}
+                  canEdit={canEdit}
+                  isProcessing={isProcessing}
+                  dropzoneInputRef={dropzoneInputRef}
+                  onFileDrop={handleFileDrop}
+                  onFileSelect={handleFileSelect}
+                  onDownload={onDownload}
+                  onUncomplete={handleUncomplete}
+                />
+              ) : (
+                <SimpleContent
+                  item={item}
+                  canEdit={canEdit}
+                  isProcessing={isProcessing}
+                  onComplete={handleComplete}
+                  onUncomplete={handleUncomplete}
+                />
+              )}
+            </div>
+          )}
+        </CollapsibleContent>
+      </div>
+    </Collapsible>
+  );
+}
+
+function SimpleContent({
+  item,
+  canEdit,
+  isProcessing,
+  onComplete,
+  onUncomplete,
+}: {
+  item: ChecklistItem;
+  canEdit: boolean;
+  isProcessing: boolean;
+  onComplete: () => void;
+  onUncomplete: () => void;
+}) {
+  if (!canEdit) return null;
+
+  return (
+    <div>
+      {item.completed ? (
+        <Button
+          variant="outline"
+          size="sm"
+          onClick={onUncomplete}
+          disabled={isProcessing}
+          loading={isProcessing}
+        >
+          Undo
+        </Button>
+      ) : (
+        <Button
+          size="sm"
+          onClick={onComplete}
+          disabled={isProcessing}
+          loading={isProcessing}
+        >
+          Mark complete
+        </Button>
+      )}
+    </div>
+  );
+}
+
+function EvidenceContent({
+  item,
+  canEdit,
+  isProcessing,
+  dropzoneInputRef,
+  onFileDrop,
+  onFileSelect,
+  onDownload,
+  onUncomplete,
+}: {
+  item: ChecklistItem;
+  canEdit: boolean;
+  isProcessing: boolean;
+  dropzoneInputRef: React.RefObject<HTMLInputElement | null>;
+  onFileDrop: (e: React.DragEvent<HTMLDivElement>) => void;
+  onFileSelect: (e: React.ChangeEvent<HTMLInputElement>) => void;
+  onDownload: (attachmentId: string) => void;
+  onUncomplete: () => void;
+}) {
+  return (
+    <Stack gap="3">
+      {item.evidence.length > 0 && (
+        <Stack gap="1">
+          {item.evidence.map((file) => (
+            <HStack key={file.id} gap="2" align="center">
+              <Text size="sm" variant="muted">
+                {file.name}
+              </Text>
+              <div>
+                <Button
+                  variant="ghost"
+                  size="icon-xs"
+                  onClick={() => onDownload(file.id)}
+                >
+                  <DocumentDownload size={14} />
+                </Button>
+              </div>
+            </HStack>
+          ))}
+        </Stack>
+      )}
+
+      {canEdit && (
+        <div
+          onDrop={onFileDrop}
+          onDragOver={(e) => e.preventDefault()}
+          onClick={() => dropzoneInputRef.current?.click()}
+          className="flex cursor-pointer flex-col items-center gap-2 rounded-md border-2 border-dashed border-muted-foreground/25 px-4 py-6 text-center transition hover:border-muted-foreground/50 hover:bg-muted/25"
+        >
+          <Upload size={20} className="text-muted-foreground" />
+          <div>
+            <Text size="sm" variant="muted">
+              {item.completed
+                ? 'Drop files here or click to add more evidence'
+                : 'Drop files here or click to upload proof and mark as complete'}
+            </Text>
+          </div>
+          <input
+            ref={dropzoneInputRef}
+            type="file"
+            className="hidden"
+            onChange={onFileSelect}
+            accept=".pdf,.doc,.docx,.png,.jpg,.jpeg,.csv,.xlsx"
+          />
+        </div>
+      )}
+
+      {item.completed && canEdit && (
+        <div>
+          <Button
+            variant="outline"
+            size="sm"
+            onClick={onUncomplete}
+            disabled={isProcessing}
+            loading={isProcessing}
+          >
+            Undo completion
+          </Button>
+        </div>
+      )}
+    </Stack>
+  );
+}
diff --git a/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingSummaryCard.tsx b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingSummaryCard.tsx
new file mode 100644
index 0000000000..917e48baeb
--- /dev/null
+++ b/apps/app/src/app/(app)/[orgId]/people/[employeeId]/components/OffboardingSummaryCard.tsx
@@ -0,0 +1,75 @@
+'use client';
+
+import { differenceInDays, format } from 'date-fns';
+
+interface OffboardingSummaryCardProps {
+  offboardDate: string;
+  totalItems: number;
+  completedItems: number;
+}
+
+export function OffboardingSummaryCard({
+  offboardDate,
+  totalItems,
+  completedItems,
+}: OffboardingSummaryCardProps) {
+  const daysSince = differenceInDays(new Date(), new Date(offboardDate));
+  const progressPercent =
+    totalItems > 0 ? Math.round((completedItems / totalItems) * 100) : 0;
+
+  return (
+    <div className="grid grid-cols-[1.4fr_1fr_1fr_1fr] gap-6 rounded-lg border p-5">
+      <div>
+        <div className="mb-1">
+          <span className="text-[10px] font-bold uppercase tracking-[0.08em] text-muted-foreground">
+            Offboarding progress
+          </span>
+        </div>
+        <div className="flex items-baseline gap-1">
+          <span className="font-mono text-2xl font-normal tabular-nums">
+            {completedItems}
+          </span>
+          <span className="text-sm text-muted-foreground">
+            / {totalItems} tasks
+          </span>
+        </div>
+        <div className="mt-2 h-1.5 w-full overflow-hidden rounded-full bg-muted">
+          <div
+            className="h-full bg-primary transition-all"
+            style={{ width: `${progressPercent}%` }}
+          />
+        </div>
+      </div>
+      <div>
+        <div className="mb-1">
+          <span className="text-[10px] font-bold uppercase tracking-[0.08em] text-muted-foreground">
+            Termination date
+          </span>
+        </div>
+        <p className="mt-1 font-mono text-lg font-normal">
+          {format(new Date(offboardDate), 'MMM d, yyyy')}
+        </p>
+      </div>
+      <div>
+        <div className="mb-1">
+          <span className="text-[10px] font-bold uppercase tracking-[0.08em] text-muted-foreground">
+            Days since
+          </span>
+        </div>
+        <p className="mt-1 font-mono text-2xl font-normal text-primary tabular-nums">
+          {daysSince}
+        </p>
+      </div>
+      <div>
+        <div className="mb-1">
+          <span className="text-[10px] font-bold uppercase tracking-[0.08em] text-muted-foreground">
+            Completion
+          </span>
+        </div>
+        <p className="mt-1 font-mono text-2xl font-normal tabular-nums">
+          {progressPercent}%
+        </p>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/app/src/app/(app)/[orgId]/people/all/components/MemberRow.tsx b/apps/app/src/app/(app)/[orgId]/people/all/components/MemberRow.tsx
index e3e49b92fc..1c8573c179 100644
--- a/apps/app/src/app/(app)/[orgId]/people/all/components/MemberRow.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/all/components/MemberRow.tsx
@@ -1,5 +1,6 @@
 'use client';
 
+import { format } from 'date-fns';
 import Link from 'next/link';
 import { useParams } from 'next/navigation';
 import { useState } from 'react';
@@ -327,6 +328,24 @@ export function MemberRow({
           </div>
         </TableCell>
 
+        {/* ONBOARDED */}
+        <TableCell>
+          <Text size="sm" variant="muted">
+            {format(member.onboardDate ?? member.createdAt, 'MMM d, yyyy')}
+          </Text>
+        </TableCell>
+
+        {/* OFFBOARDED */}
+        <TableCell>
+          {member.offboardDate ? (
+            <Text size="sm" variant="muted">
+              {format(member.offboardDate, 'MMM d, yyyy')}
+            </Text>
+          ) : (
+            <Text size="sm" variant="muted">—</Text>
+          )}
+        </TableCell>
+
         {/* TASKS */}
         <TableCell>
           {taskItems.length > 0 ? (
diff --git a/apps/app/src/app/(app)/[orgId]/people/all/components/PendingInvitationRow.tsx b/apps/app/src/app/(app)/[orgId]/people/all/components/PendingInvitationRow.tsx
index fc7b670f17..a8183d43f7 100644
--- a/apps/app/src/app/(app)/[orgId]/people/all/components/PendingInvitationRow.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/all/components/PendingInvitationRow.tsx
@@ -100,6 +100,16 @@ export function PendingInvitationRow({
           </div>
         </TableCell>
 
+        {/* ONBOARDED */}
+        <TableCell>
+          <Text size="sm" variant="muted">—</Text>
+        </TableCell>
+
+        {/* OFFBOARDED */}
+        <TableCell>
+          <Text size="sm" variant="muted">—</Text>
+        </TableCell>
+
         {/* TASKS */}
         <TableCell>
           <Text size="sm" variant="muted">
diff --git a/apps/app/src/app/(app)/[orgId]/people/all/components/TeamMembersClient.tsx b/apps/app/src/app/(app)/[orgId]/people/all/components/TeamMembersClient.tsx
index 923e87d054..0ae344c842 100644
--- a/apps/app/src/app/(app)/[orgId]/people/all/components/TeamMembersClient.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/all/components/TeamMembersClient.tsx
@@ -254,7 +254,9 @@ export function TeamMembersClient({
             }}
           >
             <SelectTrigger>
-              <SelectValue placeholder="Active" />
+              <SelectValue placeholder="Active">
+                {{ all: 'All People', active: 'Active', pending: 'Pending', deactivated: 'Deactivated' }[statusFilter] ?? 'Active'}
+              </SelectValue>
             </SelectTrigger>
             <SelectContent>
               <SelectItem value="all">All People</SelectItem>
@@ -274,7 +276,9 @@ export function TeamMembersClient({
             }}
           >
             <SelectTrigger>
-              <SelectValue placeholder="All Roles" />
+              <SelectValue placeholder="All Roles">
+                {{ owner: 'Owner', admin: 'Admin', auditor: 'Auditor', employee: 'Employee', contractor: 'Contractor' }[roleFilter] ?? 'All Roles'}
+              </SelectValue>
             </SelectTrigger>
             <SelectContent>
               <SelectItem value="all">All Roles</SelectItem>
@@ -462,6 +466,8 @@ export function TeamMembersClient({
               <TableHead>
                 <div className="w-[160px]">ROLE</div>
               </TableHead>
+              <TableHead>ONBOARDED</TableHead>
+              <TableHead>OFFBOARDED</TableHead>
               <TableHead>TASKS</TableHead>
               <TableHead>ACTIONS</TableHead>
             </TableRow>
diff --git a/apps/app/src/app/(app)/[orgId]/people/settings/components/OffboardingChecklistSettings.tsx b/apps/app/src/app/(app)/[orgId]/people/settings/components/OffboardingChecklistSettings.tsx
new file mode 100644
index 0000000000..085072297b
--- /dev/null
+++ b/apps/app/src/app/(app)/[orgId]/people/settings/components/OffboardingChecklistSettings.tsx
@@ -0,0 +1,363 @@
+'use client';
+
+import { useState } from 'react';
+import { toast } from 'sonner';
+import { usePermissions } from '@/hooks/use-permissions';
+import { useApi } from '@/hooks/use-api';
+import { useApiSWR } from '@/hooks/use-api-swr';
+import {
+  Button,
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  HStack,
+  Input,
+  Label,
+  Section,
+  Stack,
+  Switch,
+  Text,
+  Textarea,
+} from '@trycompai/design-system';
+import { Add, TrashCan } from '@trycompai/design-system/icons';
+
+interface TemplateItem {
+  id: string;
+  title: string;
+  description: string | null;
+  evidenceRequired: boolean;
+  sortOrder: number;
+  isDefault: boolean;
+  isEnabled: boolean;
+}
+
+const TEMPLATE_ENDPOINT = '/v1/offboarding-checklist/template';
+
+export function OffboardingChecklistSettings() {
+  const { hasPermission } = usePermissions();
+  const canUpdate = hasPermission('organization', 'update');
+  const { post, patch, delete: deleteReq } = useApi();
+
+  const { data, mutate } = useApiSWR<TemplateItem[]>(TEMPLATE_ENDPOINT);
+  const items = Array.isArray(data?.data) ? data.data : [];
+
+  const [dialogOpen, setDialogOpen] = useState(false);
+
+  const handleToggleEnabled = async ({
+    item,
+    next,
+  }: {
+    item: TemplateItem;
+    next: boolean;
+  }) => {
+    const previous = items;
+    mutate(
+      (current) => {
+        if (!current) return current;
+        return {
+          ...current,
+          data: Array.isArray(current.data)
+            ? current.data.map((i) =>
+                i.id === item.id ? { ...i, isEnabled: next } : i,
+              )
+            : current.data,
+        };
+      },
+      { revalidate: false },
+    );
+
+    const res = await patch(
+      `${TEMPLATE_ENDPOINT}/${item.id}`,
+      { isEnabled: next },
+    );
+
+    if (res.error) {
+      mutate(
+        (current) => {
+          if (!current) return current;
+          return {
+            ...current,
+            data: previous,
+          };
+        },
+        { revalidate: false },
+      );
+      toast.error('Failed to update checklist item');
+      return;
+    }
+
+    toast.success(next ? 'Checklist item enabled' : 'Checklist item disabled');
+  };
+
+  const handleToggleEvidence = async ({
+    item,
+    next,
+  }: {
+    item: TemplateItem;
+    next: boolean;
+  }) => {
+    mutate(
+      (current) => {
+        if (!current) return current;
+        return {
+          ...current,
+          data: Array.isArray(current.data)
+            ? current.data.map((i) =>
+                i.id === item.id ? { ...i, evidenceRequired: next } : i,
+              )
+            : current.data,
+        };
+      },
+      { revalidate: false },
+    );
+
+    const res = await patch(
+      `${TEMPLATE_ENDPOINT}/${item.id}`,
+      { evidenceRequired: next },
+    );
+
+    if (res.error) {
+      mutate();
+      toast.error('Failed to update evidence requirement');
+      return;
+    }
+
+    toast.success(
+      next ? 'Evidence now required' : 'Evidence no longer required',
+    );
+  };
+
+  const handleDelete = async ({ item }: { item: TemplateItem }) => {
+    mutate(
+      (current) => {
+        if (!current) return current;
+        return {
+          ...current,
+          data: Array.isArray(current.data)
+            ? current.data.filter((i) => i.id !== item.id)
+            : current.data,
+        };
+      },
+      { revalidate: false },
+    );
+
+    const res = await deleteReq(`${TEMPLATE_ENDPOINT}/${item.id}`);
+
+    if (res.error) {
+      mutate();
+      toast.error('Failed to delete checklist item');
+      return;
+    }
+
+    toast.success('Checklist item deleted');
+  };
+
+  return (
+    <Section title="Offboarding checklist">
+      <Stack gap="md">
+        <div className="flex items-center justify-between">
+          <Text size="sm" variant="muted">
+            Configure the default checklist items for employee offboarding.
+          </Text>
+          {canUpdate && (
+            <Dialog open={dialogOpen} onOpenChange={setDialogOpen}>
+              <DialogTrigger render={<Button size="sm" variant="outline" />}>
+                <Add size={16} />
+                Add item
+              </DialogTrigger>
+              <AddChecklistItemDialog
+                onCreated={() => {
+                  setDialogOpen(false);
+                  mutate();
+                }}
+              />
+            </Dialog>
+          )}
+        </div>
+
+        {items.length === 0 ? (
+          <div className="rounded-lg border border-dashed p-6 text-center">
+            <Text size="sm" variant="muted">
+              No checklist items configured yet.
+            </Text>
+          </div>
+        ) : (
+          <Stack gap="sm">
+            {items.map((item) => (
+              <ChecklistItemCard
+                key={item.id}
+                item={item}
+                canUpdate={canUpdate}
+                onToggleEnabled={handleToggleEnabled}
+                onToggleEvidence={handleToggleEvidence}
+                onDelete={handleDelete}
+              />
+            ))}
+          </Stack>
+        )}
+      </Stack>
+    </Section>
+  );
+}
+
+function ChecklistItemCard({
+  item,
+  canUpdate,
+  onToggleEnabled,
+  onToggleEvidence,
+  onDelete,
+}: {
+  item: TemplateItem;
+  canUpdate: boolean;
+  onToggleEnabled: (args: { item: TemplateItem; next: boolean }) => void;
+  onToggleEvidence: (args: { item: TemplateItem; next: boolean }) => void;
+  onDelete: (args: { item: TemplateItem }) => void;
+}) {
+  return (
+    <div className="flex items-start justify-between gap-4 rounded-lg border p-4">
+      <div className="flex-1">
+        <HStack gap="sm">
+          <Text weight="medium">{item.title}</Text>
+          {item.isDefault && (
+            <div className="rounded bg-muted px-1.5 py-0.5 text-xs text-muted-foreground">
+              Default
+            </div>
+          )}
+        </HStack>
+        {item.description ? (
+          <Text size="sm" variant="muted">
+            {item.description}
+          </Text>
+        ) : null}
+        <div className="mt-2">
+          <HStack gap="sm">
+            <Label htmlFor={`evidence-${item.id}`}>
+              <Text size="sm">Evidence required</Text>
+            </Label>
+            <Switch
+              id={`evidence-${item.id}`}
+              checked={item.evidenceRequired}
+              disabled={!canUpdate || !item.isEnabled}
+              onCheckedChange={(next) =>
+                onToggleEvidence({ item, next: Boolean(next) })
+              }
+              aria-label={`Evidence required for ${item.title}`}
+            />
+          </HStack>
+        </div>
+      </div>
+      <HStack gap="sm">
+        <Switch
+          checked={item.isEnabled}
+          disabled={!canUpdate}
+          onCheckedChange={(next) =>
+            onToggleEnabled({ item, next: Boolean(next) })
+          }
+          aria-label={`Enable ${item.title}`}
+        />
+        {!item.isDefault && canUpdate && (
+          <Button
+            variant="ghost"
+            size="icon-sm"
+            onClick={() => onDelete({ item })}
+            aria-label={`Delete ${item.title}`}
+          >
+            <TrashCan size={16} />
+          </Button>
+        )}
+      </HStack>
+    </div>
+  );
+}
+
+function AddChecklistItemDialog({
+  onCreated,
+}: {
+  onCreated: () => void;
+}) {
+  const { post } = useApi();
+  const [title, setTitle] = useState('');
+  const [description, setDescription] = useState('');
+  const [evidenceRequired, setEvidenceRequired] = useState(false);
+  const [saving, setSaving] = useState(false);
+
+  const handleSubmit = async (e: React.FormEvent) => {
+    e.preventDefault();
+    if (!title.trim()) return;
+
+    setSaving(true);
+
+    const res = await post(TEMPLATE_ENDPOINT, {
+      title: title.trim(),
+      description: description.trim() || undefined,
+      evidenceRequired,
+    });
+
+    setSaving(false);
+
+    if (res.error) {
+      toast.error('Failed to create checklist item');
+      return;
+    }
+
+    toast.success('Checklist item created');
+    setTitle('');
+    setDescription('');
+    setEvidenceRequired(false);
+    onCreated();
+  };
+
+  return (
+    <DialogContent>
+      <form onSubmit={handleSubmit}>
+        <DialogHeader>
+          <DialogTitle>Add checklist item</DialogTitle>
+        </DialogHeader>
+        <Stack gap="md">
+          <div className="grid gap-1.5">
+            <Label htmlFor="checklist-title">Title</Label>
+            <Input
+              id="checklist-title"
+              value={title}
+              onChange={(e) => setTitle(e.target.value)}
+              placeholder="e.g., Return company laptop"
+              required
+            />
+          </div>
+          <div className="grid gap-1.5">
+            <Label htmlFor="checklist-description">Description</Label>
+            <Textarea
+              id="checklist-description"
+              value={description}
+              onChange={(e) => setDescription(e.target.value)}
+              placeholder="Optional details about this checklist item"
+              rows={3}
+            />
+          </div>
+          <HStack gap="sm">
+            <Label htmlFor="checklist-evidence">Evidence required</Label>
+            <Switch
+              id="checklist-evidence"
+              checked={evidenceRequired}
+              onCheckedChange={(next) =>
+                setEvidenceRequired(Boolean(next))
+              }
+            />
+          </HStack>
+        </Stack>
+        <DialogFooter>
+          <DialogClose render={<Button variant="outline" />}>
+            Cancel
+          </DialogClose>
+          <Button type="submit" disabled={saving || !title.trim()}>
+            {saving ? 'Creating...' : 'Create'}
+          </Button>
+        </DialogFooter>
+      </form>
+    </DialogContent>
+  );
+}
diff --git a/apps/app/src/app/(app)/[orgId]/people/settings/components/PeopleSettings.tsx b/apps/app/src/app/(app)/[orgId]/people/settings/components/PeopleSettings.tsx
index 390b4b8c36..141cd41680 100644
--- a/apps/app/src/app/(app)/[orgId]/people/settings/components/PeopleSettings.tsx
+++ b/apps/app/src/app/(app)/[orgId]/people/settings/components/PeopleSettings.tsx
@@ -5,6 +5,7 @@ import { toast } from 'sonner';
 import { usePermissions } from '@/hooks/use-permissions';
 import { apiClient } from '@/lib/api-client';
 import { Section, Stack, Switch, Text } from '@trycompai/design-system';
+import { OffboardingChecklistSettings } from './OffboardingChecklistSettings';
 
 interface PeopleSettingsProps {
   backgroundCheckStepEnabled: boolean;
@@ -63,6 +64,7 @@ export function PeopleSettings({
           />
         </div>
       </Section>
+      <OffboardingChecklistSettings />
     </Stack>
   );
 }
diff --git a/apps/app/src/hooks/use-access-revocations.ts b/apps/app/src/hooks/use-access-revocations.ts
new file mode 100644
index 0000000000..fe02697b1a
--- /dev/null
+++ b/apps/app/src/hooks/use-access-revocations.ts
@@ -0,0 +1,70 @@
+'use client';
+
+import { useApi } from '@/hooks/use-api';
+import { useApiSWR } from '@/hooks/use-api-swr';
+import { useCallback } from 'react';
+
+interface RevokedBy {
+  id: string;
+  name: string;
+  email: string;
+}
+
+export interface VendorRevocationItem {
+  vendorId: string;
+  vendorName: string;
+  revoked: boolean;
+  revokedAt: string | null;
+  revokedBy: RevokedBy | null;
+  notes: string | null;
+}
+
+interface AccessRevocationsResponse {
+  vendors: VendorRevocationItem[];
+  totalVendors: number;
+  revokedCount: number;
+}
+
+export function useAccessRevocations(memberId: string) {
+  const api = useApi();
+  const endpoint = `/v1/offboarding-checklist/member/${memberId}/access-revocations`;
+
+  const { data, error, isLoading, mutate } = useApiSWR<AccessRevocationsResponse>(endpoint);
+  const revocations = data?.data ?? null;
+
+  const revokeAccess = useCallback(
+    async (vendorId: string, notes?: string) => {
+      const response = await api.post(`${endpoint}/${vendorId}`, notes ? { notes } : {});
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, endpoint, mutate],
+  );
+
+  const undoRevocation = useCallback(
+    async (vendorId: string) => {
+      const response = await api.delete(`${endpoint}/${vendorId}`);
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, endpoint, mutate],
+  );
+
+  const revokeAll = useCallback(
+    async () => {
+      const response = await api.post(`${endpoint}/confirm-all`);
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, endpoint, mutate],
+  );
+
+  return {
+    revocations,
+    isLoading,
+    error,
+    revokeAccess,
+    undoRevocation,
+    revokeAll,
+  };
+}
diff --git a/apps/app/src/hooks/use-employment-evidence.ts b/apps/app/src/hooks/use-employment-evidence.ts
new file mode 100644
index 0000000000..e80c817cef
--- /dev/null
+++ b/apps/app/src/hooks/use-employment-evidence.ts
@@ -0,0 +1,95 @@
+'use client';
+
+import { useApi } from '@/hooks/use-api';
+import { useApiSWR } from '@/hooks/use-api-swr';
+import { useCallback } from 'react';
+
+type EventType = 'onboard' | 'offboard';
+
+interface AttachmentMetadata {
+  id: string;
+  name: string;
+  type: string;
+  downloadUrl: string;
+  createdAt: string;
+}
+
+export function useEmploymentEvidence({
+  memberId,
+  eventType,
+}: {
+  memberId: string;
+  eventType: EventType;
+}) {
+  const api = useApi();
+  const endpoint = `/v1/people/${memberId}/employment-evidence/${eventType}`;
+
+  const { data, error, isLoading, mutate } = useApiSWR<AttachmentMetadata[]>(endpoint);
+  const attachments = data?.data ?? [];
+
+  const uploadEvidence = useCallback(
+    (file: File): Promise<AttachmentMetadata> => {
+      return new Promise((resolve, reject) => {
+        const reader = new FileReader();
+        reader.onload = async () => {
+          try {
+            const base64String = reader.result as string;
+            const base64Data = base64String.split(',')[1];
+
+            const response = await api.post<AttachmentMetadata>(endpoint, {
+              fileName: file.name,
+              fileType: file.type || 'application/octet-stream',
+              fileData: base64Data,
+            });
+
+            if (response.error) {
+              throw new Error(response.error);
+            }
+
+            await mutate();
+            resolve(response.data!);
+          } catch (error) {
+            reject(error);
+          }
+        };
+        reader.onerror = () => reject(new Error('Failed to read file'));
+        reader.readAsDataURL(file);
+      });
+    },
+    [api, endpoint, mutate],
+  );
+
+  const deleteEvidence = useCallback(
+    async (attachmentId: string) => {
+      const response = await api.delete(`${endpoint}/${attachmentId}`);
+      if (response.error) {
+        throw new Error(response.error);
+      }
+      await mutate();
+      return { success: true };
+    },
+    [api, endpoint, mutate],
+  );
+
+  const getDownloadUrl = useCallback(
+    async (attachmentId: string) => {
+      const response = await api.get<{ downloadUrl: string }>(
+        `/v1/attachments/${attachmentId}/download`,
+      );
+      if (response.error) {
+        throw new Error(response.error);
+      }
+      return response.data!.downloadUrl;
+    },
+    [api],
+  );
+
+  return {
+    attachments,
+    isLoading,
+    error,
+    uploadEvidence,
+    deleteEvidence,
+    getDownloadUrl,
+  };
+}
diff --git a/apps/app/src/hooks/use-offboarding-checklist.ts b/apps/app/src/hooks/use-offboarding-checklist.ts
new file mode 100644
index 0000000000..337c2fa333
--- /dev/null
+++ b/apps/app/src/hooks/use-offboarding-checklist.ts
@@ -0,0 +1,143 @@
+'use client';
+
+import { useApi } from '@/hooks/use-api';
+import { useApiSWR } from '@/hooks/use-api-swr';
+import { useCallback } from 'react';
+
+interface CompletedBy {
+  id: string;
+  name: string;
+  email: string;
+}
+
+interface EvidenceAttachment {
+  id: string;
+  name: string;
+  type: string;
+  downloadUrl: string;
+  createdAt: string;
+}
+
+export interface ChecklistItem {
+  templateItemId: string;
+  title: string;
+  description: string | null;
+  evidenceRequired: boolean;
+  isAccessRevocation: boolean;
+  sortOrder: number;
+  completed: boolean;
+  completedAt: string | null;
+  completedBy: CompletedBy | null;
+  completionId: string | null;
+  notes: string | null;
+  evidence: EvidenceAttachment[];
+}
+
+interface MemberChecklistResponse {
+  items: ChecklistItem[];
+  totalItems: number;
+  completedItems: number;
+}
+
+export function useOffboardingChecklist(memberId: string) {
+  const api = useApi();
+  const endpoint = `/v1/offboarding-checklist/member/${memberId}`;
+
+  const { data, error, isLoading, mutate } = useApiSWR<MemberChecklistResponse>(endpoint);
+  const checklist = data?.data ?? null;
+
+  const completeItem = useCallback(
+    async ({
+      templateItemId,
+      notes,
+      file,
+    }: {
+      templateItemId: string;
+      notes?: string;
+      file?: File;
+    }) => {
+      let body: Record<string, unknown> = {};
+      if (notes) body.notes = notes;
+
+      if (file) {
+        const base64 = await fileToBase64(file);
+        body = {
+          ...body,
+          fileName: file.name,
+          fileType: file.type || 'application/octet-stream',
+          fileData: base64,
+        };
+      }
+
+      const response = await api.post(
+        `/v1/offboarding-checklist/member/${memberId}/item/${templateItemId}/complete`,
+        body,
+      );
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, memberId, mutate],
+  );
+
+  const uncompleteItem = useCallback(
+    async (templateItemId: string) => {
+      const response = await api.delete(
+        `/v1/offboarding-checklist/member/${memberId}/item/${templateItemId}/complete`,
+      );
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, memberId, mutate],
+  );
+
+  const uploadEvidence = useCallback(
+    async (templateItemId: string, file: File) => {
+      const base64 = await fileToBase64(file);
+      const response = await api.post(
+        `/v1/offboarding-checklist/member/${memberId}/item/${templateItemId}/evidence`,
+        {
+          fileName: file.name,
+          fileType: file.type || 'application/octet-stream',
+          fileData: base64,
+        },
+      );
+      if (response.error) throw new Error(response.error);
+      await mutate();
+    },
+    [api, memberId, mutate],
+  );
+
+  const getDownloadUrl = useCallback(
+    async (attachmentId: string) => {
+      const response = await api.get<{ downloadUrl: string }>(
+        `/v1/attachments/${attachmentId}/download`,
+      );
+      if (response.error) throw new Error(response.error);
+      return response.data!.downloadUrl;
+    },
+    [api],
+  );
+
+  return {
+    checklist,
+    isLoading,
+    error,
+    completeItem,
+    uncompleteItem,
+    uploadEvidence,
+    getDownloadUrl,
+    refreshChecklist: mutate,
+  };
+}
+
+function fileToBase64(file: File): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onload = () => {
+      const result = reader.result as string;
+      resolve(result.split(',')[1]);
+    };
+    reader.onerror = () => reject(new Error('Failed to read file'));
+    reader.readAsDataURL(file);
+  });
+}
diff --git a/apps/app/src/hooks/use-people-api.ts b/apps/app/src/hooks/use-people-api.ts
index ba61a5b100..4a8d05d2bc 100644
--- a/apps/app/src/hooks/use-people-api.ts
+++ b/apps/app/src/hooks/use-people-api.ts
@@ -13,6 +13,8 @@ export interface PeopleResponseDto {
   isActive: boolean;
   deactivated: boolean;
   fleetDmLabelId: number | null;
+  onboardDate: string | null;
+  offboardDate: string | null;
   user: {
     id: string;
     name: string;
diff --git a/apps/app/src/test-utils/mocks/auth.ts b/apps/app/src/test-utils/mocks/auth.ts
index 135b192afc..f4edf9b820 100644
--- a/apps/app/src/test-utils/mocks/auth.ts
+++ b/apps/app/src/test-utils/mocks/auth.ts
@@ -83,6 +83,8 @@ export const createMockMember = (overrides?: Partial<Member>): Member => ({
   externalUserId: null,
   externalUserSource: null,
   backgroundCheckExempt: false,
+  onboardDate: null,
+  offboardDate: null,
   ...overrides,
 });
 
diff --git a/bun.lock b/bun.lock
index 8c3adca693..e5cfd7955e 100644
--- a/bun.lock
+++ b/bun.lock
@@ -7,7 +7,7 @@
       "dependencies": {
         "@aws-sdk/client-s3": "3.1013.0",
         "@aws-sdk/s3-request-presigner": "3.1013.0",
-        "@trycompai/design-system": "1.1.4",
+        "@trycompai/design-system": "1.1.19",
         "@types/cheerio": "^1.0.0",
         "@types/react-syntax-highlighter": "^15.5.13",
         "@upstash/vector": "^1.2.3",
@@ -2709,7 +2709,7 @@
 
     "@trycompai/db": ["@trycompai/db@workspace:packages/db"],
 
-    "@trycompai/design-system": ["@trycompai/design-system@1.1.4", "", { "dependencies": { "@base-ui/react": "^1.0.0", "@carbon/icons-react": "^11.72.0", "@fontsource-variable/plus-jakarta-sans": "^5.2.8", "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "cmdk": "^1.1.1", "date-fns": "^4.1.0", "embla-carousel-react": "^8.6.0", "input-otp": "^1.4.2", "next-themes": "^0.4.6", "react-day-picker": "^9.13.0", "react-resizable-panels": "^4.2.0", "recharts": "2.15.4", "shadcn": "^3.6.2", "sonner": "^2.0.7", "tailwind-merge": "^3.4.0", "tw-animate-css": "^1.4.0", "vaul": "^1.1.2" }, "peerDependencies": { "react": "^19.0.0", "react-dom": "^19.0.0", "tailwindcss": "^4.0.0" } }, "sha512-WruX+BOp5dEL2rV2qEbEufl7AgpJmGoQFmBoqa9FJzDJqgboXoSvO8eQdk8K9kaTDY7UY2Xlg3WgXCnOIjrjwg=="],
+    "@trycompai/design-system": ["@trycompai/design-system@1.1.19", "", { "dependencies": { "@base-ui/react": "^1.0.0", "@carbon/icons-react": "^11.72.0", "@fontsource-variable/plus-jakarta-sans": "^5.2.8", "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "cmdk": "^1.1.1", "date-fns": "^4.1.0", "embla-carousel-react": "^8.6.0", "input-otp": "^1.4.2", "next-themes": "^0.4.6", "react-day-picker": "^9.13.0", "react-resizable-panels": "^4.2.0", "recharts": "2.15.4", "shadcn": "^3.6.2", "sonner": "^2.0.7", "tailwind-merge": "^3.4.0", "tw-animate-css": "^1.4.0", "vaul": "^1.1.2" }, "peerDependencies": { "react": "^19.0.0", "react-dom": "^19.0.0", "tailwindcss": "^4.0.0" } }, "sha512-bH5OlSinEqhkp71uLWHU7lkapJ6dWJysrF2W+PcH+gA7rlqUO3wMNrk6495w2zSgU8xJetzDJ/TQTYgffOXZJg=="],
 
     "@trycompai/device-agent": ["@trycompai/device-agent@workspace:packages/device-agent"],
 
@@ -7317,6 +7317,8 @@
 
     "@trycompai/integrations/ai": ["ai@6.0.175", "", { "dependencies": { "@ai-sdk/gateway": "3.0.110", "@ai-sdk/provider": "3.0.10", "@ai-sdk/provider-utils": "4.0.26", "@opentelemetry/api": "1.9.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-6fFFHzbh6FIZnYc31V6osOxq25ABJYCShfG0O6ajHiA4FB/DgnPi1mP8cO5aAU3HNSbQHiMazdlh9bIsp97mVA=="],
 
+    "@trycompai/portal/@trycompai/design-system": ["@trycompai/design-system@1.1.4", "", { "dependencies": { "@base-ui/react": "^1.0.0", "@carbon/icons-react": "^11.72.0", "@fontsource-variable/plus-jakarta-sans": "^5.2.8", "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "cmdk": "^1.1.1", "date-fns": "^4.1.0", "embla-carousel-react": "^8.6.0", "input-otp": "^1.4.2", "next-themes": "^0.4.6", "react-day-picker": "^9.13.0", "react-resizable-panels": "^4.2.0", "recharts": "2.15.4", "shadcn": "^3.6.2", "sonner": "^2.0.7", "tailwind-merge": "^3.4.0", "tw-animate-css": "^1.4.0", "vaul": "^1.1.2" }, "peerDependencies": { "react": "^19.0.0", "react-dom": "^19.0.0", "tailwindcss": "^4.0.0" } }, "sha512-WruX+BOp5dEL2rV2qEbEufl7AgpJmGoQFmBoqa9FJzDJqgboXoSvO8eQdk8K9kaTDY7UY2Xlg3WgXCnOIjrjwg=="],
+
     "@trycompai/portal/zod": ["zod@3.25.76", "", {}, "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ=="],
 
     "@trycompai/ui/ai": ["ai@6.0.175", "", { "dependencies": { "@ai-sdk/gateway": "3.0.110", "@ai-sdk/provider": "3.0.10", "@ai-sdk/provider-utils": "4.0.26", "@opentelemetry/api": "1.9.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-6fFFHzbh6FIZnYc31V6osOxq25ABJYCShfG0O6ajHiA4FB/DgnPi1mP8cO5aAU3HNSbQHiMazdlh9bIsp97mVA=="],
@@ -8853,6 +8855,16 @@
 
     "@trycompai/integrations/ai/@ai-sdk/provider-utils": ["@ai-sdk/provider-utils@4.0.26", "", { "dependencies": { "@ai-sdk/provider": "3.0.10", "@standard-schema/spec": "^1.1.0", "eventsource-parser": "^3.0.8" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-CsKNLKsOpvPujRlIYvoz+Ybw+kGn7J4/fIZa/58+R7iWLLfwn6ifE2G6Yq8K9XvH/I/3bzaDAJ3NhRwEMsLBKQ=="],
 
+    "@trycompai/portal/@trycompai/design-system/react-day-picker": ["react-day-picker@9.14.0", "", { "dependencies": { "@date-fns/tz": "^1.4.1", "@tabby_ai/hijri-converter": "1.0.5", "date-fns": "^4.1.0", "date-fns-jalali": "4.1.0-0" }, "peerDependencies": { "react": ">=16.8.0" } }, "sha512-tBaoDWjPwe0M5pGrum4H0SR6Lyk+BO9oHnp9JbKpGKW2mlraNPgP9BMfsg5pWpwrssARmeqk7YBl2oXutZTaHA=="],
+
+    "@trycompai/portal/@trycompai/design-system/react-resizable-panels": ["react-resizable-panels@4.11.0", "", { "peerDependencies": { "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" } }, "sha512-LPk/AkFDGkg7SsbOyL93ojrE6E7lhrxxDwnYNjfmnSeI6BE7Sje6dB24PXgZk8DeugdeXNk1LO+ohRqIjhxiLw=="],
+
+    "@trycompai/portal/@trycompai/design-system/recharts": ["recharts@2.15.4", "", { "dependencies": { "clsx": "^2.0.0", "eventemitter3": "^4.0.1", "lodash": "^4.17.21", "react-is": "^18.3.1", "react-smooth": "^4.0.4", "recharts-scale": "^0.4.4", "tiny-invariant": "^1.3.1", "victory-vendor": "^36.6.8" }, "peerDependencies": { "react": "^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw=="],
+
+    "@trycompai/portal/@trycompai/design-system/tailwind-merge": ["tailwind-merge@3.5.0", "", {}, "sha512-I8K9wewnVDkL1NTGoqWmVEIlUcB9gFriAEkXkfCjX5ib8ezGxtR3xD7iZIxrfArjEsH7F1CHD4RFUtxefdqV/A=="],
+
+    "@trycompai/portal/@trycompai/design-system/vaul": ["vaul@1.1.2", "", { "dependencies": { "@radix-ui/react-dialog": "^1.1.1" }, "peerDependencies": { "react": "^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc", "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc" } }, "sha512-ZFkClGpWyI2WUQjdLJ/BaGuV6AVQiJ3uELGk3OYtP+B6yCO7Cmn9vPFXVJkRaGkOJu3m8bQMgtyzNHixULceQA=="],
+
     "@trycompai/ui/ai/@ai-sdk/provider-utils": ["@ai-sdk/provider-utils@4.0.26", "", { "dependencies": { "@ai-sdk/provider": "3.0.10", "@standard-schema/spec": "^1.1.0", "eventsource-parser": "^3.0.8" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-CsKNLKsOpvPujRlIYvoz+Ybw+kGn7J4/fIZa/58+R7iWLLfwn6ifE2G6Yq8K9XvH/I/3bzaDAJ3NhRwEMsLBKQ=="],
 
     "@trycompai/ui/shiki/@shikijs/core": ["@shikijs/core@3.23.0", "", { "dependencies": { "@shikijs/types": "3.23.0", "@shikijs/vscode-textmate": "^10.0.2", "@types/hast": "^3.0.4", "hast-util-to-html": "^9.0.5" } }, "sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA=="],
diff --git a/package.json b/package.json
index 796a19fd03..8490e805cf 100644
--- a/package.json
+++ b/package.json
@@ -91,7 +91,7 @@
   "dependencies": {
     "@aws-sdk/client-s3": "3.1013.0",
     "@aws-sdk/s3-request-presigner": "3.1013.0",
-    "@trycompai/design-system": "1.1.4",
+    "@trycompai/design-system": "1.1.19",
     "@types/cheerio": "^1.0.0",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@upstash/vector": "^1.2.3",
diff --git a/packages/db/prisma/migrations/20260508142632_add_employment_event_fields/migration.sql b/packages/db/prisma/migrations/20260508142632_add_employment_event_fields/migration.sql
new file mode 100644
index 0000000000..8f999f337f
--- /dev/null
+++ b/packages/db/prisma/migrations/20260508142632_add_employment_event_fields/migration.sql
@@ -0,0 +1,14 @@
+-- AlterEnum
+-- This migration adds more than one value to an enum.
+-- With PostgreSQL versions 11 and earlier, this is not possible
+-- in a single migration. This can be worked around by creating
+-- multiple migrations, each migration adding only one value to
+-- the enum.
+
+
+ALTER TYPE "AttachmentEntityType" ADD VALUE 'employment_onboard';
+ALTER TYPE "AttachmentEntityType" ADD VALUE 'employment_offboard';
+
+-- AlterTable
+ALTER TABLE "Member" ADD COLUMN     "offboardDate" TIMESTAMP(3),
+ADD COLUMN     "onboardDate" TIMESTAMP(3);
diff --git a/packages/db/prisma/migrations/20260513143031_add_offboarding_checklist/migration.sql b/packages/db/prisma/migrations/20260513143031_add_offboarding_checklist/migration.sql
new file mode 100644
index 0000000000..b9f8bef98c
--- /dev/null
+++ b/packages/db/prisma/migrations/20260513143031_add_offboarding_checklist/migration.sql
@@ -0,0 +1,61 @@
+-- AlterEnum
+ALTER TYPE "AttachmentEntityType" ADD VALUE 'offboarding_checklist';
+
+-- CreateTable
+CREATE TABLE "OffboardingChecklistTemplate" (
+    "id" TEXT NOT NULL DEFAULT generate_prefixed_cuid('oct'::text),
+    "organizationId" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "description" TEXT,
+    "evidenceRequired" BOOLEAN NOT NULL DEFAULT false,
+    "sortOrder" INTEGER NOT NULL DEFAULT 0,
+    "isDefault" BOOLEAN NOT NULL DEFAULT false,
+    "isEnabled" BOOLEAN NOT NULL DEFAULT true,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "OffboardingChecklistTemplate_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "OffboardingChecklistCompletion" (
+    "id" TEXT NOT NULL DEFAULT generate_prefixed_cuid('occ'::text),
+    "organizationId" TEXT NOT NULL,
+    "memberId" TEXT NOT NULL,
+    "templateItemId" TEXT NOT NULL,
+    "completedById" TEXT NOT NULL,
+    "completedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "notes" TEXT,
+
+    CONSTRAINT "OffboardingChecklistCompletion_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "OffboardingChecklistTemplate_organizationId_idx" ON "OffboardingChecklistTemplate"("organizationId");
+
+-- CreateIndex
+CREATE INDEX "OffboardingChecklistTemplate_organizationId_isEnabled_idx" ON "OffboardingChecklistTemplate"("organizationId", "isEnabled");
+
+-- CreateIndex
+CREATE INDEX "OffboardingChecklistCompletion_organizationId_idx" ON "OffboardingChecklistCompletion"("organizationId");
+
+-- CreateIndex
+CREATE INDEX "OffboardingChecklistCompletion_memberId_idx" ON "OffboardingChecklistCompletion"("memberId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "OffboardingChecklistCompletion_memberId_templateItemId_key" ON "OffboardingChecklistCompletion"("memberId", "templateItemId");
+
+-- AddForeignKey
+ALTER TABLE "OffboardingChecklistTemplate" ADD CONSTRAINT "OffboardingChecklistTemplate_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingChecklistCompletion" ADD CONSTRAINT "OffboardingChecklistCompletion_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingChecklistCompletion" ADD CONSTRAINT "OffboardingChecklistCompletion_memberId_fkey" FOREIGN KEY ("memberId") REFERENCES "Member"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingChecklistCompletion" ADD CONSTRAINT "OffboardingChecklistCompletion_templateItemId_fkey" FOREIGN KEY ("templateItemId") REFERENCES "OffboardingChecklistTemplate"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingChecklistCompletion" ADD CONSTRAINT "OffboardingChecklistCompletion_completedById_fkey" FOREIGN KEY ("completedById") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
diff --git a/packages/db/prisma/migrations/20260513161136_add_access_revocation_tracking/migration.sql b/packages/db/prisma/migrations/20260513161136_add_access_revocation_tracking/migration.sql
new file mode 100644
index 0000000000..8187ae75c2
--- /dev/null
+++ b/packages/db/prisma/migrations/20260513161136_add_access_revocation_tracking/migration.sql
@@ -0,0 +1,36 @@
+-- AlterTable
+ALTER TABLE "OffboardingChecklistTemplate" ADD COLUMN     "isAccessRevocation" BOOLEAN NOT NULL DEFAULT false;
+
+-- CreateTable
+CREATE TABLE "OffboardingAccessRevocation" (
+    "id" TEXT NOT NULL DEFAULT generate_prefixed_cuid('oar'::text),
+    "organizationId" TEXT NOT NULL,
+    "memberId" TEXT NOT NULL,
+    "vendorId" TEXT NOT NULL,
+    "revokedById" TEXT NOT NULL,
+    "revokedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "notes" TEXT,
+
+    CONSTRAINT "OffboardingAccessRevocation_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "OffboardingAccessRevocation_organizationId_idx" ON "OffboardingAccessRevocation"("organizationId");
+
+-- CreateIndex
+CREATE INDEX "OffboardingAccessRevocation_memberId_idx" ON "OffboardingAccessRevocation"("memberId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "OffboardingAccessRevocation_memberId_vendorId_key" ON "OffboardingAccessRevocation"("memberId", "vendorId");
+
+-- AddForeignKey
+ALTER TABLE "OffboardingAccessRevocation" ADD CONSTRAINT "OffboardingAccessRevocation_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingAccessRevocation" ADD CONSTRAINT "OffboardingAccessRevocation_memberId_fkey" FOREIGN KEY ("memberId") REFERENCES "Member"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingAccessRevocation" ADD CONSTRAINT "OffboardingAccessRevocation_vendorId_fkey" FOREIGN KEY ("vendorId") REFERENCES "Vendor"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OffboardingAccessRevocation" ADD CONSTRAINT "OffboardingAccessRevocation_revokedById_fkey" FOREIGN KEY ("revokedById") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
diff --git a/packages/db/prisma/schema/attachments.prisma b/packages/db/prisma/schema/attachments.prisma
index 8f636dbc73..4d83eddb5e 100644
--- a/packages/db/prisma/schema/attachments.prisma
+++ b/packages/db/prisma/schema/attachments.prisma
@@ -27,6 +27,9 @@ enum AttachmentEntityType {
   trust_nda
   task_item
   background_check
+  employment_onboard
+  employment_offboard
+  offboarding_checklist
 }
 
 enum AttachmentType {
diff --git a/packages/db/prisma/schema/auth.prisma b/packages/db/prisma/schema/auth.prisma
index 801083b868..4d4661635e 100644
--- a/packages/db/prisma/schema/auth.prisma
+++ b/packages/db/prisma/schema/auth.prisma
@@ -29,6 +29,8 @@ model User {
   lockedTimelineInstances    TimelineInstance[]   @relation("TimelineInstanceLockedBy")
   unlockedTimelineInstances  TimelineInstance[]   @relation("TimelineInstanceUnlockedBy")
   publishedFrameworkVersions FrameworkVersion[]   @relation("FrameworkVersionPublisher")
+  offboardingChecklistCompletions OffboardingChecklistCompletion[] @relation("OffboardingChecklistCompletedBy")
+  offboardingAccessRevocations    OffboardingAccessRevocation[]    @relation("AccessRevocationRevokedBy")
 
   @@unique([email])
 }
@@ -119,6 +121,8 @@ model Member {
   isActive                        Boolean                           @default(true)
   deactivated                     Boolean                           @default(false)
   backgroundCheckExempt           Boolean                           @default(false)
+  onboardDate                     DateTime?
+  offboardDate                    DateTime?
   externalUserId                  String?
   externalUserSource              String?
   employeeTrainingVideoCompletion EmployeeTrainingVideoCompletion[]
@@ -145,6 +149,8 @@ model Member {
   approvedTasks                    Task[]                   @relation("TaskApprover")
   devices                          Device[]
   backgroundCheckRequests          BackgroundCheckRequest[]
+  offboardingChecklistCompletions  OffboardingChecklistCompletion[]
+  offboardingAccessRevocations     OffboardingAccessRevocation[]
 }
 
 model Invitation {
diff --git a/packages/db/prisma/schema/offboarding-checklist.prisma b/packages/db/prisma/schema/offboarding-checklist.prisma
new file mode 100644
index 0000000000..4db287fafc
--- /dev/null
+++ b/packages/db/prisma/schema/offboarding-checklist.prisma
@@ -0,0 +1,57 @@
+model OffboardingChecklistTemplate {
+  id                 String       @id @default(dbgenerated("generate_prefixed_cuid('oct'::text)"))
+  organizationId     String
+  organization       Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  title              String
+  description        String?
+  evidenceRequired   Boolean      @default(false)
+  sortOrder          Int          @default(0)
+  isDefault          Boolean      @default(false)
+  isEnabled          Boolean      @default(true)
+  isAccessRevocation Boolean      @default(false)
+  createdAt          DateTime     @default(now())
+  updatedAt          DateTime     @updatedAt
+
+  completions OffboardingChecklistCompletion[]
+
+  @@index([organizationId])
+  @@index([organizationId, isEnabled])
+}
+
+model OffboardingChecklistCompletion {
+  id             String   @id @default(dbgenerated("generate_prefixed_cuid('occ'::text)"))
+  organizationId String
+  memberId       String
+  templateItemId String
+  completedById  String
+  completedAt    DateTime @default(now())
+  notes          String?
+
+  organization Organization                 @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  member       Member                       @relation(fields: [memberId], references: [id], onDelete: Cascade)
+  templateItem OffboardingChecklistTemplate @relation(fields: [templateItemId], references: [id], onDelete: Cascade)
+  completedBy  User                         @relation("OffboardingChecklistCompletedBy", fields: [completedById], references: [id], onDelete: Cascade)
+
+  @@unique([memberId, templateItemId])
+  @@index([organizationId])
+  @@index([memberId])
+}
+
+model OffboardingAccessRevocation {
+  id             String   @id @default(dbgenerated("generate_prefixed_cuid('oar'::text)"))
+  organizationId String
+  memberId       String
+  vendorId       String
+  revokedById    String
+  revokedAt      DateTime @default(now())
+  notes          String?
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  member       Member       @relation(fields: [memberId], references: [id], onDelete: Cascade)
+  vendor       Vendor       @relation(fields: [vendorId], references: [id], onDelete: Cascade)
+  revokedBy    User         @relation("AccessRevocationRevokedBy", fields: [revokedById], references: [id], onDelete: Cascade)
+
+  @@unique([memberId, vendorId])
+  @@index([organizationId])
+  @@index([memberId])
+}
diff --git a/packages/db/prisma/schema/organization.prisma b/packages/db/prisma/schema/organization.prisma
index 04e9bc24cd..001577d47d 100644
--- a/packages/db/prisma/schema/organization.prisma
+++ b/packages/db/prisma/schema/organization.prisma
@@ -100,5 +100,10 @@ model Organization {
   customFrameworks   CustomFramework[]
   customRequirements CustomRequirement[]
 
+  // Offboarding Checklist
+  offboardingChecklistTemplates    OffboardingChecklistTemplate[]
+  offboardingChecklistCompletions  OffboardingChecklistCompletion[]
+  offboardingAccessRevocations     OffboardingAccessRevocation[]
+
   @@index([slug])
 }
diff --git a/packages/db/prisma/schema/vendor.prisma b/packages/db/prisma/schema/vendor.prisma
index afdd196e3a..70d7c36764 100644
--- a/packages/db/prisma/schema/vendor.prisma
+++ b/packages/db/prisma/schema/vendor.prisma
@@ -38,9 +38,10 @@ model Vendor {
   organization   Organization    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
   assigneeId     String?
   assignee       Member?         @relation(fields: [assigneeId], references: [id], onDelete: Cascade)
-  contacts       VendorContact[]
-  tasks          Task[]
-  findings       Finding[]
+  contacts                     VendorContact[]
+  tasks                        Task[]
+  findings                     Finding[]
+  offboardingAccessRevocations OffboardingAccessRevocation[]
 
   @@index([organizationId])
   @@index([assigneeId])
diff --git a/packages/docs/openapi.json b/packages/docs/openapi.json
index cb75696ffd..48266befc0 100644
--- a/packages/docs/openapi.json
+++ b/packages/docs/openapi.json
@@ -3,7 +3,7 @@
   "paths": {
     "/v1/organization": {
       "get": {
-        "description": "Retrieve organization profile data used to personalize compliance workflows, Trust Center branding, API automation, and audit readiness reporting.",
+        "description": "Returns detailed information about the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "OrganizationController_getOrganization_v1",
         "parameters": [
           {
@@ -124,29 +124,13 @@
             "apikey": []
           }
         ],
-        "summary": "Get organization profile",
+        "summary": "Get organization information",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get organization profile | Comp AI API",
-            "sidebarTitle": "Get organization profile",
-            "description": "Retrieve organization profile data used to personalize compliance workflows, Trust Center branding, API automation, and audit readiness reporting.",
-            "og:title": "Get organization profile | Comp AI API",
-            "og:description": "Retrieve organization profile data used to personalize compliance workflows, Trust Center branding, API automation, and audit readiness reporting."
-          }
-        },
-        "x-codeSamples": [
-          {
-            "lang": "bash",
-            "label": "Get organization profile",
-            "source": "curl --request GET --url \"https://api.trycomp.ai/v1/organization\" --header \"X-API-Key: $COMP_AI_API_KEY\""
-          }
         ]
       },
       "patch": {
-        "description": "Partially updates the authenticated organization. Only provided fields will be updated.",
+        "description": "Partially updates the authenticated organization. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "OrganizationController_updateOrganization_v1",
         "parameters": [],
         "requestBody": {
@@ -356,19 +340,10 @@
         "summary": "Update organization",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update organization | Comp AI API",
-            "sidebarTitle": "Update organization",
-            "description": "Partially updates the authenticated organization. Only provided fields will be updated.",
-            "og:title": "Update organization | Comp AI API",
-            "og:description": "Partially updates the authenticated organization. Only provided fields will be updated."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Permanently deletes the authenticated organization. This action cannot be undone.",
+        "description": "Permanently deletes the authenticated organization. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "OrganizationController_deleteOrganization_v1",
         "parameters": [],
         "responses": {
@@ -453,16 +428,7 @@
         "summary": "Delete organization",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete organization | Comp AI API",
-            "sidebarTitle": "Delete organization",
-            "description": "Permanently deletes the authenticated organization. This action cannot be undone.",
-            "og:title": "Delete organization | Comp AI API",
-            "og:description": "Permanently deletes the authenticated organization. This action cannot be undone."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/onboarding": {
@@ -482,22 +448,12 @@
         "summary": "Get organization onboarding status",
         "tags": [
           "Organization"
-        ],
-        "description": "Get organization onboarding status in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get organization onboarding status | Comp AI API",
-            "sidebarTitle": "Get organization onboarding status",
-            "description": "Get organization onboarding status in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-            "og:title": "Get organization onboarding status | Comp AI API",
-            "og:description": "Get organization onboarding status in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/transfer-ownership": {
       "post": {
-        "description": "Transfers organization ownership to another member. The current owner will become an admin and keep all other roles. The new owner will receive the owner role while keeping their existing roles. Only the current organization owner can.",
+        "description": "Transfers organization ownership to another member. The current owner will become an admin and keep all other roles. The new owner will receive the owner role while keeping their existing roles. Only the current organization owner can perform this action. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "OrganizationController_transferOwnership_v1",
         "parameters": [],
         "requestBody": {
@@ -614,16 +570,7 @@
         "summary": "Transfer organization ownership",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Transfer organization ownership | Comp AI API",
-            "sidebarTitle": "Transfer organization ownership",
-            "description": "Transfers organization ownership to another member. The current owner will become an admin and keep all other roles. The new owner will receive the owner.",
-            "og:title": "Transfer organization ownership | Comp AI API",
-            "og:description": "Transfers organization ownership to another member. The current owner will become an admin and keep all other roles. The new owner will receive the owner."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/role-notifications": {
@@ -696,17 +643,7 @@
         "summary": "Update role notification settings",
         "tags": [
           "Organization"
-        ],
-        "description": "Update role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update role notification settings | Comp AI API",
-            "sidebarTitle": "Update role notification settings",
-            "description": "Update role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-            "og:title": "Update role notification settings | Comp AI API",
-            "og:description": "Update role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-          }
-        }
+        ]
       },
       "get": {
         "operationId": "OrganizationController_getRoleNotifications_v1",
@@ -724,17 +661,7 @@
         "summary": "Get role notification settings",
         "tags": [
           "Organization"
-        ],
-        "description": "Get role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get role notification settings | Comp AI API",
-            "sidebarTitle": "Get role notification settings",
-            "description": "Get role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-            "og:title": "Get role notification settings | Comp AI API",
-            "og:description": "Get role notification settings in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/api-keys": {
@@ -751,20 +678,10 @@
             "apikey": []
           }
         ],
-        "summary": "List API keys",
+        "summary": "List active API keys",
         "tags": [
           "Organization"
-        ],
-        "description": "List active API keys for an organization so administrators can audit automation access and rotate credentials safely.",
-        "x-mint": {
-          "metadata": {
-            "title": "List API keys | Comp AI API",
-            "sidebarTitle": "List API keys",
-            "description": "List active API keys for an organization so administrators can audit automation access and rotate credentials safely.",
-            "og:title": "List API keys | Comp AI API",
-            "og:description": "List active API keys for an organization so administrators can audit automation access and rotate credentials safely."
-          }
-        }
+        ]
       },
       "post": {
         "operationId": "OrganizationController_createApiKey_v1",
@@ -779,20 +696,10 @@
             "apikey": []
           }
         ],
-        "summary": "Create API key",
+        "summary": "Create a new API key",
         "tags": [
           "Organization"
-        ],
-        "description": "Create a scoped API key for server-side compliance automation such as evidence sync, policy workflows, or security questionnaire tooling.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create API key | Comp AI API",
-            "sidebarTitle": "Create API key",
-            "description": "Create a scoped API key for server-side compliance automation such as evidence sync, policy workflows, or security questionnaire tooling.",
-            "og:title": "Create API key | Comp AI API",
-            "og:description": "Create a scoped API key for server-side compliance automation such as evidence sync, policy workflows, or security questionnaire tooling."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/api-keys/available-scopes": {
@@ -809,25 +716,15 @@
             "apikey": []
           }
         ],
-        "summary": "List API key scopes",
+        "summary": "Get available API key scopes",
         "tags": [
           "Organization"
-        ],
-        "description": "Retrieve available API key scopes and permissions before creating credentials for a specific compliance automation workflow.",
-        "x-mint": {
-          "metadata": {
-            "title": "List API key scopes | Comp AI API",
-            "sidebarTitle": "List API key scopes",
-            "description": "Retrieve available API key scopes and permissions before creating credentials for a specific compliance automation workflow.",
-            "og:title": "List API key scopes | Comp AI API",
-            "og:description": "Retrieve available API key scopes and permissions before creating credentials for a specific compliance automation workflow."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/primary-color": {
       "get": {
-        "description": "Retrieve the organization primary brand color used for Trust Center theming, portals, and API-driven embedded experiences.",
+        "description": "Returns the primary color of the organization. Supports three access methods: 1) API key authentication (X-API-Key header), 2) Session authentication (Bearer token or cookies), or 3) Public access using an access token query parameter (?token=tok_xxx). When using an access token, no authentication is required.",
         "operationId": "OrganizationController_getPrimaryColor_v1",
         "parameters": [
           {
@@ -905,19 +802,10 @@
             "apikey": []
           }
         ],
-        "summary": "Get organization brand color",
+        "summary": "Get organization primary color",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get organization brand color | Comp AI API",
-            "sidebarTitle": "Get organization brand color",
-            "description": "Retrieve the organization primary brand color used for Trust Center theming, portals, and API-driven embedded experiences.",
-            "og:title": "Get organization brand color | Comp AI API",
-            "og:description": "Retrieve the organization primary brand color used for Trust Center theming, portals, and API-driven embedded experiences."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/logo": {
@@ -937,17 +825,7 @@
         "summary": "Upload organization logo",
         "tags": [
           "Organization"
-        ],
-        "description": "Upload organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-        "x-mint": {
-          "metadata": {
-            "title": "Upload organization logo | Comp AI API",
-            "sidebarTitle": "Upload organization logo",
-            "description": "Upload organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-            "og:title": "Upload organization logo | Comp AI API",
-            "og:description": "Upload organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-          }
-        }
+        ]
       },
       "delete": {
         "operationId": "OrganizationController_removeLogo_v1",
@@ -965,17 +843,7 @@
         "summary": "Remove organization logo",
         "tags": [
           "Organization"
-        ],
-        "description": "Remove organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-        "x-mint": {
-          "metadata": {
-            "title": "Remove organization logo | Comp AI API",
-            "sidebarTitle": "Remove organization logo",
-            "description": "Remove organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings.",
-            "og:title": "Remove organization logo | Comp AI API",
-            "og:description": "Remove organization logo in Comp AI. Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-          }
-        }
+        ]
       }
     },
     "/v1/organization/api-keys/revoke": {
@@ -992,20 +860,10 @@
             "apikey": []
           }
         ],
-        "summary": "Revoke API key",
+        "summary": "Revoke an API key",
         "tags": [
           "Organization"
-        ],
-        "description": "Revoke an organization API key when an integration is retired, credentials rotate, or access should be removed.",
-        "x-mint": {
-          "metadata": {
-            "title": "Revoke API key | Comp AI API",
-            "sidebarTitle": "Revoke API key",
-            "description": "Revoke an organization API key when an integration is retired, credentials rotate, or access should be removed.",
-            "og:title": "Revoke API key | Comp AI API",
-            "og:description": "Revoke an organization API key when an integration is retired, credentials rotate, or access should be removed."
-          }
-        }
+        ]
       }
     },
     "/v1/organization-access/auto-approve": {
@@ -1021,16 +879,7 @@
         "summary": "Auto-approve organization access via domain or self-hosted check",
         "tags": [
           "Organization"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Auto-approve organization access via domain | Comp AI API",
-            "sidebarTitle": "Auto-approve organization access via domain or self-hosted check",
-            "description": "Grants hasAccess on the active organization if the requesting user is an internal trycomp.ai user, the deployment is self-hosted, or the user email domain.",
-            "og:title": "Auto-approve organization access via domain | Comp AI API",
-            "og:description": "Grants hasAccess on the active organization if the requesting user is an internal trycomp.ai user, the deployment is self-hosted, or the user email domain."
-          }
-        }
+        ]
       }
     },
     "/v1/people/invite": {
@@ -1057,25 +906,15 @@
             "apikey": []
           }
         ],
-        "summary": "Invite workforce members",
+        "summary": "Invite members to the organization",
         "tags": [
           "People"
-        ],
-        "description": "Invite employees or contractors to complete portal tasks, training, device setup, and compliance evidence requirements.",
-        "x-mint": {
-          "metadata": {
-            "title": "Invite workforce members | Comp AI API",
-            "sidebarTitle": "Invite workforce members",
-            "description": "Invite employees or contractors to complete portal tasks, training, device setup, and compliance evidence requirements.",
-            "og:title": "Invite workforce members | Comp AI API",
-            "og:description": "Invite employees or contractors to complete portal tasks, training, device setup, and compliance evidence requirements."
-          }
-        }
+        ]
       }
     },
     "/v1/people": {
       "get": {
-        "description": "List employees and contractors with onboarding, training, device, and compliance status used for people-security controls.",
+        "description": "Returns all members for the authenticated organization with their user information. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_getAllPeople_v1",
         "parameters": [
           {
@@ -1085,6 +924,38 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "name": "onboardAfter",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "onboardBefore",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "offboardAfter",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "offboardBefore",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
@@ -1218,22 +1089,13 @@
             "apikey": []
           }
         ],
-        "summary": "List workforce members",
+        "summary": "Get all people",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List workforce members | Comp AI API",
-            "sidebarTitle": "List workforce members",
-            "description": "List employees and contractors with onboarding, training, device, and compliance status used for people-security controls.",
-            "og:title": "List workforce members | Comp AI API",
-            "og:description": "List employees and contractors with onboarding, training, device, and compliance status used for people-security controls."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Adds a new member to the authenticated organization. The user must already exist in the system.",
+        "description": "Adds a new member to the authenticated organization. The user must already exist in the system. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_createMember_v1",
         "parameters": [],
         "requestBody": {
@@ -1351,16 +1213,7 @@
         "summary": "Create a new member",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create a new member | Comp AI API",
-            "sidebarTitle": "Create a new member",
-            "description": "Adds a new member to the authenticated organization. The user must already exist in the system.",
-            "og:title": "Create a new member | Comp AI API",
-            "og:description": "Adds a new member to the authenticated organization. The user must already exist in the system."
-          }
-        }
+        ]
       }
     },
     "/v1/people/devices": {
@@ -1380,17 +1233,7 @@
         "summary": "Get all employee devices with fleet compliance data",
         "tags": [
           "People"
-        ],
-        "description": "Get all employee devices with fleet compliance data in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get all employee devices with fleet | Comp AI API",
-            "sidebarTitle": "Get all employee devices with fleet compliance data",
-            "description": "Get all employee devices with fleet compliance data in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Get all employee devices with fleet | Comp AI API",
-            "og:description": "Get all employee devices with fleet compliance data in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       }
     },
     "/v1/people/test-stats/by-assignee": {
@@ -1410,22 +1253,12 @@
         "summary": "Get integration test statistics grouped by assignee",
         "tags": [
           "People"
-        ],
-        "description": "Get integration test statistics grouped by assignee in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get integration test statistics grouped by | Comp AI API",
-            "sidebarTitle": "Get integration test statistics grouped by assignee",
-            "description": "Get integration test statistics grouped by assignee in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Get integration test statistics grouped by | Comp AI API",
-            "og:description": "Get integration test statistics grouped by assignee in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       }
     },
     "/v1/people/bulk": {
       "post": {
-        "description": "Bulk adds multiple members to the authenticated organization. Each member must have a valid user ID that exists in the system. Members who already exist in the organization or have invalid data will be skipped with error details returned.",
+        "description": "Bulk adds multiple members to the authenticated organization. Each member must have a valid user ID that exists in the system. Members who already exist in the organization or have invalid data will be skipped with error details returned. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_bulkCreateMembers_v1",
         "parameters": [],
         "requestBody": {
@@ -1640,16 +1473,7 @@
         "summary": "Add multiple members to organization",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Add multiple members to organization | Comp AI API",
-            "sidebarTitle": "Add multiple members to organization",
-            "description": "Bulk adds multiple members to the authenticated organization. Each member must have a valid user ID that exists in the system. Members who already exist in.",
-            "og:title": "Add multiple members to organization | Comp AI API",
-            "og:description": "Bulk adds multiple members to the authenticated organization. Each member must have a valid user ID that exists in the system. Members who already exist in."
-          }
-        }
+        ]
       }
     },
     "/v1/people/mentionable": {
@@ -1678,17 +1502,7 @@
         "summary": "Get members who can read a specific resource type",
         "tags": [
           "People"
-        ],
-        "description": "Get members who can read a specific resource type in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get members who can read a specific resource | Comp AI API",
-            "sidebarTitle": "Get members who can read a specific resource type",
-            "description": "Get members who can read a specific resource type in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Get members who can read a specific resource | Comp AI API",
-            "og:description": "Get members who can read a specific resource type in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/reactivate": {
@@ -1719,22 +1533,12 @@
         "summary": "Reactivate a deactivated member",
         "tags": [
           "People"
-        ],
-        "description": "Reactivate a deactivated member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Reactivate a deactivated member | Comp AI API",
-            "sidebarTitle": "Reactivate a deactivated member",
-            "description": "Reactivate a deactivated member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee.",
-            "og:title": "Reactivate a deactivated member | Comp AI API",
-            "og:description": "Reactivate a deactivated member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}": {
       "get": {
-        "description": "Returns a specific member by ID for the authenticated organization with their user information.",
+        "description": "Returns a specific member by ID for the authenticated organization with their user information. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_getPersonById_v1",
         "parameters": [
           {
@@ -1836,19 +1640,10 @@
         "summary": "Get person by ID",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get person by ID | Comp AI API",
-            "sidebarTitle": "Get person by ID",
-            "description": "Returns a specific member by ID for the authenticated organization with their user information.",
-            "og:title": "Get person by ID | Comp AI API",
-            "og:description": "Returns a specific member by ID for the authenticated organization with their user information."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update a workforce member profile, role, department, or compliance metadata used for people-security controls.",
+        "description": "Partially updates a member. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_updateMember_v1",
         "parameters": [
           {
@@ -1974,22 +1769,13 @@
             "apikey": []
           }
         ],
-        "summary": "Update workforce member",
+        "summary": "Update member",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update workforce member | Comp AI API",
-            "sidebarTitle": "Update workforce member",
-            "description": "Update a workforce member profile, role, department, or compliance metadata used for people-security controls.",
-            "og:title": "Update workforce member | Comp AI API",
-            "og:description": "Update a workforce member profile, role, department, or compliance metadata used for people-security controls."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Permanently removes a member from the organization. This action cannot be undone.",
+        "description": "Permanently removes a member from the organization. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_deleteMember_v1",
         "parameters": [
           {
@@ -2106,16 +1892,7 @@
         "summary": "Delete member",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete member | Comp AI API",
-            "sidebarTitle": "Delete member",
-            "description": "Permanently removes a member from the organization. This action cannot be undone.",
-            "og:title": "Delete member | Comp AI API",
-            "og:description": "Permanently removes a member from the organization. This action cannot be undone."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/training-videos": {
@@ -2146,17 +1923,7 @@
         "summary": "Get training video completions for a member",
         "tags": [
           "People"
-        ],
-        "description": "Get training video completions for a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get training video completions for a member | Comp AI API",
-            "sidebarTitle": "Get training video completions for a member",
-            "description": "Get training video completions for a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Get training video completions for a member | Comp AI API",
-            "og:description": "Get training video completions for a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/fleet-compliance": {
@@ -2184,25 +1951,15 @@
             "apikey": []
           }
         ],
-        "summary": "Get fleet compliance",
+        "summary": "Get fleet/device compliance for a member",
         "tags": [
           "People"
-        ],
-        "description": "Retrieve Fleet device compliance status so endpoint security findings can support people-security controls and audit evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get fleet compliance | Comp AI API",
-            "sidebarTitle": "Get fleet compliance",
-            "description": "Retrieve Fleet device compliance status so endpoint security findings can support people-security controls and audit evidence.",
-            "og:title": "Get fleet compliance | Comp AI API",
-            "og:description": "Retrieve Fleet device compliance status so endpoint security findings can support people-security controls and audit evidence."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/host/{hostId}": {
       "delete": {
-        "description": "Removes a single host (device) from FleetDM by host ID. Only organization owners can perform this action. Validates that the organization exists and the member exists within the organization.",
+        "description": "Removes a single host (device) from FleetDM by host ID. Only organization owners can perform this action. Validates that the organization exists and the member exists within the organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_removeHost_v1",
         "parameters": [
           {
@@ -2309,16 +2066,7 @@
         "summary": "Remove host (device) from Fleet",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Remove host (device) from Fleet | Comp AI API",
-            "sidebarTitle": "Remove host (device) from Fleet",
-            "description": "Removes a single host (device) from FleetDM by host ID. Only organization owners can perform this action. Validates that the organization exists and the.",
-            "og:title": "Remove host (device) from Fleet | Comp AI API",
-            "og:description": "Removes a single host (device) from FleetDM by host ID. Only organization owners can perform this action. Validates that the organization exists and the."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/resend-portal-invite": {
@@ -2349,22 +2097,12 @@
         "summary": "Resend portal invite email to a member",
         "tags": [
           "People"
-        ],
-        "description": "Resend portal invite email to a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Resend portal invite email to a member | Comp AI API",
-            "sidebarTitle": "Resend portal invite email to a member",
-            "description": "Resend portal invite email to a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee.",
-            "og:title": "Resend portal invite email to a member | Comp AI API",
-            "og:description": "Resend portal invite email to a member in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee."
-          }
-        }
+        ]
       }
     },
     "/v1/people/{id}/unlink-device": {
       "patch": {
-        "description": "Resets the fleetDmLabelId for a member, effectively unlinking their device from FleetDM. This will disconnect the device from the organization.",
+        "description": "Resets the fleetDmLabelId for a member, effectively unlinking their device from FleetDM. This will disconnect the device from the organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PeopleController_unlinkDevice_v1",
         "parameters": [
           {
@@ -2482,22 +2220,36 @@
         "summary": "Unlink device from member",
         "tags": [
           "People"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Unlink device from member | Comp AI API",
-            "sidebarTitle": "Unlink device from member",
-            "description": "Resets the fleetDmLabelId for a member, effectively unlinking their device from FleetDM. This will disconnect the device from the organization.",
-            "og:title": "Unlink device from member | Comp AI API",
-            "og:description": "Resets the fleetDmLabelId for a member, effectively unlinking their device from FleetDM. This will disconnect the device from the organization."
-          }
-        }
+        ]
       }
     },
-    "/v1/people/me/email-preferences": {
+    "/v1/people/{id}/employment-evidence/{eventType}": {
       "get": {
-        "operationId": "PeopleController_getEmailPreferences_v1",
-        "parameters": [],
+        "operationId": "PeopleController_getEmploymentEvidence_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Member ID",
+            "schema": {
+              "example": "mem_abc123def456",
+              "type": "string"
+            }
+          },
+          {
+            "name": "eventType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "enum": [
+                "onboard",
+                "offboard"
+              ],
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
           "200": {
             "description": ""
@@ -2508,36 +2260,49 @@
             "apikey": []
           }
         ],
-        "summary": "Get current user email notification preferences",
+        "summary": "Get employment evidence attachments",
         "tags": [
           "People"
-        ],
-        "description": "Get current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get current user email notification | Comp AI API",
-            "sidebarTitle": "Get current user email notification preferences",
-            "description": "Get current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Get current user email notification | Comp AI API",
-            "og:description": "Get current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       },
-      "put": {
-        "operationId": "PeopleController_updateEmailPreferences_v1",
-        "parameters": [],
+      "post": {
+        "operationId": "PeopleController_uploadEmploymentEvidence_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Member ID",
+            "schema": {
+              "example": "mem_abc123def456",
+              "type": "string"
+            }
+          },
+          {
+            "name": "eventType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "enum": [
+                "onboard",
+                "offboard"
+              ],
+              "type": "string"
+            }
+          }
+        ],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/UpdateEmailPreferencesDto"
+                "$ref": "#/components/schemas/UploadAttachmentDto"
               }
             }
           }
         },
         "responses": {
-          "200": {
+          "201": {
             "description": ""
           }
         },
@@ -2546,26 +2311,48 @@
             "apikey": []
           }
         ],
-        "summary": "Update current user email notification preferences",
+        "summary": "Upload employment evidence",
         "tags": [
           "People"
-        ],
-        "description": "Update current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update current user email notification | Comp AI API",
-            "sidebarTitle": "Update current user email notification preferences",
-            "description": "Update current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences.",
-            "og:title": "Update current user email notification | Comp AI API",
-            "og:description": "Update current user email notification preferences in Comp AI. Invite and manage workforce members, training status, device compliance, email preferences."
-          }
-        }
+        ]
       }
     },
-    "/v1/timelines": {
-      "get": {
-        "operationId": "TimelinesController_findAll_v1",
-        "parameters": [],
+    "/v1/people/{id}/employment-evidence/{eventType}/{attachmentId}": {
+      "delete": {
+        "operationId": "PeopleController_deleteEmploymentEvidence_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Member ID",
+            "schema": {
+              "example": "mem_abc123def456",
+              "type": "string"
+            }
+          },
+          {
+            "name": "eventType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "enum": [
+                "onboard",
+                "offboard"
+              ],
+              "type": "string"
+            }
+          },
+          {
+            "name": "attachmentId",
+            "required": true,
+            "in": "path",
+            "description": "Attachment ID",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
           "200": {
             "description": ""
@@ -2573,23 +2360,132 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "List timelines for the organization",
+        "summary": "Delete employment evidence",
         "tags": [
-          "Timelines"
-        ],
-        "description": "List timelines for the organization in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "List timelines for the organization | Comp AI API",
-            "sidebarTitle": "List timelines for the organization",
-            "description": "List timelines for the organization in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-            "og:title": "List timelines for the organization | Comp AI API",
-            "og:description": "List timelines for the organization in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization."
+          "People"
+        ]
+      }
+    },
+    "/v1/people/me/email-preferences": {
+      "get": {
+        "operationId": "PeopleController_getEmailPreferences_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get current user email notification preferences",
+        "tags": [
+          "People"
+        ]
+      },
+      "put": {
+        "operationId": "PeopleController_updateEmailPreferences_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateEmailPreferencesDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Update current user email notification preferences",
+        "tags": [
+          "People"
+        ]
+      }
+    },
+    "/v1/attachments/{attachmentId}/download": {
+      "get": {
+        "description": "Generate a fresh signed URL for downloading any attachment",
+        "operationId": "AttachmentsController_getAttachmentDownloadUrl_v1",
+        "parameters": [
+          {
+            "name": "attachmentId",
+            "required": true,
+            "in": "path",
+            "description": "Unique attachment identifier",
+            "schema": {
+              "example": "att_abc123def456",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Download URL generated successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "downloadUrl": {
+                      "type": "string",
+                      "description": "Signed URL for downloading the file",
+                      "example": "https://bucket.s3.amazonaws.com/path/to/file.pdf?signature=..."
+                    },
+                    "expiresIn": {
+                      "type": "number",
+                      "description": "URL expiration time in seconds",
+                      "example": 900
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get attachment download URL",
+        "tags": [
+          "Attachments"
+        ]
+      }
+    },
+    "/v1/timelines": {
+      "get": {
+        "operationId": "TimelinesController_findAll_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "bearer": []
+          }
+        ],
+        "summary": "List timelines for the organization",
+        "tags": [
+          "Timelines"
+        ]
       }
     },
     "/v1/timelines/{id}": {
@@ -2618,17 +2514,7 @@
         "summary": "Get a single timeline instance with phases",
         "tags": [
           "Timelines"
-        ],
-        "description": "Get a single timeline instance with phases in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a single timeline instance with phases | Comp AI API",
-            "sidebarTitle": "Get a single timeline instance with phases",
-            "description": "Get a single timeline instance with phases in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-            "og:title": "Get a single timeline instance with phases | Comp AI API",
-            "og:description": "Get a single timeline instance with phases in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization."
-          }
-        }
+        ]
       }
     },
     "/v1/timelines/{id}/phases/{phaseId}/ready": {
@@ -2665,22 +2551,12 @@
         "summary": "Mark a phase as ready for review",
         "tags": [
           "Timelines"
-        ],
-        "description": "Mark a phase as ready for review in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Mark a phase as ready for review | Comp AI API",
-            "sidebarTitle": "Mark a phase as ready for review",
-            "description": "Mark a phase as ready for review in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization.",
-            "og:title": "Mark a phase as ready for review | Comp AI API",
-            "og:description": "Mark a phase as ready for review in Comp AI. Track audit and compliance readiness timelines, phases, and review milestones for an organization."
-          }
-        }
+        ]
       }
     },
     "/v1/risks": {
       "get": {
-        "description": "List organization risks with owners, departments, severity, mitigation status, and evidence for risk management reporting.",
+        "description": "Returns all risks for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "RisksController_getAllRisks_v1",
         "parameters": [
           {
@@ -3005,22 +2881,13 @@
             "apikey": []
           }
         ],
-        "summary": "List organization risks",
+        "summary": "Get all risks",
         "tags": [
           "Risks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List organization risks | Comp AI API",
-            "sidebarTitle": "List organization risks",
-            "description": "List organization risks with owners, departments, severity, mitigation status, and evidence for risk management reporting.",
-            "og:title": "List organization risks | Comp AI API",
-            "og:description": "List organization risks with owners, departments, severity, mitigation status, and evidence for risk management reporting."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Create a risk record with ownership and context so compliance teams can track mitigation and remediation work.",
+        "description": "Creates a new risk for the authenticated organization. All required fields must be provided. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "RisksController_createRisk_v1",
         "parameters": [],
         "requestBody": {
@@ -3288,19 +3155,10 @@
             "apikey": []
           }
         ],
-        "summary": "Create organization risk",
+        "summary": "Create a new risk",
         "tags": [
           "Risks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create organization risk | Comp AI API",
-            "sidebarTitle": "Create organization risk",
-            "description": "Create a risk record with ownership and context so compliance teams can track mitigation and remediation work.",
-            "og:title": "Create organization risk | Comp AI API",
-            "og:description": "Create a risk record with ownership and context so compliance teams can track mitigation and remediation work."
-          }
-        }
+        ]
       }
     },
     "/v1/risks/stats/by-assignee": {
@@ -3320,17 +3178,7 @@
         "summary": "Get risk statistics grouped by assignee",
         "tags": [
           "Risks"
-        ],
-        "description": "Get risk statistics grouped by assignee in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance remediation status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get risk statistics grouped by assignee | Comp AI API",
-            "sidebarTitle": "Get risk statistics grouped by assignee",
-            "description": "Get risk statistics grouped by assignee in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance.",
-            "og:title": "Get risk statistics grouped by assignee | Comp AI API",
-            "og:description": "Get risk statistics grouped by assignee in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance."
-          }
-        }
+        ]
       }
     },
     "/v1/risks/stats/by-department": {
@@ -3350,22 +3198,12 @@
         "summary": "Get risk counts grouped by department",
         "tags": [
           "Risks"
-        ],
-        "description": "Get risk counts grouped by department in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance remediation status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get risk counts grouped by department | Comp AI API",
-            "sidebarTitle": "Get risk counts grouped by department",
-            "description": "Get risk counts grouped by department in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance remediation.",
-            "og:title": "Get risk counts grouped by department | Comp AI API",
-            "og:description": "Get risk counts grouped by department in Comp AI. Create, update, and report on organizational risks with ownership, departments, and compliance remediation."
-          }
-        }
+        ]
       }
     },
     "/v1/risks/{id}": {
       "get": {
-        "description": "Retrieve one organization risk with owner, department, likelihood, impact, mitigation, and remediation context.",
+        "description": "Returns a specific risk by ID for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "RisksController_getRiskById_v1",
         "parameters": [
           {
@@ -3618,22 +3456,13 @@
             "apikey": []
           }
         ],
-        "summary": "Get organization risk",
+        "summary": "Get risk by ID",
         "tags": [
           "Risks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get organization risk | Comp AI API",
-            "sidebarTitle": "Get organization risk",
-            "description": "Retrieve one organization risk with owner, department, likelihood, impact, mitigation, and remediation context.",
-            "og:title": "Get organization risk | Comp AI API",
-            "og:description": "Retrieve one organization risk with owner, department, likelihood, impact, mitigation, and remediation context."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update a risk record as mitigation work progresses so compliance reports reflect the current risk posture.",
+        "description": "Partially updates a risk. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "RisksController_updateRisk_v1",
         "parameters": [
           {
@@ -3912,22 +3741,13 @@
             "apikey": []
           }
         ],
-        "summary": "Update organization risk",
+        "summary": "Update risk",
         "tags": [
           "Risks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update organization risk | Comp AI API",
-            "sidebarTitle": "Update organization risk",
-            "description": "Update a risk record as mitigation work progresses so compliance reports reflect the current risk posture.",
-            "og:title": "Update organization risk | Comp AI API",
-            "og:description": "Update a risk record as mitigation work progresses so compliance reports reflect the current risk posture."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete an organization risk that no longer needs active tracking in the risk register or compliance program.",
+        "description": "Permanently removes a risk from the organization. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "RisksController_deleteRisk_v1",
         "parameters": [
           {
@@ -4049,19 +3869,10 @@
             "apikey": []
           }
         ],
-        "summary": "Delete organization risk",
+        "summary": "Delete risk",
         "tags": [
           "Risks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete organization risk | Comp AI API",
-            "sidebarTitle": "Delete organization risk",
-            "description": "Delete an organization risk that no longer needs active tracking in the risk register or compliance program.",
-            "og:title": "Delete organization risk | Comp AI API",
-            "og:description": "Delete an organization risk that no longer needs active tracking in the risk register or compliance program."
-          }
-        }
+        ]
       }
     },
     "/v1/vendors/global/search": {
@@ -4088,25 +3899,15 @@
             "apikey": []
           }
         ],
-        "summary": "Search global vendors",
+        "summary": "Search global vendors database",
         "tags": [
           "Vendors"
-        ],
-        "description": "Search global vendor records to prefill vendor profiles and speed up third-party risk assessment workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Search global vendors | Comp AI API",
-            "sidebarTitle": "Search global vendors",
-            "description": "Search global vendor records to prefill vendor profiles and speed up third-party risk assessment workflows.",
-            "og:title": "Search global vendors | Comp AI API",
-            "og:description": "Search global vendor records to prefill vendor profiles and speed up third-party risk assessment workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/vendors": {
       "get": {
-        "description": "List third-party vendors with risk level, owner, assessment status, and Trust Center visibility for vendor risk management.",
+        "description": "Returns all vendors for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "VendorsController_getAllVendors_v1",
         "parameters": [],
         "responses": {
@@ -4314,22 +4115,13 @@
             "apikey": []
           }
         ],
-        "summary": "List vendors",
+        "summary": "Get all vendors",
         "tags": [
           "Vendors"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List vendors | Comp AI API",
-            "sidebarTitle": "List vendors",
-            "description": "List third-party vendors with risk level, owner, assessment status, and Trust Center visibility for vendor risk management.",
-            "og:title": "List vendors | Comp AI API",
-            "og:description": "List third-party vendors with risk level, owner, assessment status, and Trust Center visibility for vendor risk management."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Create a vendor record so teams can track third-party risk, assessment evidence, owner, category, and compliance status.",
+        "description": "Creates a new vendor for the authenticated organization. All required fields must be provided. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "VendorsController_createVendor_v1",
         "parameters": [],
         "requestBody": {
@@ -4571,24 +4363,15 @@
             "apikey": []
           }
         ],
-        "summary": "Create vendor",
+        "summary": "Create a new vendor",
         "tags": [
           "Vendors"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create vendor | Comp AI API",
-            "sidebarTitle": "Create vendor",
-            "description": "Create a vendor record so teams can track third-party risk, assessment evidence, owner, category, and compliance status.",
-            "og:title": "Create vendor | Comp AI API",
-            "og:description": "Create a vendor record so teams can track third-party risk, assessment evidence, owner, category, and compliance status."
-          }
-        }
+        ]
       }
     },
     "/v1/vendors/{id}": {
       "get": {
-        "description": "Retrieve one vendor record with ownership, review status, risk context, and third-party compliance metadata.",
+        "description": "Returns a specific vendor by ID for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "VendorsController_getVendorById_v1",
         "parameters": [
           {
@@ -4798,22 +4581,13 @@
             "apikey": []
           }
         ],
-        "summary": "Get vendor details",
+        "summary": "Get vendor by ID",
         "tags": [
           "Vendors"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get vendor details | Comp AI API",
-            "sidebarTitle": "Get vendor details",
-            "description": "Retrieve one vendor record with ownership, review status, risk context, and third-party compliance metadata.",
-            "og:title": "Get vendor details | Comp AI API",
-            "og:description": "Retrieve one vendor record with ownership, review status, risk context, and third-party compliance metadata."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update vendor ownership, risk attributes, review metadata, and third-party compliance context for an organization.",
+        "description": "Partially updates a vendor. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "VendorsController_updateVendor_v1",
         "parameters": [
           {
@@ -5066,22 +4840,13 @@
             "apikey": []
           }
         ],
-        "summary": "Update vendor record",
+        "summary": "Update vendor",
         "tags": [
           "Vendors"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update vendor record | Comp AI API",
-            "sidebarTitle": "Update vendor record",
-            "description": "Update vendor ownership, risk attributes, review metadata, and third-party compliance context for an organization.",
-            "og:title": "Update vendor record | Comp AI API",
-            "og:description": "Update vendor ownership, risk attributes, review metadata, and third-party compliance context for an organization."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Permanently removes a vendor from the organization. This action cannot be undone.",
+        "description": "Permanently removes a vendor from the organization. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "VendorsController_deleteVendor_v1",
         "parameters": [
           {
@@ -5206,16 +4971,7 @@
         "summary": "Delete vendor",
         "tags": [
           "Vendors"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete vendor | Comp AI API",
-            "sidebarTitle": "Delete vendor",
-            "description": "Permanently removes a vendor from the organization. This action cannot be undone.",
-            "og:title": "Delete vendor | Comp AI API",
-            "og:description": "Permanently removes a vendor from the organization. This action cannot be undone."
-          }
-        }
+        ]
       }
     },
     "/v1/vendors/{id}/trigger-assessment": {
@@ -5246,22 +5002,12 @@
         "summary": "Trigger vendor risk assessment",
         "tags": [
           "Vendors"
-        ],
-        "description": "Trigger a vendor risk assessment so Comp AI can update third-party risk evidence and vendor security review status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Trigger vendor risk assessment | Comp AI API",
-            "sidebarTitle": "Trigger vendor risk assessment",
-            "description": "Trigger a vendor risk assessment so Comp AI can update third-party risk evidence and vendor security review status.",
-            "og:title": "Trigger vendor risk assessment | Comp AI API",
-            "og:description": "Trigger a vendor risk assessment so Comp AI can update third-party risk evidence and vendor security review status."
-          }
-        }
+        ]
       }
     },
     "/v1/context": {
       "get": {
-        "description": "List organization context entries used as approved source material for evidence, questionnaires, policies, and AI workflows.",
+        "description": "Returns all context entries for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "ContextController_getAllContext_v1",
         "parameters": [
           {
@@ -5458,22 +5204,13 @@
             "apikey": []
           }
         ],
-        "summary": "List organization context",
+        "summary": "Get all context entries",
         "tags": [
           "Context"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List organization context | Comp AI API",
-            "sidebarTitle": "List organization context",
-            "description": "List organization context entries used as approved source material for evidence, questionnaires, policies, and AI workflows.",
-            "og:title": "List organization context | Comp AI API",
-            "og:description": "List organization context entries used as approved source material for evidence, questionnaires, policies, and AI workflows."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Creates a new context entry for the authenticated organization. All required fields must be provided.",
+        "description": "Creates a new context entry for the authenticated organization. All required fields must be provided. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "ContextController_createContext_v1",
         "parameters": [],
         "requestBody": {
@@ -5684,21 +5421,12 @@
         "summary": "Create a new context entry",
         "tags": [
           "Context"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create a new context entry | Comp AI API",
-            "sidebarTitle": "Create a new context entry",
-            "description": "Creates a new context entry for the authenticated organization. All required fields must be provided.",
-            "og:title": "Create a new context entry | Comp AI API",
-            "og:description": "Creates a new context entry for the authenticated organization. All required fields must be provided."
-          }
-        }
+        ]
       }
     },
     "/v1/context/{id}": {
       "get": {
-        "description": "Retrieve one organization context entry with source details and approved content for compliance automation workflows.",
+        "description": "Returns a specific context entry by ID for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "ContextController_getContextById_v1",
         "parameters": [
           {
@@ -5855,22 +5583,13 @@
             "apikey": []
           }
         ],
-        "summary": "Get organization context",
+        "summary": "Get context entry by ID",
         "tags": [
           "Context"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get organization context | Comp AI API",
-            "sidebarTitle": "Get organization context",
-            "description": "Retrieve one organization context entry with source details and approved content for compliance automation workflows.",
-            "og:title": "Get organization context | Comp AI API",
-            "og:description": "Retrieve one organization context entry with source details and approved content for compliance automation workflows."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update an organization context entry so approved business details stay current for evidence and questionnaire automation.",
+        "description": "Partially updates a context entry. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "ContextController_updateContext_v1",
         "parameters": [
           {
@@ -5990,22 +5709,13 @@
             "apikey": []
           }
         ],
-        "summary": "Update organization context",
+        "summary": "Update context entry",
         "tags": [
           "Context"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update organization context | Comp AI API",
-            "sidebarTitle": "Update organization context",
-            "description": "Update an organization context entry so approved business details stay current for evidence and questionnaire automation.",
-            "og:title": "Update organization context | Comp AI API",
-            "og:description": "Update an organization context entry so approved business details stay current for evidence and questionnaire automation."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Permanently removes a context entry from the organization. This action cannot be undone.",
+        "description": "Permanently removes a context entry from the organization. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "ContextController_deleteContext_v1",
         "parameters": [
           {
@@ -6139,21 +5849,12 @@
         "summary": "Delete context entry",
         "tags": [
           "Context"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete context entry | Comp AI API",
-            "sidebarTitle": "Delete context entry",
-            "description": "Permanently removes a context entry from the organization. This action cannot be undone.",
-            "og:title": "Delete context entry | Comp AI API",
-            "og:description": "Permanently removes a context entry from the organization. This action cannot be undone."
-          }
-        }
+        ]
       }
     },
     "/v1/devices": {
       "get": {
-        "description": "List managed employee devices with endpoint compliance status, ownership, and security check results for workforce controls.",
+        "description": "Returns all devices for the authenticated organization from FleetDM. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "DevicesController_getAllDevices_v1",
         "parameters": [],
         "responses": {
@@ -6257,24 +5958,15 @@
             "apikey": []
           }
         ],
-        "summary": "List managed devices",
+        "summary": "Get all devices",
         "tags": [
           "Devices"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List managed devices | Comp AI API",
-            "sidebarTitle": "List managed devices",
-            "description": "List managed employee devices with endpoint compliance status, ownership, and security check results for workforce controls.",
-            "og:title": "List managed devices | Comp AI API",
-            "og:description": "List managed employee devices with endpoint compliance status, ownership, and security check results for workforce controls."
-          }
-        }
+        ]
       }
     },
     "/v1/devices/member/{memberId}": {
       "get": {
-        "description": "Returns all devices assigned to a specific member within the authenticated organization. Devices are fetched from FleetDM using the member's dedicated fleetDmLabelId.",
+        "description": "Returns all devices assigned to a specific member within the authenticated organization. Devices are fetched from FleetDM using the member's dedicated fleetDmLabelId. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "DevicesController_getDevicesByMember_v1",
         "parameters": [
           {
@@ -6343,21 +6035,12 @@
         "summary": "Get devices by member ID",
         "tags": [
           "Devices"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get devices by member ID | Comp AI API",
-            "sidebarTitle": "Get devices by member ID",
-            "description": "Returns all devices assigned to a specific member within the authenticated organization. Devices are fetched from FleetDM using the member's dedicated.",
-            "og:title": "Get devices by member ID | Comp AI API",
-            "og:description": "Returns all devices assigned to a specific member within the authenticated organization. Devices are fetched from FleetDM using the member's dedicated."
-          }
-        }
+        ]
       }
     },
     "/v1/devices/{id}": {
       "delete": {
-        "description": "Delete device in Comp AI. Read and manage employee device inventory and Fleet compliance data used for endpoint security controls.",
+        "description": "Deletes a single device in the authenticated organization. Only organization owners can delete devices.",
         "operationId": "DevicesController_deleteDevice_v1",
         "parameters": [
           {
@@ -6390,21 +6073,12 @@
         "summary": "Delete device",
         "tags": [
           "Devices"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete device | Comp AI API",
-            "sidebarTitle": "Delete device",
-            "description": "Delete device in Comp AI. Read and manage employee device inventory and Fleet compliance data used for endpoint security controls.",
-            "og:title": "Delete device | Comp AI API",
-            "og:description": "Delete device in Comp AI. Read and manage employee device inventory and Fleet compliance data used for endpoint security controls."
-          }
-        }
+        ]
       }
     },
     "/v1/policies": {
       "get": {
-        "description": "List compliance policies for an organization, including drafts and published policies used for SOC 2, ISO 27001, HIPAA, and GDPR workflows.",
+        "description": "Returns all policies for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PoliciesController_getAllPolicies_v1",
         "parameters": [
           {
@@ -6530,29 +6204,13 @@
             "apikey": []
           }
         ],
-        "summary": "List compliance policies",
+        "summary": "Get all policies",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List compliance policies | Comp AI API",
-            "sidebarTitle": "List compliance policies",
-            "description": "List compliance policies for an organization, including drafts and published policies used for SOC 2, ISO 27001, HIPAA, and GDPR workflows.",
-            "og:title": "List compliance policies | Comp AI API",
-            "og:description": "List compliance policies for an organization, including drafts and published policies used for SOC 2, ISO 27001, HIPAA, and GDPR workflows."
-          }
-        },
-        "x-codeSamples": [
-          {
-            "lang": "bash",
-            "label": "List policies",
-            "source": "curl --request GET --url \"https://api.trycomp.ai/v1/policies\" --header \"X-API-Key: $COMP_AI_API_KEY\""
-          }
         ]
       },
       "post": {
-        "description": "Create a policy record that can be reviewed, versioned, published, linked to controls, and used as source evidence for questionnaires.",
+        "description": "Creates a new policy for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PoliciesController_createPolicy_v1",
         "parameters": [
           {
@@ -6653,19 +6311,10 @@
             "apikey": []
           }
         ],
-        "summary": "Create compliance policy",
+        "summary": "Create a new policy",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create compliance policy | Comp AI API",
-            "sidebarTitle": "Create compliance policy",
-            "description": "Create a policy record that can be reviewed, versioned, published, linked to controls, and used as source evidence for questionnaires.",
-            "og:title": "Create compliance policy | Comp AI API",
-            "og:description": "Create a policy record that can be reviewed, versioned, published, linked to controls, and used as source evidence for questionnaires."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/publish-all": {
@@ -6695,22 +6344,12 @@
         "summary": "Publish all draft policies",
         "tags": [
           "Policies"
-        ],
-        "description": "Publish draft policies in bulk so approved policy content can power Trust Center sharing, questionnaire answers, and audit evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Publish all draft policies | Comp AI API",
-            "sidebarTitle": "Publish all draft policies",
-            "description": "Publish draft policies in bulk so approved policy content can power Trust Center sharing, questionnaire answers, and audit evidence.",
-            "og:title": "Publish all draft policies | Comp AI API",
-            "og:description": "Publish draft policies in bulk so approved policy content can power Trust Center sharing, questionnaire answers, and audit evidence."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/download-all": {
       "get": {
-        "description": "Generate a single PDF bundle of published compliance policies for auditors, customer security reviews, and Trust Center workflows.",
+        "description": "Generates a PDF bundle containing all published policies with organization branding and returns a signed download URL",
         "operationId": "PoliciesController_downloadAllPolicies_v1",
         "parameters": [
           {
@@ -6736,19 +6375,10 @@
             "apikey": []
           }
         ],
-        "summary": "Download all published policies",
+        "summary": "Download all published policies as a single PDF",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Download all published policies | Comp AI API",
-            "sidebarTitle": "Download all published policies",
-            "description": "Generate a single PDF bundle of published compliance policies for auditors, customer security reviews, and Trust Center workflows.",
-            "og:title": "Download all published policies | Comp AI API",
-            "og:description": "Generate a single PDF bundle of published compliance policies for auditors, customer security reviews, and Trust Center workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/controls": {
@@ -6788,17 +6418,7 @@
         "summary": "Get mapped and all controls for a policy",
         "tags": [
           "Policies"
-        ],
-        "description": "Get mapped and all controls for a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get mapped and all controls for a policy | Comp AI API",
-            "sidebarTitle": "Get mapped and all controls for a policy",
-            "description": "Get mapped and all controls for a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting.",
-            "og:title": "Get mapped and all controls for a policy | Comp AI API",
-            "og:description": "Get mapped and all controls for a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting."
-          }
-        }
+        ]
       },
       "post": {
         "operationId": "PoliciesController_addPolicyControls_v1",
@@ -6836,17 +6456,7 @@
         "summary": "Map controls to a policy",
         "tags": [
           "Policies"
-        ],
-        "description": "Map controls to a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Map controls to a policy | Comp AI API",
-            "sidebarTitle": "Map controls to a policy",
-            "description": "Map controls to a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Map controls to a policy | Comp AI API",
-            "og:description": "Map controls to a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/evidence-tasks": {
@@ -6886,17 +6496,7 @@
         "summary": "Get tasks that serve as evidence for a policy, grouped by control",
         "tags": [
           "Policies"
-        ],
-        "description": "Get tasks that serve as evidence for a policy, grouped by control in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get tasks that serve as evidence for a | Comp AI API",
-            "sidebarTitle": "Get tasks that serve as evidence for a policy, grouped by control",
-            "description": "Get tasks that serve as evidence for a policy, grouped by control in Comp AI. Create, version, publish, export, map, and improve compliance policies.",
-            "og:title": "Get tasks that serve as evidence for a | Comp AI API",
-            "og:description": "Get tasks that serve as evidence for a policy, grouped by control in Comp AI. Create, version, publish, export, map, and improve compliance policies."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/regenerate": {
@@ -6933,20 +6533,10 @@
             "apikey": []
           }
         ],
-        "summary": "Regenerate policy with AI",
+        "summary": "Regenerate policy content using AI",
         "tags": [
           "Policies"
-        ],
-        "description": "Regenerate policy content using Comp AI while keeping the result reviewable before it is published or used as compliance evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Regenerate policy with AI | Comp AI API",
-            "sidebarTitle": "Regenerate policy with AI",
-            "description": "Regenerate policy content using Comp AI while keeping the result reviewable before it is published or used as compliance evidence.",
-            "og:title": "Regenerate policy with AI | Comp AI API",
-            "og:description": "Regenerate policy content using Comp AI while keeping the result reviewable before it is published or used as compliance evidence."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/pdf/signed-url": {
@@ -6994,17 +6584,7 @@
         "summary": "Get a signed URL for the policy PDF",
         "tags": [
           "Policies"
-        ],
-        "description": "Get a signed URL for the policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a signed URL for the policy PDF | Comp AI API",
-            "sidebarTitle": "Get a signed URL for the policy PDF",
-            "description": "Get a signed URL for the policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting.",
-            "og:title": "Get a signed URL for the policy PDF | Comp AI API",
-            "og:description": "Get a signed URL for the policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/pdf": {
@@ -7044,17 +6624,7 @@
         "summary": "Upload a PDF to a policy or version",
         "tags": [
           "Policies"
-        ],
-        "description": "Upload a PDF to a policy or version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Upload a PDF to a policy or version | Comp AI API",
-            "sidebarTitle": "Upload a PDF to a policy or version",
-            "description": "Upload a PDF to a policy or version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting.",
-            "og:title": "Upload a PDF to a policy or version | Comp AI API",
-            "og:description": "Upload a PDF to a policy or version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting."
-          }
-        }
+        ]
       },
       "delete": {
         "operationId": "PoliciesController_deletePolicyPdf_v1",
@@ -7100,17 +6670,7 @@
         "summary": "Delete a policy PDF",
         "tags": [
           "Policies"
-        ],
-        "description": "Delete a policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a policy PDF | Comp AI API",
-            "sidebarTitle": "Delete a policy PDF",
-            "description": "Delete a policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Delete a policy PDF | Comp AI API",
-            "og:description": "Delete a policy PDF in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/pdf-url": {
@@ -7158,17 +6718,7 @@
         "summary": "Get signed URL for policy PDF (alternate path)",
         "tags": [
           "Policies"
-        ],
-        "description": "Get signed URL for policy PDF (alternate path) in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get signed URL for policy PDF (alternate path) | Comp AI API",
-            "sidebarTitle": "Get signed URL for policy PDF (alternate path)",
-            "description": "Get signed URL for policy PDF (alternate path) in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting.",
-            "og:title": "Get signed URL for policy PDF (alternate path) | Comp AI API",
-            "og:description": "Get signed URL for policy PDF (alternate path) in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/controls/{controlId}": {
@@ -7216,22 +6766,12 @@
         "summary": "Remove a control mapping from a policy",
         "tags": [
           "Policies"
-        ],
-        "description": "Remove a control mapping from a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Remove a control mapping from a policy | Comp AI API",
-            "sidebarTitle": "Remove a control mapping from a policy",
-            "description": "Remove a control mapping from a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting.",
-            "og:title": "Remove a control mapping from a policy | Comp AI API",
-            "og:description": "Remove a control mapping from a policy in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}": {
       "get": {
-        "description": "Retrieve one compliance policy with its current content, review status, framework links, and audit-ready metadata.",
+        "description": "Returns a specific policy by ID for the authenticated organization. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PoliciesController_getPolicy_v1",
         "parameters": [
           {
@@ -7324,22 +6864,13 @@
             "apikey": []
           }
         ],
-        "summary": "Get compliance policy",
+        "summary": "Get policy by ID",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get compliance policy | Comp AI API",
-            "sidebarTitle": "Get compliance policy",
-            "description": "Retrieve one compliance policy with its current content, review status, framework links, and audit-ready metadata.",
-            "og:title": "Get compliance policy | Comp AI API",
-            "og:description": "Retrieve one compliance policy with its current content, review status, framework links, and audit-ready metadata."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update compliance policy details or content while keeping policy workflows connected to controls, tasks, and approvals.",
+        "description": "Partially updates a policy. Only provided fields will be updated. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PoliciesController_updatePolicy_v1",
         "parameters": [
           {
@@ -7471,22 +7002,13 @@
             "apikey": []
           }
         ],
-        "summary": "Update compliance policy",
+        "summary": "Update policy",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update compliance policy | Comp AI API",
-            "sidebarTitle": "Update compliance policy",
-            "description": "Update compliance policy details or content while keeping policy workflows connected to controls, tasks, and approvals.",
-            "og:title": "Update compliance policy | Comp AI API",
-            "og:description": "Update compliance policy details or content while keeping policy workflows connected to controls, tasks, and approvals."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete a compliance policy that is no longer part of the organization evidence library or control program.",
+        "description": "Permanently deletes a policy. This action cannot be undone. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "PoliciesController_deletePolicy_v1",
         "parameters": [
           {
@@ -7588,24 +7110,15 @@
             "apikey": []
           }
         ],
-        "summary": "Delete compliance policy",
+        "summary": "Delete policy",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete compliance policy | Comp AI API",
-            "sidebarTitle": "Delete compliance policy",
-            "description": "Delete a compliance policy that is no longer part of the organization evidence library or control program.",
-            "og:title": "Delete compliance policy | Comp AI API",
-            "og:description": "Delete a compliance policy that is no longer part of the organization evidence library or control program."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/versions": {
       "get": {
-        "description": "Get policy versions in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Returns all versions for a policy in descending order. Supports both API key authentication and session authentication.",
         "operationId": "PoliciesController_getPolicyVersions_v1",
         "parameters": [
           {
@@ -7696,19 +7209,10 @@
         "summary": "Get policy versions",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get policy versions | Comp AI API",
-            "sidebarTitle": "Get policy versions",
-            "description": "Get policy versions in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Get policy versions | Comp AI API",
-            "og:description": "Get policy versions in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Create policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Creates a new draft version based on the current published version (or a specified source version).",
         "operationId": "PoliciesController_createPolicyVersion_v1",
         "parameters": [
           {
@@ -7818,21 +7322,12 @@
         "summary": "Create policy version",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create policy version | Comp AI API",
-            "sidebarTitle": "Create policy version",
-            "description": "Create policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Create policy version | Comp AI API",
-            "og:description": "Create policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/versions/{versionId}": {
       "get": {
-        "description": "Get policy version by ID in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Returns a single policy version by its ID, including content and metadata.",
         "operationId": "PoliciesController_getPolicyVersionById_v1",
         "parameters": [
           {
@@ -7930,19 +7425,10 @@
         "summary": "Get policy version by ID",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get policy version by ID | Comp AI API",
-            "sidebarTitle": "Get policy version by ID",
-            "description": "Get policy version by ID in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Get policy version by ID | Comp AI API",
-            "og:description": "Get policy version by ID in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update version content in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Updates content for a non-published, non-pending version. Published and pending versions are immutable.",
         "operationId": "PoliciesController_updateVersionContent_v1",
         "parameters": [
           {
@@ -8059,19 +7545,10 @@
         "summary": "Update version content",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update version content | Comp AI API",
-            "sidebarTitle": "Update version content",
-            "description": "Update version content in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Update version content | Comp AI API",
-            "og:description": "Update version content in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Deletes a non-published, non-pending version. Published and pending versions cannot be deleted.",
         "operationId": "PoliciesController_deletePolicyVersion_v1",
         "parameters": [
           {
@@ -8177,21 +7654,12 @@
         "summary": "Delete policy version",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete policy version | Comp AI API",
-            "sidebarTitle": "Delete policy version",
-            "description": "Delete policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Delete policy version | Comp AI API",
-            "og:description": "Delete policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/versions/publish": {
       "post": {
-        "description": "Publish new policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Publishes draft content as a new version and optionally sets it as active.",
         "operationId": "PoliciesController_publishPolicyVersion_v1",
         "parameters": [
           {
@@ -8301,21 +7769,12 @@
         "summary": "Publish new policy version",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Publish new policy version | Comp AI API",
-            "sidebarTitle": "Publish new policy version",
-            "description": "Publish new policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval.",
-            "og:title": "Publish new policy version | Comp AI API",
-            "og:description": "Publish new policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/versions/{versionId}/activate": {
       "post": {
-        "description": "Set active policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Marks a version as the active (published) version and updates the policy content.",
         "operationId": "PoliciesController_setActivePolicyVersion_v1",
         "parameters": [
           {
@@ -8424,21 +7883,12 @@
         "summary": "Set active policy version",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Set active policy version | Comp AI API",
-            "sidebarTitle": "Set active policy version",
-            "description": "Set active policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-            "og:title": "Set active policy version | Comp AI API",
-            "og:description": "Set active policy version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/versions/{versionId}/submit-for-approval": {
       "post": {
-        "description": "Submit version for approval in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
+        "description": "Submits a version for approval by setting pendingVersionId and updating policy status.",
         "operationId": "PoliciesController_submitVersionForApproval_v1",
         "parameters": [
           {
@@ -8558,16 +8008,7 @@
         "summary": "Submit version for approval",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Submit version for approval | Comp AI API",
-            "sidebarTitle": "Submit version for approval",
-            "description": "Submit version for approval in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval.",
-            "og:title": "Submit version for approval | Comp AI API",
-            "og:description": "Submit version for approval in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/accept-changes": {
@@ -8607,17 +8048,7 @@
         "summary": "Accept pending policy changes and publish the version",
         "tags": [
           "Policies"
-        ],
-        "description": "Accept pending policy changes and publish the version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Accept pending policy changes and publish the | Comp AI API",
-            "sidebarTitle": "Accept pending policy changes and publish the version",
-            "description": "Accept pending policy changes and publish the version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted.",
-            "og:title": "Accept pending policy changes and publish the | Comp AI API",
-            "og:description": "Accept pending policy changes and publish the version in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/deny-changes": {
@@ -8657,22 +8088,12 @@
         "summary": "Deny pending policy changes",
         "tags": [
           "Policies"
-        ],
-        "description": "Deny pending policy changes in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Deny pending policy changes | Comp AI API",
-            "sidebarTitle": "Deny pending policy changes",
-            "description": "Deny pending policy changes in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval.",
-            "og:title": "Deny pending policy changes | Comp AI API",
-            "og:description": "Deny pending policy changes in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval."
-          }
-        }
+        ]
       }
     },
     "/v1/policies/{id}/ai-chat": {
       "post": {
-        "description": "Ask policy-specific questions and request draft improvements while preserving human review before policy changes are applied.",
+        "description": "Stream AI responses for policy editing assistance. Returns a text/event-stream with AI-generated suggestions.",
         "operationId": "PoliciesController_aiChatPolicy_v1",
         "parameters": [
           {
@@ -8731,76 +8152,7 @@
         "summary": "Chat with AI about a policy",
         "tags": [
           "Policies"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Chat with AI about a policy | Comp AI API",
-            "sidebarTitle": "Chat with AI about a policy",
-            "description": "Ask policy-specific questions and request draft improvements while preserving human review before policy changes are applied.",
-            "og:title": "Chat with AI about a policy | Comp AI API",
-            "og:description": "Ask policy-specific questions and request draft improvements while preserving human review before policy changes are applied."
-          }
-        }
-      }
-    },
-    "/v1/attachments/{attachmentId}/download": {
-      "get": {
-        "description": "Generate a signed download URL for a shared attachment linked to comments, evidence records, or compliance workflow reviews.",
-        "operationId": "AttachmentsController_getAttachmentDownloadUrl_v1",
-        "parameters": [
-          {
-            "name": "attachmentId",
-            "required": true,
-            "in": "path",
-            "description": "Unique attachment identifier",
-            "schema": {
-              "example": "att_abc123def456",
-              "type": "string"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "Download URL generated successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "downloadUrl": {
-                      "type": "string",
-                      "description": "Signed URL for downloading the file",
-                      "example": "https://bucket.s3.amazonaws.com/path/to/file.pdf?signature=..."
-                    },
-                    "expiresIn": {
-                      "type": "number",
-                      "description": "URL expiration time in seconds",
-                      "example": 900
-                    }
-                  }
-                }
-              }
-            }
-          }
-        },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Get shared attachment download URL",
-        "tags": [
-          "Attachments"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get shared attachment download URL | Comp AI API",
-            "sidebarTitle": "Get shared attachment download URL",
-            "description": "Generate a signed download URL for a shared attachment linked to comments, evidence records, or compliance workflow reviews.",
-            "og:title": "Get shared attachment download URL | Comp AI API",
-            "og:description": "Generate a signed download URL for a shared attachment linked to comments, evidence records, or compliance workflow reviews."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/exchange-code": {
@@ -8825,17 +8177,7 @@
         "summary": "Exchange an auth code for device credentials",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Exchange an auth code for device credentials in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Exchange an auth code for device credentials | Comp AI API",
-            "sidebarTitle": "Exchange an auth code for device credentials",
-            "description": "Exchange an auth code for device credentials in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage.",
-            "og:title": "Exchange an auth code for device credentials | Comp AI API",
-            "og:description": "Exchange an auth code for device credentials in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/updates/{filename}": {
@@ -8859,17 +8201,7 @@
         "summary": "Download a device-agent update",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Download a device-agent update in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Download a device-agent update | Comp AI API",
-            "sidebarTitle": "Download a device-agent update",
-            "description": "Download a device-agent update in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint.",
-            "og:title": "Download a device-agent update | Comp AI API",
-            "og:description": "Download a device-agent update in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint."
-          }
-        }
+        ]
       },
       "head": {
         "operationId": "DeviceAgentController_headUpdateFile_v1",
@@ -8891,17 +8223,7 @@
         "summary": "Check a device-agent update's metadata",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Check a device-agent update's metadata in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Check a device-agent update's metadata | Comp AI API",
-            "sidebarTitle": "Check a device-agent update's metadata",
-            "description": "Check a device-agent update's metadata in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint.",
-            "og:title": "Check a device-agent update's metadata | Comp AI API",
-            "og:description": "Check a device-agent update's metadata in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/auth-code": {
@@ -8926,17 +8248,7 @@
         "summary": "Create a device-agent auth code",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Create a device-agent auth code in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a device-agent auth code | Comp AI API",
-            "sidebarTitle": "Create a device-agent auth code",
-            "description": "Create a device-agent auth code in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint.",
-            "og:title": "Create a device-agent auth code | Comp AI API",
-            "og:description": "Create a device-agent auth code in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/my-organizations": {
@@ -8951,17 +8263,7 @@
         "summary": "List organizations for the current device",
         "tags": [
           "Device Agent"
-        ],
-        "description": "List organizations for the current device in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "List organizations for the current device | Comp AI API",
-            "sidebarTitle": "List organizations for the current device",
-            "description": "List organizations for the current device in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage.",
-            "og:title": "List organizations for the current device | Comp AI API",
-            "og:description": "List organizations for the current device in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/register": {
@@ -8983,20 +8285,10 @@
             "description": ""
           }
         },
-        "summary": "Register device agent",
+        "summary": "Register a device agent",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Register a Comp AI Device Agent installation so employee endpoint checks can report into compliance tasks and device inventory.",
-        "x-mint": {
-          "metadata": {
-            "title": "Register device agent | Comp AI API",
-            "sidebarTitle": "Register device agent",
-            "description": "Register a Comp AI Device Agent installation so employee endpoint checks can report into compliance tasks and device inventory.",
-            "og:title": "Register device agent | Comp AI API",
-            "og:description": "Register a Comp AI Device Agent installation so employee endpoint checks can report into compliance tasks and device inventory."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/check-in": {
@@ -9018,20 +8310,10 @@
             "description": ""
           }
         },
-        "summary": "Submit device compliance check-in",
+        "summary": "Submit a device check-in",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Submit device security check results for encryption, antivirus, password policy, screen lock, and other endpoint controls.",
-        "x-mint": {
-          "metadata": {
-            "title": "Submit device compliance check-in | Comp AI API",
-            "sidebarTitle": "Submit device compliance check-in",
-            "description": "Submit device security check results for encryption, antivirus, password policy, screen lock, and other endpoint controls.",
-            "og:title": "Submit device compliance check-in | Comp AI API",
-            "og:description": "Submit device security check results for encryption, antivirus, password policy, screen lock, and other endpoint controls."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/status": {
@@ -9063,22 +8345,12 @@
         "summary": "Get device-agent status",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Get device-agent status in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get device-agent status | Comp AI API",
-            "sidebarTitle": "Get device-agent status",
-            "description": "Get device-agent status in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-            "og:title": "Get device-agent status | Comp AI API",
-            "og:description": "Get device-agent status in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/mac": {
       "get": {
-        "description": "Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent helps monitor device compliance and security policies.",
+        "description": "Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent helps monitor device compliance and security policies. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "DeviceAgentController_downloadMacAgent_v1",
         "parameters": [],
         "responses": {
@@ -9119,21 +8391,12 @@
         "summary": "Download macOS Device Agent",
         "tags": [
           "Device Agent"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Download macOS Device Agent | Comp AI API",
-            "sidebarTitle": "Download macOS Device Agent",
-            "description": "Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent helps monitor device compliance and security policies.",
-            "og:title": "Download macOS Device Agent | Comp AI API",
-            "og:description": "Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent helps monitor device compliance and security policies."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/windows": {
       "get": {
-        "description": "Downloads a ZIP package containing the Comp AI Device Agent installer for Windows, along with setup scripts and instructions. The package includes an MSI installer, setup batch script customized for the organization and user, and a README.",
+        "description": "Downloads a ZIP package containing the Comp AI Device Agent installer for Windows, along with setup scripts and instructions. The package includes an MSI installer, setup batch script customized for the organization and user, and a README with installation instructions. Supports both API key authentication (X-API-Key header) and session authentication (Bearer token or cookies).",
         "operationId": "DeviceAgentController_downloadWindowsAgent_v1",
         "parameters": [],
         "responses": {
@@ -9174,16 +8437,7 @@
         "summary": "Download Windows Device Agent ZIP",
         "tags": [
           "Device Agent"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Download Windows Device Agent ZIP | Comp AI API",
-            "sidebarTitle": "Download Windows Device Agent ZIP",
-            "description": "Downloads a ZIP package containing the Comp AI Device Agent installer for Windows, along with setup scripts and instructions. The package includes an MSI.",
-            "og:title": "Download Windows Device Agent ZIP | Comp AI API",
-            "og:description": "Downloads a ZIP package containing the Comp AI Device Agent installer for Windows, along with setup scripts and instructions. The package includes an MSI."
-          }
-        }
+        ]
       }
     },
     "/v1/device-agent/sessions/{deviceId}": {
@@ -9207,22 +8461,12 @@
         "summary": "Revoke a device agent session",
         "tags": [
           "Device Agent"
-        ],
-        "description": "Revoke a device agent session in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status.",
-        "x-mint": {
-          "metadata": {
-            "title": "Revoke a device agent session | Comp AI API",
-            "sidebarTitle": "Revoke a device agent session",
-            "description": "Revoke a device agent session in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security.",
-            "og:title": "Revoke a device agent session | Comp AI API",
-            "og:description": "Revoke a device agent session in Comp AI. Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks": {
       "get": {
-        "description": "List compliance tasks with assignments and status so teams can track audit readiness, evidence work, and control implementation.",
+        "description": "Retrieve all tasks for the authenticated organization. Employees/contractors only see their assigned tasks.",
         "operationId": "TasksController_getTasks_v1",
         "parameters": [
           {
@@ -9281,29 +8525,13 @@
             "apikey": []
           }
         ],
-        "summary": "List compliance tasks",
+        "summary": "Get all tasks",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List compliance tasks | Comp AI API",
-            "sidebarTitle": "List compliance tasks",
-            "description": "List compliance tasks with assignments and status so teams can track audit readiness, evidence work, and control implementation.",
-            "og:title": "List compliance tasks | Comp AI API",
-            "og:description": "List compliance tasks with assignments and status so teams can track audit readiness, evidence work, and control implementation."
-          }
-        },
-        "x-codeSamples": [
-          {
-            "lang": "bash",
-            "label": "List tasks",
-            "source": "curl --request GET --url \"https://api.trycomp.ai/v1/tasks\" --header \"X-API-Key: $COMP_AI_API_KEY\""
-          }
         ]
       },
       "post": {
-        "description": "Create a compliance task for evidence collection, remediation, review, or recurring control work inside an organization.",
+        "description": "Create a new task for the organization",
         "operationId": "TasksController_createTask_v1",
         "parameters": [],
         "requestBody": {
@@ -9401,24 +8629,15 @@
             "apikey": []
           }
         ],
-        "summary": "Create compliance task",
+        "summary": "Create a task",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create compliance task | Comp AI API",
-            "sidebarTitle": "Create compliance task",
-            "description": "Create a compliance task for evidence collection, remediation, review, or recurring control work inside an organization.",
-            "og:title": "Create compliance task | Comp AI API",
-            "og:description": "Create a compliance task for evidence collection, remediation, review, or recurring control work inside an organization."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/templates": {
       "get": {
-        "description": "Get task templates in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Retrieve all available task templates, optionally filtered by framework.",
         "operationId": "TasksController_getTaskTemplates_v1",
         "parameters": [
           {
@@ -9444,21 +8663,12 @@
         "summary": "Get task templates",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task templates | Comp AI API",
-            "sidebarTitle": "Get task templates",
-            "description": "Get task templates in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Get task templates | Comp AI API",
-            "og:description": "Get task templates in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/bulk": {
       "patch": {
-        "description": "Update status for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Bulk update the status of multiple tasks",
         "operationId": "TasksController_updateTasksStatus_v1",
         "parameters": [],
         "requestBody": {
@@ -9539,19 +8749,10 @@
         "summary": "Update status for multiple tasks",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update status for multiple tasks | Comp AI API",
-            "sidebarTitle": "Update status for multiple tasks",
-            "description": "Update status for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity.",
-            "og:title": "Update status for multiple tasks | Comp AI API",
-            "og:description": "Update status for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Bulk delete multiple tasks by their IDs",
         "operationId": "TasksController_deleteTasks_v1",
         "parameters": [],
         "requestBody": {
@@ -9608,21 +8809,12 @@
         "summary": "Delete multiple tasks",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete multiple tasks | Comp AI API",
-            "sidebarTitle": "Delete multiple tasks",
-            "description": "Delete multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Delete multiple tasks | Comp AI API",
-            "og:description": "Delete multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/bulk/assignee": {
       "patch": {
-        "description": "Update assignee for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Bulk update the assignee of multiple tasks",
         "operationId": "TasksController_updateTasksAssignee_v1",
         "parameters": [],
         "requestBody": {
@@ -9685,21 +8877,12 @@
         "summary": "Update assignee for multiple tasks",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update assignee for multiple tasks | Comp AI API",
-            "sidebarTitle": "Update assignee for multiple tasks",
-            "description": "Update assignee for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity.",
-            "og:title": "Update assignee for multiple tasks | Comp AI API",
-            "og:description": "Update assignee for multiple tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/reorder": {
       "patch": {
-        "description": "Reorder tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Update the order and status for multiple tasks (drag & drop)",
         "operationId": "TasksController_reorderTasks_v1",
         "parameters": [],
         "requestBody": {
@@ -9763,21 +8946,12 @@
         "summary": "Reorder tasks",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Reorder tasks | Comp AI API",
-            "sidebarTitle": "Reorder tasks",
-            "description": "Reorder tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Reorder tasks | Comp AI API",
-            "og:description": "Reorder tasks in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/bulk/submit-for-review": {
       "post": {
-        "description": "Bulk submit tasks for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Submit multiple tasks for review with a single approver",
         "operationId": "TasksController_bulkSubmitForReview_v1",
         "parameters": [],
         "requestBody": {
@@ -9827,16 +9001,7 @@
         "summary": "Bulk submit tasks for review",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Bulk submit tasks for review | Comp AI API",
-            "sidebarTitle": "Bulk submit tasks for review",
-            "description": "Bulk submit tasks for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity.",
-            "og:title": "Bulk submit tasks for review | Comp AI API",
-            "og:description": "Bulk submit tasks for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/options": {
@@ -9856,22 +9021,12 @@
         "summary": "Get page options for tasks overview",
         "tags": [
           "Tasks"
-        ],
-        "description": "Get page options for tasks overview in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get page options for tasks overview | Comp AI API",
-            "sidebarTitle": "Get page options for tasks overview",
-            "description": "Get page options for tasks overview in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links.",
-            "og:title": "Get page options for tasks overview | Comp AI API",
-            "og:description": "Get page options for tasks overview in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}": {
       "get": {
-        "description": "Get task by ID in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Retrieve a specific task by its ID",
         "operationId": "TasksController_getTask_v1",
         "parameters": [
           {
@@ -9932,19 +9087,10 @@
         "summary": "Get task by ID",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task by ID | Comp AI API",
-            "sidebarTitle": "Get task by ID",
-            "description": "Get task by ID in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Get task by ID | Comp AI API",
-            "og:description": "Get task by ID in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Update an existing task (title, description, status, assignee, approver, frequency, department, reviewDate)",
         "operationId": "TasksController_updateTask_v1",
         "parameters": [
           {
@@ -10076,19 +9222,10 @@
         "summary": "Update a task",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update a task | Comp AI API",
-            "sidebarTitle": "Update a task",
-            "description": "Update a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Update a task | Comp AI API",
-            "og:description": "Update a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Delete a single task by its ID",
         "operationId": "TasksController_deleteTask_v1",
         "parameters": [
           {
@@ -10135,16 +9272,7 @@
         "summary": "Delete a task",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a task | Comp AI API",
-            "sidebarTitle": "Delete a task",
-            "description": "Delete a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Delete a task | Comp AI API",
-            "og:description": "Delete a task in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/policies": {
@@ -10175,22 +9303,12 @@
         "summary": "Get policies that reference a task via shared controls",
         "tags": [
           "Tasks"
-        ],
-        "description": "Get policies that reference a task via shared controls in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get policies that reference a task via shared | Comp AI API",
-            "sidebarTitle": "Get policies that reference a task via shared controls",
-            "description": "Get policies that reference a task via shared controls in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy.",
-            "og:title": "Get policies that reference a task via shared | Comp AI API",
-            "og:description": "Get policies that reference a task via shared controls in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/activity": {
       "get": {
-        "description": "Get task activity in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Retrieve audit log activity for a specific task with pagination",
         "operationId": "TasksController_getTaskActivity_v1",
         "parameters": [
           {
@@ -10236,21 +9354,12 @@
         "summary": "Get task activity",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task activity | Comp AI API",
-            "sidebarTitle": "Get task activity",
-            "description": "Get task activity in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Get task activity | Comp AI API",
-            "og:description": "Get task activity in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/regenerate": {
       "post": {
-        "description": "Regenerate task from template in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Update the task title, description, and automation status with the latest content from the framework template",
         "operationId": "TasksController_regenerateTask_v1",
         "parameters": [
           {
@@ -10283,21 +9392,12 @@
         "summary": "Regenerate task from template",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Regenerate task from template | Comp AI API",
-            "sidebarTitle": "Regenerate task from template",
-            "description": "Regenerate task from template in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity.",
-            "og:title": "Regenerate task from template | Comp AI API",
-            "og:description": "Regenerate task from template in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/submit-for-review": {
       "post": {
-        "description": "Submit task for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Move task status to in_review and assign an approver.",
         "operationId": "TasksController_submitForReview_v1",
         "parameters": [
           {
@@ -10347,16 +9447,7 @@
         "summary": "Submit task for review",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Submit task for review | Comp AI API",
-            "sidebarTitle": "Submit task for review",
-            "description": "Submit task for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Submit task for review | Comp AI API",
-            "og:description": "Submit task for review in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/approve": {
@@ -10394,16 +9485,7 @@
         "summary": "Approve a task",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Approve a task | Comp AI API",
-            "sidebarTitle": "Approve a task",
-            "description": "Approve a task that is in review. Only the assigned approver can approve. Moves status to done and creates an audit comment.",
-            "og:title": "Approve a task | Comp AI API",
-            "og:description": "Approve a task that is in review. Only the assigned approver can approve. Moves status to done and creates an audit comment."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/reject": {
@@ -10441,21 +9523,12 @@
         "summary": "Reject a task review",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Reject a task review | Comp AI API",
-            "sidebarTitle": "Reject a task review",
-            "description": "Reject a task that is in review. Only the assigned approver can reject. Reverts status to the previous status and creates an audit comment.",
-            "og:title": "Reject a task review | Comp AI API",
-            "og:description": "Reject a task that is in review. Only the assigned approver can reject. Reverts status to the previous status and creates an audit comment."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/attachments": {
       "get": {
-        "description": "Get task attachments in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Retrieve all attachments for a specific task",
         "operationId": "TasksController_getTaskAttachments_v1",
         "parameters": [
           {
@@ -10534,19 +9607,10 @@
         "summary": "Get task attachments",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task attachments | Comp AI API",
-            "sidebarTitle": "Get task attachments",
-            "description": "Get task attachments in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Get task attachments | Comp AI API",
-            "og:description": "Get task attachments in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Upload an evidence attachment to a task so auditors and reviewers can trace completion back to source documentation.",
+        "description": "Upload a file attachment to a specific task",
         "operationId": "TasksController_uploadTaskAttachment_v1",
         "parameters": [
           {
@@ -10645,24 +9709,15 @@
             "apikey": []
           }
         ],
-        "summary": "Upload task evidence",
+        "summary": "Upload attachment to task",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload task evidence | Comp AI API",
-            "sidebarTitle": "Upload task evidence",
-            "description": "Upload an evidence attachment to a task so auditors and reviewers can trace completion back to source documentation.",
-            "og:title": "Upload task evidence | Comp AI API",
-            "og:description": "Upload an evidence attachment to a task so auditors and reviewers can trace completion back to source documentation."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/attachments/{attachmentId}/download": {
       "get": {
-        "description": "Generate a signed download URL for an attachment on a compliance task so reviewers can access uploaded evidence.",
+        "description": "Generate a signed URL for downloading a task attachment",
         "operationId": "TasksController_getTaskAttachmentDownloadUrl_v1",
         "parameters": [
           {
@@ -10747,24 +9802,15 @@
             "apikey": []
           }
         ],
-        "summary": "Get task attachment download URL",
+        "summary": "Get attachment download URL",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task attachment download URL | Comp AI API",
-            "sidebarTitle": "Get task attachment download URL",
-            "description": "Generate a signed download URL for an attachment on a compliance task so reviewers can access uploaded evidence.",
-            "og:title": "Get task attachment download URL | Comp AI API",
-            "og:description": "Generate a signed download URL for an attachment on a compliance task so reviewers can access uploaded evidence."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/attachments/{attachmentId}": {
       "delete": {
-        "description": "Delete task attachment in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
+        "description": "Delete a specific attachment from a task",
         "operationId": "TasksController_deleteTaskAttachment_v1",
         "parameters": [
           {
@@ -10854,21 +9900,12 @@
         "summary": "Delete task attachment",
         "tags": [
           "Tasks"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete task attachment | Comp AI API",
-            "sidebarTitle": "Delete task attachment",
-            "description": "Delete task attachment in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history.",
-            "og:title": "Delete task attachment | Comp AI API",
-            "og:description": "Delete task attachment in Comp AI. Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/automations": {
       "get": {
-        "description": "Get all automations for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Retrieve all automations for a specific task",
         "operationId": "AutomationsController_getTaskAutomations_v1",
         "parameters": [
           {
@@ -10895,19 +9932,10 @@
         "summary": "Get all automations for a task",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get all automations for a task | Comp AI API",
-            "sidebarTitle": "Get all automations for a task",
-            "description": "Get all automations for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Get all automations for a task | Comp AI API",
-            "og:description": "Get all automations for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Create an automated evidence workflow attached to a task so Comp AI can collect recurring proof from connected systems.",
+        "description": "Create an automation for collecting evidence for a specific task",
         "operationId": "AutomationsController_createAutomation_v1",
         "parameters": [
           {
@@ -11005,24 +10033,15 @@
             "apikey": []
           }
         ],
-        "summary": "Create evidence automation",
+        "summary": "Create a new evidence automation",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create evidence automation | Comp AI API",
-            "sidebarTitle": "Create evidence automation",
-            "description": "Create an automated evidence workflow attached to a task so Comp AI can collect recurring proof from connected systems.",
-            "og:title": "Create evidence automation | Comp AI API",
-            "og:description": "Create an automated evidence workflow attached to a task so Comp AI can collect recurring proof from connected systems."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/automations/{automationId}": {
       "get": {
-        "description": "Get automation details in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Retrieve details for a specific automation",
         "operationId": "AutomationsController_getAutomation_v1",
         "parameters": [
           {
@@ -11059,19 +10078,10 @@
         "summary": "Get automation details",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get automation details | Comp AI API",
-            "sidebarTitle": "Get automation details",
-            "description": "Get automation details in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Get automation details | Comp AI API",
-            "og:description": "Get automation details in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       },
       "patch": {
-        "description": "Update an existing automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Update the name or description of an existing automation",
         "operationId": "AutomationsController_updateAutomation_v1",
         "parameters": [
           {
@@ -11196,19 +10206,10 @@
         "summary": "Update an existing automation",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update an existing automation | Comp AI API",
-            "sidebarTitle": "Update an existing automation",
-            "description": "Update an existing automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Update an existing automation | Comp AI API",
-            "og:description": "Update an existing automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Delete a specific automation and all its associated data",
         "operationId": "AutomationsController_deleteAutomation_v1",
         "parameters": [
           {
@@ -11245,21 +10246,12 @@
         "summary": "Delete an automation",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete an automation | Comp AI API",
-            "sidebarTitle": "Delete an automation",
-            "description": "Delete an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Delete an automation | Comp AI API",
-            "og:description": "Delete an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/automations/{automationId}/runs": {
       "get": {
-        "description": "Get all runs for a specific automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Retrieve all runs for a specific automation",
         "operationId": "AutomationsController_getAutomationRuns_v1",
         "parameters": [
           {
@@ -11294,21 +10286,12 @@
         "summary": "Get all runs for a specific automation",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get all runs for a specific automation | Comp AI API",
-            "sidebarTitle": "Get all runs for a specific automation",
-            "description": "Get all runs for a specific automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Get all runs for a specific automation | Comp AI API",
-            "og:description": "Get all runs for a specific automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/automations/{automationId}/versions": {
       "get": {
-        "description": "Get all versions for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Retrieve all published versions of an automation script",
         "operationId": "AutomationsController_getAutomationVersions_v1",
         "parameters": [
           {
@@ -11400,16 +10383,7 @@
         "summary": "Get all versions for an automation",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get all versions for an automation | Comp AI API",
-            "sidebarTitle": "Get all versions for an automation",
-            "description": "Get all versions for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Get all versions for an automation | Comp AI API",
-            "og:description": "Get all versions for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       },
       "post": {
         "operationId": "AutomationsController_createVersion_v1",
@@ -11446,22 +10420,12 @@
         "summary": "Create a published version record for an automation",
         "tags": [
           "Task Automations"
-        ],
-        "description": "Create a published version record for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a published version record for an | Comp AI API",
-            "sidebarTitle": "Create a published version record for an automation",
-            "description": "Create a published version record for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached.",
-            "og:title": "Create a published version record for an | Comp AI API",
-            "og:description": "Create a published version record for an automation in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/automations/runs": {
       "get": {
-        "description": "Get all automation runs for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
+        "description": "Retrieve all evidence automation runs across automations for a specific task",
         "operationId": "AutomationsController_getTaskAutomationRuns_v1",
         "parameters": [
           {
@@ -11534,21 +10498,12 @@
         "summary": "Get all automation runs for a task",
         "tags": [
           "Task Automations"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get all automation runs for a task | Comp AI API",
-            "sidebarTitle": "Get all automation runs for a task",
-            "description": "Get all automation runs for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks.",
-            "og:title": "Get all automation runs for a task | Comp AI API",
-            "og:description": "Get all automation runs for a task in Comp AI. Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/evidence": {
       "get": {
-        "description": "Get task evidence summary in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files.",
+        "description": "Retrieve a summary of all automation evidence for a specific task",
         "operationId": "EvidenceExportController_getTaskEvidenceSummary_v1",
         "parameters": [
           {
@@ -11578,21 +10533,12 @@
         "summary": "Get task evidence summary",
         "tags": [
           "Evidence Export"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task evidence summary | Comp AI API",
-            "sidebarTitle": "Get task evidence summary",
-            "description": "Get task evidence summary in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files.",
-            "og:title": "Get task evidence summary | Comp AI API",
-            "og:description": "Get task evidence summary in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/evidence/automation/{automationId}/pdf": {
       "get": {
-        "description": "Export automation evidence as PDF in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files.",
+        "description": "Generate and download a PDF containing all evidence for a specific automation",
         "operationId": "EvidenceExportController_exportAutomationPDF_v1",
         "parameters": [
           {
@@ -11633,21 +10579,12 @@
         "summary": "Export automation evidence as PDF",
         "tags": [
           "Evidence Export"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Export automation evidence as PDF | Comp AI API",
-            "sidebarTitle": "Export automation evidence as PDF",
-            "description": "Export automation evidence as PDF in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files.",
-            "og:title": "Export automation evidence as PDF | Comp AI API",
-            "og:description": "Export automation evidence as PDF in Comp AI. Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files."
-          }
-        }
+        ]
       }
     },
     "/v1/tasks/{taskId}/evidence/export": {
       "get": {
-        "description": "Download a ZIP package containing task evidence and automation results for auditor review or customer security requests.",
+        "description": "Generate and download a ZIP file containing all automation evidence for a task",
         "operationId": "EvidenceExportController_exportTaskEvidenceZip_v1",
         "parameters": [
           {
@@ -11688,21 +10625,12 @@
         "summary": "Export task evidence as ZIP",
         "tags": [
           "Evidence Export"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Export task evidence as ZIP | Comp AI API",
-            "sidebarTitle": "Export task evidence as ZIP",
-            "description": "Download a ZIP package containing task evidence and automation results for auditor review or customer security requests.",
-            "og:title": "Export task evidence as ZIP | Comp AI API",
-            "og:description": "Download a ZIP package containing task evidence and automation results for auditor review or customer security requests."
-          }
-        }
+        ]
       }
     },
     "/v1/evidence-export/all": {
       "get": {
-        "description": "Export all organization evidence as ZIP (Auditor only) in Comp AI. Export all organization evidence for an auditor review package.",
+        "description": "Generate and download a ZIP file containing all automation evidence across all tasks. Only accessible by auditors.",
         "operationId": "AuditorEvidenceExportController_exportAllEvidence_v1",
         "parameters": [
           {
@@ -11734,21 +10662,12 @@
         "summary": "Export all organization evidence as ZIP (Auditor only)",
         "tags": [
           "Evidence Export (Auditor)"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Export all organization evidence as ZIP | Comp AI API",
-            "sidebarTitle": "Export all organization evidence as ZIP (Auditor only)",
-            "description": "Export all organization evidence as ZIP (Auditor only) in Comp AI. Export all organization evidence for an auditor review package.",
-            "og:title": "Export all organization evidence as ZIP | Comp AI API",
-            "og:description": "Export all organization evidence as ZIP (Auditor only) in Comp AI. Export all organization evidence for an auditor review package."
-          }
-        }
+        ]
       }
     },
     "/v1/comments": {
       "get": {
-        "description": "Get comments for an entity in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
+        "description": "Retrieve all comments for a specific entity (task, policy, vendor, etc.)",
         "operationId": "CommentsController_getComments_v1",
         "parameters": [
           {
@@ -11800,19 +10719,10 @@
         "summary": "Get comments for an entity",
         "tags": [
           "Comments"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get comments for an entity | Comp AI API",
-            "sidebarTitle": "Get comments for an entity",
-            "description": "Get comments for an entity in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
-            "og:title": "Get comments for an entity | Comp AI API",
-            "og:description": "Get comments for an entity in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings."
-          }
-        }
+        ]
       },
       "post": {
-        "description": "Create a new comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
+        "description": "Create a comment on an entity with optional file attachments",
         "operationId": "CommentsController_createComment_v1",
         "parameters": [],
         "requestBody": {
@@ -11845,21 +10755,12 @@
         "summary": "Create a new comment",
         "tags": [
           "Comments"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create a new comment | Comp AI API",
-            "sidebarTitle": "Create a new comment",
-            "description": "Create a new comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
-            "og:title": "Create a new comment | Comp AI API",
-            "og:description": "Create a new comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings."
-          }
-        }
+        ]
       }
     },
     "/v1/comments/{commentId}": {
       "put": {
-        "description": "Update a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
+        "description": "Update the content of an existing comment (author only)",
         "operationId": "CommentsController_updateComment_v1",
         "parameters": [
           {
@@ -11903,19 +10804,10 @@
         "summary": "Update a comment",
         "tags": [
           "Comments"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update a comment | Comp AI API",
-            "sidebarTitle": "Update a comment",
-            "description": "Update a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
-            "og:title": "Update a comment | Comp AI API",
-            "og:description": "Update a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings."
-          }
-        }
+        ]
       },
       "delete": {
-        "description": "Delete a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
+        "description": "Delete a comment and all its attachments (author only)",
         "operationId": "CommentsController_deleteComment_v1",
         "parameters": [
           {
@@ -12013,16 +10905,48 @@
         "summary": "Delete a comment",
         "tags": [
           "Comments"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a comment | Comp AI API",
-            "sidebarTitle": "Delete a comment",
-            "description": "Delete a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.",
-            "og:title": "Delete a comment | Comp AI API",
-            "og:description": "Delete a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings."
+        ]
+      }
+    },
+    "/v1/health": {
+      "get": {
+        "description": "Returns the health status of the API",
+        "operationId": "HealthController_getHealth_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "API is healthy",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "status": {
+                      "type": "string",
+                      "example": "ok"
+                    },
+                    "timestamp": {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    "uptime": {
+                      "type": "number",
+                      "description": "Process uptime in seconds"
+                    },
+                    "version": {
+                      "type": "string",
+                      "example": "1.0.0"
+                    }
+                  }
+                }
+              }
+            }
           }
-        }
+        },
+        "summary": "Health check",
+        "tags": [
+          "Health"
+        ]
       }
     },
     "/v1/trust-portal/settings": {
@@ -12039,20 +10963,10 @@
             "apikey": []
           }
         ],
-        "summary": "Get Trust Center settings",
+        "summary": "Get complete trust portal settings for admin page",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Retrieve Trust Center settings used to configure public status, custom domains, framework visibility, resources, FAQs, and access rules.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get Trust Center settings | Comp AI API",
-            "sidebarTitle": "Get Trust Center settings",
-            "description": "Retrieve Trust Center settings used to configure public status, custom domains, framework visibility, resources, FAQs, and access rules.",
-            "og:title": "Get Trust Center settings | Comp AI API",
-            "og:description": "Retrieve Trust Center settings used to configure public status, custom domains, framework visibility, resources, FAQs, and access rules."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/favicon": {
@@ -12072,17 +10986,7 @@
         "summary": "Upload a favicon for the trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Upload a favicon for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Upload a favicon for the trust portal | Comp AI API",
-            "sidebarTitle": "Upload a favicon for the trust portal",
-            "description": "Upload a favicon for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Upload a favicon for the trust portal | Comp AI API",
-            "og:description": "Upload a favicon for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       },
       "delete": {
         "operationId": "TrustPortalController_removeFavicon_v1",
@@ -12100,22 +11004,12 @@
         "summary": "Remove the trust portal favicon",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Remove the trust portal favicon in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Remove the trust portal favicon | Comp AI API",
-            "sidebarTitle": "Remove the trust portal favicon",
-            "description": "Remove the trust portal favicon in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links.",
-            "og:title": "Remove the trust portal favicon | Comp AI API",
-            "og:description": "Remove the trust portal favicon in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/domain/status": {
       "get": {
-        "description": "Get domain verification status in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
+        "description": "Retrieve the verification status and DNS records for a custom domain configured in the Vercel trust portal project",
         "operationId": "TrustPortalController_getDomainStatus_v1",
         "parameters": [
           {
@@ -12155,21 +11049,12 @@
         "summary": "Get domain verification status",
         "tags": [
           "Trust Portal"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get domain verification status | Comp AI API",
-            "sidebarTitle": "Get domain verification status",
-            "description": "Get domain verification status in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links.",
-            "og:title": "Get domain verification status | Comp AI API",
-            "og:description": "Get domain verification status in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/compliance-resources/upload": {
       "post": {
-        "description": "Upload or replace a compliance certificate PDF such as SOC 2, ISO 27001, HIPAA, or GDPR evidence for Trust Center sharing.",
+        "description": "Stores the compliance certificate in the organization assets bucket and replaces any previous file for the same framework.",
         "operationId": "TrustPortalController_uploadComplianceResource_v1",
         "parameters": [],
         "requestBody": {
@@ -12202,19 +11087,10 @@
             "apikey": []
           }
         ],
-        "summary": "Upload compliance certificate",
+        "summary": "Upload or replace a compliance certificate (PDF only)",
         "tags": [
           "Trust Portal"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload compliance certificate | Comp AI API",
-            "sidebarTitle": "Upload compliance certificate",
-            "description": "Upload or replace a compliance certificate PDF such as SOC 2, ISO 27001, HIPAA, or GDPR evidence for Trust Center sharing.",
-            "og:title": "Upload compliance certificate | Comp AI API",
-            "og:description": "Upload or replace a compliance certificate PDF such as SOC 2, ISO 27001, HIPAA, or GDPR evidence for Trust Center sharing."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/compliance-resources/signed-url": {
@@ -12251,17 +11127,7 @@
         "summary": "Generate a temporary signed URL for a compliance certificate",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Generate a temporary signed URL for a compliance certificate in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Generate a temporary signed URL for a | Comp AI API",
-            "sidebarTitle": "Generate a temporary signed URL for a compliance certificate",
-            "description": "Generate a temporary signed URL for a compliance certificate in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance.",
-            "og:title": "Generate a temporary signed URL for a | Comp AI API",
-            "og:description": "Generate a temporary signed URL for a compliance certificate in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/compliance-resources/list": {
@@ -12301,22 +11167,12 @@
         "summary": "List uploaded compliance certificates for the organization",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "List uploaded compliance certificates for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "List uploaded compliance certificates for the | Comp AI API",
-            "sidebarTitle": "List uploaded compliance certificates for the organization",
-            "description": "List uploaded compliance certificates for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance.",
-            "og:title": "List uploaded compliance certificates for the | Comp AI API",
-            "og:description": "List uploaded compliance certificates for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/documents/upload": {
       "post": {
-        "description": "Upload an additional trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
+        "description": "Stores a document in the organization assets bucket and registers it for the trust portal.",
         "operationId": "TrustPortalController_uploadTrustDocument_v1",
         "parameters": [],
         "requestBody": {
@@ -12349,16 +11205,7 @@
         "summary": "Upload an additional trust portal document",
         "tags": [
           "Trust Portal"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload an additional trust portal document | Comp AI API",
-            "sidebarTitle": "Upload an additional trust portal document",
-            "description": "Upload an additional trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources.",
-            "og:title": "Upload an additional trust portal document | Comp AI API",
-            "og:description": "Upload an additional trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/documents/list": {
@@ -12398,17 +11245,7 @@
         "summary": "List additional trust portal documents for the organization",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "List additional trust portal documents for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "List additional trust portal documents for | Comp AI API",
-            "sidebarTitle": "List additional trust portal documents for the organization",
-            "description": "List additional trust portal documents for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance.",
-            "og:title": "List additional trust portal documents for | Comp AI API",
-            "og:description": "List additional trust portal documents for the organization in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/documents/{documentId}/download": {
@@ -12454,17 +11291,7 @@
         "summary": "Generate a temporary signed URL for a trust portal document",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Generate a temporary signed URL for a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Generate a temporary signed URL for a trust | Comp AI API",
-            "sidebarTitle": "Generate a temporary signed URL for a trust portal document",
-            "description": "Generate a temporary signed URL for a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance.",
-            "og:title": "Generate a temporary signed URL for a trust | Comp AI API",
-            "og:description": "Generate a temporary signed URL for a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/documents/{documentId}/delete": {
@@ -12515,17 +11342,7 @@
         "summary": "Delete (deactivate) a trust portal document",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Delete (deactivate) a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete (deactivate) a trust portal document | Comp AI API",
-            "sidebarTitle": "Delete (deactivate) a trust portal document",
-            "description": "Delete (deactivate) a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources.",
-            "og:title": "Delete (deactivate) a trust portal document | Comp AI API",
-            "og:description": "Delete (deactivate) a trust portal document in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/toggle": {
@@ -12545,17 +11362,7 @@
         "summary": "Enable or disable the trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Enable or disable the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Enable or disable the trust portal | Comp AI API",
-            "sidebarTitle": "Enable or disable the trust portal",
-            "description": "Enable or disable the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Enable or disable the trust portal | Comp AI API",
-            "og:description": "Enable or disable the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/custom-domain": {
@@ -12575,17 +11382,7 @@
         "summary": "Add or update a custom domain for the trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Add or update a custom domain for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Add or update a custom domain for the trust | Comp AI API",
-            "sidebarTitle": "Add or update a custom domain for the trust portal",
-            "description": "Add or update a custom domain for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources.",
-            "og:title": "Add or update a custom domain for the trust | Comp AI API",
-            "og:description": "Add or update a custom domain for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/check-dns": {
@@ -12605,17 +11402,7 @@
         "summary": "Check DNS records for a custom domain",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Check DNS records for a custom domain in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Check DNS records for a custom domain | Comp AI API",
-            "sidebarTitle": "Check DNS records for a custom domain",
-            "description": "Check DNS records for a custom domain in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Check DNS records for a custom domain | Comp AI API",
-            "og:description": "Check DNS records for a custom domain in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/faqs": {
@@ -12635,17 +11422,7 @@
         "summary": "Update trust portal FAQs",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update trust portal FAQs in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update trust portal FAQs | Comp AI API",
-            "sidebarTitle": "Update trust portal FAQs",
-            "description": "Update trust portal FAQs in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links.",
-            "og:title": "Update trust portal FAQs | Comp AI API",
-            "og:description": "Update trust portal FAQs in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/allowed-domains": {
@@ -12665,17 +11442,7 @@
         "summary": "Update allowed domains for the trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update allowed domains for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update allowed domains for the trust portal | Comp AI API",
-            "sidebarTitle": "Update allowed domains for the trust portal",
-            "description": "Update allowed domains for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources.",
-            "og:title": "Update allowed domains for the trust portal | Comp AI API",
-            "og:description": "Update allowed domains for the trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/settings/frameworks": {
@@ -12695,17 +11462,7 @@
         "summary": "Update trust portal framework settings",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update trust portal framework settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update trust portal framework settings | Comp AI API",
-            "sidebarTitle": "Update trust portal framework settings",
-            "description": "Update trust portal framework settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Update trust portal framework settings | Comp AI API",
-            "og:description": "Update trust portal framework settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/overview": {
@@ -12722,20 +11479,10 @@
             "apikey": []
           }
         ],
-        "summary": "Update Trust Center overview",
+        "summary": "Update trust portal overview section",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update the public Trust Center overview content that explains security posture and compliance status to prospects and customers.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update Trust Center overview | Comp AI API",
-            "sidebarTitle": "Update Trust Center overview",
-            "description": "Update the public Trust Center overview content that explains security posture and compliance status to prospects and customers.",
-            "og:title": "Update Trust Center overview | Comp AI API",
-            "og:description": "Update the public Trust Center overview content that explains security posture and compliance status to prospects and customers."
-          }
-        }
+        ]
       },
       "get": {
         "operationId": "TrustPortalController_getOverview_v1",
@@ -12762,17 +11509,7 @@
         "summary": "Get trust portal overview",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Get trust portal overview in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get trust portal overview | Comp AI API",
-            "sidebarTitle": "Get trust portal overview",
-            "description": "Get trust portal overview in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links.",
-            "og:title": "Get trust portal overview | Comp AI API",
-            "og:description": "Get trust portal overview in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/custom-links": {
@@ -12792,17 +11529,7 @@
         "summary": "Create a custom link for trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Create a custom link for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a custom link for trust portal | Comp AI API",
-            "sidebarTitle": "Create a custom link for trust portal",
-            "description": "Create a custom link for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Create a custom link for trust portal | Comp AI API",
-            "og:description": "Create a custom link for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       },
       "get": {
         "operationId": "TrustPortalController_listCustomLinks_v1",
@@ -12829,17 +11556,7 @@
         "summary": "List custom links for trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "List custom links for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "List custom links for trust portal | Comp AI API",
-            "sidebarTitle": "List custom links for trust portal",
-            "description": "List custom links for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "List custom links for trust portal | Comp AI API",
-            "og:description": "List custom links for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/custom-links/{linkId}": {
@@ -12868,17 +11585,7 @@
         "summary": "Update a custom link",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update a custom link | Comp AI API",
-            "sidebarTitle": "Update a custom link",
-            "description": "Update a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor.",
-            "og:title": "Update a custom link | Comp AI API",
-            "og:description": "Update a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/custom-links/{linkId}/delete": {
@@ -12907,17 +11614,7 @@
         "summary": "Delete a custom link",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Delete a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a custom link | Comp AI API",
-            "sidebarTitle": "Delete a custom link",
-            "description": "Delete a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor.",
-            "og:title": "Delete a custom link | Comp AI API",
-            "og:description": "Delete a custom link in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/custom-links/reorder": {
@@ -12937,17 +11634,7 @@
         "summary": "Reorder custom links",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Reorder custom links in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Reorder custom links | Comp AI API",
-            "sidebarTitle": "Reorder custom links",
-            "description": "Reorder custom links in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor.",
-            "og:title": "Reorder custom links | Comp AI API",
-            "og:description": "Reorder custom links in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/vendors/{vendorId}/trust-settings": {
@@ -12976,17 +11663,7 @@
         "summary": "Update vendor trust portal settings",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "Update vendor trust portal settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update vendor trust portal settings | Comp AI API",
-            "sidebarTitle": "Update vendor trust portal settings",
-            "description": "Update vendor trust portal settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "Update vendor trust portal settings | Comp AI API",
-            "og:description": "Update vendor trust portal settings in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-portal/vendors": {
@@ -13016,22 +11693,12 @@
         "summary": "List vendors configured for trust portal",
         "tags": [
           "Trust Portal"
-        ],
-        "description": "List vendors configured for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.",
-        "x-mint": {
-          "metadata": {
-            "title": "List vendors configured for trust portal | Comp AI API",
-            "sidebarTitle": "List vendors configured for trust portal",
-            "description": "List vendors configured for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents.",
-            "og:title": "List vendors configured for trust portal | Comp AI API",
-            "og:description": "List vendors configured for trust portal in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/{friendlyUrl}/requests": {
       "post": {
-        "description": "Submit a Trust Center access request with requester details, company context, and review reason for administrator approval.",
+        "description": "External users submit request for data access from trust site",
         "operationId": "TrustAccessController_createAccessRequest_v1",
         "parameters": [
           {
@@ -13059,24 +11726,15 @@
             "description": "Access request created and sent for review"
           }
         },
-        "summary": "Submit Trust Access request",
+        "summary": "Submit data access request",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Submit Trust Access request | Comp AI API",
-            "sidebarTitle": "Submit Trust Access request",
-            "description": "Submit a Trust Center access request with requester details, company context, and review reason for administrator approval.",
-            "og:title": "Submit Trust Access request | Comp AI API",
-            "og:description": "Submit a Trust Center access request with requester details, company context, and review reason for administrator approval."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/requests": {
       "get": {
-        "description": "List pending and completed Trust Center access requests so teams can review customer security inquiries through the API.",
+        "description": "Get all access requests for organization",
         "operationId": "TrustAccessController_listAccessRequests_v1",
         "parameters": [
           {
@@ -13104,24 +11762,15 @@
             "apikey": []
           }
         ],
-        "summary": "List Trust Access requests",
+        "summary": "List access requests",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List Trust Access requests | Comp AI API",
-            "sidebarTitle": "List Trust Access requests",
-            "description": "List pending and completed Trust Center access requests so teams can review customer security inquiries through the API.",
-            "og:title": "List Trust Access requests | Comp AI API",
-            "og:description": "List pending and completed Trust Center access requests so teams can review customer security inquiries through the API."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/requests/{id}": {
       "get": {
-        "description": "Retrieve one Trust Center access request with requester context, status, review metadata, and audit details.",
+        "description": "Get detailed information about a specific access request",
         "operationId": "TrustAccessController_getAccessRequest_v1",
         "parameters": [
           {
@@ -13143,24 +11792,15 @@
             "apikey": []
           }
         ],
-        "summary": "Get Trust Access request",
+        "summary": "Get access request details",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get Trust Access request | Comp AI API",
-            "sidebarTitle": "Get Trust Access request",
-            "description": "Retrieve one Trust Center access request with requester context, status, review metadata, and audit details.",
-            "og:title": "Get Trust Access request | Comp AI API",
-            "og:description": "Retrieve one Trust Center access request with requester context, status, review metadata, and audit details."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/requests/{id}/approve": {
       "post": {
-        "description": "Approve a Trust Center access request, configure the grant window, and start the NDA or access email workflow.",
+        "description": "Approve request and create time-limited grant",
         "operationId": "TrustAccessController_approveRequest_v1",
         "parameters": [
           {
@@ -13192,24 +11832,15 @@
             "apikey": []
           }
         ],
-        "summary": "Approve Trust Access request",
+        "summary": "Approve access request",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Approve Trust Access request | Comp AI API",
-            "sidebarTitle": "Approve Trust Access request",
-            "description": "Approve a Trust Center access request, configure the grant window, and start the NDA or access email workflow.",
-            "og:title": "Approve Trust Access request | Comp AI API",
-            "og:description": "Approve a Trust Center access request, configure the grant window, and start the NDA or access email workflow."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/requests/{id}/deny": {
       "post": {
-        "description": "Reject a Trust Center access request with a review reason so customer security access decisions stay auditable.",
+        "description": "Reject access request with reason",
         "operationId": "TrustAccessController_denyRequest_v1",
         "parameters": [
           {
@@ -13241,24 +11872,15 @@
             "apikey": []
           }
         ],
-        "summary": "Deny Trust Access request",
+        "summary": "Deny access request",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Deny Trust Access request | Comp AI API",
-            "sidebarTitle": "Deny Trust Access request",
-            "description": "Reject a Trust Center access request with a review reason so customer security access decisions stay auditable.",
-            "og:title": "Deny Trust Access request | Comp AI API",
-            "og:description": "Reject a Trust Center access request with a review reason so customer security access decisions stay auditable."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/grants": {
       "get": {
-        "description": "List active, expired, and revoked Trust Access grants for customer security reviews and shared compliance resources.",
+        "description": "Get all active and expired grants",
         "operationId": "TrustAccessController_listGrants_v1",
         "parameters": [],
         "responses": {
@@ -13271,24 +11893,15 @@
             "apikey": []
           }
         ],
-        "summary": "List Trust Access grants",
+        "summary": "List access grants",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List Trust Access grants | Comp AI API",
-            "sidebarTitle": "List Trust Access grants",
-            "description": "List active, expired, and revoked Trust Access grants for customer security reviews and shared compliance resources.",
-            "og:title": "List Trust Access grants | Comp AI API",
-            "og:description": "List active, expired, and revoked Trust Access grants for customer security reviews and shared compliance resources."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/grants/{id}/revoke": {
       "post": {
-        "description": "Immediately revoke a Trust Access grant when a customer review ends or shared compliance access should be removed.",
+        "description": "Immediately revoke active grant",
         "operationId": "TrustAccessController_revokeGrant_v1",
         "parameters": [
           {
@@ -13320,24 +11933,15 @@
             "apikey": []
           }
         ],
-        "summary": "Revoke Trust Access grant",
+        "summary": "Revoke access grant",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Revoke Trust Access grant | Comp AI API",
-            "sidebarTitle": "Revoke Trust Access grant",
-            "description": "Immediately revoke a Trust Access grant when a customer review ends or shared compliance access should be removed.",
-            "og:title": "Revoke Trust Access grant | Comp AI API",
-            "og:description": "Immediately revoke a Trust Access grant when a customer review ends or shared compliance access should be removed."
-          }
-        }
+        ]
       }
     },
     "/v1/trust-access/admin/grants/{id}/resend-access-email": {
       "post": {
-        "description": "Resend the access email for an active Trust Access grant so approved reviewers can reopen shared resources.",
+        "description": "Resend the access granted email to user with active grant",
         "operationId": "TrustAccessController_resendAccessEmail_v1",
         "parameters": [
           {
@@ -13359,28 +11963,19 @@
             "apikey": []
           }
         ],
-        "summary": "Resend Trust Access email",
+        "summary": "Resend access granted email",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Resend Trust Access email | Comp AI API",
-            "sidebarTitle": "Resend Trust Access email",
-            "description": "Resend the access email for an active Trust Access grant so approved reviewers can reopen shared resources.",
-            "og:title": "Resend Trust Access email | Comp AI API",
-            "og:description": "Resend the access email for an active Trust Access grant so approved reviewers can reopen shared resources."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/admin/requests/{id}/resend-nda": {
-      "post": {
-        "description": "Resend an NDA signing email for a Trust Access request that still requires reviewer signature.",
-        "operationId": "TrustAccessController_resendNda_v1",
+    "/v1/trust-access/nda/{token}": {
+      "get": {
+        "description": "Fetch NDA agreement details for signing",
+        "operationId": "TrustAccessController_getNda_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "token",
             "required": true,
             "in": "path",
             "schema": {
@@ -13390,36 +11985,22 @@
         ],
         "responses": {
           "200": {
-            "description": "NDA email resent"
+            "description": "NDA details returned"
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Resend Trust Access NDA",
+        "summary": "Get NDA details by token",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Resend Trust Access NDA | Comp AI API",
-            "sidebarTitle": "Resend Trust Access NDA",
-            "description": "Resend an NDA signing email for a Trust Access request that still requires reviewer signature.",
-            "og:title": "Resend Trust Access NDA | Comp AI API",
-            "og:description": "Resend an NDA signing email for a Trust Access request that still requires reviewer signature."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/admin/requests/{id}/preview-nda": {
+    "/v1/trust-access/nda/{token}/preview-nda": {
       "post": {
-        "description": "Generate a preview NDA PDF for a Trust Access request before the reviewer signs and receives access.",
-        "operationId": "TrustAccessController_previewNda_v1",
+        "description": "Generate preview NDA PDF for external user before signing",
+        "operationId": "TrustAccessController_previewNdaByToken_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "token",
             "required": true,
             "in": "path",
             "schema": {
@@ -13432,29 +12013,110 @@
             "description": "Preview NDA generated"
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Preview Trust Access NDA",
+        "summary": "Preview NDA by token",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Preview Trust Access NDA | Comp AI API",
-            "sidebarTitle": "Preview Trust Access NDA",
-            "description": "Generate a preview NDA PDF for a Trust Access request before the reviewer signs and receives access.",
-            "og:title": "Preview Trust Access NDA | Comp AI API",
-            "og:description": "Generate a preview NDA PDF for a Trust Access request before the reviewer signs and receives access."
-          }
-        }
+        ]
+      }
+    },
+    "/v1/trust-access/nda/{token}/sign": {
+      "post": {
+        "description": "Sign NDA agreement, generate watermarked PDF, and create access grant",
+        "operationId": "TrustAccessController_signNda_v1",
+        "parameters": [
+          {
+            "name": "token",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SignNdaDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "NDA signed successfully"
+          }
+        },
+        "summary": "Sign NDA",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/admin/requests/{id}/resend-nda": {
+      "post": {
+        "description": "Resend NDA signing email to requester",
+        "operationId": "TrustAccessController_resendNda_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "NDA email resent"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Resend NDA email",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/admin/requests/{id}/preview-nda": {
+      "post": {
+        "description": "Generate preview NDA with watermark and save to S3 with preview-* prefix",
+        "operationId": "TrustAccessController_previewNda_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Preview NDA generated"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Preview NDA PDF",
+        "tags": [
+          "Trust Access"
+        ]
       }
     },
     "/v1/trust-access/{friendlyUrl}/reclaim": {
       "post": {
-        "description": "Request a fresh Trust Access link for a reviewer who already has an active grant on a published Trust Center.",
+        "description": "Generate access link for users with existing grants to redownload data",
         "operationId": "TrustAccessController_reclaimAccess_v1",
         "parameters": [
           {
@@ -13492,31 +12154,21 @@
             "description": "Access link sent to email"
           }
         },
-        "summary": "Reclaim Trust Access link",
+        "summary": "Reclaim access",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Reclaim Trust Access link | Comp AI API",
-            "sidebarTitle": "Reclaim Trust Access link",
-            "description": "Request a fresh Trust Access link for a reviewer who already has an active grant on a published Trust Center.",
-            "og:title": "Reclaim Trust Access link | Comp AI API",
-            "og:description": "Request a fresh Trust Access link for a reviewer who already has an active grant on a published Trust Center."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/{friendlyUrl}/faqs": {
+    "/v1/trust-access/access/{token}": {
       "get": {
-        "description": "Retrieve published Trust Center FAQs for an organization so public trust pages can show customer security answers.",
-        "operationId": "TrustAccessController_getFaqs_v1",
+        "description": "Retrieve compliance data using access token",
+        "operationId": "TrustAccessController_getGrantByAccessToken_v1",
         "parameters": [
           {
-            "name": "friendlyUrl",
+            "name": "token",
             "required": true,
             "in": "path",
-            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13524,67 +12176,24 @@
         ],
         "responses": {
           "200": {
-            "description": "FAQs retrieved successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "faqs": {
-                      "type": "array",
-                      "items": {
-                        "type": "object",
-                        "properties": {
-                          "id": {
-                            "type": "string"
-                          },
-                          "question": {
-                            "type": "string"
-                          },
-                          "answer": {
-                            "type": "string"
-                          },
-                          "order": {
-                            "type": "number"
-                          }
-                        }
-                      },
-                      "nullable": true
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Trust site not found or not published"
+            "description": "Grant data returned"
           }
         },
-        "summary": "Get Trust Center FAQs",
+        "summary": "Get grant data by access token",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get Trust Center FAQs | Comp AI API",
-            "sidebarTitle": "Get Trust Center FAQs",
-            "description": "Retrieve published Trust Center FAQs for an organization so public trust pages can show customer security answers.",
-            "og:title": "Get Trust Center FAQs | Comp AI API",
-            "og:description": "Retrieve published Trust Center FAQs for an organization so public trust pages can show customer security answers."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/{friendlyUrl}/overview": {
+    "/v1/trust-access/access/{token}/policies": {
       "get": {
-        "description": "Retrieve the published Trust Center overview for an organization, including public security posture messaging.",
-        "operationId": "TrustAccessController_getPublicOverview_v1",
+        "description": "Get list of published policies available for download",
+        "operationId": "TrustAccessController_getPoliciesByAccessToken_v1",
         "parameters": [
           {
-            "name": "friendlyUrl",
+            "name": "token",
             "required": true,
             "in": "path",
-            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13592,34 +12201,24 @@
         ],
         "responses": {
           "200": {
-            "description": "Overview retrieved successfully"
+            "description": "Policies list returned"
           }
         },
-        "summary": "Get Trust Center overview",
+        "summary": "List policies by access token",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get Trust Center overview | Comp AI API",
-            "sidebarTitle": "Get Trust Center overview",
-            "description": "Retrieve the published Trust Center overview for an organization, including public security posture messaging.",
-            "og:title": "Get Trust Center overview | Comp AI API",
-            "og:description": "Retrieve the published Trust Center overview for an organization, including public security posture messaging."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/{friendlyUrl}/custom-links": {
+    "/v1/trust-access/access/{token}/policies/download-all": {
       "get": {
-        "description": "List published custom links shown on an organization Trust Center for customer security and compliance reviews.",
-        "operationId": "TrustAccessController_getPublicCustomLinks_v1",
+        "description": "Generate combined PDF from all published policy content with watermark",
+        "operationId": "TrustAccessController_downloadAllPolicies_v1",
         "parameters": [
           {
-            "name": "friendlyUrl",
+            "name": "token",
             "required": true,
             "in": "path",
-            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13627,83 +12226,62 @@
         ],
         "responses": {
           "200": {
-            "description": "Custom links retrieved successfully"
+            "description": "Download URL for watermarked PDF returned"
           }
         },
-        "summary": "List Trust Center custom links",
+        "summary": "Download all policies as watermarked PDF",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List Trust Center custom links | Comp AI API",
-            "sidebarTitle": "List Trust Center custom links",
-            "description": "List published custom links shown on an organization Trust Center for customer security and compliance reviews.",
-            "og:title": "List Trust Center custom links | Comp AI API",
-            "og:description": "List published custom links shown on an organization Trust Center for customer security and compliance reviews."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/{friendlyUrl}/favicon": {
+    "/v1/trust-access/access/{token}/policies/{policyId}/download": {
       "get": {
-        "description": "Retrieve the favicon URL used by a published Trust Center so embedded or mirrored experiences can match branding.",
-        "operationId": "TrustAccessController_getPublicFavicon_v1",
+        "description": "Generate watermarked PDF for a specific published policy and return a signed download URL",
+        "operationId": "TrustAccessController_downloadPolicy_v1",
         "parameters": [
           {
-            "name": "friendlyUrl",
+            "name": "token",
             "required": true,
             "in": "path",
-            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "name": "policyId",
+            "required": true,
+            "in": "path",
+            "description": "Policy ID",
+            "schema": {
+              "example": "pol_abc123",
+              "type": "string"
+            }
           }
         ],
         "responses": {
           "200": {
-            "description": "Favicon URL retrieved successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "faviconUrl": {
-                      "type": "string",
-                      "nullable": true,
-                      "description": "Signed URL to the favicon, or null if not set"
-                    }
-                  }
-                }
-              }
-            }
+            "description": "Signed URL for watermarked PDF returned"
+          },
+          "404": {
+            "description": "Policy not found"
           }
         },
-        "summary": "Get Trust Center favicon",
+        "summary": "Download single policy as watermarked PDF",
         "tags": [
           "Trust Access"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get Trust Center favicon | Comp AI API",
-            "sidebarTitle": "Get Trust Center favicon",
-            "description": "Retrieve the favicon URL used by a published Trust Center so embedded or mirrored experiences can match branding.",
-            "og:title": "Get Trust Center favicon | Comp AI API",
-            "og:description": "Retrieve the favicon URL used by a published Trust Center so embedded or mirrored experiences can match branding."
-          }
-        }
+        ]
       }
     },
-    "/v1/trust-access/{friendlyUrl}/vendors": {
+    "/v1/trust-access/access/{token}/policies/download-all-zip": {
       "get": {
-        "description": "List published vendors and subprocessors for an organization Trust Center so reviewers can inspect third-party posture.",
-        "operationId": "TrustAccessController_getPublicVendors_v1",
+        "description": "Generate ZIP archive containing individual watermarked PDFs for each policy",
+        "operationId": "TrustAccessController_downloadAllPoliciesAsZip_v1",
         "parameters": [
           {
-            "name": "friendlyUrl",
+            "name": "token",
             "required": true,
             "in": "path",
-            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13711,147 +12289,195 @@
         ],
         "responses": {
           "200": {
-            "description": "Vendors retrieved successfully"
+            "description": "Download URL for ZIP archive returned"
           }
         },
-        "summary": "List Trust Center vendors",
+        "summary": "Download all policies as ZIP with individual PDFs",
         "tags": [
           "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/access/{token}/compliance-resources": {
+      "get": {
+        "description": "Get list of uploaded compliance certificates for the organization",
+        "operationId": "TrustAccessController_getComplianceResourcesByAccessToken_v1",
+        "parameters": [
+          {
+            "name": "token",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
         ],
-        "x-mint": {
-          "metadata": {
-            "title": "List Trust Center vendors | Comp AI API",
-            "sidebarTitle": "List Trust Center vendors",
-            "description": "List published vendors and subprocessors for an organization Trust Center so reviewers can inspect third-party posture.",
-            "og:title": "List Trust Center vendors | Comp AI API",
-            "og:description": "List published vendors and subprocessors for an organization Trust Center so reviewers can inspect third-party posture."
+        "responses": {
+          "200": {
+            "description": "Compliance resources list returned"
           }
-        }
+        },
+        "summary": "List compliance resources by access token",
+        "tags": [
+          "Trust Access"
+        ]
       }
     },
-    "/v1/findings": {
+    "/v1/trust-access/access/{token}/documents": {
       "get": {
-        "operationId": "FindingsController_listFindings_v1",
+        "description": "Get list of trust portal additional documents available for download",
+        "operationId": "TrustAccessController_getTrustDocumentsByAccessToken_v1",
         "parameters": [
           {
-            "name": "status",
-            "required": false,
-            "in": "query",
+            "name": "token",
+            "required": true,
+            "in": "path",
             "schema": {
-              "enum": [
-                "open",
-                "ready_for_review",
-                "needs_revision",
-                "closed"
-              ],
               "type": "string"
             }
-          },
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Documents list returned"
+          }
+        },
+        "summary": "List additional documents by access token",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/access/{token}/documents/download-all": {
+      "get": {
+        "description": "Creates a ZIP archive of all active trust portal additional documents and returns a signed download URL",
+        "operationId": "TrustAccessController_downloadAllTrustDocuments_v1",
+        "parameters": [
           {
-            "name": "severity",
-            "required": false,
-            "in": "query",
+            "name": "token",
+            "required": true,
+            "in": "path",
             "schema": {
-              "enum": [
-                "low",
-                "medium",
-                "high",
-                "critical"
-              ],
               "type": "string"
             }
-          },
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signed URL for ZIP archive returned"
+          }
+        },
+        "summary": "Download all additional documents as a ZIP by access token",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/access/{token}/documents/{documentId}": {
+      "get": {
+        "description": "Get signed URL to download a specific trust portal additional document",
+        "operationId": "TrustAccessController_getTrustDocumentUrlByAccessToken_v1",
+        "parameters": [
           {
-            "name": "area",
-            "required": false,
-            "in": "query",
+            "name": "token",
+            "required": true,
+            "in": "path",
             "schema": {
-              "enum": [
-                "people",
-                "documents",
-                "compliance",
-                "risks",
-                "vendors",
-                "policies",
-                "other"
-              ],
               "type": "string"
             }
           },
           {
-            "name": "taskId",
-            "required": false,
-            "in": "query",
+            "name": "documentId",
+            "required": true,
+            "in": "path",
+            "description": "Trust document ID",
             "schema": {
+              "example": "tdoc_abc123",
               "type": "string"
             }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signed URL for document returned"
+          },
+          "400": {
+            "description": "Invalid access token"
           },
+          "404": {
+            "description": "Document not found"
+          }
+        },
+        "summary": "Download additional document by access token",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/access/{token}/compliance-resources/{framework}": {
+      "get": {
+        "description": "Get signed URL to download a specific compliance certificate file",
+        "operationId": "TrustAccessController_getComplianceResourceUrlByAccessToken_v1",
+        "parameters": [
           {
-            "name": "evidenceSubmissionId",
-            "required": false,
-            "in": "query",
+            "name": "token",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "evidenceFormType",
-            "required": false,
-            "in": "query",
+            "name": "framework",
+            "required": true,
+            "in": "path",
+            "description": "Compliance framework identifier",
             "schema": {
               "enum": [
-                "board-meeting",
-                "it-leadership-meeting",
-                "risk-committee-meeting",
-                "meeting",
-                "access-request",
-                "whistleblower-report",
-                "penetration-test",
-                "rbac-matrix",
-                "infrastructure-inventory",
-                "employee-performance-evaluation",
-                "network-diagram",
-                "tabletop-exercise"
+                "iso_27001",
+                "iso_42001",
+                "gdpr",
+                "hipaa",
+                "soc2_type1",
+                "soc2_type2",
+                "soc3",
+                "pci_dss",
+                "nen_7510",
+                "iso_9001",
+                "pipeda",
+                "ccpa"
               ],
               "type": "string"
             }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signed URL for compliance resource returned"
           },
-          {
-            "name": "policyId",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "vendorId",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "riskId",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "memberId",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
+          "400": {
+            "description": "Invalid framework or access token"
           },
+          "404": {
+            "description": "Compliance resource not found"
+          }
+        },
+        "summary": "Download compliance resource by access token",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/{friendlyUrl}/faqs": {
+      "get": {
+        "description": "Retrieve the frequently asked questions for a published trust portal as structured data.",
+        "operationId": "TrustAccessController_getFaqs_v1",
+        "parameters": [
           {
-            "name": "deviceId",
-            "required": false,
-            "in": "query",
+            "name": "friendlyUrl",
+            "required": true,
+            "in": "path",
+            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13859,122 +12485,110 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "FAQs retrieved successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "faqs": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "question": {
+                            "type": "string"
+                          },
+                          "answer": {
+                            "type": "string"
+                          },
+                          "order": {
+                            "type": "number"
+                          }
+                        }
+                      },
+                      "nullable": true
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Trust site not found or not published"
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "List audit findings",
+        "summary": "Get FAQs for a trust portal",
         "tags": [
-          "Findings"
-        ],
-        "description": "List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "List audit findings | Comp AI API",
-            "sidebarTitle": "List audit findings",
-            "description": "List audit findings with status, severity, owner, history, and remediation context for compliance review workflows.",
-            "og:title": "List audit findings | Comp AI API",
-            "og:description": "List audit findings with status, severity, owner, history, and remediation context for compliance review workflows."
-          }
-        }
-      },
-      "post": {
-        "operationId": "FindingsController_createFinding_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateFindingDto"
-              }
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/{friendlyUrl}/overview": {
+      "get": {
+        "description": "Retrieve the overview/mission text for a published trust portal.",
+        "operationId": "TrustAccessController_getPublicOverview_v1",
+        "parameters": [
+          {
+            "name": "friendlyUrl",
+            "required": true,
+            "in": "path",
+            "description": "Trust Portal friendly URL or Organization ID",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Overview retrieved successfully"
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Create audit finding",
+        "summary": "Get overview section for a trust portal",
         "tags": [
-          "Findings"
-        ],
-        "description": "Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create audit finding | Comp AI API",
-            "sidebarTitle": "Create audit finding",
-            "description": "Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence.",
-            "og:title": "Create audit finding | Comp AI API",
-            "og:description": "Create an audit finding so teams can track issue ownership, remediation activity, severity, and supporting evidence."
-          }
-        }
+          "Trust Access"
+        ]
       }
     },
-    "/v1/findings/organization": {
+    "/v1/trust-access/{friendlyUrl}/custom-links": {
       "get": {
-        "operationId": "FindingsController_getOrganizationFindings_v1",
+        "description": "Retrieve the custom external links configured for the trust portal.",
+        "operationId": "TrustAccessController_getPublicCustomLinks_v1",
         "parameters": [
           {
-            "name": "status",
-            "required": false,
-            "in": "query",
+            "name": "friendlyUrl",
+            "required": true,
+            "in": "path",
+            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
-              "enum": [
-                "open",
-                "ready_for_review",
-                "needs_revision",
-                "closed"
-              ],
               "type": "string"
             }
           }
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Custom links retrieved successfully"
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "List all findings for the organization",
+        "summary": "Get custom links for a trust portal",
         "tags": [
-          "Findings"
-        ],
-        "description": "List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "List all findings for the organization | Comp AI API",
-            "sidebarTitle": "List all findings for the organization",
-            "description": "List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.",
-            "og:title": "List all findings for the organization | Comp AI API",
-            "og:description": "List all findings for the organization in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an."
-          }
-        }
+          "Trust Access"
+        ]
       }
     },
-    "/v1/findings/{id}": {
+    "/v1/trust-access/{friendlyUrl}/favicon": {
       "get": {
-        "operationId": "FindingsController_getFindingById_v1",
+        "description": "Retrieve the favicon URL for the trust portal.",
+        "operationId": "TrustAccessController_getPublicFavicon_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "friendlyUrl",
             "required": true,
             "in": "path",
-            "description": "Finding ID",
+            "description": "Trust Portal friendly URL or Organization ID",
             "schema": {
               "type": "string"
             }
@@ -13982,37 +12596,148 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Favicon URL retrieved successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "faviconUrl": {
+                      "type": "string",
+                      "nullable": true,
+                      "description": "Signed URL to the favicon, or null if not set"
+                    }
+                  }
+                }
+              }
+            }
           }
         },
-        "security": [
+        "summary": "Get favicon URL for a trust portal",
+        "tags": [
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/trust-access/{friendlyUrl}/vendors": {
+      "get": {
+        "description": "Retrieve the list of vendors configured to display on the trust portal.",
+        "operationId": "TrustAccessController_getPublicVendors_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "friendlyUrl",
+            "required": true,
+            "in": "path",
+            "description": "Trust Portal friendly URL or Organization ID",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Get finding by ID",
+        "responses": {
+          "200": {
+            "description": "Vendors retrieved successfully"
+          }
+        },
+        "summary": "Get vendors/subprocessors for a trust portal",
         "tags": [
-          "Findings"
+          "Trust Access"
+        ]
+      }
+    },
+    "/v1/framework-editor/control-template": {
+      "get": {
+        "operationId": "ControlTemplateController_findAll_v1",
+        "parameters": [
+          {
+            "name": "take",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skip",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "frameworkId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
         ],
-        "description": "Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get finding by ID | Comp AI API",
-            "sidebarTitle": "Get finding by ID",
-            "description": "Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-            "og:title": "Get finding by ID | Comp AI API",
-            "og:description": "Get finding by ID in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization."
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "summary": "List control templates",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
+      },
+      "post": {
+        "operationId": "ControlTemplateController_create_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateControlTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Create a control template",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
+      }
+    },
+    "/v1/framework-editor/control-template/{id}": {
+      "get": {
+        "operationId": "ControlTemplateController_findOne_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Get a control template by ID",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
       },
       "patch": {
-        "operationId": "FindingsController_updateFinding_v1",
+        "operationId": "ControlTemplateController_update_v1",
         "parameters": [
           {
             "name": "id",
             "required": true,
             "in": "path",
-            "description": "Finding ID",
             "schema": {
               "type": "string"
             }
@@ -14023,7 +12748,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/UpdateFindingDto"
+                "$ref": "#/components/schemas/UpdateControlTemplateDto"
               }
             }
           }
@@ -14033,34 +12758,18 @@
             "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Update a finding (status transition rules apply)",
+        "summary": "Update a control template",
         "tags": [
-          "Findings"
-        ],
-        "description": "Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update a finding (status transition rules | Comp AI API",
-            "sidebarTitle": "Update a finding (status transition rules apply)",
-            "description": "Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.",
-            "og:title": "Update a finding (status transition rules | Comp AI API",
-            "og:description": "Update a finding (status transition rules apply) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history."
-          }
-        }
+          "Framework Editor Control Templates"
+        ]
       },
       "delete": {
-        "operationId": "FindingsController_deleteFinding_v1",
+        "operationId": "ControlTemplateController_delete_v1",
         "parameters": [
           {
             "name": "id",
             "required": true,
             "in": "path",
-            "description": "Finding ID",
             "schema": {
               "type": "string"
             }
@@ -14071,101 +12780,77 @@
             "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete a finding (auditor or platform admin only)",
+        "summary": "Delete a control template",
         "tags": [
-          "Findings"
-        ],
-        "description": "Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a finding (auditor or platform admin | Comp AI API",
-            "sidebarTitle": "Delete a finding (auditor or platform admin only)",
-            "description": "Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history.",
-            "og:title": "Delete a finding (auditor or platform admin | Comp AI API",
-            "og:description": "Delete a finding (auditor or platform admin only) in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history."
-          }
-        }
+          "Framework Editor Control Templates"
+        ]
       }
     },
-    "/v1/findings/{id}/history": {
-      "get": {
-        "operationId": "FindingsController_getFindingHistory_v1",
+    "/v1/framework-editor/control-template/{id}/requirements/{reqId}": {
+      "post": {
+        "operationId": "ControlTemplateController_linkRequirement_v1",
         "parameters": [
           {
             "name": "id",
             "required": true,
             "in": "path",
-            "description": "Finding ID",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "reqId",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
+          "201": {
             "description": ""
           }
         },
-        "security": [
+        "summary": "Link a requirement to a control template",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
+      },
+      "delete": {
+        "operationId": "ControlTemplateController_unlinkRequirement_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "reqId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Get activity history for a finding",
-        "tags": [
-          "Findings"
-        ],
-        "description": "Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an organization.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get activity history for a finding | Comp AI API",
-            "sidebarTitle": "Get activity history for a finding",
-            "description": "Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an.",
-            "og:title": "Get activity history for a finding | Comp AI API",
-            "og:description": "Get activity history for a finding in Comp AI. Create, review, update, and track audit findings, remediation activity, and finding history for an."
-          }
-        }
-      }
-    },
-    "/v1/questionnaire": {
-      "get": {
-        "operationId": "QuestionnaireController_findAll_v1",
-        "parameters": [],
         "responses": {
           "200": {
-            "description": "List of questionnaires"
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "List security questionnaires",
+        "summary": "Unlink a requirement from a control template",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "List saved security questionnaires for an organization so teams can track customer reviews, answer status, and response history.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/list-questionnaires",
-          "metadata": {
-            "title": "List security questionnaires | Comp AI API",
-            "sidebarTitle": "List security questionnaires",
-            "description": "List saved security questionnaires for an organization so teams can track customer reviews, answer status, and response history.",
-            "og:title": "List security questionnaires | Comp AI API",
-            "og:description": "List saved security questionnaires for an organization so teams can track customer reviews, answer status, and response history."
-          }
-        }
+          "Framework Editor Control Templates"
+        ]
       }
     },
-    "/v1/questionnaire/{id}": {
-      "get": {
-        "operationId": "QuestionnaireController_findById_v1",
+    "/v1/framework-editor/control-template/{id}/policy-templates/{ptId}": {
+      "post": {
+        "operationId": "ControlTemplateController_linkPolicyTemplate_v1",
         "parameters": [
           {
             "name": "id",
@@ -14174,36 +12859,28 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "name": "ptId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
-          "200": {
-            "description": "Questionnaire details"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Get security questionnaire details",
+        "summary": "Link a policy template to a control template",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Retrieve one saved security questionnaire, including extracted questions, generated answers, and review context for the requesting client.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/get-a-questionnaire-by-id",
-          "metadata": {
-            "title": "Get security questionnaire details | Comp AI API",
-            "sidebarTitle": "Get security questionnaire details",
-            "description": "Retrieve one saved security questionnaire, including extracted questions, generated answers, and review context for the requesting client.",
-            "og:title": "Get security questionnaire details | Comp AI API",
-            "og:description": "Retrieve one saved security questionnaire, including extracted questions, generated answers, and review context for the requesting client."
-          }
-        }
+          "Framework Editor Control Templates"
+        ]
       },
       "delete": {
-        "operationId": "QuestionnaireController_deleteById_v1",
+        "operationId": "ControlTemplateController_unlinkPolicyTemplate_v1",
         "parameters": [
           {
             "name": "id",
@@ -14212,348 +12889,3892 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "name": "ptId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
           "200": {
-            "description": "Questionnaire deleted"
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete a security questionnaire",
+        "summary": "Unlink a policy template from a control template",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Delete a saved security questionnaire when a customer review or vendor assessment no longer needs to be retained.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/delete-a-questionnaire",
-          "metadata": {
-            "title": "Delete a security questionnaire | Comp AI API",
-            "sidebarTitle": "Delete a security questionnaire",
-            "description": "Delete a saved security questionnaire when a customer review or vendor assessment no longer needs to be retained.",
-            "og:title": "Delete a security questionnaire | Comp AI API",
-            "og:description": "Delete a saved security questionnaire when a customer review or vendor assessment no longer needs to be retained."
-          }
-        }
+          "Framework Editor Control Templates"
+        ]
       }
     },
-    "/v1/questionnaire/parse": {
+    "/v1/framework-editor/control-template/{id}/task-templates/{ttId}": {
       "post": {
-        "operationId": "QuestionnaireController_parseQuestionnaire_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ParseQuestionnaireDto"
-              }
+        "operationId": "ControlTemplateController_linkTaskTemplate_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "ttId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "200": {
-            "description": "Parsed questionnaire content",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object"
-                }
-              }
-            }
+          "201": {
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Link a task template to a control template",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
+      },
+      "delete": {
+        "operationId": "ControlTemplateController_unlinkTaskTemplate_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "ttId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Parse questionnaire content",
-        "tags": [
-          "Questionnaire"
-        ],
-        "description": "Parse questionnaire content from a submitted payload so teams can extract security questions before generating or reviewing answers.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/parse-an-uploaded-questionnaire-file",
-          "metadata": {
-            "title": "Parse questionnaire content | Comp AI API",
-            "sidebarTitle": "Parse questionnaire content",
-            "description": "Parse questionnaire content from a submitted payload so teams can extract security questions before generating or reviewing answers.",
-            "og:title": "Parse questionnaire content | Comp AI API",
-            "og:description": "Parse questionnaire content from a submitted payload so teams can extract security questions before generating or reviewing answers."
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "summary": "Unlink a task template from a control template",
+        "tags": [
+          "Framework Editor Control Templates"
+        ]
       }
     },
-    "/v1/questionnaire/answer-single": {
-      "post": {
-        "operationId": "QuestionnaireController_answerSingleQuestion_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/AnswerSingleQuestionDto"
-              }
+    "/v1/framework-editor/framework": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_findAll_v1",
+        "parameters": [
+          {
+            "name": "take",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skip",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "Generated single answer result",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "success": {
-                      "type": "boolean"
-                    },
-                    "data": {
-                      "type": "object",
-                      "properties": {
-                        "questionIndex": {
-                          "type": "number"
-                        },
-                        "question": {
-                          "type": "string"
-                        },
-                        "answer": {
-                          "type": "string",
-                          "nullable": true
-                        },
-                        "sources": {
-                          "type": "array",
-                          "items": {
-                            "type": "object"
-                          }
-                        },
-                        "error": {
-                          "type": "string",
-                          "nullable": true
-                        }
-                      }
-                    }
-                  }
-                }
-              }
-            }
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Answer one questionnaire question",
+        "summary": "List frameworks",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Generate an answer for one security questionnaire item using the organization evidence library and return source references for review.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/answer-a-single-questionnaire-question",
-          "metadata": {
-            "title": "Answer one questionnaire question | Comp AI API",
-            "sidebarTitle": "Answer one questionnaire question",
-            "description": "Generate an answer for one security questionnaire item using the organization evidence library and return source references for review.",
-            "og:title": "Answer one questionnaire question | Comp AI API",
-            "og:description": "Generate an answer for one security questionnaire item using the organization evidence library and return source references for review."
-          }
-        }
-      }
-    },
-    "/v1/questionnaire/save-answer": {
+          "Framework Editor Frameworks"
+        ]
+      },
       "post": {
-        "operationId": "QuestionnaireController_saveAnswer_v1",
+        "operationId": "FrameworkEditorFrameworkController_create_v1",
         "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/SaveAnswerDto"
+                "$ref": "#/components/schemas/CreateFrameworkDto"
               }
             }
           }
         },
         "responses": {
-          "200": {
-            "description": "Save manual or generated answer",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "success": {
-                      "type": "boolean"
-                    },
-                    "error": {
-                      "type": "string",
-                      "nullable": true
-                    }
-                  }
-                }
-              }
-            }
+          "201": {
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Create a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_findById_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Save questionnaire answer",
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Get a framework by ID",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Save a manual or AI-generated security questionnaire answer for later review, export, and audit tracking.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/save-a-questionnaire-answer",
-          "metadata": {
-            "title": "Save questionnaire answer | Comp AI API",
-            "sidebarTitle": "Save questionnaire answer",
-            "description": "Save a manual or AI-generated security questionnaire answer for later review, export, and audit tracking.",
-            "og:title": "Save questionnaire answer | Comp AI API",
-            "og:description": "Save a manual or AI-generated security questionnaire answer for later review, export, and audit tracking."
+          "Framework Editor Frameworks"
+        ]
+      },
+      "patch": {
+        "operationId": "FrameworkEditorFrameworkController_update_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
-        }
-      }
-    },
-    "/v1/questionnaire/delete-answer": {
-      "post": {
-        "operationId": "QuestionnaireController_deleteAnswer_v1",
-        "parameters": [],
+        ],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/DeleteAnswerDto"
+                "$ref": "#/components/schemas/UpdateFrameworkDto"
               }
             }
           }
         },
         "responses": {
           "200": {
-            "description": "Delete questionnaire answer",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "success": {
-                      "type": "boolean"
-                    },
-                    "error": {
-                      "type": "string",
-                      "nullable": true
-                    }
-                  }
-                }
-              }
-            }
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Update a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      },
+      "delete": {
+        "operationId": "FrameworkEditorFrameworkController_delete_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Delete questionnaire answer",
-        "tags": [
-          "Questionnaire"
-        ],
-        "description": "Delete a stored questionnaire answer when it should be removed from the active response set.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/delete-a-questionnaire-answer",
-          "metadata": {
-            "title": "Delete questionnaire answer | Comp AI API",
-            "sidebarTitle": "Delete questionnaire answer",
-            "description": "Delete a stored questionnaire answer when it should be removed from the active response set.",
-            "og:title": "Delete questionnaire answer | Comp AI API",
-            "og:description": "Delete a stored questionnaire answer when it should be removed from the active response set."
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "summary": "Delete a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
       }
     },
-    "/v1/questionnaire/export": {
+    "/v1/framework-editor/framework/import": {
       "post": {
-        "operationId": "QuestionnaireController_exportById_v1",
+        "operationId": "FrameworkEditorFrameworkController_importFramework_v1",
         "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/ExportByIdDto"
+                "$ref": "#/components/schemas/ImportFrameworkDto"
               }
             }
           }
         },
         "responses": {
-          "200": {
-            "description": "Export questionnaire by ID to specified format"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Export a security questionnaire",
+        "summary": "Import a framework definition",
         "tags": [
-          "Questionnaire"
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/export": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_exportFramework_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Export a framework definition",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/controls": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_getControls_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List controls for a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/policies": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_getPolicies_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List policy templates for a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/tasks": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_getTasks_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List task templates for a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/documents": {
+      "get": {
+        "operationId": "FrameworkEditorFrameworkController_getDocuments_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List documents for a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/link-control/{controlId}": {
+      "post": {
+        "operationId": "FrameworkEditorFrameworkController_linkControl_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "controlId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Link a control to a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/link-task/{taskId}": {
+      "post": {
+        "operationId": "FrameworkEditorFrameworkController_linkTask_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Link a task template to a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/framework/{id}/link-policy/{policyId}": {
+      "post": {
+        "operationId": "FrameworkEditorFrameworkController_linkPolicy_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "policyId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Link a policy template to a framework",
+        "tags": [
+          "Framework Editor Frameworks"
+        ]
+      }
+    },
+    "/v1/framework-editor/policy-template": {
+      "get": {
+        "operationId": "PolicyTemplateController_findAll_v1",
+        "parameters": [
+          {
+            "name": "take",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skip",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "frameworkId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List policy templates",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      },
+      "post": {
+        "operationId": "PolicyTemplateController_create_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreatePolicyTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Create a policy template",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      }
+    },
+    "/v1/framework-editor/policy-template/{id}": {
+      "get": {
+        "operationId": "PolicyTemplateController_findById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Get a policy template by ID",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      },
+      "patch": {
+        "operationId": "PolicyTemplateController_update_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdatePolicyTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Update a policy template",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      },
+      "delete": {
+        "operationId": "PolicyTemplateController_delete_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Delete a policy template",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      }
+    },
+    "/v1/framework-editor/policy-template/{id}/content": {
+      "patch": {
+        "operationId": "PolicyTemplateController_updateContent_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdatePolicyContentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Update policy template content",
+        "tags": [
+          "Framework Editor Policy Templates"
+        ]
+      }
+    },
+    "/v1/framework-editor/requirement": {
+      "get": {
+        "operationId": "RequirementController_findAll_v1",
+        "parameters": [
+          {
+            "name": "take",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "skip",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "List requirements",
+        "tags": [
+          "Framework Editor Requirements"
+        ]
+      },
+      "post": {
+        "operationId": "RequirementController_create_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateRequirementDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Create a requirement",
+        "tags": [
+          "Framework Editor Requirements"
+        ]
+      }
+    },
+    "/v1/framework-editor/requirement/{id}": {
+      "patch": {
+        "operationId": "RequirementController_update_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateRequirementDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Update a requirement",
+        "tags": [
+          "Framework Editor Requirements"
+        ]
+      },
+      "delete": {
+        "operationId": "RequirementController_delete_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "summary": "Delete a requirement",
+        "tags": [
+          "Framework Editor Requirements"
+        ]
+      }
+    },
+    "/v1/framework-editor/task-template": {
+      "post": {
+        "description": "Create a new framework editor task template",
+        "operationId": "TaskTemplateController_createTaskTemplate_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "description": "Create a new framework editor task template",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateTaskTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Create a framework editor task template",
+        "tags": [
+          "Framework Editor Task Templates"
+        ]
+      },
+      "get": {
+        "description": "Retrieve all framework editor task templates",
+        "operationId": "TaskTemplateController_getAllTaskTemplates_v1",
+        "parameters": [
+          {
+            "name": "frameworkId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successfully retrieved all framework editor task templates",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "data": [
+                      {
+                        "id": "frk_tt_abc123def456",
+                        "name": "Monthly Security Review",
+                        "description": "Review and update security policies on a monthly basis",
+                        "frequency": "monthly",
+                        "department": "it",
+                        "createdAt": "2025-01-01T00:00:00.000Z",
+                        "updatedAt": "2025-01-01T00:00:00.000Z"
+                      }
+                    ],
+                    "count": 1,
+                    "authType": "session",
+                    "authenticatedUser": {
+                      "id": "user_123",
+                      "email": "user@example.com"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - Invalid or missing authentication",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 401,
+                    "message": "Unauthorized"
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 500,
+                    "message": "Internal server error"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "summary": "Get all framework editor task templates",
+        "tags": [
+          "Framework Editor Task Templates"
+        ]
+      }
+    },
+    "/v1/framework-editor/task-template/{id}": {
+      "get": {
+        "description": "Retrieve a specific framework editor task template by its ID",
+        "operationId": "TaskTemplateController_getTaskTemplateById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Framework editor task template ID",
+            "schema": {
+              "example": "frk_tt_abc123def456",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successfully retrieved framework editor task template",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "id": "frk_tt_abc123def456",
+                    "name": "Monthly Security Review",
+                    "description": "Review and update security policies on a monthly basis",
+                    "frequency": "monthly",
+                    "department": "it",
+                    "createdAt": "2025-01-01T00:00:00.000Z",
+                    "updatedAt": "2025-01-01T00:00:00.000Z",
+                    "authType": "session",
+                    "authenticatedUser": {
+                      "id": "user_123",
+                      "email": "user@example.com"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - Invalid or missing authentication",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 401,
+                    "message": "Unauthorized"
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Framework editor task template not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 404,
+                    "message": "Framework editor task template with ID frk_tt_abc123def456 not found"
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 500,
+                    "message": "Internal server error"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "summary": "Get framework editor task template by ID",
+        "tags": [
+          "Framework Editor Task Templates"
+        ]
+      },
+      "patch": {
+        "description": "Update a framework editor task template by ID",
+        "operationId": "TaskTemplateController_updateTaskTemplate_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Framework editor task template ID",
+            "schema": {
+              "example": "frk_tt_abc123def456",
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "description": "Update framework editor task template data",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateTaskTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Successfully updated framework editor task template",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "id": "frk_tt_abc123def456",
+                    "name": "Monthly Security Review (Updated)",
+                    "description": "Review and update security policies on a monthly basis",
+                    "frequency": "monthly",
+                    "department": "it",
+                    "createdAt": "2025-01-01T00:00:00.000Z",
+                    "updatedAt": "2025-01-02T00:00:00.000Z",
+                    "authType": "session",
+                    "authenticatedUser": {
+                      "id": "user_123",
+                      "email": "user@example.com"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request - Invalid data provided",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 400,
+                    "message": "Validation failed"
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - Invalid or missing authentication",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 401,
+                    "message": "Unauthorized"
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Framework editor task template not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 404,
+                    "message": "Framework editor task template with ID frk_tt_abc123def456 not found"
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 500,
+                    "message": "Internal server error"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "summary": "Update framework editor task template",
+        "tags": [
+          "Framework Editor Task Templates"
+        ]
+      },
+      "delete": {
+        "description": "Delete a framework editor task template by ID",
+        "operationId": "TaskTemplateController_deleteTaskTemplate_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Framework editor task template ID",
+            "schema": {
+              "example": "frk_tt_abc123def456",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successfully deleted framework editor task template",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "message": "Framework editor task template deleted successfully",
+                    "deletedTaskTemplate": {
+                      "id": "frk_tt_abc123def456",
+                      "name": "Monthly Security Review"
+                    },
+                    "authType": "session",
+                    "authenticatedUser": {
+                      "id": "user_123",
+                      "email": "user@example.com"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - Invalid or missing authentication",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 401,
+                    "message": "Unauthorized"
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Framework editor task template not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 404,
+                    "message": "Framework editor task template with ID frk_tt_abc123def456 not found"
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "example": {
+                    "statusCode": 500,
+                    "message": "Internal server error"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "summary": "Delete framework editor task template",
+        "tags": [
+          "Framework Editor Task Templates"
+        ]
+      }
+    },
+    "/v1/finding-template": {
+      "get": {
+        "description": "Retrieve all finding templates ordered by category and order",
+        "operationId": "FindingTemplateController_getAllFindingTemplates_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "List of all finding templates"
+          },
+          "401": {
+            "description": "Unauthorized"
+          }
+        },
+        "summary": "Get all finding templates",
+        "tags": [
+          "Finding Templates"
+        ]
+      },
+      "post": {
+        "description": "Create a new finding template (Platform Admin only)",
+        "operationId": "FindingTemplateController_createFindingTemplate_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "description": "Finding template data",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateFindingTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "The created finding template"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "403": {
+            "description": "Forbidden - Platform admin required"
+          }
+        },
+        "summary": "Create a finding template",
+        "tags": [
+          "Finding Templates"
+        ]
+      }
+    },
+    "/v1/finding-template/{id}": {
+      "get": {
+        "description": "Retrieve a specific finding template by its ID",
+        "operationId": "FindingTemplateController_getFindingTemplateById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding template ID",
+            "schema": {
+              "example": "fnd_t_abc123",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The finding template"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "404": {
+            "description": "Finding template not found"
+          }
+        },
+        "summary": "Get finding template by ID",
+        "tags": [
+          "Finding Templates"
+        ]
+      },
+      "patch": {
+        "description": "Update an existing finding template (Platform Admin only)",
+        "operationId": "FindingTemplateController_updateFindingTemplate_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding template ID",
+            "schema": {
+              "example": "fnd_t_abc123",
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "description": "Finding template update data",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateFindingTemplateDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "The updated finding template"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "403": {
+            "description": "Forbidden - Platform admin required"
+          },
+          "404": {
+            "description": "Finding template not found"
+          }
+        },
+        "summary": "Update a finding template",
+        "tags": [
+          "Finding Templates"
+        ]
+      },
+      "delete": {
+        "description": "Delete a finding template (Platform Admin only)",
+        "operationId": "FindingTemplateController_deleteFindingTemplate_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding template ID",
+            "schema": {
+              "example": "fnd_t_abc123",
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Finding template deleted successfully"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "403": {
+            "description": "Forbidden - Platform admin required"
+          },
+          "404": {
+            "description": "Finding template not found"
+          }
+        },
+        "summary": "Delete a finding template",
+        "tags": [
+          "Finding Templates"
+        ]
+      }
+    },
+    "/v1/findings": {
+      "get": {
+        "operationId": "FindingsController_listFindings_v1",
+        "parameters": [
+          {
+            "name": "status",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "enum": [
+                "open",
+                "ready_for_review",
+                "needs_revision",
+                "closed"
+              ],
+              "type": "string"
+            }
+          },
+          {
+            "name": "severity",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "enum": [
+                "low",
+                "medium",
+                "high",
+                "critical"
+              ],
+              "type": "string"
+            }
+          },
+          {
+            "name": "area",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "enum": [
+                "people",
+                "documents",
+                "compliance",
+                "risks",
+                "vendors",
+                "policies",
+                "other"
+              ],
+              "type": "string"
+            }
+          },
+          {
+            "name": "taskId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "evidenceSubmissionId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "evidenceFormType",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "enum": [
+                "board-meeting",
+                "it-leadership-meeting",
+                "risk-committee-meeting",
+                "meeting",
+                "access-request",
+                "whistleblower-report",
+                "penetration-test",
+                "rbac-matrix",
+                "infrastructure-inventory",
+                "employee-performance-evaluation",
+                "network-diagram",
+                "tabletop-exercise"
+              ],
+              "type": "string"
+            }
+          },
+          {
+            "name": "policyId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "vendorId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "riskId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "memberId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "deviceId",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List findings for organization (optionally filtered)",
+        "tags": [
+          "Findings"
+        ]
+      },
+      "post": {
+        "operationId": "FindingsController_createFinding_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateFindingDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create a finding (auditor or platform admin only)",
+        "tags": [
+          "Findings"
+        ]
+      }
+    },
+    "/v1/findings/organization": {
+      "get": {
+        "operationId": "FindingsController_getOrganizationFindings_v1",
+        "parameters": [
+          {
+            "name": "status",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "enum": [
+                "open",
+                "ready_for_review",
+                "needs_revision",
+                "closed"
+              ],
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List all findings for the organization",
+        "tags": [
+          "Findings"
+        ]
+      }
+    },
+    "/v1/findings/{id}": {
+      "get": {
+        "operationId": "FindingsController_getFindingById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding ID",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get finding by ID",
+        "tags": [
+          "Findings"
+        ]
+      },
+      "patch": {
+        "operationId": "FindingsController_updateFinding_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding ID",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateFindingDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Update a finding (status transition rules apply)",
+        "tags": [
+          "Findings"
+        ]
+      },
+      "delete": {
+        "operationId": "FindingsController_deleteFinding_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding ID",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete a finding (auditor or platform admin only)",
+        "tags": [
+          "Findings"
+        ]
+      }
+    },
+    "/v1/findings/{id}/history": {
+      "get": {
+        "operationId": "FindingsController_getFindingHistory_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Finding ID",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get activity history for a finding",
+        "tags": [
+          "Findings"
+        ]
+      }
+    },
+    "/v1/questionnaire": {
+      "get": {
+        "operationId": "QuestionnaireController_findAll_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "List of questionnaires"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List questionnaires",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/{id}": {
+      "get": {
+        "operationId": "QuestionnaireController_findById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Questionnaire details"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get a questionnaire by ID",
+        "tags": [
+          "Questionnaire"
+        ]
+      },
+      "delete": {
+        "operationId": "QuestionnaireController_deleteById_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Questionnaire deleted"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete a questionnaire",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/parse": {
+      "post": {
+        "operationId": "QuestionnaireController_parseQuestionnaire_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ParseQuestionnaireDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Parsed questionnaire content",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Parse an uploaded questionnaire file",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/answer-single": {
+      "post": {
+        "operationId": "QuestionnaireController_answerSingleQuestion_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AnswerSingleQuestionDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Generated single answer result",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    },
+                    "data": {
+                      "type": "object",
+                      "properties": {
+                        "questionIndex": {
+                          "type": "number"
+                        },
+                        "question": {
+                          "type": "string"
+                        },
+                        "answer": {
+                          "type": "string",
+                          "nullable": true
+                        },
+                        "sources": {
+                          "type": "array",
+                          "items": {
+                            "type": "object"
+                          }
+                        },
+                        "error": {
+                          "type": "string",
+                          "nullable": true
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Answer a single questionnaire question",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/save-answer": {
+      "post": {
+        "operationId": "QuestionnaireController_saveAnswer_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SaveAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Save manual or generated answer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    },
+                    "error": {
+                      "type": "string",
+                      "nullable": true
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Save a questionnaire answer",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/delete-answer": {
+      "post": {
+        "operationId": "QuestionnaireController_deleteAnswer_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeleteAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Delete questionnaire answer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    },
+                    "error": {
+                      "type": "string",
+                      "nullable": true
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete a questionnaire answer",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/export": {
+      "post": {
+        "operationId": "QuestionnaireController_exportById_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExportByIdDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Export questionnaire by ID to specified format"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Export a questionnaire",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/upload-and-parse": {
+      "post": {
+        "operationId": "QuestionnaireController_uploadAndParse_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UploadAndParseDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Upload file and trigger async parsing. Returns runId for realtime tracking.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "runId": {
+                      "type": "string"
+                    },
+                    "publicAccessToken": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload and parse a questionnaire file",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/upload-and-parse/upload": {
+      "post": {
+        "operationId": "QuestionnaireController_uploadAndParseUpload_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "file": {
+                    "type": "string",
+                    "format": "binary",
+                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
+                  },
+                  "organizationId": {
+                    "type": "string",
+                    "description": "Organization ID"
+                  },
+                  "source": {
+                    "type": "string",
+                    "enum": [
+                      "internal",
+                      "external"
+                    ],
+                    "default": "internal",
+                    "description": "Source of the upload"
+                  }
+                },
+                "required": [
+                  "file",
+                  "organizationId"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Upload file, parse questions (no answers), save to DB, return questionnaireId",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "questionnaireId": {
+                      "type": "string"
+                    },
+                    "totalQuestions": {
+                      "type": "number"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload a questionnaire file and parse its questions",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/parse/upload": {
+      "post": {
+        "operationId": "QuestionnaireController_parseQuestionnaireUpload_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "file": {
+                    "type": "string",
+                    "format": "binary",
+                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
+                  },
+                  "organizationId": {
+                    "type": "string",
+                    "description": "Organization to use for generating answers"
+                  },
+                  "format": {
+                    "type": "string",
+                    "enum": [
+                      "pdf",
+                      "csv",
+                      "xlsx"
+                    ],
+                    "default": "xlsx",
+                    "description": "Output format (defaults to XLSX)"
+                  },
+                  "source": {
+                    "type": "string",
+                    "enum": [
+                      "internal",
+                      "external"
+                    ],
+                    "default": "internal",
+                    "description": "Indicates if the request originated from our UI (internal) or trust portal (external)."
+                  }
+                },
+                "required": [
+                  "file",
+                  "organizationId"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload a questionnaire file and auto-answer with export",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/parse/upload/token": {
+      "post": {
+        "operationId": "QuestionnaireController_parseQuestionnaireUploadByToken_v1",
+        "parameters": [
+          {
+            "name": "token",
+            "required": true,
+            "in": "query",
+            "description": "Trust access token for authentication",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "file": {
+                    "type": "string",
+                    "format": "binary",
+                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
+                  },
+                  "format": {
+                    "type": "string",
+                    "enum": [
+                      "pdf",
+                      "csv",
+                      "xlsx"
+                    ],
+                    "default": "xlsx",
+                    "description": "Output format (ignored - always exports all formats as ZIP)"
+                  }
+                },
+                "required": [
+                  "file"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload and auto-answer a questionnaire via trust portal token",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/answers/export": {
+      "post": {
+        "operationId": "QuestionnaireController_autoAnswerAndExport_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExportQuestionnaireDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Export questionnaire answers",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/answers/export/upload": {
+      "post": {
+        "operationId": "QuestionnaireController_autoAnswerAndExportUpload_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "file": {
+                    "type": "string",
+                    "format": "binary",
+                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
+                  },
+                  "organizationId": {
+                    "type": "string",
+                    "description": "Organization to use for answer generation"
+                  },
+                  "format": {
+                    "type": "string",
+                    "enum": [
+                      "pdf",
+                      "csv",
+                      "xlsx"
+                    ],
+                    "default": "xlsx",
+                    "description": "Output format (defaults to XLSX)"
+                  }
+                },
+                "required": [
+                  "file",
+                  "organizationId"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload a questionnaire file and export auto-generated answers",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/questionnaire/auto-answer": {
+      "post": {
+        "operationId": "QuestionnaireController_autoAnswer_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AutoAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Auto-answer a questionnaire",
+        "tags": [
+          "Questionnaire"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents": {
+      "get": {
+        "operationId": "KnowledgeBaseController_listDocuments_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "List of knowledge base documents"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List all knowledge base documents for an organization",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/manual-answers": {
+      "get": {
+        "operationId": "KnowledgeBaseController_listManualAnswers_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "List of manual answers"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List all manual answers for an organization",
+        "tags": [
+          "Knowledge Base"
+        ]
+      },
+      "post": {
+        "operationId": "KnowledgeBaseController_saveManualAnswer_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SaveManualAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Manual answer saved"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Save or update a manual answer",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents/upload": {
+      "post": {
+        "operationId": "KnowledgeBaseController_uploadDocument_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UploadDocumentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document uploaded successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Upload a knowledge base document",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents/{documentId}/download": {
+      "post": {
+        "operationId": "KnowledgeBaseController_getDownloadUrl_v1",
+        "parameters": [
+          {
+            "name": "documentId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signed download URL generated"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get a signed download URL for a document",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents/{documentId}/view": {
+      "post": {
+        "operationId": "KnowledgeBaseController_getViewUrl_v1",
+        "parameters": [
+          {
+            "name": "documentId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signed view URL generated"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get a signed view URL for a document",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents/{documentId}/delete": {
+      "post": {
+        "operationId": "KnowledgeBaseController_deleteDocument_v1",
+        "parameters": [
+          {
+            "name": "documentId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Document deleted successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete a knowledge base document",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/documents/process": {
+      "post": {
+        "operationId": "KnowledgeBaseController_processDocuments_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ProcessDocumentsDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document processing triggered"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Trigger processing of knowledge base documents",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/runs/{runId}/token": {
+      "post": {
+        "operationId": "KnowledgeBaseController_createRunToken_v1",
+        "parameters": [
+          {
+            "name": "runId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Public access token created"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create a public access token for a run",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/manual-answers/{manualAnswerId}/delete": {
+      "post": {
+        "operationId": "KnowledgeBaseController_deleteManualAnswer_v1",
+        "parameters": [
+          {
+            "name": "manualAnswerId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeleteManualAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Manual answer deleted"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete a manual answer",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/knowledge-base/manual-answers/delete-all": {
+      "post": {
+        "operationId": "KnowledgeBaseController_deleteAllManualAnswers_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeleteAllManualAnswersDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "All manual answers deleted"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete all manual answers for an organization",
+        "tags": [
+          "Knowledge Base"
+        ]
+      }
+    },
+    "/v1/soa/save-answer": {
+      "post": {
+        "operationId": "SOAController_saveAnswer_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SaveSOAAnswerDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Answer saved successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Save a SOA answer",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/auto-fill": {
+      "post": {
+        "description": "Streams SOA answers via Server-Sent Events (SSE)",
+        "operationId": "SOAController_autoFill_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AutoFillSOADto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Auto-fill SOA document",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/create-document": {
+      "post": {
+        "operationId": "SOAController_createDocument_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateSOADocumentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document created successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create a new SOA document",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/ensure-setup": {
+      "post": {
+        "operationId": "SOAController_ensureSetup_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/EnsureSOASetupDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Setup ensured"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Ensure SOA configuration and document exist",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/approve": {
+      "post": {
+        "operationId": "SOAController_approveDocument_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ApproveSOADocumentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document approved successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Approve a SOA document",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/decline": {
+      "post": {
+        "operationId": "SOAController_declineDocument_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeclineSOADocumentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document declined successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Decline a SOA document",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/submit-for-approval": {
+      "post": {
+        "operationId": "SOAController_submitForApproval_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SubmitSOAForApprovalDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Document submitted for approval successfully"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Submit SOA document for approval",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/soa/export": {
+      "post": {
+        "operationId": "SOAController_exportDocument_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExportSOADocumentDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Export SOA document to PDF"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Export a SOA document",
+        "tags": [
+          "SOA"
+        ]
+      }
+    },
+    "/v1/integrations/oauth/availability": {
+      "get": {
+        "operationId": "OAuthController_checkAvailability_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Check OAuth provider availability",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/oauth/start": {
+      "post": {
+        "operationId": "OAuthController_startOAuth_v1",
+        "parameters": [],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Start an OAuth authorization flow",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/oauth/callback": {
+      "get": {
+        "operationId": "OAuthController_oauthCallback_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Handle OAuth provider callback",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/oauth-apps": {
+      "get": {
+        "operationId": "OAuthAppsController_listOAuthApps_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List configured OAuth apps",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "post": {
+        "operationId": "OAuthAppsController_saveOAuthApp_v1",
+        "parameters": [],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create an OAuth app configuration",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/oauth-apps/setup/{providerSlug}": {
+      "get": {
+        "operationId": "OAuthAppsController_getSetupInfo_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get OAuth app setup details",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/oauth-apps/{providerSlug}": {
+      "delete": {
+        "operationId": "OAuthAppsController_deleteOAuthApp_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete an OAuth app configuration",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/providers": {
+      "get": {
+        "operationId": "ConnectionsController_listProviders_v1",
+        "parameters": [
+          {
+            "name": "activeOnly",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List available integration providers",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/providers/{slug}": {
+      "get": {
+        "operationId": "ConnectionsController_getProvider_v1",
+        "parameters": [
+          {
+            "name": "slug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get an integration provider by slug",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections": {
+      "get": {
+        "operationId": "ConnectionsController_listConnections_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List integration connections",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "post": {
+        "operationId": "ConnectionsController_createConnection_v1",
+        "parameters": [],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}": {
+      "get": {
+        "operationId": "ConnectionsController_getConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get an integration connection by ID",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "delete": {
+        "operationId": "ConnectionsController_deleteConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Delete an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "patch": {
+        "operationId": "ConnectionsController_updateConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Update an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/test": {
+      "post": {
+        "operationId": "ConnectionsController_testConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Test an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/pause": {
+      "post": {
+        "operationId": "ConnectionsController_pauseConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Pause an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/resume": {
+      "post": {
+        "operationId": "ConnectionsController_resumeConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Resume an integration connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/disconnect": {
+      "post": {
+        "operationId": "ConnectionsController_disconnectConnection_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Disconnect an integration",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/ensure-valid-credentials": {
+      "post": {
+        "operationId": "ConnectionsController_ensureValidCredentials_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Ensure valid credentials for a connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/services": {
+      "put": {
+        "operationId": "ConnectionsController_updateConnectionServices_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Set services enabled on a connection",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "get": {
+        "operationId": "ServicesController_getConnectionServices_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List services enabled on a connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/connections/{id}/credentials": {
+      "put": {
+        "operationId": "ConnectionsController_updateCredentials_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Update integration credentials",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/checks/providers/{providerSlug}": {
+      "get": {
+        "operationId": "ChecksController_listProviderChecks_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List check definitions for a provider",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/checks/connections/{connectionId}": {
+      "get": {
+        "operationId": "ChecksController_listConnectionChecks_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List checks for a connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/checks/connections/{connectionId}/run": {
+      "post": {
+        "operationId": "ChecksController_runConnectionChecks_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Run all checks for a connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/checks/connections/{connectionId}/run/{checkId}": {
+      "post": {
+        "operationId": "ChecksController_runSingleCheck_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "checkId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Run a single check on a connection",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/variables/providers/{providerSlug}": {
+      "get": {
+        "operationId": "VariablesController_getProviderVariables_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List variable definitions for a provider",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/variables/connections/{connectionId}": {
+      "get": {
+        "operationId": "VariablesController_getConnectionVariables_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List connection variables",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "post": {
+        "operationId": "VariablesController_saveConnectionVariables_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
         ],
-        "description": "Export a saved security questionnaire response package as PDF, CSV, or XLSX for customer and vendor security reviews.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/export-a-questionnaire",
-          "metadata": {
-            "title": "Export a security questionnaire | Comp AI API",
-            "sidebarTitle": "Export a security questionnaire",
-            "description": "Export a saved security questionnaire response package as PDF, CSV, or XLSX for customer and vendor security reviews.",
-            "og:title": "Export a security questionnaire | Comp AI API",
-            "og:description": "Export a saved security questionnaire response package as PDF, CSV, or XLSX for customer and vendor security reviews."
+        "summary": "Update connection variables",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/variables/connections/{connectionId}/options/{variableId}": {
+      "get": {
+        "operationId": "VariablesController_fetchVariableOptions_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "variableId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
-        }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get options for a connection variable",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/template/{templateId}/checks": {
+      "get": {
+        "operationId": "TaskIntegrationsController_getChecksForTaskTemplate_v1",
+        "parameters": [
+          {
+            "name": "templateId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List checks for a task template",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/{taskId}/checks": {
+      "get": {
+        "operationId": "TaskIntegrationsController_getChecksForTask_v1",
+        "parameters": [
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List checks attached to a task",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/{taskId}/run-check": {
+      "post": {
+        "operationId": "TaskIntegrationsController_runCheckForTask_v1",
+        "parameters": [
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Run a check for a task",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/{taskId}/checks/disconnect": {
+      "post": {
+        "operationId": "TaskIntegrationsController_disconnectCheckFromTask_v1",
+        "parameters": [
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Disconnect checks from a task",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/{taskId}/checks/reconnect": {
+      "post": {
+        "operationId": "TaskIntegrationsController_reconnectCheckToTask_v1",
+        "parameters": [
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Reconnect checks to a task",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/tasks/{taskId}/runs": {
+      "get": {
+        "operationId": "TaskIntegrationsController_getTaskCheckRuns_v1",
+        "parameters": [
+          {
+            "name": "taskId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "limit",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "List check runs for a task",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/webhooks/{providerSlug}/{connectionId}": {
+      "post": {
+        "operationId": "WebhookController_handleWebhook_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Receive a provider webhook event",
+        "tags": [
+          "Webhook"
+        ]
       }
     },
-    "/v1/questionnaire/upload-and-parse": {
+    "/v1/integrations/sync/google-workspace/employees": {
       "post": {
-        "operationId": "QuestionnaireController_uploadAndParse_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/UploadAndParseDto"
-              }
+        "operationId": "SyncController_syncGoogleWorkspaceEmployees_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "200": {
-            "description": "Upload file and trigger async parsing. Returns runId for realtime tracking.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "runId": {
-                      "type": "string"
-                    },
-                    "publicAccessToken": {
-                      "type": "string"
-                    }
-                  }
-                }
-              }
-            }
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -14561,79 +16782,19 @@
             "apikey": []
           }
         ],
-        "summary": "Start questionnaire parsing",
+        "summary": "Sync Google Workspace employees",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Upload a questionnaire payload and start asynchronous parsing, returning a run ID for real-time progress tracking.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/upload-and-parse-a-questionnaire-file",
-          "metadata": {
-            "title": "Start questionnaire parsing | Comp AI API",
-            "sidebarTitle": "Start questionnaire parsing",
-            "description": "Upload a questionnaire payload and start asynchronous parsing, returning a run ID for real-time progress tracking.",
-            "og:title": "Start questionnaire parsing | Comp AI API",
-            "og:description": "Upload a questionnaire payload and start asynchronous parsing, returning a run ID for real-time progress tracking."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/questionnaire/upload-and-parse/upload": {
+    "/v1/integrations/sync/google-workspace/status": {
       "post": {
-        "operationId": "QuestionnaireController_uploadAndParseUpload_v1",
+        "operationId": "SyncController_getGoogleWorkspaceStatus_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "multipart/form-data": {
-              "schema": {
-                "type": "object",
-                "properties": {
-                  "file": {
-                    "type": "string",
-                    "format": "binary",
-                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
-                  },
-                  "organizationId": {
-                    "type": "string",
-                    "description": "Organization ID"
-                  },
-                  "source": {
-                    "type": "string",
-                    "enum": [
-                      "internal",
-                      "external"
-                    ],
-                    "default": "internal",
-                    "description": "Source of the upload"
-                  }
-                },
-                "required": [
-                  "file",
-                  "organizationId"
-                ]
-              }
-            }
-          }
-        },
         "responses": {
-          "200": {
-            "description": "Upload file, parse questions (no answers), save to DB, return questionnaireId",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "questionnaireId": {
-                      "type": "string"
-                    },
-                    "totalQuestions": {
-                      "type": "number"
-                    }
-                  }
-                }
-              }
-            }
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -14641,71 +16802,25 @@
             "apikey": []
           }
         ],
-        "summary": "Upload and parse questionnaire file",
+        "summary": "Get Google Workspace sync status",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Upload a security questionnaire file, extract questions, save the parsed questionnaire, and return its identifier and question count.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/upload-a-questionnaire-file-and-parse-its-questions",
-          "metadata": {
-            "title": "Upload and parse questionnaire file | Comp AI API",
-            "sidebarTitle": "Upload and parse questionnaire file",
-            "description": "Upload a security questionnaire file, extract questions, save the parsed questionnaire, and return its identifier and question count.",
-            "og:title": "Upload and parse questionnaire file | Comp AI API",
-            "og:description": "Upload a security questionnaire file, extract questions, save the parsed questionnaire, and return its identifier and question count."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/questionnaire/parse/upload": {
+    "/v1/integrations/sync/rippling/employees": {
       "post": {
-        "operationId": "QuestionnaireController_parseQuestionnaireUpload_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "multipart/form-data": {
-              "schema": {
-                "type": "object",
-                "properties": {
-                  "file": {
-                    "type": "string",
-                    "format": "binary",
-                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
-                  },
-                  "organizationId": {
-                    "type": "string",
-                    "description": "Organization to use for generating answers"
-                  },
-                  "format": {
-                    "type": "string",
-                    "enum": [
-                      "pdf",
-                      "csv",
-                      "xlsx"
-                    ],
-                    "default": "xlsx",
-                    "description": "Output format (defaults to XLSX)"
-                  },
-                  "source": {
-                    "type": "string",
-                    "enum": [
-                      "internal",
-                      "external"
-                    ],
-                    "default": "internal",
-                    "description": "Indicates if the request originated from our UI (internal) or trust portal (external)."
-                  }
-                },
-                "required": [
-                  "file",
-                  "organizationId"
-                ]
-              }
+        "operationId": "SyncController_syncRipplingEmployees_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "201": {
             "description": ""
@@ -14716,37 +16831,16 @@
             "apikey": []
           }
         ],
-        "summary": "Auto-answer uploaded questionnaire",
+        "summary": "Sync Rippling employees",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Upload a questionnaire file and generate answer exports from approved organization evidence in PDF, CSV, or XLSX format.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/upload-a-questionnaire-file-and-auto-answer-with-export",
-          "metadata": {
-            "title": "Auto-answer uploaded questionnaire | Comp AI API",
-            "sidebarTitle": "Auto-answer uploaded questionnaire",
-            "description": "Upload a questionnaire file and generate answer exports from approved organization evidence in PDF, CSV, or XLSX format.",
-            "og:title": "Auto-answer uploaded questionnaire | Comp AI API",
-            "og:description": "Upload a questionnaire file and generate answer exports from approved organization evidence in PDF, CSV, or XLSX format."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/questionnaire/answers/export": {
+    "/v1/integrations/sync/rippling/status": {
       "post": {
-        "operationId": "QuestionnaireController_autoAnswerAndExport_v1",
+        "operationId": "SyncController_getRipplingStatus_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ExportQuestionnaireDto"
-              }
-            }
-          }
-        },
         "responses": {
           "201": {
             "description": ""
@@ -14757,62 +16851,45 @@
             "apikey": []
           }
         ],
-        "summary": "Export generated questionnaire answers",
+        "summary": "Get Rippling sync status",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Generate and export questionnaire answers from a submitted payload using approved organization evidence.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/export-questionnaire-answers",
-          "metadata": {
-            "title": "Export generated questionnaire answers | Comp AI API",
-            "sidebarTitle": "Export generated questionnaire answers",
-            "description": "Generate and export questionnaire answers from a submitted payload using approved organization evidence.",
-            "og:title": "Export generated questionnaire answers | Comp AI API",
-            "og:description": "Generate and export questionnaire answers from a submitted payload using approved organization evidence."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/questionnaire/answers/export/upload": {
+    "/v1/integrations/sync/jumpcloud/employees": {
       "post": {
-        "operationId": "QuestionnaireController_autoAnswerAndExportUpload_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "multipart/form-data": {
-              "schema": {
-                "type": "object",
-                "properties": {
-                  "file": {
-                    "type": "string",
-                    "format": "binary",
-                    "description": "Questionnaire file (PDF, image, XLSX, CSV, TXT)"
-                  },
-                  "organizationId": {
-                    "type": "string",
-                    "description": "Organization to use for answer generation"
-                  },
-                  "format": {
-                    "type": "string",
-                    "enum": [
-                      "pdf",
-                      "csv",
-                      "xlsx"
-                    ],
-                    "default": "xlsx",
-                    "description": "Output format (defaults to XLSX)"
-                  }
-                },
-                "required": [
-                  "file",
-                  "organizationId"
-                ]
-              }
+        "operationId": "SyncController_syncJumpCloudEmployees_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
+        ],
+        "responses": {
+          "201": {
+            "description": ""
+          }
         },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Sync JumpCloud employees",
+        "tags": [
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/integrations/sync/jumpcloud/status": {
+      "post": {
+        "operationId": "SyncController_getJumpCloudStatus_v1",
+        "parameters": [],
         "responses": {
           "201": {
             "description": ""
@@ -14823,37 +16900,34 @@
             "apikey": []
           }
         ],
-        "summary": "Upload and export generated answers",
+        "summary": "Get JumpCloud sync status",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Upload a questionnaire file and return generated answer exports in PDF, CSV, or XLSX format.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/upload-a-questionnaire-file-and-export-auto-generated-answers",
-          "metadata": {
-            "title": "Upload and export generated answers | Comp AI API",
-            "sidebarTitle": "Upload and export generated answers",
-            "description": "Upload a questionnaire file and return generated answer exports in PDF, CSV, or XLSX format.",
-            "og:title": "Upload and export generated answers | Comp AI API",
-            "og:description": "Upload a questionnaire file and return generated answer exports in PDF, CSV, or XLSX format."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/questionnaire/auto-answer": {
-      "post": {
-        "operationId": "QuestionnaireController_autoAnswer_v1",
+    "/v1/integrations/sync/employee-sync-provider": {
+      "get": {
+        "operationId": "SyncController_getEmployeeSyncProvider_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/AutoAnswerDto"
-              }
-            }
+        "responses": {
+          "200": {
+            "description": ""
           }
         },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get the currently configured employee sync provider",
+        "tags": [
+          "Integrations"
+        ]
+      },
+      "post": {
+        "operationId": "SyncController_setEmployeeSyncProvider_v1",
+        "parameters": [],
         "responses": {
           "201": {
             "description": ""
@@ -14864,30 +16938,19 @@
             "apikey": []
           }
         ],
-        "summary": "Stream generated questionnaire answers",
+        "summary": "Set the employee sync provider",
         "tags": [
-          "Questionnaire"
-        ],
-        "description": "Stream generated questionnaire answers over server-sent events so clients can show progress while answers are produced.",
-        "x-mint": {
-          "href": "/api-reference/questionnaire/auto-answer-a-questionnaire",
-          "metadata": {
-            "title": "Stream generated questionnaire answers | Comp AI API",
-            "sidebarTitle": "Stream generated questionnaire answers",
-            "description": "Stream generated questionnaire answers over server-sent events so clients can show progress while answers are produced.",
-            "og:title": "Stream generated questionnaire answers | Comp AI API",
-            "og:description": "Stream generated questionnaire answers over server-sent events so clients can show progress while answers are produced."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/knowledge-base/documents": {
+    "/v1/integrations/sync/available-providers": {
       "get": {
-        "operationId": "KnowledgeBaseController_listDocuments_v1",
+        "operationId": "SyncController_getAvailableSyncProviders_v1",
         "parameters": [],
         "responses": {
           "200": {
-            "description": "List of knowledge base documents"
+            "description": ""
           }
         },
         "security": [
@@ -14895,29 +16958,36 @@
             "apikey": []
           }
         ],
-        "summary": "List knowledge base documents",
+        "summary": "List employee sync providers available to the org",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "List uploaded knowledge base documents that Comp AI can use as approved source material for answers, policies, and reviews.",
-        "x-mint": {
-          "metadata": {
-            "title": "List knowledge base documents | Comp AI API",
-            "sidebarTitle": "List knowledge base documents",
-            "description": "List uploaded knowledge base documents that Comp AI can use as approved source material for answers, policies, and reviews.",
-            "og:title": "List knowledge base documents | Comp AI API",
-            "og:description": "List uploaded knowledge base documents that Comp AI can use as approved source material for answers, policies, and reviews."
-          }
-        }
+          "Integrations"
+        ]
       }
     },
-    "/v1/knowledge-base/manual-answers": {
-      "get": {
-        "operationId": "KnowledgeBaseController_listManualAnswers_v1",
-        "parameters": [],
+    "/v1/integrations/sync/dynamic/{providerSlug}/employees": {
+      "post": {
+        "operationId": "SyncController_syncDynamicProviderEmployees_v1",
+        "parameters": [
+          {
+            "name": "providerSlug",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
-          "200": {
-            "description": "List of manual answers"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -14925,106 +16995,168 @@
             "apikey": []
           }
         ],
-        "summary": "List all manual answers for an organization",
+        "summary": "Sync employees for a dynamic provider",
         "tags": [
-          "Knowledge Base"
+          "Integrations"
+        ]
+      }
+    },
+    "/v1/cloud-security/activity": {
+      "get": {
+        "operationId": "CloudSecurityController_getActivity_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          }
         ],
-        "description": "List all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "List all manual answers for an organization | Comp AI API",
-            "sidebarTitle": "List all manual answers for an organization",
-            "description": "List all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "List all manual answers for an organization | Comp AI API",
-            "og:description": "List all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
-      },
-      "post": {
-        "operationId": "KnowledgeBaseController_saveManualAnswer_v1",
+        },
+        "summary": "List recent cloud security activity",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/providers": {
+      "get": {
+        "operationId": "CloudSecurityController_getProviders_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SaveManualAnswerDto"
-              }
-            }
+        "responses": {
+          "200": {
+            "description": ""
           }
         },
+        "summary": "List supported cloud providers",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/findings": {
+      "get": {
+        "operationId": "CloudSecurityController_getFindings_v1",
+        "parameters": [],
         "responses": {
           "200": {
-            "description": "Manual answer saved"
+            "description": ""
           }
         },
-        "security": [
+        "summary": "List cloud security findings",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/scan/{connectionId}": {
+      "post": {
+        "operationId": "CloudSecurityController_scan_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Save reusable manual answer",
-        "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Save or update a reusable manual answer for security questionnaires that need approved, consistent response language.",
-        "x-mint": {
-          "metadata": {
-            "title": "Save reusable manual answer | Comp AI API",
-            "sidebarTitle": "Save reusable manual answer",
-            "description": "Save or update a reusable manual answer for security questionnaires that need approved, consistent response language.",
-            "og:title": "Save reusable manual answer | Comp AI API",
-            "og:description": "Save or update a reusable manual answer for security questionnaires that need approved, consistent response language."
+        "responses": {
+          "201": {
+            "description": ""
           }
-        }
+        },
+        "summary": "Trigger a security scan for a connection",
+        "tags": [
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/documents/upload": {
+    "/v1/cloud-security/detect-services/{connectionId}": {
       "post": {
-        "operationId": "KnowledgeBaseController_uploadDocument_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/UploadDocumentDto"
-              }
+        "operationId": "CloudSecurityController_detectServices_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "200": {
-            "description": "Document uploaded successfully"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Detect available cloud services for a connection",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/detect-gcp-org/{connectionId}": {
+      "post": {
+        "operationId": "CloudSecurityController_detectGcpOrg_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Upload knowledge base document",
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "summary": "Detect the GCP organization for a connection",
         "tags": [
-          "Knowledge Base"
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/select-gcp-projects/{connectionId}": {
+      "post": {
+        "operationId": "CloudSecurityController_selectGcpProjects_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
         ],
-        "description": "Upload supporting documentation so Comp AI can process approved source material for questionnaire answers and policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Upload knowledge base document | Comp AI API",
-            "sidebarTitle": "Upload knowledge base document",
-            "description": "Upload supporting documentation so Comp AI can process approved source material for questionnaire answers and policy workflows.",
-            "og:title": "Upload knowledge base document | Comp AI API",
-            "og:description": "Upload supporting documentation so Comp AI can process approved source material for questionnaire answers and policy workflows."
+        "responses": {
+          "201": {
+            "description": ""
           }
-        }
+        },
+        "summary": "Select GCP projects for a connection",
+        "tags": [
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/documents/{documentId}/download": {
+    "/v1/cloud-security/setup-gcp/{connectionId}": {
       "post": {
-        "operationId": "KnowledgeBaseController_getDownloadUrl_v1",
+        "operationId": "CloudSecurityController_setupGcp_v1",
         "parameters": [
           {
-            "name": "documentId",
+            "name": "connectionId",
             "required": true,
             "in": "path",
             "schema": {
@@ -15033,37 +17165,22 @@
           }
         ],
         "responses": {
-          "200": {
-            "description": "Signed download URL generated"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Get a signed download URL for a document",
+        "summary": "Set up GCP for a connection",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Get a signed download URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a signed download URL for a document | Comp AI API",
-            "sidebarTitle": "Get a signed download URL for a document",
-            "description": "Get a signed download URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "Get a signed download URL for a document | Comp AI API",
-            "og:description": "Get a signed download URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/documents/{documentId}/view": {
+    "/v1/cloud-security/setup-gcp/{connectionId}/resolve-step": {
       "post": {
-        "operationId": "KnowledgeBaseController_getViewUrl_v1",
+        "operationId": "CloudSecurityController_resolveGcpSetupStep_v1",
         "parameters": [
           {
-            "name": "documentId",
+            "name": "connectionId",
             "required": true,
             "in": "path",
             "schema": {
@@ -15072,37 +17189,22 @@
           }
         ],
         "responses": {
-          "200": {
-            "description": "Signed view URL generated"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Get a signed view URL for a document",
+        "summary": "Resolve a GCP setup step",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Get a signed view URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a signed view URL for a document | Comp AI API",
-            "sidebarTitle": "Get a signed view URL for a document",
-            "description": "Get a signed view URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "Get a signed view URL for a document | Comp AI API",
-            "og:description": "Get a signed view URL for a document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/documents/{documentId}/delete": {
+    "/v1/cloud-security/setup-azure/{connectionId}": {
       "post": {
-        "operationId": "KnowledgeBaseController_deleteDocument_v1",
+        "operationId": "CloudSecurityController_setupAzure_v1",
         "parameters": [
           {
-            "name": "documentId",
+            "name": "connectionId",
             "required": true,
             "in": "path",
             "schema": {
@@ -15111,77 +17213,46 @@
           }
         ],
         "responses": {
-          "200": {
-            "description": "Document deleted successfully"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete a knowledge base document",
+        "summary": "Set up Azure for a connection",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Delete a knowledge base document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a knowledge base document | Comp AI API",
-            "sidebarTitle": "Delete a knowledge base document",
-            "description": "Delete a knowledge base document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "Delete a knowledge base document | Comp AI API",
-            "og:description": "Delete a knowledge base document in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/documents/process": {
+    "/v1/cloud-security/validate-azure/{connectionId}": {
       "post": {
-        "operationId": "KnowledgeBaseController_processDocuments_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ProcessDocumentsDto"
-              }
+        "operationId": "CloudSecurityController_validateAzure_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "200": {
-            "description": "Document processing triggered"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Process knowledge base documents",
+        "summary": "Validate Azure credentials for a connection",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Start document processing so uploaded knowledge base files become searchable source material for AI-assisted compliance workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Process knowledge base documents | Comp AI API",
-            "sidebarTitle": "Process knowledge base documents",
-            "description": "Start document processing so uploaded knowledge base files become searchable source material for AI-assisted compliance workflows.",
-            "og:title": "Process knowledge base documents | Comp AI API",
-            "og:description": "Start document processing so uploaded knowledge base files become searchable source material for AI-assisted compliance workflows."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/runs/{runId}/token": {
+    "/v1/cloud-security/trigger/{connectionId}": {
       "post": {
-        "operationId": "KnowledgeBaseController_createRunToken_v1",
+        "operationId": "CloudSecurityController_triggerScan_v1",
         "parameters": [
           {
-            "name": "runId",
+            "name": "connectionId",
             "required": true,
             "in": "path",
             "schema": {
@@ -15190,468 +17261,333 @@
           }
         ],
         "responses": {
-          "200": {
-            "description": "Public access token created"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Create a public access token for a run",
+        "summary": "Trigger a cloud security run for a connection",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Create a public access token for a run in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a public access token for a run | Comp AI API",
-            "sidebarTitle": "Create a public access token for a run",
-            "description": "Create a public access token for a run in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "Create a public access token for a run | Comp AI API",
-            "og:description": "Create a public access token for a run in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/manual-answers/{manualAnswerId}/delete": {
-      "post": {
-        "operationId": "KnowledgeBaseController_deleteManualAnswer_v1",
+    "/v1/cloud-security/runs/{runId}": {
+      "get": {
+        "operationId": "CloudSecurityController_getRunStatus_v1",
         "parameters": [
           {
-            "name": "manualAnswerId",
+            "name": "runId",
             "required": true,
             "in": "path",
             "schema": {
               "type": "string"
             }
-          }
-        ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/DeleteManualAnswerDto"
-              }
+          },
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "Manual answer deleted"
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete a manual answer",
+        "summary": "Get a cloud security scan run by ID",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Delete a manual answer in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a manual answer | Comp AI API",
-            "sidebarTitle": "Delete a manual answer",
-            "description": "Delete a manual answer in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI.",
-            "og:title": "Delete a manual answer | Comp AI API",
-            "og:description": "Delete a manual answer in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/knowledge-base/manual-answers/delete-all": {
+    "/v1/cloud-security/legacy/connect": {
       "post": {
-        "operationId": "KnowledgeBaseController_deleteAllManualAnswers_v1",
+        "operationId": "CloudSecurityController_connectLegacy_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/DeleteAllManualAnswersDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "200": {
-            "description": "All manual answers deleted"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete all manual answers for an organization",
+        "summary": "Create a legacy cloud integration",
         "tags": [
-          "Knowledge Base"
-        ],
-        "description": "Delete all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete all manual answers for an organization | Comp AI API",
-            "sidebarTitle": "Delete all manual answers for an organization",
-            "description": "Delete all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power.",
-            "og:title": "Delete all manual answers for an organization | Comp AI API",
-            "og:description": "Delete all manual answers for an organization in Comp AI. Upload source documents, process them for retrieval, and manage reusable manual answers that power."
-          }
-        }
+          "CloudSecurity"
+        ]
       }
     },
-    "/v1/soa/save-answer": {
+    "/v1/cloud-security/legacy/validate-aws": {
       "post": {
-        "operationId": "SOAController_saveAnswer_v1",
+        "operationId": "CloudSecurityController_validateAwsCredentials_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SaveSOAAnswerDto"
-              }
-            }
+        "responses": {
+          "201": {
+            "description": ""
           }
         },
+        "summary": "Validate legacy AWS credentials",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/legacy/{integrationId}": {
+      "delete": {
+        "operationId": "CloudSecurityController_disconnectLegacy_v1",
+        "parameters": [
+          {
+            "name": "integrationId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
           "200": {
-            "description": "Answer saved successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "success": {
-                      "type": "boolean"
-                    }
-                  }
-                }
-              }
-            }
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Delete a legacy cloud integration",
+        "tags": [
+          "CloudSecurity"
+        ]
+      }
+    },
+    "/v1/cloud-security/remediation/capabilities": {
+      "get": {
+        "operationId": "RemediationController_getCapabilities_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Save a SOA answer",
-        "tags": [
-          "SOA"
-        ],
-        "description": "Save a SOA answer in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Save a SOA answer | Comp AI API",
-            "sidebarTitle": "Save a SOA answer",
-            "description": "Save a SOA answer in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Save a SOA answer | Comp AI API",
-            "og:description": "Save a SOA answer in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "summary": "List remediation capabilities",
+        "tags": [
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/auto-fill": {
+    "/v1/cloud-security/remediation/preview": {
       "post": {
-        "description": "Auto-fill a Statement of Applicability draft using organization context and framework mappings for ISO 27001 review.",
-        "operationId": "SOAController_autoFill_v1",
+        "operationId": "RemediationController_preview_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/AutoFillSOADto"
-              }
-            }
-          }
-        },
         "responses": {
           "201": {
             "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Auto-fill ISO 27001 SOA",
+        "summary": "Preview a remediation",
         "tags": [
-          "SOA"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Auto-fill ISO 27001 SOA | Comp AI API",
-            "sidebarTitle": "Auto-fill ISO 27001 SOA",
-            "description": "Auto-fill a Statement of Applicability draft using organization context and framework mappings for ISO 27001 review.",
-            "og:title": "Auto-fill ISO 27001 SOA | Comp AI API",
-            "og:description": "Auto-fill a Statement of Applicability draft using organization context and framework mappings for ISO 27001 review."
-          }
-        }
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/create-document": {
+    "/v1/cloud-security/remediation/execute": {
       "post": {
-        "operationId": "SOAController_createDocument_v1",
+        "operationId": "RemediationController_execute_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateSOADocumentDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "200": {
-            "description": "Document created successfully"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Create a new SOA document",
+        "summary": "Execute a remediation",
         "tags": [
-          "SOA"
-        ],
-        "description": "Create a new SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a new SOA document | Comp AI API",
-            "sidebarTitle": "Create a new SOA document",
-            "description": "Create a new SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Create a new SOA document | Comp AI API",
-            "og:description": "Create a new SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
-          }
-        }
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/ensure-setup": {
+    "/v1/cloud-security/remediation/{actionId}/rollback": {
       "post": {
-        "operationId": "SOAController_ensureSetup_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/EnsureSOASetupDto"
-              }
+        "operationId": "RemediationController_rollback_v1",
+        "parameters": [
+          {
+            "name": "actionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "200": {
-            "description": "Setup ensured"
+          "201": {
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Ensure SOA configuration and document exist",
+        "summary": "Roll back a remediation action",
         "tags": [
-          "SOA"
-        ],
-        "description": "Ensure SOA configuration and document exist in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Ensure SOA configuration and document exist | Comp AI API",
-            "sidebarTitle": "Ensure SOA configuration and document exist",
-            "description": "Ensure SOA configuration and document exist in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Ensure SOA configuration and document exist | Comp AI API",
-            "og:description": "Ensure SOA configuration and document exist in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
-          }
-        }
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/approve": {
-      "post": {
-        "operationId": "SOAController_approveDocument_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ApproveSOADocumentDto"
-              }
+    "/v1/cloud-security/remediation/actions": {
+      "get": {
+        "operationId": "RemediationController_getActions_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "Document approved successfully"
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Approve a SOA document",
+        "summary": "List remediation actions",
         "tags": [
-          "SOA"
-        ],
-        "description": "Approve a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Approve a SOA document | Comp AI API",
-            "sidebarTitle": "Approve a SOA document",
-            "description": "Approve a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Approve a SOA document | Comp AI API",
-            "og:description": "Approve a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
-          }
-        }
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/decline": {
-      "post": {
-        "operationId": "SOAController_declineDocument_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/DeclineSOADocumentDto"
-              }
+    "/v1/cloud-security/remediation/batch/active": {
+      "get": {
+        "operationId": "RemediationController_getActiveBatch_v1",
+        "parameters": [
+          {
+            "name": "connectionId",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "Document declined successfully"
+            "description": ""
           }
         },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Decline a SOA document",
+        "summary": "Get the active remediation batch",
         "tags": [
-          "SOA"
-        ],
-        "description": "Decline a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Decline a SOA document | Comp AI API",
-            "sidebarTitle": "Decline a SOA document",
-            "description": "Decline a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Decline a SOA document | Comp AI API",
-            "og:description": "Decline a SOA document in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
-          }
-        }
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/submit-for-approval": {
+    "/v1/cloud-security/remediation/batch": {
       "post": {
-        "operationId": "SOAController_submitForApproval_v1",
+        "operationId": "RemediationController_createBatch_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SubmitSOAForApprovalDto"
-              }
-            }
+        "responses": {
+          "201": {
+            "description": ""
           }
         },
+        "summary": "Create a remediation batch",
+        "tags": [
+          "Remediation"
+        ]
+      }
+    },
+    "/v1/cloud-security/remediation/batch/{batchId}": {
+      "patch": {
+        "operationId": "RemediationController_updateBatch_v1",
+        "parameters": [
+          {
+            "name": "batchId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
           "200": {
-            "description": "Document submitted for approval successfully"
+            "description": ""
           }
         },
-        "security": [
+        "summary": "Update a remediation batch",
+        "tags": [
+          "Remediation"
+        ]
+      }
+    },
+    "/v1/cloud-security/remediation/batch/{batchId}/skip/{findingId}": {
+      "post": {
+        "operationId": "RemediationController_skipFinding_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "batchId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "findingId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Submit SOA document for approval",
-        "tags": [
-          "SOA"
-        ],
-        "description": "Submit SOA document for approval in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-        "x-mint": {
-          "metadata": {
-            "title": "Submit SOA document for approval | Comp AI API",
-            "sidebarTitle": "Submit SOA document for approval",
-            "description": "Submit SOA document for approval in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-            "og:title": "Submit SOA document for approval | Comp AI API",
-            "og:description": "Submit SOA document for approval in Comp AI. Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents."
+        "responses": {
+          "201": {
+            "description": ""
           }
-        }
+        },
+        "summary": "Skip a finding in a remediation batch",
+        "tags": [
+          "Remediation"
+        ]
       }
     },
-    "/v1/soa/export": {
+    "/v1/browserbase/org-context": {
       "post": {
-        "operationId": "SOAController_exportDocument_v1",
+        "description": "Gets the existing browser context for the org or creates a new one",
+        "operationId": "BrowserbaseController_getOrCreateOrgContext_v1",
         "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ExportSOADocumentDto"
+        "responses": {
+          "201": {
+            "description": "Context retrieved or created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ContextResponseDto"
+                }
               }
             }
           }
         },
-        "responses": {
-          "200": {
-            "description": "Export SOA document to PDF"
-          }
-        },
         "security": [
           {
             "apikey": []
           }
         ],
-        "summary": "Export ISO 27001 SOA",
+        "summary": "Get or create organization browser context",
         "tags": [
-          "SOA"
-        ],
-        "description": "Export the approved Statement of Applicability document for ISO 27001 auditors, customer reviews, and internal records.",
-        "x-mint": {
-          "metadata": {
-            "title": "Export ISO 27001 SOA | Comp AI API",
-            "sidebarTitle": "Export ISO 27001 SOA",
-            "description": "Export the approved Statement of Applicability document for ISO 27001 auditors, customer reviews, and internal records.",
-            "og:title": "Export ISO 27001 SOA | Comp AI API",
-            "og:description": "Export the approved Statement of Applicability document for ISO 27001 auditors, customer reviews, and internal records."
-          }
-        }
-      }
-    },
-    "/v1/integrations/connections/providers": {
-      "get": {
-        "operationId": "ConnectionsController_listProviders_v1",
-        "parameters": [
-          {
-            "name": "activeOnly",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
+          "Browserbase"
+        ]
+      },
+      "get": {
+        "description": "Gets the current browser context for the org if it exists",
+        "operationId": "BrowserbaseController_getOrgContextStatus_v1",
+        "parameters": [],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Context status"
           }
         },
         "security": [
@@ -15659,38 +17595,37 @@
             "apikey": []
           }
         ],
-        "summary": "List integration providers",
+        "summary": "Get organization browser context status",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List available integration providers that can connect to the organization for automated evidence collection and compliance checks.",
-        "x-mint": {
-          "metadata": {
-            "title": "List integration providers | Comp AI API",
-            "sidebarTitle": "List integration providers",
-            "description": "List available integration providers that can connect to the organization for automated evidence collection and compliance checks.",
-            "og:title": "List integration providers | Comp AI API",
-            "og:description": "List available integration providers that can connect to the organization for automated evidence collection and compliance checks."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections/providers/{slug}": {
-      "get": {
-        "operationId": "ConnectionsController_getProvider_v1",
-        "parameters": [
-          {
-            "name": "slug",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+    "/v1/browserbase/session": {
+      "post": {
+        "description": "Creates a new browser session using the org context",
+        "operationId": "BrowserbaseController_createSession_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateSessionDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "200": {
-            "description": ""
+          "201": {
+            "description": "Session created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SessionResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15698,29 +17633,29 @@
             "apikey": []
           }
         ],
-        "summary": "Get an integration provider by slug",
+        "summary": "Create a new browser session",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get an integration provider by slug in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get an integration provider by slug | Comp AI API",
-            "sidebarTitle": "Get an integration provider by slug",
-            "description": "Get an integration provider by slug in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Get an integration provider by slug | Comp AI API",
-            "og:description": "Get an integration provider by slug in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections": {
-      "get": {
-        "operationId": "ConnectionsController_listConnections_v1",
+    "/v1/browserbase/session/close": {
+      "post": {
+        "operationId": "BrowserbaseController_closeSession_v1",
         "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CloseSessionDto"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
-            "description": ""
+            "description": "Session closed"
           }
         },
         "security": [
@@ -15728,27 +17663,30 @@
             "apikey": []
           }
         ],
-        "summary": "List integration connections",
+        "summary": "Close a browser session",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List integration connections in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List integration connections | Comp AI API",
-            "sidebarTitle": "List integration connections",
-            "description": "List integration connections in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "List integration connections | Comp AI API",
-            "og:description": "List integration connections in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
-      },
+          "Browserbase"
+        ]
+      }
+    },
+    "/v1/browserbase/navigate": {
       "post": {
-        "operationId": "ConnectionsController_createConnection_v1",
+        "description": "Navigates the browser session to the specified URL",
+        "operationId": "BrowserbaseController_navigateToUrl_v1",
         "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/NavigateToUrlDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Navigation result"
           }
         },
         "security": [
@@ -15756,38 +17694,37 @@
             "apikey": []
           }
         ],
-        "summary": "Create integration connection",
+        "summary": "Navigate to a URL",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Create an integration connection so Comp AI can collect evidence, run checks, or sync data from a connected provider.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create integration connection | Comp AI API",
-            "sidebarTitle": "Create integration connection",
-            "description": "Create an integration connection so Comp AI can collect evidence, run checks, or sync data from a connected provider.",
-            "og:title": "Create integration connection | Comp AI API",
-            "og:description": "Create an integration connection so Comp AI can collect evidence, run checks, or sync data from a connected provider."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections/{id}": {
-      "get": {
-        "operationId": "ConnectionsController_getConnection_v1",
-        "parameters": [
-          {
-            "name": "id",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+    "/v1/browserbase/check-auth": {
+      "post": {
+        "description": "Checks if the user is logged in on the specified site",
+        "operationId": "BrowserbaseController_checkAuth_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CheckAuthDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
           "200": {
-            "description": ""
+            "description": "Auth status",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AuthStatusResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15795,36 +17732,36 @@
             "apikey": []
           }
         ],
-        "summary": "Get an integration connection by ID",
+        "summary": "Check authentication status",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get an integration connection by ID in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get an integration connection by ID | Comp AI API",
-            "sidebarTitle": "Get an integration connection by ID",
-            "description": "Get an integration connection by ID in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Get an integration connection by ID | Comp AI API",
-            "og:description": "Get an integration connection by ID in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      },
-      "delete": {
-        "operationId": "ConnectionsController_deleteConnection_v1",
-        "parameters": [
-          {
-            "name": "id",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+          "Browserbase"
+        ]
+      }
+    },
+    "/v1/browserbase/automations": {
+      "post": {
+        "operationId": "BrowserbaseController_createAutomation_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateBrowserAutomationDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "200": {
-            "description": ""
+          "201": {
+            "description": "Automation created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrowserAutomationResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15832,28 +17769,21 @@
             "apikey": []
           }
         ],
-        "summary": "Delete an integration connection",
+        "summary": "Create a browser automation",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Delete an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete an integration connection | Comp AI API",
-            "sidebarTitle": "Delete an integration connection",
-            "description": "Delete an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Delete an integration connection | Comp AI API",
-            "og:description": "Delete an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      },
-      "patch": {
-        "operationId": "ConnectionsController_updateConnection_v1",
+          "Browserbase"
+        ]
+      }
+    },
+    "/v1/browserbase/automations/task/{taskId}": {
+      "get": {
+        "operationId": "BrowserbaseController_getAutomationsForTask_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "taskId",
             "required": true,
             "in": "path",
+            "description": "Task ID",
             "schema": {
               "type": "string"
             }
@@ -15861,7 +17791,17 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "List of automations",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/BrowserAutomationResponseDto"
+                  }
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15869,38 +17809,36 @@
             "apikey": []
           }
         ],
-        "summary": "Update an integration connection",
+        "summary": "Get all browser automations for a task",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Update an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update an integration connection | Comp AI API",
-            "sidebarTitle": "Update an integration connection",
-            "description": "Update an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Update an integration connection | Comp AI API",
-            "og:description": "Update an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections/{id}/test": {
-      "post": {
-        "operationId": "ConnectionsController_testConnection_v1",
+    "/v1/browserbase/automations/{automationId}": {
+      "get": {
+        "operationId": "BrowserbaseController_getAutomation_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Automation details",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrowserAutomationResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15908,38 +17846,44 @@
             "apikey": []
           }
         ],
-        "summary": "Test an integration connection",
+        "summary": "Get a browser automation by ID",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Test an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Test an integration connection | Comp AI API",
-            "sidebarTitle": "Test an integration connection",
-            "description": "Test an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Test an integration connection | Comp AI API",
-            "og:description": "Test an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/integrations/connections/{id}/pause": {
-      "post": {
-        "operationId": "ConnectionsController_pauseConnection_v1",
+          "Browserbase"
+        ]
+      },
+      "patch": {
+        "operationId": "BrowserbaseController_updateAutomation_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateBrowserAutomationDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Automation updated",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrowserAutomationResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -15947,38 +17891,27 @@
             "apikey": []
           }
         ],
-        "summary": "Pause an integration connection",
+        "summary": "Update a browser automation",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Pause an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Pause an integration connection | Comp AI API",
-            "sidebarTitle": "Pause an integration connection",
-            "description": "Pause an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Pause an integration connection | Comp AI API",
-            "og:description": "Pause an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/integrations/connections/{id}/resume": {
-      "post": {
-        "operationId": "ConnectionsController_resumeConnection_v1",
+          "Browserbase"
+        ]
+      },
+      "delete": {
+        "operationId": "BrowserbaseController_deleteAutomation_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Automation deleted"
           }
         },
         "security": [
@@ -15986,38 +17919,30 @@
             "apikey": []
           }
         ],
-        "summary": "Resume an integration connection",
+        "summary": "Delete a browser automation",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Resume an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Resume an integration connection | Comp AI API",
-            "sidebarTitle": "Resume an integration connection",
-            "description": "Resume an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Resume an integration connection | Comp AI API",
-            "og:description": "Resume an integration connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections/{id}/disconnect": {
+    "/v1/browserbase/automations/{automationId}/start-live": {
       "post": {
-        "operationId": "ConnectionsController_disconnectConnection_v1",
+        "description": "Creates a session and returns live view URL for watching execution",
+        "operationId": "BrowserbaseController_startAutomationLive_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Session started with live view URL"
           }
         },
         "security": [
@@ -16025,30 +17950,22 @@
             "apikey": []
           }
         ],
-        "summary": "Disconnect an integration",
+        "summary": "Start automation with live view",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Disconnect an integration in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Disconnect an integration | Comp AI API",
-            "sidebarTitle": "Disconnect an integration",
-            "description": "Disconnect an integration in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Disconnect an integration | Comp AI API",
-            "og:description": "Disconnect an integration in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/connections/{id}/services": {
-      "put": {
-        "operationId": "ConnectionsController_updateConnectionServices_v1",
+    "/v1/browserbase/automations/{automationId}/execute": {
+      "post": {
+        "description": "Runs the automation on a pre-created session",
+        "operationId": "BrowserbaseController_executeAutomationOnSession_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
@@ -16056,7 +17973,7 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Execution result"
           }
         },
         "security": [
@@ -16064,28 +17981,22 @@
             "apikey": []
           }
         ],
-        "summary": "Set services enabled on a connection",
+        "summary": "Execute automation on existing session",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Set services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Set services enabled on a connection | Comp AI API",
-            "sidebarTitle": "Set services enabled on a connection",
-            "description": "Set services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Set services enabled on a connection | Comp AI API",
-            "og:description": "Set services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      },
-      "get": {
-        "operationId": "ServicesController_getConnectionServices_v1",
+          "Browserbase"
+        ]
+      }
+    },
+    "/v1/browserbase/automations/{automationId}/run": {
+      "post": {
+        "description": "Executes the automation and returns the result",
+        "operationId": "BrowserbaseController_runAutomation_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
@@ -16093,7 +18004,14 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Run result",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RunAutomationResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16101,30 +18019,21 @@
             "apikey": []
           }
         ],
-        "summary": "List services enabled on a connection",
+        "summary": "Run a browser automation",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List services enabled on a connection | Comp AI API",
-            "sidebarTitle": "List services enabled on a connection",
-            "description": "List services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "List services enabled on a connection | Comp AI API",
-            "og:description": "List services enabled on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/checks/providers/{providerSlug}": {
+    "/v1/browserbase/automations/{automationId}/runs": {
       "get": {
-        "operationId": "ChecksController_listProviderChecks_v1",
+        "operationId": "BrowserbaseController_getAutomationRuns_v1",
         "parameters": [
           {
-            "name": "providerSlug",
+            "name": "automationId",
             "required": true,
             "in": "path",
+            "description": "Automation ID",
             "schema": {
               "type": "string"
             }
@@ -16132,7 +18041,17 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "List of runs",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/BrowserAutomationRunResponseDto"
+                  }
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16140,30 +18059,21 @@
             "apikey": []
           }
         ],
-        "summary": "List check definitions for a provider",
+        "summary": "Get run history for an automation",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List check definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List check definitions for a provider | Comp AI API",
-            "sidebarTitle": "List check definitions for a provider",
-            "description": "List check definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "List check definitions for a provider | Comp AI API",
-            "og:description": "List check definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/checks/connections/{connectionId}": {
+    "/v1/browserbase/runs/{runId}": {
       "get": {
-        "operationId": "ChecksController_listConnectionChecks_v1",
+        "operationId": "BrowserbaseController_getRunById_v1",
         "parameters": [
           {
-            "name": "connectionId",
+            "name": "runId",
             "required": true,
             "in": "path",
+            "description": "Run ID",
             "schema": {
               "type": "string"
             }
@@ -16171,7 +18081,14 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Run details",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrowserAutomationRunResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16179,38 +18096,41 @@
             "apikey": []
           }
         ],
-        "summary": "List checks for a connection",
+        "summary": "Get a specific run by ID",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List checks for a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List checks for a connection | Comp AI API",
-            "sidebarTitle": "List checks for a connection",
-            "description": "List checks for a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "List checks for a connection | Comp AI API",
-            "og:description": "List checks for a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/checks/connections/{connectionId}/run": {
-      "post": {
-        "operationId": "ChecksController_runConnectionChecks_v1",
+    "/v1/browserbase/runs/{runId}/screenshot": {
+      "get": {
+        "description": "Issues a 302 redirect to a newly signed S3 URL so that \"Open full size\" links never serve an expired URL. Pass ?download=true to force an attachment download.",
+        "operationId": "BrowserbaseController_redirectToScreenshot_v1",
         "parameters": [
           {
-            "name": "connectionId",
+            "name": "runId",
             "required": true,
             "in": "path",
+            "description": "Run ID",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "download",
+            "required": true,
+            "in": "query",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "302": {
+            "description": "Redirect to signed S3 URL"
+          },
+          "404": {
+            "description": "Run or screenshot not found"
           }
         },
         "security": [
@@ -16218,46 +18138,76 @@
             "apikey": []
           }
         ],
-        "summary": "Run integration checks",
+        "summary": "Redirect to a freshly signed screenshot URL",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Run all compliance checks for an integration connection and capture results as automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Run integration checks | Comp AI API",
-            "sidebarTitle": "Run integration checks",
-            "description": "Run all compliance checks for an integration connection and capture results as automated evidence.",
-            "og:title": "Run integration checks | Comp AI API",
-            "og:description": "Run all compliance checks for an integration connection and capture results as automated evidence."
-          }
-        }
+          "Browserbase"
+        ]
       }
     },
-    "/v1/integrations/checks/connections/{connectionId}/run/{checkId}": {
-      "post": {
-        "operationId": "ChecksController_runSingleCheck_v1",
+    "/v1/task-management/stats": {
+      "get": {
+        "description": "Retrieve task items statistics (total count, counts by status) for a specific entity",
+        "operationId": "TaskManagementController_getTaskItemsStats_v1",
         "parameters": [
           {
-            "name": "connectionId",
+            "name": "entityId",
             "required": true,
-            "in": "path",
+            "in": "query",
+            "description": "ID of the entity to get task items stats for",
             "schema": {
+              "example": "vnd_abc123def456",
               "type": "string"
             }
           },
           {
-            "name": "checkId",
+            "name": "entityType",
             "required": true,
-            "in": "path",
+            "in": "query",
+            "description": "Type of entity",
             "schema": {
+              "enum": [
+                "vendor",
+                "risk"
+              ],
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Task items statistics retrieved successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "total": {
+                      "type": "number"
+                    },
+                    "byStatus": {
+                      "type": "object",
+                      "properties": {
+                        "todo": {
+                          "type": "number"
+                        },
+                        "in_progress": {
+                          "type": "number"
+                        },
+                        "in_review": {
+                          "type": "number"
+                        },
+                        "done": {
+                          "type": "number"
+                        },
+                        "canceled": {
+                          "type": "number"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16265,77 +18215,153 @@
             "apikey": []
           }
         ],
-        "summary": "Run a single check on a connection",
+        "summary": "Get task items statistics for an entity",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Run a single check on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Run a single check on a connection | Comp AI API",
-            "sidebarTitle": "Run a single check on a connection",
-            "description": "Run a single check on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Run a single check on a connection | Comp AI API",
-            "og:description": "Run a single check on a connection in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/variables/providers/{providerSlug}": {
+    "/v1/task-management": {
       "get": {
-        "operationId": "VariablesController_getProviderVariables_v1",
+        "description": "Retrieve paginated task items for a specific entity (vendor, risk)",
+        "operationId": "TaskManagementController_getTaskItems_v1",
         "parameters": [
           {
-            "name": "providerSlug",
-            "required": true,
-            "in": "path",
+            "name": "entityId",
+            "required": true,
+            "in": "query",
+            "description": "ID of the entity to get task items for",
+            "schema": {
+              "example": "vnd_abc123def456",
+              "type": "string"
+            }
+          },
+          {
+            "name": "entityType",
+            "required": true,
+            "in": "query",
+            "description": "Type of entity",
+            "schema": {
+              "example": "vendor",
+              "type": "string",
+              "enum": [
+                "vendor",
+                "risk"
+              ]
+            }
+          },
+          {
+            "name": "page",
+            "required": false,
+            "in": "query",
+            "description": "Page number (1-indexed)",
+            "schema": {
+              "minimum": 1,
+              "default": 1,
+              "example": 1,
+              "type": "number"
+            }
+          },
+          {
+            "name": "limit",
+            "required": false,
+            "in": "query",
+            "description": "Number of items per page",
+            "schema": {
+              "minimum": 1,
+              "maximum": 100,
+              "default": 5,
+              "example": 5,
+              "type": "number"
+            }
+          },
+          {
+            "name": "status",
+            "required": false,
+            "in": "query",
+            "description": "Filter by status",
+            "schema": {
+              "example": "todo",
+              "type": "string",
+              "enum": [
+                "todo",
+                "in_progress",
+                "in_review",
+                "done",
+                "canceled"
+              ]
+            }
+          },
+          {
+            "name": "priority",
+            "required": false,
+            "in": "query",
+            "description": "Filter by priority",
+            "schema": {
+              "example": "high",
+              "type": "string",
+              "enum": [
+                "urgent",
+                "high",
+                "medium",
+                "low"
+              ]
+            }
+          },
+          {
+            "name": "assigneeId",
+            "required": false,
+            "in": "query",
+            "description": "Filter by assignee ID",
             "schema": {
+              "example": "mbr_abc123def456",
               "type": "string"
             }
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": ""
-          }
-        },
-        "security": [
+          },
           {
-            "apikey": []
-          }
-        ],
-        "summary": "List variable definitions for a provider",
-        "tags": [
-          "Integrations"
-        ],
-        "description": "List variable definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List variable definitions for a provider | Comp AI API",
-            "sidebarTitle": "List variable definitions for a provider",
-            "description": "List variable definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "List variable definitions for a provider | Comp AI API",
-            "og:description": "List variable definitions for a provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/integrations/variables/connections/{connectionId}": {
-      "get": {
-        "operationId": "VariablesController_getConnectionVariables_v1",
-        "parameters": [
+            "name": "sortBy",
+            "required": false,
+            "in": "query",
+            "description": "Sort by field",
+            "schema": {
+              "default": "createdAt",
+              "example": "createdAt",
+              "type": "string",
+              "enum": [
+                "createdAt",
+                "updatedAt",
+                "title",
+                "status",
+                "priority"
+              ]
+            }
+          },
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "sortOrder",
+            "required": false,
+            "in": "query",
+            "description": "Sort order",
             "schema": {
-              "type": "string"
+              "default": "desc",
+              "example": "desc",
+              "type": "string",
+              "enum": [
+                "asc",
+                "desc"
+              ]
             }
           }
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Task items retrieved successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PaginatedTaskItemResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16343,36 +18369,35 @@
             "apikey": []
           }
         ],
-        "summary": "List connection variables",
+        "summary": "Get task items for an entity",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List connection variables | Comp AI API",
-            "sidebarTitle": "List connection variables",
-            "description": "List connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "List connection variables | Comp AI API",
-            "og:description": "List connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Task Management"
+        ]
       },
       "post": {
-        "operationId": "VariablesController_saveConnectionVariables_v1",
-        "parameters": [
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+        "description": "Create a task item for an entity",
+        "operationId": "TaskManagementController_createTaskItem_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateTaskItemDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
           "201": {
-            "description": ""
+            "description": "Task item created successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TaskItemResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16380,46 +18405,48 @@
             "apikey": []
           }
         ],
-        "summary": "Update connection variables",
+        "summary": "Create a new task item",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Update connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Update connection variables | Comp AI API",
-            "sidebarTitle": "Update connection variables",
-            "description": "Update connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Update connection variables | Comp AI API",
-            "og:description": "Update connection variables in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/variables/connections/{connectionId}/options/{variableId}": {
-      "get": {
-        "operationId": "VariablesController_fetchVariableOptions_v1",
+    "/v1/task-management/{id}": {
+      "put": {
+        "description": "Update an existing task item",
+        "operationId": "TaskManagementController_updateTaskItem_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "variableId",
+            "name": "id",
             "required": true,
             "in": "path",
+            "description": "Task item ID",
             "schema": {
+              "example": "tski_abc123def456",
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateTaskItemDto"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
-            "description": ""
+            "description": "Task item updated successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TaskItemResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16427,38 +18454,29 @@
             "apikey": []
           }
         ],
-        "summary": "Get options for a connection variable",
+        "summary": "Update a task item",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get options for a connection variable in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get options for a connection variable | Comp AI API",
-            "sidebarTitle": "Get options for a connection variable",
-            "description": "Get options for a connection variable in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Get options for a connection variable | Comp AI API",
-            "og:description": "Get options for a connection variable in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/integrations/tasks/template/{templateId}/checks": {
-      "get": {
-        "operationId": "TaskIntegrationsController_getChecksForTaskTemplate_v1",
+          "Task Management"
+        ]
+      },
+      "delete": {
+        "description": "Delete an existing task item",
+        "operationId": "TaskManagementController_deleteTaskItem_v1",
         "parameters": [
           {
-            "name": "templateId",
+            "name": "id",
             "required": true,
             "in": "path",
+            "description": "Task item ID",
             "schema": {
+              "example": "tski_abc123def456",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": ""
+          "204": {
+            "description": "Task item deleted successfully"
           }
         },
         "security": [
@@ -16466,38 +18484,37 @@
             "apikey": []
           }
         ],
-        "summary": "List checks for a task template",
+        "summary": "Delete a task item",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List checks for a task template in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List checks for a task template | Comp AI API",
-            "sidebarTitle": "List checks for a task template",
-            "description": "List checks for a task template in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "List checks for a task template | Comp AI API",
-            "og:description": "List checks for a task template in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/tasks/{taskId}/checks": {
-      "get": {
-        "operationId": "TaskIntegrationsController_getChecksForTask_v1",
-        "parameters": [
-          {
-            "name": "taskId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+    "/v1/task-management/attachments": {
+      "post": {
+        "description": "Upload a file attachment for a task item with proper S3 path structure: org_{orgId}/attachments/task-item/{entityType}/{entityId}/files",
+        "operationId": "TaskManagementController_uploadTaskItemAttachment_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UploadTaskItemAttachmentDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "200": {
-            "description": ""
+          "201": {
+            "description": "Attachment uploaded successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AttachmentResponseDto"
+                }
+              }
+            }
           }
         },
         "security": [
@@ -16505,38 +18522,31 @@
             "apikey": []
           }
         ],
-        "summary": "List checks attached to a task",
+        "summary": "Upload attachment to task item",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List checks attached to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List checks attached to a task | Comp AI API",
-            "sidebarTitle": "List checks attached to a task",
-            "description": "List checks attached to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "List checks attached to a task | Comp AI API",
-            "og:description": "List checks attached to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/tasks/{taskId}/run-check": {
-      "post": {
-        "operationId": "TaskIntegrationsController_runCheckForTask_v1",
+    "/v1/task-management/attachments/{attachmentId}": {
+      "delete": {
+        "description": "Delete a file attachment for a task item (removes from S3 and database)",
+        "operationId": "TaskManagementController_deleteTaskItemAttachment_v1",
         "parameters": [
           {
-            "name": "taskId",
+            "name": "attachmentId",
             "required": true,
             "in": "path",
+            "description": "Attachment ID",
             "schema": {
+              "example": "att_abc123def456",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "204": {
+            "description": "Attachment deleted successfully"
           }
         },
         "security": [
@@ -16544,38 +18554,31 @@
             "apikey": []
           }
         ],
-        "summary": "Run a check for a task",
+        "summary": "Delete attachment from task item",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Run a check for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Run a check for a task | Comp AI API",
-            "sidebarTitle": "Run a check for a task",
-            "description": "Run a check for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Run a check for a task | Comp AI API",
-            "og:description": "Run a check for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/tasks/{taskId}/checks/disconnect": {
-      "post": {
-        "operationId": "TaskIntegrationsController_disconnectCheckFromTask_v1",
+    "/v1/task-management/{id}/activity": {
+      "get": {
+        "description": "Retrieve all activity/audit logs for a specific task item",
+        "operationId": "TaskManagementController_getTaskItemActivity_v1",
         "parameters": [
           {
-            "name": "taskId",
+            "name": "id",
             "required": true,
             "in": "path",
+            "description": "Task item ID",
             "schema": {
+              "example": "tski_abc123def456",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Activity logs retrieved successfully"
           }
         },
         "security": [
@@ -16583,38 +18586,20 @@
             "apikey": []
           }
         ],
-        "summary": "Disconnect checks from a task",
+        "summary": "Get task item activity log",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Disconnect checks from a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Disconnect checks from a task | Comp AI API",
-            "sidebarTitle": "Disconnect checks from a task",
-            "description": "Disconnect checks from a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Disconnect checks from a task | Comp AI API",
-            "og:description": "Disconnect checks from a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Task Management"
+        ]
       }
     },
-    "/v1/integrations/tasks/{taskId}/checks/reconnect": {
+    "/v1/assistant-chat/completions": {
       "post": {
-        "operationId": "TaskIntegrationsController_reconnectCheckToTask_v1",
-        "parameters": [
-          {
-            "name": "taskId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
+        "description": "Streams an AI response based on the conversation messages. Tools are permission-gated per user.",
+        "operationId": "AssistantChatController_completions_v1",
+        "parameters": [],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Streaming AI response"
           }
         },
         "security": [
@@ -16622,43 +18607,61 @@
             "apikey": []
           }
         ],
-        "summary": "Reconnect checks to a task",
+        "summary": "Stream AI chat completion",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Reconnect checks to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Reconnect checks to a task | Comp AI API",
-            "sidebarTitle": "Reconnect checks to a task",
-            "description": "Reconnect checks to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Reconnect checks to a task | Comp AI API",
-            "og:description": "Reconnect checks to a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Assistant Chat"
+        ]
       }
     },
-    "/v1/integrations/tasks/{taskId}/runs": {
+    "/v1/assistant-chat/history": {
       "get": {
-        "operationId": "TaskIntegrationsController_getTaskCheckRuns_v1",
-        "parameters": [
-          {
-            "name": "taskId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+        "description": "Returns the current user-scoped assistant chat history (ephemeral session context).",
+        "operationId": "AssistantChatController_getHistory_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "Chat history retrieved",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "messages": {
+                      "type": "array",
+                      "items": {
+                        "type": "object"
+                      }
+                    }
+                  }
+                }
+              }
             }
-          },
+          }
+        },
+        "security": [
           {
-            "name": "limit",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
+            "apikey": []
           }
         ],
+        "summary": "Get assistant chat history",
+        "tags": [
+          "Assistant Chat"
+        ]
+      },
+      "put": {
+        "description": "Replaces the current user-scoped assistant chat history (ephemeral session context).",
+        "operationId": "AssistantChatController_saveHistory_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SaveAssistantChatHistoryDto"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
             "description": ""
@@ -16669,38 +18672,96 @@
             "apikey": []
           }
         ],
-        "summary": "List check runs for a task",
+        "summary": "Save assistant chat history",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List check runs for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List check runs for a task | Comp AI API",
-            "sidebarTitle": "List check runs for a task",
-            "description": "List check runs for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "List check runs for a task | Comp AI API",
-            "og:description": "List check runs for a task in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
+          "Assistant Chat"
+        ]
+      },
+      "delete": {
+        "description": "Deletes the current user-scoped assistant chat history.",
+        "operationId": "AssistantChatController_clearHistory_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Clear assistant chat history",
+        "tags": [
+          "Assistant Chat"
+        ]
       }
     },
-    "/v1/integrations/sync/google-workspace/employees": {
+    "/v1/roles": {
       "post": {
-        "operationId": "SyncController_syncGoogleWorkspaceEmployees_v1",
-        "parameters": [
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
+        "description": "Create a new custom role with specified permissions. Only admins and owners can create roles.",
+        "operationId": "RolesController_createRole_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateRoleDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
           "201": {
-            "description": ""
+            "description": "Role created successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "type": "string",
+                      "example": "rol_abc123"
+                    },
+                    "name": {
+                      "type": "string",
+                      "example": "compliance-lead"
+                    },
+                    "permissions": {
+                      "type": "object",
+                      "additionalProperties": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        }
+                      }
+                    },
+                    "isBuiltIn": {
+                      "type": "boolean",
+                      "example": false
+                    },
+                    "createdAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    "updatedAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid role data or role already exists"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "403": {
+            "description": "Forbidden - cannot grant permissions you do not have"
           }
         },
         "security": [
@@ -16708,29 +18769,75 @@
             "apikey": []
           }
         ],
-        "summary": "Sync Google Workspace employees",
+        "summary": "Create a custom role",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Sync Google Workspace employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Sync Google Workspace employees | Comp AI API",
-            "sidebarTitle": "Sync Google Workspace employees",
-            "description": "Sync Google Workspace employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Sync Google Workspace employees | Comp AI API",
-            "og:description": "Sync Google Workspace employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/integrations/sync/google-workspace/status": {
-      "post": {
-        "operationId": "SyncController_getGoogleWorkspaceStatus_v1",
+          "Roles"
+        ]
+      },
+      "get": {
+        "description": "List all roles for the organization, including built-in and custom roles.",
+        "operationId": "RolesController_listRoles_v1",
         "parameters": [],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "List of roles",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "builtInRoles": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "name": {
+                            "type": "string"
+                          },
+                          "isBuiltIn": {
+                            "type": "boolean"
+                          },
+                          "description": {
+                            "type": "string"
+                          }
+                        }
+                      }
+                    },
+                    "customRoles": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "permissions": {
+                            "type": "object"
+                          },
+                          "isBuiltIn": {
+                            "type": "boolean"
+                          },
+                          "createdAt": {
+                            "type": "string",
+                            "format": "date-time"
+                          },
+                          "updatedAt": {
+                            "type": "string",
+                            "format": "date-time"
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized"
           }
         },
         "security": [
@@ -16738,28 +18845,19 @@
             "apikey": []
           }
         ],
-        "summary": "Get Google Workspace sync status",
+        "summary": "List all roles",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get Google Workspace sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get Google Workspace sync status | Comp AI API",
-            "sidebarTitle": "Get Google Workspace sync status",
-            "description": "Get Google Workspace sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Get Google Workspace sync status | Comp AI API",
-            "og:description": "Get Google Workspace sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Roles"
+        ]
       }
     },
-    "/v1/integrations/sync/rippling/employees": {
-      "post": {
-        "operationId": "SyncController_syncRipplingEmployees_v1",
+    "/v1/roles/permissions": {
+      "get": {
+        "description": "Returns the merged permissions for the given custom role names. Used by the frontend to resolve effective permissions for users with custom roles.",
+        "operationId": "RolesController_getPermissionsForRoles_v1",
         "parameters": [
           {
-            "name": "connectionId",
+            "name": "roles",
             "required": true,
             "in": "query",
             "schema": {
@@ -16768,38 +18866,29 @@
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
-          }
-        },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Sync Rippling employees",
-        "tags": [
-          "Integrations"
-        ],
-        "description": "Sync Rippling employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Sync Rippling employees | Comp AI API",
-            "sidebarTitle": "Sync Rippling employees",
-            "description": "Sync Rippling employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Sync Rippling employees | Comp AI API",
-            "og:description": "Sync Rippling employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
-      }
-    },
-    "/v1/integrations/sync/rippling/status": {
-      "post": {
-        "operationId": "SyncController_getRipplingStatus_v1",
-        "parameters": [],
-        "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Merged permissions for the requested roles",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "permissions": {
+                      "type": "object",
+                      "additionalProperties": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized"
           }
         },
         "security": [
@@ -16807,38 +18896,66 @@
             "apikey": []
           }
         ],
-        "summary": "Get Rippling sync status",
+        "summary": "Resolve permissions for custom roles",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get Rippling sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get Rippling sync status | Comp AI API",
-            "sidebarTitle": "Get Rippling sync status",
-            "description": "Get Rippling sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Get Rippling sync status | Comp AI API",
-            "og:description": "Get Rippling sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
+          "Roles"
+        ]
       }
     },
-    "/v1/integrations/sync/jumpcloud/employees": {
-      "post": {
-        "operationId": "SyncController_syncJumpCloudEmployees_v1",
+    "/v1/roles/{roleId}": {
+      "get": {
+        "description": "Get details of a specific custom role.",
+        "operationId": "RolesController_getRole_v1",
         "parameters": [
           {
-            "name": "connectionId",
+            "name": "roleId",
             "required": true,
-            "in": "query",
+            "in": "path",
+            "description": "Role ID",
             "schema": {
+              "example": "rol_abc123",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Role details",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "type": "string"
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "permissions": {
+                      "type": "object"
+                    },
+                    "isBuiltIn": {
+                      "type": "boolean"
+                    },
+                    "createdAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    "updatedAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "404": {
+            "description": "Role not found"
           }
         },
         "security": [
@@ -16846,59 +18963,80 @@
             "apikey": []
           }
         ],
-        "summary": "Sync JumpCloud employees",
+        "summary": "Get a role by ID",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Sync JumpCloud employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Sync JumpCloud employees | Comp AI API",
-            "sidebarTitle": "Sync JumpCloud employees",
-            "description": "Sync JumpCloud employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Sync JumpCloud employees | Comp AI API",
-            "og:description": "Sync JumpCloud employees in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
-          }
-        }
-      }
-    },
-    "/v1/integrations/sync/jumpcloud/status": {
-      "post": {
-        "operationId": "SyncController_getJumpCloudStatus_v1",
-        "parameters": [],
-        "responses": {
-          "201": {
-            "description": ""
-          }
-        },
-        "security": [
+          "Roles"
+        ]
+      },
+      "patch": {
+        "description": "Update the name or permissions of a custom role. Cannot modify built-in roles.",
+        "operationId": "RolesController_updateRole_v1",
+        "parameters": [
           {
-            "apikey": []
+            "name": "roleId",
+            "required": true,
+            "in": "path",
+            "description": "Role ID",
+            "schema": {
+              "example": "rol_abc123",
+              "type": "string"
+            }
           }
         ],
-        "summary": "Get JumpCloud sync status",
-        "tags": [
-          "Integrations"
-        ],
-        "description": "Get JumpCloud sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get JumpCloud sync status | Comp AI API",
-            "sidebarTitle": "Get JumpCloud sync status",
-            "description": "Get JumpCloud sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect.",
-            "og:title": "Get JumpCloud sync status | Comp AI API",
-            "og:description": "Get JumpCloud sync status in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect."
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateRoleDto"
+              }
+            }
           }
-        }
-      }
-    },
-    "/v1/integrations/sync/employee-sync-provider": {
-      "get": {
-        "operationId": "SyncController_getEmployeeSyncProvider_v1",
-        "parameters": [],
+        },
         "responses": {
           "200": {
-            "description": ""
+            "description": "Role updated successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "type": "string"
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "permissions": {
+                      "type": "object"
+                    },
+                    "isBuiltIn": {
+                      "type": "boolean"
+                    },
+                    "createdAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    "updatedAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid role data"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "403": {
+            "description": "Forbidden - cannot grant permissions you do not have"
+          },
+          "404": {
+            "description": "Role not found"
           }
         },
         "security": [
@@ -16906,27 +19044,53 @@
             "apikey": []
           }
         ],
-        "summary": "Get the currently configured employee sync provider",
+        "summary": "Update a custom role",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Get the currently configured employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get the currently configured employee sync | Comp AI API",
-            "sidebarTitle": "Get the currently configured employee sync provider",
-            "description": "Get the currently configured employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage.",
-            "og:title": "Get the currently configured employee sync | Comp AI API",
-            "og:description": "Get the currently configured employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage."
-          }
-        }
+          "Roles"
+        ]
       },
-      "post": {
-        "operationId": "SyncController_setEmployeeSyncProvider_v1",
-        "parameters": [],
+      "delete": {
+        "description": "Delete a custom role. Cannot delete if members are still assigned to it.",
+        "operationId": "RolesController_deleteRole_v1",
+        "parameters": [
+          {
+            "name": "roleId",
+            "required": true,
+            "in": "path",
+            "description": "Role ID",
+            "schema": {
+              "example": "rol_abc123",
+              "type": "string"
+            }
+          }
+        ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Role deleted successfully",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Cannot delete - members assigned to role"
+          },
+          "401": {
+            "description": "Unauthorized"
+          },
+          "404": {
+            "description": "Role not found"
           }
         },
         "security": [
@@ -16934,29 +19098,20 @@
             "apikey": []
           }
         ],
-        "summary": "Set the employee sync provider",
+        "summary": "Delete a custom role",
         "tags": [
-          "Integrations"
-        ],
-        "description": "Set the employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Set the employee sync provider | Comp AI API",
-            "sidebarTitle": "Set the employee sync provider",
-            "description": "Set the employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Set the employee sync provider | Comp AI API",
-            "og:description": "Set the employee sync provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
+          "Roles"
+        ]
       }
     },
-    "/v1/integrations/sync/available-providers": {
+    "/v1/training/completions": {
       "get": {
-        "operationId": "SyncController_getAvailableSyncProviders_v1",
+        "description": "Returns all training video completion records for the authenticated member. Requires session authentication.",
+        "operationId": "TrainingController_getCompletions_v1",
         "parameters": [],
         "responses": {
           "200": {
-            "description": ""
+            "description": "List of training video completion records"
           }
         },
         "security": [
@@ -16964,46 +19119,29 @@
             "apikey": []
           }
         ],
-        "summary": "List employee sync providers available to the org",
+        "summary": "Get training video completions for the authenticated user",
         "tags": [
-          "Integrations"
-        ],
-        "description": "List employee sync providers available to the org in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "List employee sync providers available to the | Comp AI API",
-            "sidebarTitle": "List employee sync providers available to the org",
-            "description": "List employee sync providers available to the org in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage.",
-            "og:title": "List employee sync providers available to the | Comp AI API",
-            "og:description": "List employee sync providers available to the org in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage."
-          }
-        }
+          "Training"
+        ]
       }
     },
-    "/v1/integrations/sync/dynamic/{providerSlug}/employees": {
+    "/v1/training/completions/{videoId}/complete": {
       "post": {
-        "operationId": "SyncController_syncDynamicProviderEmployees_v1",
+        "description": "Marks a specific training video as completed for the authenticated member. Triggers completion email if all training is now done.",
+        "operationId": "TrainingController_markVideoComplete_v1",
         "parameters": [
           {
-            "name": "providerSlug",
+            "name": "videoId",
             "required": true,
             "in": "path",
             "schema": {
               "type": "string"
             }
-          },
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "The updated completion record"
           }
         },
         "security": [
@@ -17011,428 +19149,285 @@
             "apikey": []
           }
         ],
-        "summary": "Sync employees for a dynamic provider",
-        "tags": [
-          "Integrations"
-        ],
-        "description": "Sync employees for a dynamic provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Sync employees for a dynamic provider | Comp AI API",
-            "sidebarTitle": "Sync employees for a dynamic provider",
-            "description": "Sync employees for a dynamic provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables.",
-            "og:title": "Sync employees for a dynamic provider | Comp AI API",
-            "og:description": "Sync employees for a dynamic provider in Comp AI. Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables."
-          }
-        }
-      }
-    },
-    "/v1/cloud-security/activity": {
-      "get": {
-        "operationId": "CloudSecurityController_getActivity_v1",
-        "parameters": [
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": ""
-          }
-        },
-        "summary": "List recent cloud security activity",
+        "summary": "Mark a training video as complete",
         "tags": [
-          "CloudSecurity"
-        ],
-        "description": "List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "List recent cloud security activity | Comp AI API",
-            "sidebarTitle": "List recent cloud security activity",
-            "description": "List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.",
-            "og:title": "List recent cloud security activity | Comp AI API",
-            "og:description": "List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud."
-          }
-        }
+          "Training"
+        ]
       }
     },
-    "/v1/cloud-security/providers": {
-      "get": {
-        "operationId": "CloudSecurityController_getProviders_v1",
+    "/v1/training/send-completion-email": {
+      "post": {
+        "description": "Checks if the member has completed all training videos. If so, sends an email with the training certificate attached.",
+        "operationId": "TrainingController_sendTrainingCompletionEmail_v1",
         "parameters": [],
-        "responses": {
-          "200": {
-            "description": ""
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SendTrainingCompletionDto"
+              }
+            }
           }
         },
-        "summary": "List supported cloud providers",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "List supported cloud providers | Comp AI API",
-            "sidebarTitle": "List supported cloud providers",
-            "description": "List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.",
-            "og:title": "List supported cloud providers | Comp AI API",
-            "og:description": "List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture."
-          }
-        }
-      }
-    },
-    "/v1/cloud-security/findings": {
-      "get": {
-        "operationId": "CloudSecurityController_getFindings_v1",
-        "parameters": [],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Email sent or reason why it was not sent",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SendTrainingCompletionResponseDto"
+                }
+              }
+            }
           }
         },
-        "summary": "List cloud security findings",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings.",
-        "x-mint": {
-          "metadata": {
-            "title": "List cloud security findings | Comp AI API",
-            "sidebarTitle": "List cloud security findings",
-            "description": "List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings.",
-            "og:title": "List cloud security findings | Comp AI API",
-            "og:description": "List cloud security findings discovered by scans so teams can prioritize remediation before issues become audit findings."
-          }
-        }
-      }
-    },
-    "/v1/cloud-security/scan/{connectionId}": {
-      "post": {
-        "operationId": "CloudSecurityController_scan_v1",
-        "parameters": [
+        "security": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
+            "apikey": []
           }
         ],
-        "responses": {
-          "201": {
-            "description": ""
-          }
-        },
-        "summary": "Run cloud security scan",
+        "summary": "Send training completion email with certificate",
         "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation.",
-        "x-mint": {
-          "metadata": {
-            "title": "Run cloud security scan | Comp AI API",
-            "sidebarTitle": "Run cloud security scan",
-            "description": "Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation.",
-            "og:title": "Run cloud security scan | Comp AI API",
-            "og:description": "Trigger a cloud security scan for a connected AWS, Azure, or GCP account and collect findings for compliance remediation."
-          }
-        }
+          "Training"
+        ]
       }
     },
-    "/v1/cloud-security/detect-services/{connectionId}": {
+    "/v1/training/generate-certificate": {
       "post": {
-        "operationId": "CloudSecurityController_detectServices_v1",
-        "parameters": [
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+        "description": "Generates a PDF certificate for a member who has completed all training videos. Returns the PDF as a downloadable file.",
+        "operationId": "TrainingController_generateCertificate_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SendTrainingCompletionDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "PDF certificate file"
+          },
+          "400": {
+            "description": "Training not complete or member not found"
           }
         },
-        "summary": "Detect available cloud services for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Detect available cloud services for a | Comp AI API",
-            "sidebarTitle": "Detect available cloud services for a connection",
-            "description": "Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.",
-            "og:title": "Detect available cloud services for a | Comp AI API",
-            "og:description": "Detect available cloud services for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings."
-          }
-        }
-      }
-    },
-    "/v1/cloud-security/detect-gcp-org/{connectionId}": {
-      "post": {
-        "operationId": "CloudSecurityController_detectGcpOrg_v1",
-        "parameters": [
+        "security": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
+            "apikey": []
           }
         ],
-        "responses": {
-          "201": {
-            "description": ""
-          }
-        },
-        "summary": "Detect the GCP organization for a connection",
+        "summary": "Generate training completion certificate PDF",
         "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Detect the GCP organization for a connection | Comp AI API",
-            "sidebarTitle": "Detect the GCP organization for a connection",
-            "description": "Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.",
-            "og:title": "Detect the GCP organization for a connection | Comp AI API",
-            "og:description": "Detect the GCP organization for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect."
-          }
-        }
+          "Training"
+        ]
       }
     },
-    "/v1/cloud-security/select-gcp-projects/{connectionId}": {
+    "/v1/training/generate-hipaa-certificate": {
       "post": {
-        "operationId": "CloudSecurityController_selectGcpProjects_v1",
-        "parameters": [
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+        "description": "Generates a PDF certificate for a member who has completed the HIPAA Security Awareness Training.",
+        "operationId": "TrainingController_generateHipaaCertificate_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SendTrainingCompletionDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "PDF certificate file"
+          },
+          "400": {
+            "description": "HIPAA training not complete or member not found"
           }
         },
-        "summary": "Select GCP projects for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Select GCP projects for a connection | Comp AI API",
-            "sidebarTitle": "Select GCP projects for a connection",
-            "description": "Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.",
-            "og:title": "Select GCP projects for a connection | Comp AI API",
-            "og:description": "Select GCP projects for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud."
+        "security": [
+          {
+            "apikey": []
           }
-        }
+        ],
+        "summary": "Generate HIPAA training certificate PDF",
+        "tags": [
+          "Training"
+        ]
       }
     },
-    "/v1/cloud-security/setup-gcp/{connectionId}": {
-      "post": {
-        "operationId": "CloudSecurityController_setupGcp_v1",
+    "/v1/org-chart": {
+      "get": {
+        "operationId": "OrgChartController_getOrgChart_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "The organization chart"
           }
         },
-        "summary": "Set up GCP for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Set up GCP for a connection | Comp AI API",
-            "sidebarTitle": "Set up GCP for a connection",
-            "description": "Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.",
-            "og:title": "Set up GCP for a connection | Comp AI API",
-            "og:description": "Set up GCP for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture."
+        "security": [
+          {
+            "apikey": []
           }
-        }
-      }
-    },
-    "/v1/cloud-security/setup-gcp/{connectionId}/resolve-step": {
-      "post": {
-        "operationId": "CloudSecurityController_resolveGcpSetupStep_v1",
+        ],
+        "summary": "Get the organization chart",
+        "tags": [
+          "Org Chart"
+        ]
+      },
+      "put": {
+        "operationId": "OrgChartController_upsertOrgChart_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "The saved organization chart"
           }
         },
-        "summary": "Resolve a GCP setup step",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Resolve a GCP setup step | Comp AI API",
-            "sidebarTitle": "Resolve a GCP setup step",
-            "description": "Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.",
-            "og:title": "Resolve a GCP setup step | Comp AI API",
-            "og:description": "Resolve a GCP setup step in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture."
+        "security": [
+          {
+            "apikey": []
           }
-        }
-      }
-    },
-    "/v1/cloud-security/setup-azure/{connectionId}": {
-      "post": {
-        "operationId": "CloudSecurityController_setupAzure_v1",
+        ],
+        "summary": "Create or update an interactive organization chart",
+        "tags": [
+          "Org Chart"
+        ]
+      },
+      "delete": {
+        "operationId": "OrgChartController_deleteOrgChart_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Deletion confirmation"
           }
         },
-        "summary": "Set up Azure for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Set up Azure for a connection | Comp AI API",
-            "sidebarTitle": "Set up Azure for a connection",
-            "description": "Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture.",
-            "og:title": "Set up Azure for a connection | Comp AI API",
-            "og:description": "Set up Azure for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture."
+        "security": [
+          {
+            "apikey": []
           }
-        }
+        ],
+        "summary": "Delete the organization chart",
+        "tags": [
+          "Org Chart"
+        ]
       }
     },
-    "/v1/cloud-security/validate-azure/{connectionId}": {
+    "/v1/org-chart/upload": {
       "post": {
-        "operationId": "CloudSecurityController_validateAzure_v1",
+        "operationId": "OrgChartController_uploadOrgChart_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UploadOrgChartDto"
+              }
+            }
+          }
+        },
         "responses": {
           "201": {
-            "description": ""
+            "description": "The uploaded organization chart"
           }
         },
-        "summary": "Validate Azure credentials for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Validate Azure credentials for a connection | Comp AI API",
-            "sidebarTitle": "Validate Azure credentials for a connection",
-            "description": "Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect.",
-            "og:title": "Validate Azure credentials for a connection | Comp AI API",
-            "og:description": "Validate Azure credentials for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect."
+        "security": [
+          {
+            "apikey": []
           }
-        }
+        ],
+        "summary": "Upload an image as the organization chart",
+        "tags": [
+          "Org Chart"
+        ]
       }
     },
-    "/v1/cloud-security/trigger/{connectionId}": {
-      "post": {
-        "operationId": "CloudSecurityController_triggerScan_v1",
+    "/v1/evidence-forms": {
+      "get": {
+        "description": "List all available pre-built evidence forms",
+        "operationId": "EvidenceFormsController_listForms_v1",
         "parameters": [
           {
-            "name": "connectionId",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
-        "summary": "Trigger a cloud security run for a connection",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Trigger a cloud security run for a connection | Comp AI API",
-            "sidebarTitle": "Trigger a cloud security run for a connection",
-            "description": "Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings.",
-            "og:title": "Trigger a cloud security run for a connection | Comp AI API",
-            "og:description": "Trigger a cloud security run for a connection in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings."
+        "security": [
+          {
+            "apikey": []
           }
-        }
+        ],
+        "summary": "List evidence forms",
+        "tags": [
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/cloud-security/runs/{runId}": {
+    "/v1/evidence-forms/statuses": {
       "get": {
-        "operationId": "CloudSecurityController_getRunStatus_v1",
+        "description": "Returns the latest submission date per form type for the active organization",
+        "operationId": "EvidenceFormsController_getFormStatuses_v1",
         "parameters": [
           {
-            "name": "runId",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "connectionId",
-            "required": true,
-            "in": "query",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
@@ -17443,86 +19438,35 @@
             "description": ""
           }
         },
-        "summary": "Get a cloud security scan run by ID",
-        "tags": [
-          "CloudSecurity"
-        ],
-        "description": "Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a cloud security scan run by ID | Comp AI API",
-            "sidebarTitle": "Get a cloud security scan run by ID",
-            "description": "Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud.",
-            "og:title": "Get a cloud security scan run by ID | Comp AI API",
-            "og:description": "Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud."
+        "security": [
+          {
+            "apikey": []
           }
-        }
+        ],
+        "summary": "Get submission statuses for all forms",
+        "tags": [
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/task-management/stats": {
+    "/v1/evidence-forms/settings": {
       "get": {
-        "description": "Get task items statistics for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_getTaskItemsStats_v1",
+        "description": "Returns organization-scoped relevance settings for evidence forms",
+        "operationId": "EvidenceFormsController_getFormSettings_v1",
         "parameters": [
           {
-            "name": "entityId",
-            "required": true,
-            "in": "query",
-            "description": "ID of the entity to get task items stats for",
-            "schema": {
-              "example": "vnd_abc123def456",
-              "type": "string"
-            }
-          },
-          {
-            "name": "entityType",
-            "required": true,
-            "in": "query",
-            "description": "Type of entity",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
-              "enum": [
-                "vendor",
-                "risk"
-              ],
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": "Task items statistics retrieved successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "total": {
-                      "type": "number"
-                    },
-                    "byStatus": {
-                      "type": "object",
-                      "properties": {
-                        "todo": {
-                          "type": "number"
-                        },
-                        "in_progress": {
-                          "type": "number"
-                        },
-                        "in_review": {
-                          "type": "number"
-                        },
-                        "done": {
-                          "type": "number"
-                        },
-                        "canceled": {
-                          "type": "number"
-                        }
-                      }
-                    }
-                  }
-                }
-              }
-            }
+          "200": {
+            "description": ""
           }
         },
         "security": [
@@ -17530,162 +19474,77 @@
             "apikey": []
           }
         ],
-        "summary": "Get task items statistics for an entity",
+        "summary": "Get document relevance settings",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task items statistics for an entity | Comp AI API",
-            "sidebarTitle": "Get task items statistics for an entity",
-            "description": "Get task items statistics for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Get task items statistics for an entity | Comp AI API",
-            "og:description": "Get task items statistics for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/task-management": {
-      "get": {
-        "description": "Get task items for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_getTaskItems_v1",
+    "/v1/evidence-forms/{formType}/settings": {
+      "patch": {
+        "description": "Marks an evidence form as relevant or not relevant for the active organization",
+        "operationId": "EvidenceFormsController_updateFormSetting_v1",
         "parameters": [
           {
-            "name": "entityId",
-            "required": true,
-            "in": "query",
-            "description": "ID of the entity to get task items for",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
-              "example": "vnd_abc123def456",
               "type": "string"
             }
           },
           {
-            "name": "entityType",
+            "name": "formType",
             "required": true,
-            "in": "query",
-            "description": "Type of entity",
-            "schema": {
-              "example": "vendor",
-              "type": "string",
-              "enum": [
-                "vendor",
-                "risk"
-              ]
-            }
-          },
-          {
-            "name": "page",
-            "required": false,
-            "in": "query",
-            "description": "Page number (1-indexed)",
-            "schema": {
-              "minimum": 1,
-              "default": 1,
-              "example": 1,
-              "type": "number"
-            }
-          },
-          {
-            "name": "limit",
-            "required": false,
-            "in": "query",
-            "description": "Number of items per page",
-            "schema": {
-              "minimum": 1,
-              "maximum": 100,
-              "default": 5,
-              "example": 5,
-              "type": "number"
-            }
-          },
-          {
-            "name": "status",
-            "required": false,
-            "in": "query",
-            "description": "Filter by status",
+            "in": "path",
             "schema": {
-              "example": "todo",
-              "type": "string",
-              "enum": [
-                "todo",
-                "in_progress",
-                "in_review",
-                "done",
-                "canceled"
-              ]
+              "type": "string"
             }
-          },
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
           {
-            "name": "priority",
-            "required": false,
-            "in": "query",
-            "description": "Filter by priority",
-            "schema": {
-              "example": "high",
-              "type": "string",
-              "enum": [
-                "urgent",
-                "high",
-                "medium",
-                "low"
-              ]
-            }
-          },
+            "apikey": []
+          }
+        ],
+        "summary": "Update document relevance setting",
+        "tags": [
+          "Evidence Forms"
+        ]
+      }
+    },
+    "/v1/evidence-forms/my-submissions": {
+      "get": {
+        "description": "Returns all evidence form submissions by the authenticated user for the active organization",
+        "operationId": "EvidenceFormsController_getMySubmissions_v1",
+        "parameters": [
           {
-            "name": "assigneeId",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
             "required": false,
-            "in": "query",
-            "description": "Filter by assignee ID",
             "schema": {
-              "example": "mbr_abc123def456",
               "type": "string"
             }
           },
           {
-            "name": "sortBy",
-            "required": false,
-            "in": "query",
-            "description": "Sort by field",
-            "schema": {
-              "default": "createdAt",
-              "example": "createdAt",
-              "type": "string",
-              "enum": [
-                "createdAt",
-                "updatedAt",
-                "title",
-                "status",
-                "priority"
-              ]
-            }
-          },
-          {
-            "name": "sortOrder",
-            "required": false,
+            "name": "formType",
+            "required": true,
             "in": "query",
-            "description": "Sort order",
             "schema": {
-              "default": "desc",
-              "example": "desc",
-              "type": "string",
-              "enum": [
-                "asc",
-                "desc"
-              ]
+              "type": "string"
             }
           }
         ],
         "responses": {
           "200": {
-            "description": "Task items retrieved successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/PaginatedTaskItemResponseDto"
-                }
-              }
-            }
+            "description": ""
           }
         },
         "security": [
@@ -17693,44 +19552,30 @@
             "apikey": []
           }
         ],
-        "summary": "Get task items for an entity",
+        "summary": "Get current user submissions",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task items for an entity | Comp AI API",
-            "sidebarTitle": "Get task items for an entity",
-            "description": "Get task items for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Get task items for an entity | Comp AI API",
-            "og:description": "Get task items for an entity in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
-      },
-      "post": {
-        "description": "Create a new task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_createTaskItem_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateTaskItemDto"
-              }
+          "Evidence Forms"
+        ]
+      }
+    },
+    "/v1/evidence-forms/my-submissions/pending-count": {
+      "get": {
+        "description": "Returns the count of pending evidence submissions for the authenticated user",
+        "operationId": "EvidenceFormsController_getPendingSubmissionCount_v1",
+        "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "201": {
-            "description": "Task item created successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/TaskItemResponseDto"
-                }
-              }
-            }
+          "200": {
+            "description": ""
           }
         },
         "security": [
@@ -17738,57 +19583,62 @@
             "apikey": []
           }
         ],
-        "summary": "Create a new task item",
+        "summary": "Get pending submission count for current user",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create a new task item | Comp AI API",
-            "sidebarTitle": "Create a new task item",
-            "description": "Create a new task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Create a new task item | Comp AI API",
-            "og:description": "Create a new task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/task-management/{id}": {
-      "put": {
-        "description": "Update a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_updateTaskItem_v1",
+    "/v1/evidence-forms/{formType}": {
+      "get": {
+        "description": "Fetch a specific form definition with submissions for the active organization",
+        "operationId": "EvidenceFormsController_getFormWithSubmissions_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
             "required": true,
             "in": "path",
-            "description": "Task item ID",
             "schema": {
-              "example": "tski_abc123def456",
+              "type": "string"
+            }
+          },
+          {
+            "name": "search",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "limit",
+            "required": true,
+            "in": "query",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "offset",
+            "required": true,
+            "in": "query",
+            "schema": {
               "type": "string"
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/UpdateTaskItemDto"
-              }
-            }
-          }
-        },
         "responses": {
           "200": {
-            "description": "Task item updated successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/TaskItemResponseDto"
-                }
-              }
-            }
+            "description": ""
           }
         },
         "security": [
@@ -17796,85 +19646,46 @@
             "apikey": []
           }
         ],
-        "summary": "Update a task item",
+        "summary": "Get form definition and submissions",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update a task item | Comp AI API",
-            "sidebarTitle": "Update a task item",
-            "description": "Update a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Update a task item | Comp AI API",
-            "og:description": "Update a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
-      },
-      "delete": {
-        "description": "Delete a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_deleteTaskItem_v1",
+          "Evidence Forms"
+        ]
+      }
+    },
+    "/v1/evidence-forms/{formType}/submissions/{submissionId}": {
+      "get": {
+        "description": "Fetch one evidence form submission for the active organization",
+        "operationId": "EvidenceFormsController_getSubmission_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
             "required": true,
             "in": "path",
-            "description": "Task item ID",
             "schema": {
-              "example": "tski_abc123def456",
               "type": "string"
             }
-          }
-        ],
-        "responses": {
-          "204": {
-            "description": "Task item deleted successfully"
-          }
-        },
-        "security": [
+          },
           {
-            "apikey": []
-          }
-        ],
-        "summary": "Delete a task item",
-        "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a task item | Comp AI API",
-            "sidebarTitle": "Delete a task item",
-            "description": "Delete a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Delete a task item | Comp AI API",
-            "og:description": "Delete a task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
-      }
-    },
-    "/v1/task-management/attachments": {
-      "post": {
-        "description": "Upload a file attachment for a task item with proper S3 path structure: org_{orgId}/attachments/task-item/{entityType}/{entityId}/files.",
-        "operationId": "TaskManagementController_uploadTaskItemAttachment_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/UploadTaskItemAttachmentDto"
-              }
+            "name": "submissionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
-          "201": {
-            "description": "Attachment uploaded successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AttachmentResponseDto"
-                }
-              }
-            }
+          "200": {
+            "description": ""
           }
         },
         "security": [
@@ -17882,40 +19693,44 @@
             "apikey": []
           }
         ],
-        "summary": "Upload attachment to task item",
+        "summary": "Get a single submission",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload attachment to task item | Comp AI API",
-            "sidebarTitle": "Upload attachment to task item",
-            "description": "Upload a file attachment for a task item with proper S3 path structure: org_{orgId}/attachments/task-item/{entityType}/{entityId}/files.",
-            "og:title": "Upload attachment to task item | Comp AI API",
-            "og:description": "Upload a file attachment for a task item with proper S3 path structure: org_{orgId}/attachments/task-item/{entityType}/{entityId}/files."
-          }
-        }
-      }
-    },
-    "/v1/task-management/attachments/{attachmentId}": {
+          "Evidence Forms"
+        ]
+      },
       "delete": {
-        "description": "Delete attachment from task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_deleteTaskItemAttachment_v1",
+        "description": "Remove an evidence form submission for the active organization. Requires owner, admin, or auditor role.",
+        "operationId": "EvidenceFormsController_deleteSubmission_v1",
         "parameters": [
           {
-            "name": "attachmentId",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "submissionId",
             "required": true,
             "in": "path",
-            "description": "Attachment ID",
             "schema": {
-              "example": "att_abc123def456",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "204": {
-            "description": "Attachment deleted successfully"
+          "200": {
+            "description": ""
           }
         },
         "security": [
@@ -17923,40 +19738,38 @@
             "apikey": []
           }
         ],
-        "summary": "Delete attachment from task item",
+        "summary": "Delete a submission",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete attachment from task item | Comp AI API",
-            "sidebarTitle": "Delete attachment from task item",
-            "description": "Delete attachment from task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Delete attachment from task item | Comp AI API",
-            "og:description": "Delete attachment from task item in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/task-management/{id}/activity": {
-      "get": {
-        "description": "Get task item activity log in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-        "operationId": "TaskManagementController_getTaskItemActivity_v1",
+    "/v1/evidence-forms/{formType}/submissions": {
+      "post": {
+        "description": "Create a new organization-scoped evidence form submission using Zod-validated payloads",
+        "operationId": "EvidenceFormsController_submitForm_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
             "required": true,
             "in": "path",
-            "description": "Task item ID",
             "schema": {
-              "example": "tski_abc123def456",
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": "Activity logs retrieved successfully"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -17964,86 +19777,38 @@
             "apikey": []
           }
         ],
-        "summary": "Get task item activity log",
+        "summary": "Submit evidence form entry",
         "tags": [
-          "Task Management"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get task item activity log | Comp AI API",
-            "sidebarTitle": "Get task item activity log",
-            "description": "Get task item activity log in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors.",
-            "og:title": "Get task item activity log | Comp AI API",
-            "og:description": "Get task item activity log in Comp AI. Manage task items and attachments linked to operational entities such as risks and vendors."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/roles": {
+    "/v1/evidence-forms/{formType}/upload-submission": {
       "post": {
-        "description": "Create a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-        "operationId": "RolesController_createRole_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateRoleDto"
-              }
+        "description": "Upload a PDF or image file and create a submission for the given form type, bypassing form-specific validation",
+        "operationId": "EvidenceFormsController_uploadSubmission_v1",
+        "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "201": {
-            "description": "Role created successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "id": {
-                      "type": "string",
-                      "example": "rol_abc123"
-                    },
-                    "name": {
-                      "type": "string",
-                      "example": "compliance-lead"
-                    },
-                    "permissions": {
-                      "type": "object",
-                      "additionalProperties": {
-                        "type": "array",
-                        "items": {
-                          "type": "string"
-                        }
-                      }
-                    },
-                    "isBuiltIn": {
-                      "type": "boolean",
-                      "example": false
-                    },
-                    "createdAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    },
-                    "updatedAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid role data or role already exists"
-          },
-          "401": {
-            "description": "Unauthorized"
-          },
-          "403": {
-            "description": "Forbidden - cannot grant permissions you do not have"
+            "description": ""
           }
         },
         "security": [
@@ -18051,84 +19816,46 @@
             "apikey": []
           }
         ],
-        "summary": "Create a custom role",
+        "summary": "Upload a file as an evidence submission",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create a custom role | Comp AI API",
-            "sidebarTitle": "Create a custom role",
-            "description": "Create a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-            "og:title": "Create a custom role | Comp AI API",
-            "og:description": "Create a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control."
+          "Evidence Forms"
+        ]
+      }
+    },
+    "/v1/evidence-forms/{formType}/submissions/{submissionId}/review": {
+      "patch": {
+        "description": "Approve or reject an evidence form submission with an optional reason",
+        "operationId": "EvidenceFormsController_reviewSubmission_v1",
+        "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "submissionId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
           }
-        }
-      },
-      "get": {
-        "description": "List all roles in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-        "operationId": "RolesController_listRoles_v1",
-        "parameters": [],
+        ],
         "responses": {
           "200": {
-            "description": "List of roles",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "builtInRoles": {
-                      "type": "array",
-                      "items": {
-                        "type": "object",
-                        "properties": {
-                          "name": {
-                            "type": "string"
-                          },
-                          "isBuiltIn": {
-                            "type": "boolean"
-                          },
-                          "description": {
-                            "type": "string"
-                          }
-                        }
-                      }
-                    },
-                    "customRoles": {
-                      "type": "array",
-                      "items": {
-                        "type": "object",
-                        "properties": {
-                          "id": {
-                            "type": "string"
-                          },
-                          "name": {
-                            "type": "string"
-                          },
-                          "permissions": {
-                            "type": "object"
-                          },
-                          "isBuiltIn": {
-                            "type": "boolean"
-                          },
-                          "createdAt": {
-                            "type": "string",
-                            "format": "date-time"
-                          },
-                          "updatedAt": {
-                            "type": "string",
-                            "format": "date-time"
-                          }
-                        }
-                      }
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "401": {
-            "description": "Unauthorized"
+            "description": ""
           }
         },
         "security": [
@@ -18136,59 +19863,30 @@
             "apikey": []
           }
         ],
-        "summary": "List all roles",
+        "summary": "Review a submission",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List all roles | Comp AI API",
-            "sidebarTitle": "List all roles",
-            "description": "List all roles in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-            "og:title": "List all roles | Comp AI API",
-            "og:description": "List all roles in Comp AI. Create custom roles and resolve permission sets for organization-level access control."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/roles/permissions": {
-      "get": {
-        "description": "Returns the merged permissions for the given custom role names. Used by the frontend to resolve effective permissions for users with custom roles.",
-        "operationId": "RolesController_getPermissionsForRoles_v1",
+    "/v1/evidence-forms/uploads": {
+      "post": {
+        "description": "Upload a file for evidence form fields and return file metadata for submission payload",
+        "operationId": "EvidenceFormsController_uploadFile_v1",
         "parameters": [
           {
-            "name": "roles",
-            "required": true,
-            "in": "query",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": "Merged permissions for the requested roles",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "permissions": {
-                      "type": "object",
-                      "additionalProperties": {
-                        "type": "array",
-                        "items": {
-                          "type": "string"
-                        }
-                      }
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "401": {
-            "description": "Unauthorized"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -18196,75 +19894,38 @@
             "apikey": []
           }
         ],
-        "summary": "Resolve permissions for custom roles",
+        "summary": "Upload evidence form file",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Resolve permissions for custom roles | Comp AI API",
-            "sidebarTitle": "Resolve permissions for custom roles",
-            "description": "Returns the merged permissions for the given custom role names. Used by the frontend to resolve effective permissions for users with custom roles.",
-            "og:title": "Resolve permissions for custom roles | Comp AI API",
-            "og:description": "Returns the merged permissions for the given custom role names. Used by the frontend to resolve effective permissions for users with custom roles."
-          }
-        }
+          "Evidence Forms"
+        ]
       }
     },
-    "/v1/roles/{roleId}": {
+    "/v1/evidence-forms/{formType}/export.csv": {
       "get": {
-        "description": "Get a role by ID in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-        "operationId": "RolesController_getRole_v1",
+        "description": "Export all form submissions for an organization as CSV",
+        "operationId": "EvidenceFormsController_exportCsv_v1",
         "parameters": [
           {
-            "name": "roleId",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "formType",
             "required": true,
             "in": "path",
-            "description": "Role ID",
             "schema": {
-              "example": "rol_abc123",
               "type": "string"
             }
           }
         ],
         "responses": {
           "200": {
-            "description": "Role details",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "id": {
-                      "type": "string"
-                    },
-                    "name": {
-                      "type": "string"
-                    },
-                    "permissions": {
-                      "type": "object"
-                    },
-                    "isBuiltIn": {
-                      "type": "boolean"
-                    },
-                    "createdAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    },
-                    "updatedAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "401": {
-            "description": "Unauthorized"
-          },
-          "404": {
-            "description": "Role not found"
+            "description": ""
           }
         },
         "security": [
@@ -18272,211 +19933,143 @@
             "apikey": []
           }
         ],
-        "summary": "Get a role by ID",
+        "summary": "Export form submissions to CSV",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get a role by ID | Comp AI API",
-            "sidebarTitle": "Get a role by ID",
-            "description": "Get a role by ID in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-            "og:title": "Get a role by ID | Comp AI API",
-            "og:description": "Get a role by ID in Comp AI. Create custom roles and resolve permission sets for organization-level access control."
-          }
-        }
-      },
-      "patch": {
-        "description": "Update a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-        "operationId": "RolesController_updateRole_v1",
+          "Evidence Forms"
+        ]
+      }
+    },
+    "/v1/frameworks": {
+      "get": {
+        "operationId": "FrameworksController_findAll_v1",
         "parameters": [
           {
-            "name": "roleId",
-            "required": true,
-            "in": "path",
-            "description": "Role ID",
+            "name": "includeControls",
+            "required": false,
+            "in": "query",
             "schema": {
-              "example": "rol_abc123",
-              "type": "string"
+              "type": "boolean"
+            }
+          },
+          {
+            "name": "includeScores",
+            "required": false,
+            "in": "query",
+            "schema": {
+              "type": "boolean"
             }
           }
         ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "bearer": []
+          }
+        ],
+        "summary": "List framework instances for the organization",
+        "tags": [
+          "Frameworks"
+        ]
+      },
+      "post": {
+        "operationId": "FrameworksController_addFrameworks_v1",
+        "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/UpdateRoleDto"
+                "$ref": "#/components/schemas/AddFrameworksDto"
               }
             }
           }
         },
         "responses": {
-          "200": {
-            "description": "Role updated successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "id": {
-                      "type": "string"
-                    },
-                    "name": {
-                      "type": "string"
-                    },
-                    "permissions": {
-                      "type": "object"
-                    },
-                    "isBuiltIn": {
-                      "type": "boolean"
-                    },
-                    "createdAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    },
-                    "updatedAt": {
-                      "type": "string",
-                      "format": "date-time"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid role data"
-          },
-          "401": {
-            "description": "Unauthorized"
-          },
-          "403": {
-            "description": "Forbidden - cannot grant permissions you do not have"
-          },
-          "404": {
-            "description": "Role not found"
+          "201": {
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Update a custom role",
+        "summary": "Add frameworks to the organization",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update a custom role | Comp AI API",
-            "sidebarTitle": "Update a custom role",
-            "description": "Update a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-            "og:title": "Update a custom role | Comp AI API",
-            "og:description": "Update a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control."
+          "Frameworks"
+        ]
+      }
+    },
+    "/v1/frameworks/available": {
+      "get": {
+        "operationId": "FrameworksController_findAvailable_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
-      },
-      "delete": {
-        "description": "Delete a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-        "operationId": "RolesController_deleteRole_v1",
-        "parameters": [
+        },
+        "security": [
           {
-            "name": "roleId",
-            "required": true,
-            "in": "path",
-            "description": "Role ID",
-            "schema": {
-              "example": "rol_abc123",
-              "type": "string"
-            }
+            "bearer": []
           }
         ],
+        "summary": "List available frameworks (requires session, no active org needed — used during onboarding)",
+        "tags": [
+          "Frameworks"
+        ]
+      }
+    },
+    "/v1/frameworks/scores": {
+      "get": {
+        "operationId": "FrameworksController_getScores_v1",
+        "parameters": [],
         "responses": {
           "200": {
-            "description": "Role deleted successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "properties": {
-                    "success": {
-                      "type": "boolean"
-                    },
-                    "message": {
-                      "type": "string"
-                    }
-                  }
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Cannot delete - members assigned to role"
-          },
-          "401": {
-            "description": "Unauthorized"
-          },
-          "404": {
-            "description": "Role not found"
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Delete a custom role",
+        "summary": "Get overview compliance scores",
         "tags": [
-          "Roles"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a custom role | Comp AI API",
-            "sidebarTitle": "Delete a custom role",
-            "description": "Delete a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control.",
-            "og:title": "Delete a custom role | Comp AI API",
-            "og:description": "Delete a custom role in Comp AI. Create custom roles and resolve permission sets for organization-level access control."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/training/completions": {
+    "/v1/frameworks/update-statuses": {
       "get": {
-        "description": "List security awareness and HIPAA training completion records for workforce compliance tracking and audit evidence.",
-        "operationId": "TrainingController_getCompletions_v1",
+        "operationId": "FrameworksController_getAllUpdateStatuses_v1",
         "parameters": [],
         "responses": {
           "200": {
-            "description": "List of training video completion records"
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "List training completions",
+        "summary": "Get update statuses for all framework instances",
         "tags": [
-          "Training"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List training completions | Comp AI API",
-            "sidebarTitle": "List training completions",
-            "description": "List security awareness and HIPAA training completion records for workforce compliance tracking and audit evidence.",
-            "og:title": "List training completions | Comp AI API",
-            "og:description": "List security awareness and HIPAA training completion records for workforce compliance tracking and audit evidence."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/training/completions/{videoId}/complete": {
-      "post": {
-        "description": "Marks a specific training video as completed for the authenticated member. Triggers completion email if all training is now done.",
-        "operationId": "TrainingController_markVideoComplete_v1",
+    "/v1/frameworks/{id}": {
+      "get": {
+        "operationId": "FrameworksController_findOne_v1",
         "parameters": [
           {
-            "name": "videoId",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -18486,287 +20079,208 @@
         ],
         "responses": {
           "200": {
-            "description": "The updated completion record"
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Mark a training video as complete",
+        "summary": "Get a single framework instance with full detail",
         "tags": [
-          "Training"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Mark a training video as complete | Comp AI API",
-            "sidebarTitle": "Mark a training video as complete",
-            "description": "Marks a specific training video as completed for the authenticated member. Triggers completion email if all training is now done.",
-            "og:title": "Mark a training video as complete | Comp AI API",
-            "og:description": "Marks a specific training video as completed for the authenticated member. Triggers completion email if all training is now done."
-          }
-        }
-      }
-    },
-    "/v1/training/send-completion-email": {
-      "post": {
-        "description": "Send training completion email with certificate in Comp AI. Record security awareness and HIPAA training completion status and generate completion certificates.",
-        "operationId": "TrainingController_sendTrainingCompletionEmail_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SendTrainingCompletionDto"
-              }
+          "Frameworks"
+        ]
+      },
+      "delete": {
+        "operationId": "FrameworksController_delete_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "Email sent or reason why it was not sent",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/SendTrainingCompletionResponseDto"
-                }
-              }
-            }
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Send training completion email with certificate",
+        "summary": "Delete a framework instance",
         "tags": [
-          "Training"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Send training completion email with | Comp AI API",
-            "sidebarTitle": "Send training completion email with certificate",
-            "description": "Send training completion email with certificate in Comp AI. Record security awareness and HIPAA training completion status and generate completion.",
-            "og:title": "Send training completion email with | Comp AI API",
-            "og:description": "Send training completion email with certificate in Comp AI. Record security awareness and HIPAA training completion status and generate completion."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/training/generate-certificate": {
-      "post": {
-        "description": "Generate a training completion certificate that can be shared with auditors or attached as workforce security evidence.",
-        "operationId": "TrainingController_generateCertificate_v1",
-        "parameters": [],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SendTrainingCompletionDto"
-              }
+    "/v1/frameworks/{id}/requirements/{requirementKey}": {
+      "get": {
+        "operationId": "FrameworksController_findRequirement_v1",
+        "parameters": [
+          {
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "requirementKey",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
             }
           }
-        },
+        ],
         "responses": {
           "200": {
-            "description": "PDF certificate file"
-          },
-          "400": {
-            "description": "Training not complete or member not found"
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Generate training certificate",
+        "summary": "Get a specific requirement with related controls",
         "tags": [
-          "Training"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Generate training certificate | Comp AI API",
-            "sidebarTitle": "Generate training certificate",
-            "description": "Generate a training completion certificate that can be shared with auditors or attached as workforce security evidence.",
-            "og:title": "Generate training certificate | Comp AI API",
-            "og:description": "Generate a training completion certificate that can be shared with auditors or attached as workforce security evidence."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/training/generate-hipaa-certificate": {
+    "/v1/frameworks/custom": {
       "post": {
-        "description": "Generate HIPAA training certificate PDF in Comp AI. Record security awareness and HIPAA training completion status and generate completion certificates.",
-        "operationId": "TrainingController_generateHipaaCertificate_v1",
+        "operationId": "FrameworksController_createCustom_v1",
         "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/SendTrainingCompletionDto"
+                "$ref": "#/components/schemas/CreateCustomFrameworkDto"
               }
             }
           }
         },
         "responses": {
-          "200": {
-            "description": "PDF certificate file"
-          },
-          "400": {
-            "description": "HIPAA training not complete or member not found"
+          "201": {
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Generate HIPAA training certificate PDF",
+        "summary": "Create a custom framework for this organization",
         "tags": [
-          "Training"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Generate HIPAA training certificate PDF | Comp AI API",
-            "sidebarTitle": "Generate HIPAA training certificate PDF",
-            "description": "Generate HIPAA training certificate PDF in Comp AI. Record security awareness and HIPAA training completion status and generate completion certificates.",
-            "og:title": "Generate HIPAA training certificate PDF | Comp AI API",
-            "og:description": "Generate HIPAA training certificate PDF in Comp AI. Record security awareness and HIPAA training completion status and generate completion certificates."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/org-chart": {
-      "get": {
-        "operationId": "OrgChartController_getOrgChart_v1",
+    "/v1/frameworks/{id}/requirements": {
+      "post": {
+        "operationId": "FrameworksController_createRequirement_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
-        "responses": {
-          "200": {
-            "description": "The organization chart"
-          }
-        },
-        "security": [
-          {
-            "apikey": []
-          }
-        ],
-        "summary": "Get the organization chart",
-        "tags": [
-          "Org Chart"
-        ],
-        "description": "Get the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get the organization chart | Comp AI API",
-            "sidebarTitle": "Get the organization chart",
-            "description": "Get the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-            "og:title": "Get the organization chart | Comp AI API",
-            "og:description": "Get the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness."
-          }
-        }
-      },
-      "put": {
-        "operationId": "OrgChartController_upsertOrgChart_v1",
-        "parameters": [
-          {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateCustomRequirementDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
-          "200": {
-            "description": "The saved organization chart"
+          "201": {
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Create or update an interactive organization chart",
+        "summary": "Add a custom requirement to a framework instance",
         "tags": [
-          "Org Chart"
-        ],
-        "description": "Create or update an interactive organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create or update an interactive organization | Comp AI API",
-            "sidebarTitle": "Create or update an interactive organization chart",
-            "description": "Create or update an interactive organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability.",
-            "og:title": "Create or update an interactive organization | Comp AI API",
-            "og:description": "Create or update an interactive organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability."
-          }
-        }
-      },
-      "delete": {
-        "operationId": "OrgChartController_deleteOrgChart_v1",
+          "Frameworks"
+        ]
+      }
+    },
+    "/v1/frameworks/{id}/requirements/link": {
+      "post": {
+        "operationId": "FrameworksController_linkRequirements_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkRequirementsDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "200": {
-            "description": "Deletion confirmation"
+          "201": {
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Delete the organization chart",
+        "summary": "Link (clone) existing requirements from another framework into this one",
         "tags": [
-          "Org Chart"
-        ],
-        "description": "Delete the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete the organization chart | Comp AI API",
-            "sidebarTitle": "Delete the organization chart",
-            "description": "Delete the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-            "og:title": "Delete the organization chart | Comp AI API",
-            "og:description": "Delete the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/org-chart/upload": {
+    "/v1/frameworks/{id}/requirements/{requirementKey}/controls/link": {
       "post": {
-        "operationId": "OrgChartController_uploadOrgChart_v1",
+        "operationId": "FrameworksController_linkControls_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "requirementKey",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -18777,47 +20291,35 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/UploadOrgChartDto"
+                "$ref": "#/components/schemas/LinkControlsDto"
               }
             }
           }
         },
         "responses": {
           "201": {
-            "description": "The uploaded organization chart"
+            "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Upload an image as the organization chart",
+        "summary": "Link existing org controls to a requirement",
         "tags": [
-          "Org Chart"
-        ],
-        "description": "Upload an image as the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit readiness.",
-        "x-mint": {
-          "metadata": {
-            "title": "Upload an image as the organization chart | Comp AI API",
-            "sidebarTitle": "Upload an image as the organization chart",
-            "description": "Upload an image as the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit.",
-            "og:title": "Upload an image as the organization chart | Comp AI API",
-            "og:description": "Upload an image as the organization chart in Comp AI. Manage organization chart metadata and evidence used for governance, accountability, and audit."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms": {
+    "/v1/frameworks/{id}/update-status": {
       "get": {
-        "description": "List structured evidence forms that collect recurring submissions for security, HR, IT, finance, and compliance workflows.",
-        "operationId": "EvidenceFormsController_listForms_v1",
+        "operationId": "FrameworksController_getUpdateStatus_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -18830,34 +20332,23 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "List evidence forms",
+        "summary": "Get the update status for a framework instance",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List evidence forms | Comp AI API",
-            "sidebarTitle": "List evidence forms",
-            "description": "List structured evidence forms that collect recurring submissions for security, HR, IT, finance, and compliance workflows.",
-            "og:title": "List evidence forms | Comp AI API",
-            "og:description": "List structured evidence forms that collect recurring submissions for security, HR, IT, finance, and compliance workflows."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms/statuses": {
+    "/v1/frameworks/{id}/update-preview": {
       "get": {
-        "description": "Get submission statuses for all forms in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getFormStatuses_v1",
+        "operationId": "FrameworksController_getUpdatePreview_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -18870,130 +20361,101 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Get submission statuses for all forms",
+        "summary": "Preview changes from updating a framework instance",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get submission statuses for all forms | Comp AI API",
-            "sidebarTitle": "Get submission statuses for all forms",
-            "description": "Get submission statuses for all forms in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document.",
-            "og:title": "Get submission statuses for all forms | Comp AI API",
-            "og:description": "Get submission statuses for all forms in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms/settings": {
-      "get": {
-        "description": "Get document relevance settings in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getFormSettings_v1",
+    "/v1/frameworks/{id}/sync": {
+      "post": {
+        "operationId": "FrameworksController_syncFramework_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SyncFrameworkDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "200": {
+          "201": {
             "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Get document relevance settings",
+        "summary": "Sync a framework instance to a target version",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get document relevance settings | Comp AI API",
-            "sidebarTitle": "Get document relevance settings",
-            "description": "Get document relevance settings in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document.",
-            "og:title": "Get document relevance settings | Comp AI API",
-            "og:description": "Get document relevance settings in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/settings": {
-      "patch": {
-        "description": "Update document relevance setting in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_updateFormSetting_v1",
+    "/v1/frameworks/{id}/rollback": {
+      "post": {
+        "operationId": "FrameworksController_rollbackFramework_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
               "type": "string"
             }
           }
-        ],
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RollbackFrameworkDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "200": {
+          "201": {
             "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Update document relevance setting",
+        "summary": "Roll back a framework sync operation",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Update document relevance setting | Comp AI API",
-            "sidebarTitle": "Update document relevance setting",
-            "description": "Update document relevance setting in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document.",
-            "og:title": "Update document relevance setting | Comp AI API",
-            "og:description": "Update document relevance setting in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms/my-submissions": {
+    "/v1/frameworks/{id}/sync-history": {
       "get": {
-        "description": "Get current user submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getMySubmissions_v1",
+        "operationId": "FrameworksController_getSyncHistory_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
+            "name": "id",
             "required": true,
-            "in": "query",
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -19006,34 +20468,51 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Get current user submissions",
+        "summary": "Get sync history for a framework instance",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get current user submissions | Comp AI API",
-            "sidebarTitle": "Get current user submissions",
-            "description": "Get current user submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-            "og:title": "Get current user submissions | Comp AI API",
-            "og:description": "Get current user submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements."
-          }
-        }
+          "Frameworks"
+        ]
       }
     },
-    "/v1/evidence-forms/my-submissions/pending-count": {
+    "/v1/audit-logs": {
       "get": {
-        "description": "Get pending submission count for current user in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getPendingSubmissionCount_v1",
+        "operationId": "AuditLogController_getAuditLogs_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "name": "entityType",
+            "required": false,
+            "in": "query",
+            "description": "Filter by entity type (e.g. policy, task, control)",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "entityId",
+            "required": false,
+            "in": "query",
+            "description": "Filter by entity ID",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "pathContains",
+            "required": false,
+            "in": "query",
+            "description": "Filter by path substring (e.g. automation ID)",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "take",
             "required": false,
+            "in": "query",
+            "description": "Number of logs to return (max 100, default 50)",
             "schema": {
               "type": "string"
             }
@@ -19049,63 +20528,55 @@
             "apikey": []
           }
         ],
-        "summary": "Get pending submission count for current user",
+        "summary": "Get audit logs filtered by entity type and ID",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get pending submission count for current user | Comp AI API",
-            "sidebarTitle": "Get pending submission count for current user",
-            "description": "Get pending submission count for current user in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks.",
-            "og:title": "Get pending submission count for current user | Comp AI API",
-            "og:description": "Get pending submission count for current user in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks."
-          }
-        }
+          "Audit Logs"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}": {
+    "/v1/controls": {
       "get": {
-        "description": "Get form definition and submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getFormWithSubmissions_v1",
+        "operationId": "ControlsController_findAll_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "name": "page",
             "required": false,
+            "in": "query",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "formType",
-            "required": true,
-            "in": "path",
+            "name": "perPage",
+            "required": false,
+            "in": "query",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "search",
-            "required": true,
+            "name": "name",
+            "required": false,
             "in": "query",
+            "description": "Filter by name (case-insensitive contains)",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "limit",
-            "required": true,
+            "name": "sortBy",
+            "required": false,
             "in": "query",
+            "description": "Field to sort by (default: name)",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "offset",
-            "required": true,
+            "name": "sortDesc",
+            "required": false,
             "in": "query",
+            "description": "Sort descending (true/false)",
             "schema": {
               "type": "string"
             }
@@ -19118,48 +20589,69 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Get form definition and submissions",
+        "summary": "List controls with relations",
         "tags": [
-          "Evidence Forms"
+          "Controls"
+        ]
+      },
+      "post": {
+        "operationId": "ControlsController_create_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateControlDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "bearer": []
+          }
         ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get form definition and submissions | Comp AI API",
-            "sidebarTitle": "Get form definition and submissions",
-            "description": "Get form definition and submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document.",
-            "og:title": "Get form definition and submissions | Comp AI API",
-            "og:description": "Get form definition and submissions in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document."
+        "summary": "Create a new control",
+        "tags": [
+          "Controls"
+        ]
+      }
+    },
+    "/v1/controls/options": {
+      "get": {
+        "operationId": "ControlsController_getOptions_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
+        },
+        "security": [
+          {
+            "bearer": []
+          }
+        ],
+        "summary": "Get dropdown options for creating controls",
+        "tags": [
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/submissions/{submissionId}": {
+    "/v1/controls/{id}": {
       "get": {
-        "description": "Get a single submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_getSubmission_v1",
+        "operationId": "ControlsController_findOne_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "submissionId",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -19174,46 +20666,19 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Get a single submission",
+        "summary": "Get control detail with progress",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get a single submission | Comp AI API",
-            "sidebarTitle": "Get a single submission",
-            "description": "Get a single submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-            "og:title": "Get a single submission | Comp AI API",
-            "og:description": "Get a single submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements."
-          }
-        }
+          "Controls"
+        ]
       },
       "delete": {
-        "description": "Delete a submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_deleteSubmission_v1",
+        "operationId": "ControlsController_delete_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "submissionId",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -19228,47 +20693,38 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Delete a submission",
+        "summary": "Delete a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a submission | Comp AI API",
-            "sidebarTitle": "Delete a submission",
-            "description": "Delete a submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-            "og:title": "Delete a submission | Comp AI API",
-            "og:description": "Delete a submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/submissions": {
+    "/v1/controls/{id}/policies/link": {
       "post": {
-        "description": "Submit structured evidence responses and attachments for review against a compliance task or document requirement.",
-        "operationId": "EvidenceFormsController_submitForm_v1",
+        "operationId": "ControlsController_linkPolicies_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
               "type": "string"
             }
           }
-        ],
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkPoliciesDto"
+              }
+            }
+          }
+        },
         "responses": {
           "201": {
             "description": ""
@@ -19276,40 +20732,21 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Submit evidence form",
+        "summary": "Link existing policies to a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Submit evidence form | Comp AI API",
-            "sidebarTitle": "Submit evidence form",
-            "description": "Submit structured evidence responses and attachments for review against a compliance task or document requirement.",
-            "og:title": "Submit evidence form | Comp AI API",
-            "og:description": "Submit structured evidence responses and attachments for review against a compliance task or document requirement."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/upload-submission": {
+    "/v1/controls/{id}/tasks/link": {
       "post": {
-        "description": "Upload a file as an evidence submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_uploadSubmission_v1",
+        "operationId": "ControlsController_linkTasks_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -19317,6 +20754,16 @@
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkTasksDto"
+              }
+            }
+          }
+        },
         "responses": {
           "201": {
             "description": ""
@@ -19324,48 +20771,21 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Upload a file as an evidence submission",
+        "summary": "Link existing tasks to a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload a file as an evidence submission | Comp AI API",
-            "sidebarTitle": "Upload a file as an evidence submission",
-            "description": "Upload a file as an evidence submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document.",
-            "og:title": "Upload a file as an evidence submission | Comp AI API",
-            "og:description": "Upload a file as an evidence submission in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/submissions/{submissionId}/review": {
-      "patch": {
-        "description": "Approve or reject a submitted evidence form so task status and audit readiness reflect the latest review decision.",
-        "operationId": "EvidenceFormsController_reviewSubmission_v1",
+    "/v1/controls/{id}/requirements/link": {
+      "post": {
+        "operationId": "ControlsController_linkRequirements_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "formType",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "submissionId",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -19373,46 +20793,55 @@
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkRequirementsToControlDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "200": {
+          "201": {
             "description": ""
           }
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Review evidence submission",
+        "summary": "Link existing requirements to a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Review evidence submission | Comp AI API",
-            "sidebarTitle": "Review evidence submission",
-            "description": "Approve or reject a submitted evidence form so task status and audit readiness reflect the latest review decision.",
-            "og:title": "Review evidence submission | Comp AI API",
-            "og:description": "Approve or reject a submitted evidence form so task status and audit readiness reflect the latest review decision."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/uploads": {
+    "/v1/controls/{id}/document-types/link": {
       "post": {
-        "description": "Upload evidence form file in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-        "operationId": "EvidenceFormsController_uploadFile_v1",
+        "operationId": "ControlsController_linkDocumentTypes_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LinkDocumentTypesDto"
+              }
+            }
+          }
+        },
         "responses": {
           "201": {
             "description": ""
@@ -19420,34 +20849,23 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Upload evidence form file",
+        "summary": "Link required document types to a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Upload evidence form file | Comp AI API",
-            "sidebarTitle": "Upload evidence form file",
-            "description": "Upload evidence form file in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements.",
-            "og:title": "Upload evidence form file | Comp AI API",
-            "og:description": "Upload evidence form file in Comp AI. Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/evidence-forms/{formType}/export.csv": {
-      "get": {
-        "description": "Export evidence form submissions as CSV for auditor requests, offline review, or internal compliance reporting.",
-        "operationId": "EvidenceFormsController_exportCsv_v1",
+    "/v1/controls/{id}/document-types/{formType}": {
+      "delete": {
+        "operationId": "ControlsController_unlinkDocumentType_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "id",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -19468,42 +20886,33 @@
         },
         "security": [
           {
-            "apikey": []
+            "bearer": []
           }
         ],
-        "summary": "Export evidence submissions",
+        "summary": "Remove a required document type from a control",
         "tags": [
-          "Evidence Forms"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Export evidence submissions | Comp AI API",
-            "sidebarTitle": "Export evidence submissions",
-            "description": "Export evidence form submissions as CSV for auditor requests, offline review, or internal compliance reporting.",
-            "og:title": "Export evidence submissions | Comp AI API",
-            "og:description": "Export evidence form submissions as CSV for auditor requests, offline review, or internal compliance reporting."
-          }
-        }
+          "Controls"
+        ]
       }
     },
-    "/v1/frameworks": {
-      "get": {
-        "operationId": "FrameworksController_findAll_v1",
+    "/v1/email/unsubscribe": {
+      "post": {
+        "operationId": "UnsubscribeController_unsubscribe_v1",
         "parameters": [
           {
-            "name": "includeControls",
-            "required": false,
+            "name": "email",
+            "required": true,
             "in": "query",
             "schema": {
-              "type": "boolean"
+              "type": "string"
             }
           },
           {
-            "name": "includeScores",
-            "required": false,
+            "name": "token",
+            "required": true,
             "in": "query",
             "schema": {
-              "type": "boolean"
+              "type": "string"
             }
           }
         ],
@@ -19512,35 +20921,60 @@
             "description": ""
           }
         },
+        "summary": "One-click unsubscribe (RFC 8058)",
+        "tags": [
+          "Email - Unsubscribe"
+        ]
+      }
+    },
+    "/v1/secrets": {
+      "get": {
+        "operationId": "SecretsController_listSecrets_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "List compliance frameworks",
+        "summary": "List all secrets (metadata only, no values)",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "List active SOC 2, ISO 27001, HIPAA, GDPR, and custom compliance frameworks with implementation status and progress data.",
-        "x-mint": {
-          "metadata": {
-            "title": "List compliance frameworks | Comp AI API",
-            "sidebarTitle": "List compliance frameworks",
-            "description": "List active SOC 2, ISO 27001, HIPAA, GDPR, and custom compliance frameworks with implementation status and progress data.",
-            "og:title": "List compliance frameworks | Comp AI API",
-            "og:description": "List active SOC 2, ISO 27001, HIPAA, GDPR, and custom compliance frameworks with implementation status and progress data."
-          }
-        }
+          "Secrets"
+        ]
       },
       "post": {
-        "operationId": "FrameworksController_addFrameworks_v1",
+        "operationId": "SecretsController_createSecret_v1",
         "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/AddFrameworksDto"
+                "type": "object",
+                "required": [
+                  "name",
+                  "value"
+                ],
+                "properties": {
+                  "name": {
+                    "type": "string"
+                  },
+                  "value": {
+                    "type": "string"
+                  },
+                  "description": {
+                    "type": "string",
+                    "nullable": true
+                  },
+                  "category": {
+                    "type": "string",
+                    "nullable": true
+                  }
+                }
               }
             }
           }
@@ -19552,89 +20986,29 @@
         },
         "security": [
           {
-            "bearer": []
-          }
-        ],
-        "summary": "Add compliance frameworks",
-        "tags": [
-          "Frameworks"
-        ],
-        "description": "Add one or more compliance frameworks to an organization so tasks, controls, evidence, and readiness tracking can be generated.",
-        "x-mint": {
-          "metadata": {
-            "title": "Add compliance frameworks | Comp AI API",
-            "sidebarTitle": "Add compliance frameworks",
-            "description": "Add one or more compliance frameworks to an organization so tasks, controls, evidence, and readiness tracking can be generated.",
-            "og:title": "Add compliance frameworks | Comp AI API",
-            "og:description": "Add one or more compliance frameworks to an organization so tasks, controls, evidence, and readiness tracking can be generated."
-          }
-        }
-      }
-    },
-    "/v1/frameworks/available": {
-      "get": {
-        "operationId": "FrameworksController_findAvailable_v1",
-        "parameters": [],
-        "responses": {
-          "200": {
-            "description": ""
-          }
-        },
-        "security": [
-          {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "List available frameworks",
+        "summary": "Create a new secret",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "List frameworks available for activation before starting a new compliance program or expanding into another standard.",
-        "x-mint": {
-          "metadata": {
-            "title": "List available frameworks | Comp AI API",
-            "sidebarTitle": "List available frameworks",
-            "description": "List frameworks available for activation before starting a new compliance program or expanding into another standard.",
-            "og:title": "List available frameworks | Comp AI API",
-            "og:description": "List frameworks available for activation before starting a new compliance program or expanding into another standard."
-          }
-        }
+          "Secrets"
+        ]
       }
     },
-    "/v1/frameworks/scores": {
+    "/v1/secrets/{id}": {
       "get": {
-        "operationId": "FrameworksController_getScores_v1",
-        "parameters": [],
-        "responses": {
-          "200": {
-            "description": ""
-          }
-        },
-        "security": [
+        "operationId": "SecretsController_getSecret_v1",
+        "parameters": [
           {
-            "bearer": []
+            "name": "id",
+            "required": true,
+            "in": "path",
+            "description": "Secret ID",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
-        "summary": "Get framework readiness scores",
-        "tags": [
-          "Frameworks"
-        ],
-        "description": "Retrieve framework readiness scores so teams can report progress toward audit readiness across active compliance standards.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get framework readiness scores | Comp AI API",
-            "sidebarTitle": "Get framework readiness scores",
-            "description": "Retrieve framework readiness scores so teams can report progress toward audit readiness across active compliance standards.",
-            "og:title": "Get framework readiness scores | Comp AI API",
-            "og:description": "Retrieve framework readiness scores so teams can report progress toward audit readiness across active compliance standards."
-          }
-        }
-      }
-    },
-    "/v1/frameworks/update-statuses": {
-      "get": {
-        "operationId": "FrameworksController_getAllUpdateStatuses_v1",
-        "parameters": [],
         "responses": {
           "200": {
             "description": ""
@@ -19642,33 +21016,22 @@
         },
         "security": [
           {
-            "bearer": []
-          }
-        ],
-        "summary": "Get update statuses for all framework instances",
-        "tags": [
-          "Frameworks"
-        ],
-        "description": "Get update statuses for all framework instances in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get update statuses for all framework | Comp AI API",
-            "sidebarTitle": "Get update statuses for all framework instances",
-            "description": "Get update statuses for all framework instances in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Get update statuses for all framework | Comp AI API",
-            "og:description": "Get update statuses for all framework instances in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
+            "apikey": []
           }
-        }
-      }
-    },
-    "/v1/frameworks/{id}": {
-      "get": {
-        "operationId": "FrameworksController_findOne_v1",
+        ],
+        "summary": "Get a secret with decrypted value",
+        "tags": [
+          "Secrets"
+        ]
+      },
+      "put": {
+        "operationId": "SecretsController_updateSecret_v1",
         "parameters": [
           {
             "name": "id",
             "required": true,
             "in": "path",
+            "description": "Secret ID",
             "schema": {
               "type": "string"
             }
@@ -19681,31 +21044,22 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get a single framework instance with full detail",
+        "summary": "Update a secret",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Get a single framework instance with full detail in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a single framework instance with full | Comp AI API",
-            "sidebarTitle": "Get a single framework instance with full detail",
-            "description": "Get a single framework instance with full detail in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Get a single framework instance with full | Comp AI API",
-            "og:description": "Get a single framework instance with full detail in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
+          "Secrets"
+        ]
       },
       "delete": {
-        "operationId": "FrameworksController_delete_v1",
+        "operationId": "SecretsController_deleteSecret_v1",
         "parameters": [
           {
             "name": "id",
             "required": true,
             "in": "path",
+            "description": "Secret ID",
             "schema": {
               "type": "string"
             }
@@ -19718,41 +21072,25 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Delete a framework instance",
+        "summary": "Delete a secret",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Delete a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a framework instance | Comp AI API",
-            "sidebarTitle": "Delete a framework instance",
-            "description": "Delete a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-            "og:title": "Delete a framework instance | Comp AI API",
-            "og:description": "Delete a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history."
-          }
-        }
+          "Secrets"
+        ]
       }
     },
-    "/v1/frameworks/{id}/requirements/{requirementKey}": {
+    "/v1/security-penetration-tests": {
       "get": {
-        "operationId": "FrameworksController_findRequirement_v1",
+        "description": "Returns all penetration tests created for the organization.",
+        "operationId": "SecurityPenetrationTestsController_list_v1",
         "parameters": [
           {
-            "name": "id",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "requirementKey",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
@@ -19760,74 +21098,76 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Penetration tests returned"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get a specific requirement with related controls",
+        "summary": "List penetration test runs",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Get a specific requirement with related controls in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get a specific requirement with related | Comp AI API",
-            "sidebarTitle": "Get a specific requirement with related controls",
-            "description": "Get a specific requirement with related controls in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Get a specific requirement with related | Comp AI API",
-            "og:description": "Get a specific requirement with related controls in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
-      }
-    },
-    "/v1/frameworks/custom": {
+          "Security Penetration Tests"
+        ]
+      },
       "post": {
-        "operationId": "FrameworksController_createCustom_v1",
-        "parameters": [],
+        "description": "Creates a new penetration test run and returns the run metadata.",
+        "operationId": "SecurityPenetrationTestsController_create_v1",
+        "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/CreateCustomFrameworkDto"
+                "$ref": "#/components/schemas/CreatePenetrationTestDto"
               }
             }
           }
         },
         "responses": {
           "201": {
-            "description": ""
+            "description": "Penetration test created"
+          },
+          "400": {
+            "description": "Invalid request payload"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Create a custom framework for this organization",
+        "summary": "Create penetration test",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Create a custom framework for this organization in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create a custom framework for this | Comp AI API",
-            "sidebarTitle": "Create a custom framework for this organization",
-            "description": "Create a custom framework for this organization in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Create a custom framework for this | Comp AI API",
-            "og:description": "Create a custom framework for this organization in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/requirements": {
-      "post": {
-        "operationId": "FrameworksController_createRequirement_v1",
+    "/v1/security-penetration-tests/{id}": {
+      "get": {
+        "description": "Returns a penetration test run with progress metadata.",
+        "operationId": "SecurityPenetrationTestsController_getById_v1",
         "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "name": "id",
             "required": true,
@@ -19837,46 +21177,39 @@
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/CreateCustomRequirementDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Penetration test returned"
+          },
+          "404": {
+            "description": "Penetration test not found"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Add a custom requirement to a framework instance",
+        "summary": "Get penetration test status",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Add a custom requirement to a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Add a custom requirement to a framework | Comp AI API",
-            "sidebarTitle": "Add a custom requirement to a framework instance",
-            "description": "Add a custom requirement to a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Add a custom requirement to a framework | Comp AI API",
-            "og:description": "Add a custom requirement to a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/requirements/link": {
-      "post": {
-        "operationId": "FrameworksController_linkRequirements_v1",
+    "/v1/security-penetration-tests/{id}/progress": {
+      "get": {
+        "description": "Returns detailed progress for an in-flight report run.",
+        "operationId": "SecurityPenetrationTestsController_getProgress_v1",
         "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "name": "id",
             "required": true,
@@ -19886,46 +21219,36 @@
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/LinkRequirementsDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Progress returned"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link (clone) existing requirements from another framework into this one",
+        "summary": "Get penetration test progress",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Link (clone) existing requirements from another framework into this one in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link (clone) existing requirements from | Comp AI API",
-            "sidebarTitle": "Link (clone) existing requirements from another framework into this one",
-            "description": "Link (clone) existing requirements from another framework into this one in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances.",
-            "og:title": "Link (clone) existing requirements from | Comp AI API",
-            "og:description": "Link (clone) existing requirements from another framework into this one in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/requirements/{requirementKey}/controls/link": {
-      "post": {
-        "operationId": "FrameworksController_linkControls_v1",
+    "/v1/security-penetration-tests/{id}/issues": {
+      "get": {
+        "description": "Returns the structured findings discovered during the run. Grows over time during a live scan as agents discover more issues.",
+        "operationId": "SecurityPenetrationTestsController_getIssues_v1",
         "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "name": "id",
             "required": true,
@@ -19933,9 +21256,40 @@
             "schema": {
               "type": "string"
             }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Issues returned"
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get penetration test issues",
+        "tags": [
+          "Security Penetration Tests"
+        ]
+      }
+    },
+    "/v1/security-penetration-tests/{id}/events": {
+      "get": {
+        "description": "Returns the real-time agent activity log emitted during a run (tool calls, observations, etc.). Noisy — meant for activity feeds and debugging.",
+        "operationId": "SecurityPenetrationTestsController_getEvents_v1",
+        "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
           },
           {
-            "name": "requirementKey",
+            "name": "id",
             "required": true,
             "in": "path",
             "schema": {
@@ -19943,46 +21297,36 @@
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/LinkControlsDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Events returned"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link existing org controls to a requirement",
+        "summary": "Get penetration test agent events",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Link existing org controls to a requirement in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link existing org controls to a requirement | Comp AI API",
-            "sidebarTitle": "Link existing org controls to a requirement",
-            "description": "Link existing org controls to a requirement in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync.",
-            "og:title": "Link existing org controls to a requirement | Comp AI API",
-            "og:description": "Link existing org controls to a requirement in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/update-status": {
+    "/v1/security-penetration-tests/{id}/report": {
       "get": {
-        "operationId": "FrameworksController_getUpdateStatus_v1",
+        "description": "Returns the markdown report output for a completed run.",
+        "operationId": "SecurityPenetrationTestsController_getReport_v1",
         "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "name": "id",
             "required": true,
@@ -19994,34 +21338,34 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "Markdown report output"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get the update status for a framework instance",
+        "summary": "Get penetration test output",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Get the update status for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get the update status for a framework instance | Comp AI API",
-            "sidebarTitle": "Get the update status for a framework instance",
-            "description": "Get the update status for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Get the update status for a framework instance | Comp AI API",
-            "og:description": "Get the update status for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/update-preview": {
+    "/v1/security-penetration-tests/{id}/pdf": {
       "get": {
-        "operationId": "FrameworksController_getUpdatePreview_v1",
+        "description": "Returns the PDF version of a completed report. Streams the binary PDF via Maced SDK.",
+        "operationId": "SecurityPenetrationTestsController_getPdf_v1",
         "parameters": [
+          {
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
           {
             "name": "id",
             "required": true,
@@ -20033,141 +21377,131 @@
         ],
         "responses": {
           "200": {
-            "description": ""
+            "description": "PDF report artifact"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Preview changes from updating a framework instance",
+        "summary": "Get penetration test PDF",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Preview changes from updating a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Preview changes from updating a framework | Comp AI API",
-            "sidebarTitle": "Preview changes from updating a framework instance",
-            "description": "Preview changes from updating a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores.",
-            "og:title": "Preview changes from updating a framework | Comp AI API",
-            "og:description": "Preview changes from updating a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/sync": {
+    "/v1/security-penetration-tests/webhook": {
       "post": {
-        "operationId": "FrameworksController_syncFramework_v1",
+        "description": "Receives signed JSON events from Maced. Signature is verified against MACED_WEBHOOK_SIGNING_SECRET using the SDK's verifyMacedWebhook helper.",
+        "operationId": "SecurityPenetrationTestsController_handleWebhook_v1",
         "parameters": [
           {
-            "name": "id",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "X-Maced-Signature",
+            "in": "header",
+            "description": "HMAC signature header set by Maced (format: t=...,v1=...)",
             "required": true,
-            "in": "path",
             "schema": {
               "type": "string"
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/SyncFrameworkDto"
-              }
-            }
-          }
-        },
         "responses": {
-          "201": {
-            "description": ""
+          "200": {
+            "description": "Webhook handled"
+          },
+          "400": {
+            "description": "Invalid webhook payload"
+          },
+          "403": {
+            "description": "Invalid webhook signature"
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Sync framework requirements",
+        "summary": "Receive penetration test webhook events",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Sync framework requirements, controls, and tasks after framework content changes so compliance tracking remains current.",
-        "x-mint": {
-          "metadata": {
-            "title": "Sync framework requirements | Comp AI API",
-            "sidebarTitle": "Sync framework requirements",
-            "description": "Sync framework requirements, controls, and tasks after framework content changes so compliance tracking remains current.",
-            "og:title": "Sync framework requirements | Comp AI API",
-            "og:description": "Sync framework requirements, controls, and tasks after framework content changes so compliance tracking remains current."
-          }
-        }
+          "Security Penetration Tests"
+        ]
       }
     },
-    "/v1/frameworks/{id}/rollback": {
-      "post": {
-        "operationId": "FrameworksController_rollbackFramework_v1",
+    "/v1/pentest-credits/status": {
+      "get": {
+        "description": "Current spendable balance plus lifetime granted/consumed totals.",
+        "operationId": "PentestCreditsController_getStatus_v1",
         "parameters": [
           {
-            "name": "id",
-            "required": true,
-            "in": "path",
+            "name": "X-Organization-Id",
+            "in": "header",
+            "description": "Organization ID (required for session auth, optional for API key auth)",
+            "required": false,
             "schema": {
               "type": "string"
             }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/RollbackFrameworkDto"
-              }
-            }
+        "responses": {
+          "200": {
+            "description": "Credits status"
           }
         },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get pentest credit status",
+        "tags": [
+          "Pentest Credits"
+        ]
+      }
+    },
+    "/v1/billing/status": {
+      "get": {
+        "operationId": "BillingController_getStatus_v1",
+        "parameters": [],
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Roll back a framework sync operation",
+        "summary": "Get organization billing status",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Roll back a framework sync operation in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Roll back a framework sync operation | Comp AI API",
-            "sidebarTitle": "Roll back a framework sync operation",
-            "description": "Roll back a framework sync operation in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-            "og:title": "Roll back a framework sync operation | Comp AI API",
-            "og:description": "Roll back a framework sync operation in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history."
-          }
-        }
+          "Billing"
+        ]
       }
     },
-    "/v1/frameworks/{id}/sync-history": {
-      "get": {
-        "operationId": "FrameworksController_getSyncHistory_v1",
-        "parameters": [
-          {
-            "name": "id",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
+    "/v1/billing/preferences": {
+      "put": {
+        "operationId": "BillingController_updatePreferences_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BillingPreferencesDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
           "200": {
             "description": ""
@@ -20175,66 +21509,29 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get sync history for a framework instance",
+        "summary": "Update organization billing preferences",
         "tags": [
-          "Frameworks"
-        ],
-        "description": "Get sync history for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get sync history for a framework instance | Comp AI API",
-            "sidebarTitle": "Get sync history for a framework instance",
-            "description": "Get sync history for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync.",
-            "og:title": "Get sync history for a framework instance | Comp AI API",
-            "og:description": "Get sync history for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync."
-          }
-        }
+          "Billing"
+        ]
       }
     },
-    "/v1/audit-logs": {
-      "get": {
-        "operationId": "AuditLogController_getAuditLogs_v1",
-        "parameters": [
-          {
-            "name": "entityType",
-            "required": false,
-            "in": "query",
-            "description": "Filter by entity type (e.g. policy, task, control)",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "entityId",
-            "required": false,
-            "in": "query",
-            "description": "Filter by entity ID",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "pathContains",
-            "required": false,
-            "in": "query",
-            "description": "Filter by path substring (e.g. automation ID)",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "take",
-            "required": false,
-            "in": "query",
-            "description": "Number of logs to return (max 100, default 50)",
-            "schema": {
-              "type": "string"
+    "/v1/billing/setup-session": {
+      "post": {
+        "operationId": "BillingController_setupSession_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BillingSetupSessionDto"
+              }
             }
           }
-        ],
+        },
         "responses": {
           "200": {
             "description": ""
@@ -20245,70 +21542,56 @@
             "apikey": []
           }
         ],
-        "summary": "List audit logs",
+        "summary": "Create a Stripe setup session",
         "tags": [
-          "Audit Logs"
-        ],
-        "description": "List organization audit logs for compliance activity, access changes, evidence updates, and customer-facing review events.",
-        "x-mint": {
-          "metadata": {
-            "title": "List audit logs | Comp AI API",
-            "sidebarTitle": "List audit logs",
-            "description": "List organization audit logs for compliance activity, access changes, evidence updates, and customer-facing review events.",
-            "og:title": "List audit logs | Comp AI API",
-            "og:description": "List organization audit logs for compliance activity, access changes, evidence updates, and customer-facing review events."
-          }
-        }
+          "Billing"
+        ]
       }
     },
-    "/v1/controls": {
-      "get": {
-        "operationId": "ControlsController_findAll_v1",
-        "parameters": [
-          {
-            "name": "page",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "perPage",
-            "required": false,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "name",
-            "required": false,
-            "in": "query",
-            "description": "Filter by name (case-insensitive contains)",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "sortBy",
-            "required": false,
-            "in": "query",
-            "description": "Field to sort by (default: name)",
-            "schema": {
-              "type": "string"
+    "/v1/billing/setup-success": {
+      "post": {
+        "operationId": "BillingController_setupSuccess_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BillingSetupSuccessDto"
+              }
             }
-          },
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
           {
-            "name": "sortDesc",
-            "required": false,
-            "in": "query",
-            "description": "Sort descending (true/false)",
-            "schema": {
-              "type": "string"
-            }
+            "apikey": []
           }
         ],
+        "summary": "Persist a successful Stripe setup session",
+        "tags": [
+          "Billing"
+        ]
+      }
+    },
+    "/v1/billing/portal": {
+      "post": {
+        "operationId": "BillingController_portal_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BillingPortalDto"
+              }
+            }
+          }
+        },
         "responses": {
           "200": {
             "description": ""
@@ -20316,66 +21599,48 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "List compliance controls",
+        "summary": "Create a Stripe billing portal session",
         "tags": [
-          "Controls"
-        ],
-        "description": "List controls with linked policies, tasks, requirements, and document types for SOC 2, ISO 27001, HIPAA, and GDPR programs.",
-        "x-mint": {
-          "metadata": {
-            "title": "List compliance controls | Comp AI API",
-            "sidebarTitle": "List compliance controls",
-            "description": "List controls with linked policies, tasks, requirements, and document types for SOC 2, ISO 27001, HIPAA, and GDPR programs.",
-            "og:title": "List compliance controls | Comp AI API",
-            "og:description": "List controls with linked policies, tasks, requirements, and document types for SOC 2, ISO 27001, HIPAA, and GDPR programs."
-          }
-        }
-      },
+          "Billing"
+        ]
+      }
+    },
+    "/v1/billing/subscription-session": {
       "post": {
-        "operationId": "ControlsController_create_v1",
+        "operationId": "BillingController_subscriptionSession_v1",
         "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/CreateControlDto"
+                "$ref": "#/components/schemas/BillingSubscriptionCheckoutDto"
               }
             }
           }
         },
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Create compliance control",
+        "summary": "Create a Stripe subscription Checkout session",
         "tags": [
-          "Controls"
-        ],
-        "description": "Create a custom compliance control and connect it to framework requirements, policies, tasks, and evidence expectations.",
-        "x-mint": {
-          "metadata": {
-            "title": "Create compliance control | Comp AI API",
-            "sidebarTitle": "Create compliance control",
-            "description": "Create a custom compliance control and connect it to framework requirements, policies, tasks, and evidence expectations.",
-            "og:title": "Create compliance control | Comp AI API",
-            "og:description": "Create a custom compliance control and connect it to framework requirements, policies, tasks, and evidence expectations."
-          }
-        }
+          "Billing"
+        ]
       }
     },
-    "/v1/controls/options": {
-      "get": {
-        "operationId": "ControlsController_getOptions_v1",
+    "/v1/billing/webhook": {
+      "post": {
+        "operationId": "BillingController_webhook_v1",
         "parameters": [],
         "responses": {
           "200": {
@@ -20384,28 +21649,18 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get dropdown options for creating controls",
+        "summary": "Receive Stripe billing webhook events",
         "tags": [
-          "Controls"
-        ],
-        "description": "Get dropdown options for creating controls in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get dropdown options for creating controls | Comp AI API",
-            "sidebarTitle": "Get dropdown options for creating controls",
-            "description": "Get dropdown options for creating controls in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types.",
-            "og:title": "Get dropdown options for creating controls | Comp AI API",
-            "og:description": "Get dropdown options for creating controls in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types."
-          }
-        }
+          "Billing"
+        ]
       }
     },
-    "/v1/controls/{id}": {
+    "/v1/background-checks/{id}": {
       "get": {
-        "operationId": "ControlsController_findOne_v1",
+        "operationId": "BackgroundChecksController_getById_v1",
         "parameters": [
           {
             "name": "id",
@@ -20414,14 +21669,6 @@
             "schema": {
               "type": "string"
             }
-          },
-          {
-            "name": "frameworkInstanceId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
         "responses": {
@@ -20431,26 +21678,38 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Get control detail with progress",
+        "summary": "Get a background check by local or Identity ID",
         "tags": [
-          "Controls"
-        ],
-        "description": "Get control detail with progress in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Get control detail with progress | Comp AI API",
-            "sidebarTitle": "Get control detail with progress",
-            "description": "Get control detail with progress in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track.",
-            "og:title": "Get control detail with progress | Comp AI API",
-            "og:description": "Get control detail with progress in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track."
+          "Background Checks"
+        ]
+      }
+    },
+    "/v1/background-checks/webhook": {
+      "post": {
+        "operationId": "BackgroundChecksController_handleWebhook_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
           }
-        }
-      },
-      "delete": {
-        "operationId": "ControlsController_delete_v1",
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Receive Identity background check webhook events",
+        "tags": [
+          "Background Checks"
+        ]
+      }
+    },
+    "/v1/people/{id}/background-check": {
+      "get": {
+        "operationId": "PeopleBackgroundChecksController_getForMember_v1",
         "parameters": [
           {
             "name": "id",
@@ -20468,28 +21727,16 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Delete a control",
+        "summary": "Get member background check request",
         "tags": [
-          "Controls"
-        ],
-        "description": "Delete a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Delete a control | Comp AI API",
-            "sidebarTitle": "Delete a control",
-            "description": "Delete a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation.",
-            "og:title": "Delete a control | Comp AI API",
-            "og:description": "Delete a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation."
-          }
-        }
-      }
-    },
-    "/v1/controls/{id}/policies/link": {
+          "Background Checks"
+        ]
+      },
       "post": {
-        "operationId": "ControlsController_linkPolicies_v1",
+        "operationId": "PeopleBackgroundChecksController_requestForMember_v1",
         "parameters": [
           {
             "name": "id",
@@ -20498,14 +21745,6 @@
             "schema": {
               "type": "string"
             }
-          },
-          {
-            "name": "frameworkInstanceId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
         "requestBody": {
@@ -20513,40 +21752,30 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/LinkPoliciesDto"
+                "$ref": "#/components/schemas/RequestBackgroundCheckDto"
               }
             }
           }
         },
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link policies to control",
+        "summary": "Request a background check for a member",
         "tags": [
-          "Controls"
-        ],
-        "description": "Link policies to a control so auditors and reviewers can trace control implementation back to approved policy evidence.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link policies to control | Comp AI API",
-            "sidebarTitle": "Link policies to control",
-            "description": "Link policies to a control so auditors and reviewers can trace control implementation back to approved policy evidence.",
-            "og:title": "Link policies to control | Comp AI API",
-            "og:description": "Link policies to a control so auditors and reviewers can trace control implementation back to approved policy evidence."
-          }
-        }
+          "Background Checks"
+        ]
       }
     },
-    "/v1/controls/{id}/tasks/link": {
-      "post": {
-        "operationId": "ControlsController_linkTasks_v1",
+    "/v1/people/{id}/background-check/custom-attachments": {
+      "get": {
+        "operationId": "PeopleBackgroundChecksController_getCustomAttachmentsForMember_v1",
         "parameters": [
           {
             "name": "id",
@@ -20555,11 +21784,32 @@
             "schema": {
               "type": "string"
             }
-          },
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Get custom background check attachments for a member",
+        "tags": [
+          "Background Checks"
+        ]
+      }
+    },
+    "/v1/people/{id}/background-check/custom": {
+      "post": {
+        "operationId": "PeopleBackgroundChecksController_attachCustomForMember_v1",
+        "parameters": [
           {
-            "name": "frameworkInstanceId",
+            "name": "id",
             "required": true,
-            "in": "query",
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -20570,56 +21820,164 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/LinkTasksDto"
+                "$ref": "#/components/schemas/AttachCustomBackgroundCheckDto"
               }
             }
           }
         },
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link tasks to control",
+        "summary": "Attach a custom background check for a member",
         "tags": [
-          "Controls"
+          "Background Checks"
+        ]
+      }
+    },
+    "/v1/background-check-billing/status": {
+      "get": {
+        "operationId": "BackgroundCheckBillingController_getStatus_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
         ],
-        "description": "Link compliance tasks to a control so implementation work, evidence collection, and review status stay connected.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link tasks to control | Comp AI API",
-            "sidebarTitle": "Link tasks to control",
-            "description": "Link compliance tasks to a control so implementation work, evidence collection, and review status stay connected.",
-            "og:title": "Link tasks to control | Comp AI API",
-            "og:description": "Link compliance tasks to a control so implementation work, evidence collection, and review status stay connected."
+        "summary": "Get background check billing status",
+        "tags": [
+          "Background Check Billing"
+        ]
+      }
+    },
+    "/v1/background-check-billing/setup-session": {
+      "post": {
+        "operationId": "BackgroundCheckBillingController_setupSession_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BackgroundCheckSetupSessionDto"
+              }
+            }
           }
-        }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create a Stripe setup session for background checks",
+        "tags": [
+          "Background Check Billing"
+        ]
       }
     },
-    "/v1/controls/{id}/requirements/link": {
+    "/v1/background-check-billing/setup-success": {
       "post": {
-        "operationId": "ControlsController_linkRequirements_v1",
-        "parameters": [
+        "operationId": "BackgroundCheckBillingController_setupSuccess_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BackgroundCheckSetupSuccessDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Handle successful background check billing setup",
+        "tags": [
+          "Background Check Billing"
+        ]
+      }
+    },
+    "/v1/background-check-billing/portal": {
+      "post": {
+        "operationId": "BackgroundCheckBillingController_portal_v1",
+        "parameters": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/BackgroundCheckBillingPortalDto"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
+          {
+            "apikey": []
+          }
+        ],
+        "summary": "Create a Stripe billing portal session",
+        "tags": [
+          "Background Check Billing"
+        ]
+      }
+    },
+    "/v1/offboarding-checklist/template": {
+      "get": {
+        "operationId": "OffboardingChecklistController_getTemplate_v1",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": ""
+          }
+        },
+        "security": [
           {
-            "name": "id",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
+            "apikey": []
           }
         ],
+        "tags": [
+          "Offboarding Checklist"
+        ]
+      },
+      "post": {
+        "operationId": "OffboardingChecklistController_createTemplateItem_v1",
+        "parameters": [],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/LinkRequirementsToControlDto"
+                "$ref": "#/components/schemas/CreateTemplateItemDto"
               }
             }
           }
@@ -20631,28 +21989,17 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link existing requirements to a control",
         "tags": [
-          "Controls"
-        ],
-        "description": "Link existing requirements to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link existing requirements to a control | Comp AI API",
-            "sidebarTitle": "Link existing requirements to a control",
-            "description": "Link existing requirements to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types.",
-            "og:title": "Link existing requirements to a control | Comp AI API",
-            "og:description": "Link existing requirements to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/controls/{id}/document-types/link": {
-      "post": {
-        "operationId": "ControlsController_linkDocumentTypes_v1",
+    "/v1/offboarding-checklist/template/{id}": {
+      "patch": {
+        "operationId": "OffboardingChecklistController_updateTemplateItem_v1",
         "parameters": [
           {
             "name": "id",
@@ -20661,14 +22008,6 @@
             "schema": {
               "type": "string"
             }
-          },
-          {
-            "name": "frameworkInstanceId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
         "requestBody": {
@@ -20676,40 +22015,27 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/LinkDocumentTypesDto"
+                "$ref": "#/components/schemas/UpdateTemplateItemDto"
               }
             }
           }
         },
         "responses": {
-          "201": {
+          "200": {
             "description": ""
           }
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Link required document types to a control",
         "tags": [
-          "Controls"
-        ],
-        "description": "Link required document types to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Link required document types to a control | Comp AI API",
-            "sidebarTitle": "Link required document types to a control",
-            "description": "Link required document types to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types.",
-            "og:title": "Link required document types to a control | Comp AI API",
-            "og:description": "Link required document types to a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types."
-          }
-        }
-      }
-    },
-    "/v1/controls/{id}/document-types/{formType}": {
+          "Offboarding Checklist"
+        ]
+      },
       "delete": {
-        "operationId": "ControlsController_unlinkDocumentType_v1",
+        "operationId": "OffboardingChecklistController_deleteTemplateItem_v1",
         "parameters": [
           {
             "name": "id",
@@ -20718,22 +22044,6 @@
             "schema": {
               "type": "string"
             }
-          },
-          {
-            "name": "formType",
-            "required": true,
-            "in": "path",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "frameworkInstanceId",
-            "required": true,
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
           }
         ],
         "responses": {
@@ -20743,35 +22053,22 @@
         },
         "security": [
           {
-            "bearer": []
+            "apikey": []
           }
         ],
-        "summary": "Remove a required document type from a control",
         "tags": [
-          "Controls"
-        ],
-        "description": "Remove a required document type from a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.",
-        "x-mint": {
-          "metadata": {
-            "title": "Remove a required document type from a control | Comp AI API",
-            "sidebarTitle": "Remove a required document type from a control",
-            "description": "Remove a required document type from a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document.",
-            "og:title": "Remove a required document type from a control | Comp AI API",
-            "og:description": "Remove a required document type from a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/security-penetration-tests": {
+    "/v1/offboarding-checklist/member/{memberId}": {
       "get": {
-        "description": "List penetration test runs in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports.",
-        "operationId": "SecurityPenetrationTestsController_list_v1",
+        "operationId": "OffboardingChecklistController_getMemberChecklist_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -20779,7 +22076,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Penetration tests returned"
+            "description": ""
           }
         },
         "security": [
@@ -20787,29 +22084,27 @@
             "apikey": []
           }
         ],
-        "summary": "List penetration test runs",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "List penetration test runs | Comp AI API",
-            "sidebarTitle": "List penetration test runs",
-            "description": "List penetration test runs in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF.",
-            "og:title": "List penetration test runs | Comp AI API",
-            "og:description": "List penetration test runs in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF."
-          }
-        }
-      },
+          "Offboarding Checklist"
+        ]
+      }
+    },
+    "/v1/offboarding-checklist/member/{memberId}/item/{templateItemId}/complete": {
       "post": {
-        "description": "Create an AI-powered penetration test run for an approved target and track the resulting findings and report artifacts.",
-        "operationId": "SecurityPenetrationTestsController_create_v1",
+        "operationId": "OffboardingChecklistController_completeItem_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "templateItemId",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
@@ -20820,17 +22115,14 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/CreatePenetrationTestDto"
+                "$ref": "#/components/schemas/CompleteChecklistItemDto"
               }
             }
           }
         },
         "responses": {
           "201": {
-            "description": "Penetration test created"
-          },
-          "400": {
-            "description": "Invalid request payload"
+            "description": ""
           }
         },
         "security": [
@@ -20838,37 +22130,23 @@
             "apikey": []
           }
         ],
-        "summary": "Create penetration test",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Create penetration test | Comp AI API",
-            "sidebarTitle": "Create penetration test",
-            "description": "Create an AI-powered penetration test run for an approved target and track the resulting findings and report artifacts.",
-            "og:title": "Create penetration test | Comp AI API",
-            "og:description": "Create an AI-powered penetration test run for an approved target and track the resulting findings and report artifacts."
-          }
-        }
-      }
-    },
-    "/v1/security-penetration-tests/{id}": {
-      "get": {
-        "description": "Get penetration test status in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports.",
-        "operationId": "SecurityPenetrationTestsController_getById_v1",
+          "Offboarding Checklist"
+        ]
+      },
+      "delete": {
+        "operationId": "OffboardingChecklistController_uncompleteItem_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "id",
+            "name": "templateItemId",
             "required": true,
             "in": "path",
             "schema": {
@@ -20878,10 +22156,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Penetration test returned"
-          },
-          "404": {
-            "description": "Penetration test not found"
+            "description": ""
           }
         },
         "security": [
@@ -20889,37 +22164,25 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test status",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test status | Comp AI API",
-            "sidebarTitle": "Get penetration test status",
-            "description": "Get penetration test status in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF.",
-            "og:title": "Get penetration test status | Comp AI API",
-            "og:description": "Get penetration test status in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/security-penetration-tests/{id}/progress": {
-      "get": {
-        "description": "Get penetration test progress in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports.",
-        "operationId": "SecurityPenetrationTestsController_getProgress_v1",
+    "/v1/offboarding-checklist/member/{memberId}/item/{templateItemId}/evidence": {
+      "post": {
+        "operationId": "OffboardingChecklistController_uploadEvidence_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "id",
+            "name": "templateItemId",
             "required": true,
             "in": "path",
             "schema": {
@@ -20927,9 +22190,19 @@
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UploadAttachmentDto"
+              }
+            }
+          }
+        },
         "responses": {
-          "200": {
-            "description": "Progress returned"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -20937,39 +22210,20 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test progress",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test progress | Comp AI API",
-            "sidebarTitle": "Get penetration test progress",
-            "description": "Get penetration test progress in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF.",
-            "og:title": "Get penetration test progress | Comp AI API",
-            "og:description": "Get penetration test progress in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/security-penetration-tests/{id}/issues": {
+    "/v1/offboarding-checklist/member/{memberId}/access-revocations": {
       "get": {
-        "description": "Returns the structured findings discovered during the run. Grows over time during a live scan as agents discover more issues.",
-        "operationId": "SecurityPenetrationTestsController_getIssues_v1",
+        "operationId": "OffboardingChecklistController_getAccessRevocations_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "id",
+            "name": "memberId",
             "required": true,
             "in": "path",
+            "description": "Member ID",
             "schema": {
               "type": "string"
             }
@@ -20977,7 +22231,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Issues returned"
+            "description": ""
           }
         },
         "security": [
@@ -20985,47 +22239,38 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test issues",
+        "summary": "Get vendor access revocation status for a member",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test issues | Comp AI API",
-            "sidebarTitle": "Get penetration test issues",
-            "description": "Returns the structured findings discovered during the run. Grows over time during a live scan as agents discover more issues.",
-            "og:title": "Get penetration test issues | Comp AI API",
-            "og:description": "Returns the structured findings discovered during the run. Grows over time during a live scan as agents discover more issues."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/security-penetration-tests/{id}/events": {
-      "get": {
-        "description": "Returns the real-time agent activity log emitted during a run (tool calls, observations, etc.). Noisy — meant for activity feeds and debugging.",
-        "operationId": "SecurityPenetrationTestsController_getEvents_v1",
+    "/v1/offboarding-checklist/member/{memberId}/access-revocations/{vendorId}": {
+      "post": {
+        "operationId": "OffboardingChecklistController_revokeVendorAccess_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
+            "description": "Member ID",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "id",
+            "name": "vendorId",
             "required": true,
             "in": "path",
+            "description": "Vendor ID",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": "Events returned"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -21033,39 +22278,28 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test agent events",
+        "summary": "Mark vendor access as revoked",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test agent events | Comp AI API",
-            "sidebarTitle": "Get penetration test agent events",
-            "description": "Returns the real-time agent activity log emitted during a run (tool calls, observations, etc.). Noisy — meant for activity feeds and debugging.",
-            "og:title": "Get penetration test agent events | Comp AI API",
-            "og:description": "Returns the real-time agent activity log emitted during a run (tool calls, observations, etc.). Noisy — meant for activity feeds and debugging."
-          }
-        }
-      }
-    },
-    "/v1/security-penetration-tests/{id}/report": {
-      "get": {
-        "description": "Get penetration test output in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports.",
-        "operationId": "SecurityPenetrationTestsController_getReport_v1",
+          "Offboarding Checklist"
+        ]
+      },
+      "delete": {
+        "operationId": "OffboardingChecklistController_undoVendorRevocation_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
+            "name": "memberId",
+            "required": true,
+            "in": "path",
+            "description": "Member ID",
             "schema": {
               "type": "string"
             }
           },
           {
-            "name": "id",
+            "name": "vendorId",
             "required": true,
             "in": "path",
+            "description": "Vendor ID",
             "schema": {
               "type": "string"
             }
@@ -21073,7 +22307,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Markdown report output"
+            "description": ""
           }
         },
         "security": [
@@ -21081,47 +22315,29 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test output",
+        "summary": "Undo vendor access revocation",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test output | Comp AI API",
-            "sidebarTitle": "Get penetration test output",
-            "description": "Get penetration test output in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF.",
-            "og:title": "Get penetration test output | Comp AI API",
-            "og:description": "Get penetration test output in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     },
-    "/v1/security-penetration-tests/{id}/pdf": {
-      "get": {
-        "description": "Get penetration test PDF in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports.",
-        "operationId": "SecurityPenetrationTestsController_getPdf_v1",
+    "/v1/offboarding-checklist/member/{memberId}/access-revocations/confirm-all": {
+      "post": {
+        "operationId": "OffboardingChecklistController_revokeAllVendorAccess_v1",
         "parameters": [
           {
-            "name": "X-Organization-Id",
-            "in": "header",
-            "description": "Organization ID (required for session auth, optional for API key auth)",
-            "required": false,
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "id",
+            "name": "memberId",
             "required": true,
             "in": "path",
+            "description": "Member ID",
             "schema": {
               "type": "string"
             }
           }
         ],
         "responses": {
-          "200": {
-            "description": "PDF report artifact"
+          "201": {
+            "description": ""
           }
         },
         "security": [
@@ -21129,164 +22345,24 @@
             "apikey": []
           }
         ],
-        "summary": "Get penetration test PDF",
+        "summary": "Confirm all vendor access as revoked",
         "tags": [
-          "Security Penetration Tests"
-        ],
-        "x-mint": {
-          "metadata": {
-            "title": "Get penetration test PDF | Comp AI API",
-            "sidebarTitle": "Get penetration test PDF",
-            "description": "Get penetration test PDF in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF.",
-            "og:title": "Get penetration test PDF | Comp AI API",
-            "og:description": "Get penetration test PDF in Comp AI. Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF."
-          }
-        }
+          "Offboarding Checklist"
+        ]
       }
     }
   },
   "info": {
-    "title": "Comp AI API",
-    "description": "Compliance automation API for SOC 2, ISO 27001, HIPAA, GDPR, evidence collection, policy workflows, Trust Access, security questionnaires, integrations, cloud checks, and device compliance.",
+    "title": "API Documentation",
+    "description": "The API documentation for this application",
     "version": "1.0",
     "contact": {}
   },
-  "tags": [
-    {
-      "name": "Attachments",
-      "description": "Generate signed download links for files attached to compliance tasks, comments, evidence records, and workflow reviews."
-    },
-    {
-      "name": "Audit Logs",
-      "description": "Retrieve audit trails for compliance activity, evidence changes, access decisions, and customer-facing security review workflows."
-    },
-    {
-      "name": "CloudSecurity",
-      "description": "Run AWS, Azure, and GCP cloud security scans, detect enabled services, review findings, and connect cloud posture results to compliance work.",
-      "x-group": "Cloud Security"
-    },
-    {
-      "name": "Comments",
-      "description": "Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings."
-    },
-    {
-      "name": "Context",
-      "description": "Manage organization context that helps Comp AI tailor policies, assessments, and compliance automation to the business."
-    },
-    {
-      "name": "Controls",
-      "description": "Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress."
-    },
-    {
-      "name": "Device Agent",
-      "description": "Register employee devices, submit device compliance check-ins, download agent builds, and manage endpoint security status."
-    },
-    {
-      "name": "Devices",
-      "description": "Read and manage employee device inventory and Fleet compliance data used for endpoint security controls."
-    },
-    {
-      "name": "Evidence Export",
-      "description": "Export task evidence, automation evidence, and reviewer-ready evidence bundles as PDF or ZIP files."
-    },
-    {
-      "name": "Evidence Export (Auditor)",
-      "description": "Export all organization evidence for an auditor review package."
-    },
-    {
-      "name": "Evidence Forms",
-      "description": "Collect, review, upload, and export structured evidence submissions for compliance tasks and document requirements."
-    },
-    {
-      "name": "Findings",
-      "description": "Create, review, update, and track audit findings, remediation activity, and finding history for an organization."
-    },
-    {
-      "name": "Frameworks",
-      "description": "Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history."
-    },
-    {
-      "name": "Integrations",
-      "description": "Connect vendor systems, configure OAuth apps, run compliance checks, sync employees, manage variables, and collect automated evidence."
-    },
-    {
-      "name": "Knowledge Base",
-      "description": "Upload source documents, process them for retrieval, and manage reusable manual answers that power questionnaires and AI policy workflows."
-    },
-    {
-      "name": "Org Chart",
-      "description": "Manage organization chart metadata and evidence used for governance, accountability, and audit readiness."
-    },
-    {
-      "name": "Organization",
-      "description": "Manage organization profile data, API keys, logos, ownership, role notifications, and access approval settings."
-    },
-    {
-      "name": "People",
-      "description": "Invite and manage workforce members, training status, device compliance, email preferences, and employee evidence records."
-    },
-    {
-      "name": "Policies",
-      "description": "Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
-    },
-    {
-      "name": "Questionnaire",
-      "description": "Parse security questionnaires, generate answers from approved evidence, save reviewer edits, stream progress, and export completed files."
-    },
-    {
-      "name": "Risks",
-      "description": "Create, update, and report on organizational risks with ownership, departments, and compliance remediation status."
-    },
-    {
-      "name": "Roles",
-      "description": "Create custom roles and resolve permission sets for organization-level access control."
-    },
-    {
-      "name": "SOA",
-      "description": "Create, auto-fill, review, approve, and export ISO 27001 Statement of Applicability documents.",
-      "x-group": "Statement of Applicability"
-    },
-    {
-      "name": "Security Penetration Tests",
-      "description": "Create AI-powered penetration test runs, track progress, inspect findings and events, and download markdown or PDF reports."
-    },
-    {
-      "name": "Task Automations",
-      "description": "Create, version, run, and inspect automated evidence collection workflows attached to compliance tasks."
-    },
-    {
-      "name": "Task Management",
-      "description": "Manage task items and attachments linked to operational entities such as risks and vendors."
-    },
-    {
-      "name": "Tasks",
-      "description": "Manage compliance task lifecycle, assignments, review approvals, evidence uploads, policy links, and activity history."
-    },
-    {
-      "name": "Timelines",
-      "description": "Track audit and compliance readiness timelines, phases, and review milestones for an organization."
-    },
-    {
-      "name": "Training",
-      "description": "Record security awareness and HIPAA training completion status and generate completion certificates."
-    },
-    {
-      "name": "Trust Access",
-      "description": "Manage external Trust Center access requests, NDA signing, grants, tokenized document downloads, public FAQs, and reviewer access."
-    },
-    {
-      "name": "Trust Portal",
-      "description": "Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures."
-    },
-    {
-      "name": "Vendors",
-      "description": "Manage third-party vendors, global vendor search, risk assessment triggers, and Trust Center vendor visibility."
-    }
-  ],
+  "tags": [],
   "servers": [
     {
-      "url": "https://api.trycomp.ai",
-      "description": "Production API Server"
+      "url": "http://localhost:3333",
+      "description": "Local API Server"
     }
   ],
   "components": {
@@ -21667,9 +22743,56 @@
             "type": "boolean",
             "description": "When true, this member is exempt from the org-level background check requirement and will count as complete in people scores.",
             "example": false
+          },
+          "onboardDate": {
+            "type": "object",
+            "description": "Employee onboard date",
+            "example": "2026-01-15T00:00:00.000Z"
+          },
+          "offboardDate": {
+            "type": "object",
+            "description": "Employee offboard date",
+            "example": "2026-04-30T00:00:00.000Z"
           }
         }
       },
+      "UploadAttachmentDto": {
+        "type": "object",
+        "properties": {
+          "fileName": {
+            "type": "string",
+            "description": "Name of the file",
+            "example": "document.pdf",
+            "maxLength": 255
+          },
+          "fileType": {
+            "type": "string",
+            "description": "MIME type of the file",
+            "example": "application/pdf"
+          },
+          "fileData": {
+            "type": "string",
+            "description": "Base64 encoded file data",
+            "example": "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8/5+hHgAHggJ/PchI7wAAAABJRU5ErkJggg=="
+          },
+          "description": {
+            "type": "string",
+            "description": "Description of the attachment",
+            "example": "Meeting notes from Q4 planning session",
+            "maxLength": 500
+          },
+          "userId": {
+            "type": "string",
+            "description": "User ID of the user uploading the attachment (required for API key auth, ignored for JWT auth)",
+            "example": "usr_abc123def456"
+          }
+        },
+        "required": [
+          "fileName",
+          "fileType",
+          "fileData"
+        ]
+      },
       "EmailPreferencesDto": {
         "type": "object",
         "properties": {
@@ -22720,6 +23843,15 @@
             "type": "string",
             "description": "Display name",
             "example": "John's MacBook Pro"
+          },
+          "source": {
+            "type": "string",
+            "description": "Source system that reported this device",
+            "example": "fleet",
+            "enum": [
+              "fleet",
+              "device_agent"
+            ]
           }
         },
         "required": [
@@ -23177,428 +24309,734 @@
           },
           "assigneeId": {
             "type": "string",
-            "description": "ID of the user assigned to this policy",
-            "example": "usr_abc123def456"
+            "description": "ID of the user assigned to this policy",
+            "example": "usr_abc123def456"
+          },
+          "approverId": {
+            "type": "string",
+            "description": "ID of the user who approved this policy",
+            "example": "usr_xyz789abc123"
+          },
+          "policyTemplateId": {
+            "type": "string",
+            "description": "ID of the policy template this policy is based on",
+            "example": "plt_template123"
+          },
+          "signedBy": {
+            "type": "array",
+            "description": "List of user IDs who have signed this policy",
+            "example": [
+              "usr_123",
+              "usr_456"
+            ],
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "name",
+          "content"
+        ]
+      },
+      "UpdatePolicyDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Name of the policy",
+            "example": "Data Privacy Policy"
+          },
+          "description": {
+            "type": "string",
+            "description": "Description of the policy",
+            "example": "This policy outlines how we handle and protect personal data"
+          },
+          "status": {
+            "type": "string",
+            "description": "Status of the policy",
+            "enum": [
+              "draft",
+              "published",
+              "needs_review"
+            ],
+            "example": "draft"
+          },
+          "content": {
+            "type": "array",
+            "description": "Content of the policy as TipTap JSON (array of nodes)",
+            "example": [
+              {
+                "type": "heading",
+                "attrs": {
+                  "level": 2,
+                  "textAlign": null
+                },
+                "content": [
+                  {
+                    "type": "text",
+                    "text": "Purpose"
+                  }
+                ]
+              },
+              {
+                "type": "paragraph",
+                "attrs": {
+                  "textAlign": null
+                },
+                "content": [
+                  {
+                    "type": "text",
+                    "text": "Verify workforce integrity and grant the right access at start, revoke at end."
+                  }
+                ]
+              }
+            ],
+            "items": {
+              "type": "object",
+              "additionalProperties": true
+            }
+          },
+          "frequency": {
+            "type": "string",
+            "description": "Review frequency of the policy",
+            "enum": [
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "yearly"
+          },
+          "department": {
+            "type": "string",
+            "description": "Department this policy applies to",
+            "enum": [
+              "none",
+              "admin",
+              "gov",
+              "hr",
+              "it",
+              "itsm",
+              "qms"
+            ],
+            "example": "it"
+          },
+          "isRequiredToSign": {
+            "type": "boolean",
+            "description": "Whether this policy requires a signature",
+            "example": true
+          },
+          "reviewDate": {
+            "type": "string",
+            "description": "Review date for the policy",
+            "example": "2024-12-31T00:00:00.000Z"
+          },
+          "assigneeId": {
+            "type": "string",
+            "description": "ID of the user assigned to this policy",
+            "example": "usr_abc123def456"
+          },
+          "approverId": {
+            "type": "string",
+            "description": "ID of the user who approved this policy",
+            "example": "usr_xyz789abc123"
+          },
+          "policyTemplateId": {
+            "type": "string",
+            "description": "ID of the policy template this policy is based on",
+            "example": "plt_template123"
+          },
+          "signedBy": {
+            "type": "array",
+            "description": "List of user IDs who have signed this policy",
+            "example": [
+              "usr_123",
+              "usr_456"
+            ],
+            "items": {
+              "type": "string"
+            }
+          },
+          "isArchived": {
+            "type": "boolean",
+            "description": "Whether to archive this policy",
+            "example": false
+          },
+          "displayFormat": {
+            "type": "string",
+            "description": "Display format for this policy",
+            "enum": [
+              "EDITOR",
+              "PDF"
+            ],
+            "example": "EDITOR"
+          }
+        }
+      },
+      "CreateVersionDto": {
+        "type": "object",
+        "properties": {
+          "sourceVersionId": {
+            "type": "string",
+            "description": "Optional version ID to base the new version on",
+            "example": "pv_abc123def456"
+          },
+          "changelog": {
+            "type": "string",
+            "description": "Optional changelog to associate with the new version",
+            "example": "Initial draft for quarterly updates"
+          }
+        }
+      },
+      "UpdateVersionContentDto": {
+        "type": "object",
+        "properties": {
+          "content": {
+            "type": "array",
+            "description": "Content of the policy version as TipTap JSON (array of nodes)",
+            "example": [
+              {
+                "type": "heading",
+                "attrs": {
+                  "level": 2,
+                  "textAlign": null
+                },
+                "content": [
+                  {
+                    "type": "text",
+                    "text": "Purpose"
+                  }
+                ]
+              }
+            ],
+            "items": {
+              "type": "object",
+              "additionalProperties": true
+            }
+          }
+        },
+        "required": [
+          "content"
+        ]
+      },
+      "PublishVersionDto": {
+        "type": "object",
+        "properties": {
+          "setAsActive": {
+            "type": "boolean",
+            "description": "Whether to set this version as the active version",
+            "example": true
+          },
+          "changelog": {
+            "type": "string",
+            "description": "Optional changelog to associate with the published version",
+            "example": "Updated access controls section"
+          }
+        }
+      },
+      "SubmitForApprovalDto": {
+        "type": "object",
+        "properties": {
+          "approverId": {
+            "type": "string",
+            "description": "Member ID of the approver",
+            "example": "mem_abc123def456"
+          }
+        },
+        "required": [
+          "approverId"
+        ]
+      },
+      "AISuggestPolicyRequestDto": {
+        "type": "object",
+        "properties": {
+          "instructions": {
+            "type": "string",
+            "description": "User instructions about what changes to make to the policy",
+            "example": "Update the data retention section to specify a 7-year retention period"
+          },
+          "chatHistory": {
+            "type": "array",
+            "description": "Chat history for context (array of messages with role and content)",
+            "example": [
+              {
+                "role": "user",
+                "content": "Update the data retention policy"
+              },
+              {
+                "role": "assistant",
+                "content": "I can help with that..."
+              }
+            ],
+            "items": {
+              "type": "object",
+              "properties": {
+                "role": {
+                  "type": "string",
+                  "enum": [
+                    "user",
+                    "assistant"
+                  ]
+                },
+                "content": {
+                  "type": "string"
+                }
+              }
+            }
+          }
+        },
+        "required": [
+          "instructions"
+        ]
+      },
+      "ExchangeCodeDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "AuthCodeDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "RegisterDeviceDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "CheckInDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "TaskResponseDto": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Unique identifier for the task",
+            "example": "tsk_abc123def456"
+          },
+          "title": {
+            "type": "string",
+            "description": "Task title",
+            "example": "Implement user authentication"
+          },
+          "description": {
+            "type": "string",
+            "description": "Task description",
+            "example": "Add OAuth 2.0 authentication to the platform"
+          },
+          "status": {
+            "type": "string",
+            "description": "Task status",
+            "example": "in_progress",
+            "enum": [
+              "todo",
+              "in_progress",
+              "done",
+              "blocked"
+            ]
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string",
+            "description": "Task creation timestamp",
+            "example": "2024-01-15T10:30:00Z"
+          },
+          "updatedAt": {
+            "format": "date-time",
+            "type": "string",
+            "description": "Task last update timestamp",
+            "example": "2024-01-15T10:30:00Z"
+          },
+          "taskTemplateId": {
+            "type": "object",
+            "description": "Task template ID",
+            "example": "frk_tt_68406e353df3bc002994acef",
+            "nullable": true
+          },
+          "integrationScheduleFrequency": {
+            "type": "string",
+            "description": "Cadence for running the integration check attached to this task",
+            "enum": [
+              "daily",
+              "weekly",
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "daily"
+          },
+          "integrationLastRunAt": {
+            "type": "object",
+            "description": "Last successful integration check run timestamp",
+            "nullable": true
+          }
+        },
+        "required": [
+          "id",
+          "title",
+          "status",
+          "createdAt",
+          "updatedAt",
+          "integrationScheduleFrequency"
+        ]
+      },
+      "AttachmentResponseDto": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Unique identifier for the attachment",
+            "example": "att_abc123def456"
+          },
+          "name": {
+            "type": "string",
+            "description": "Original filename",
+            "example": "document.pdf"
           },
-          "approverId": {
+          "type": {
             "type": "string",
-            "description": "ID of the user who approved this policy",
-            "example": "usr_xyz789abc123"
+            "description": "File type/MIME type",
+            "example": "application/pdf"
           },
-          "policyTemplateId": {
+          "size": {
+            "type": "number",
+            "description": "File size in bytes",
+            "example": 1024000
+          },
+          "downloadUrl": {
             "type": "string",
-            "description": "ID of the policy template this policy is based on",
-            "example": "plt_template123"
+            "description": "Signed URL for downloading the file (temporary)",
+            "example": "https://bucket.s3.amazonaws.com/path/to/file.pdf?signature=..."
           },
-          "signedBy": {
-            "type": "array",
-            "description": "List of user IDs who have signed this policy",
-            "example": [
-              "usr_123",
-              "usr_456"
-            ],
-            "items": {
-              "type": "string"
-            }
+          "createdAt": {
+            "format": "date-time",
+            "type": "string",
+            "description": "Upload timestamp",
+            "example": "2024-01-15T10:30:00Z"
           }
         },
         "required": [
+          "id",
           "name",
-          "content"
+          "type",
+          "size",
+          "downloadUrl",
+          "createdAt"
         ]
       },
-      "UpdatePolicyDto": {
+      "UpdateAutomationDto": {
         "type": "object",
         "properties": {
           "name": {
             "type": "string",
-            "description": "Name of the policy",
-            "example": "Data Privacy Policy"
+            "description": "Automation name",
+            "example": "GitHub Security Check - Evidence Collection"
           },
           "description": {
             "type": "string",
-            "description": "Description of the policy",
-            "example": "This policy outlines how we handle and protect personal data"
+            "description": "Automation description",
+            "example": "Collects evidence about GitHub repository security settings"
           },
-          "status": {
-            "type": "string",
-            "description": "Status of the policy",
-            "enum": [
-              "draft",
-              "published",
-              "needs_review"
-            ],
-            "example": "draft"
+          "isEnabled": {
+            "type": "boolean",
+            "description": "Whether the automation is enabled"
           },
-          "content": {
-            "type": "array",
-            "description": "Content of the policy as TipTap JSON (array of nodes)",
-            "example": [
-              {
-                "type": "heading",
-                "attrs": {
-                  "level": 2,
-                  "textAlign": null
-                },
-                "content": [
-                  {
-                    "type": "text",
-                    "text": "Purpose"
-                  }
-                ]
-              },
-              {
-                "type": "paragraph",
-                "attrs": {
-                  "textAlign": null
-                },
-                "content": [
-                  {
-                    "type": "text",
-                    "text": "Verify workforce integrity and grant the right access at start, revoke at end."
-                  }
-                ]
-              }
-            ],
-            "items": {
-              "type": "object",
-              "additionalProperties": true
-            }
+          "evaluationCriteria": {
+            "type": "string",
+            "description": "Evaluation criteria for the automation"
           },
-          "frequency": {
+          "scheduleFrequency": {
             "type": "string",
-            "description": "Review frequency of the policy",
             "enum": [
+              "daily",
+              "weekly",
               "monthly",
               "quarterly",
               "yearly"
             ],
-            "example": "yearly"
-          },
-          "department": {
-            "type": "string",
-            "description": "Department this policy applies to",
-            "enum": [
-              "none",
-              "admin",
-              "gov",
-              "hr",
-              "it",
-              "itsm",
-              "qms"
-            ],
-            "example": "it"
-          },
-          "isRequiredToSign": {
-            "type": "boolean",
-            "description": "Whether this policy requires a signature",
-            "example": true
-          },
-          "reviewDate": {
-            "type": "string",
-            "description": "Review date for the policy",
-            "example": "2024-12-31T00:00:00.000Z"
-          },
-          "assigneeId": {
+            "description": "Automation schedule cadence"
+          }
+        }
+      },
+      "AuthorResponseDto": {
+        "type": "object",
+        "properties": {
+          "id": {
             "type": "string",
-            "description": "ID of the user assigned to this policy",
+            "description": "User ID",
             "example": "usr_abc123def456"
           },
-          "approverId": {
+          "name": {
             "type": "string",
-            "description": "ID of the user who approved this policy",
-            "example": "usr_xyz789abc123"
+            "description": "User name",
+            "example": "John Doe"
           },
-          "policyTemplateId": {
+          "email": {
             "type": "string",
-            "description": "ID of the policy template this policy is based on",
-            "example": "plt_template123"
+            "description": "User email",
+            "example": "john.doe@company.com"
           },
-          "signedBy": {
-            "type": "array",
-            "description": "List of user IDs who have signed this policy",
-            "example": [
-              "usr_123",
-              "usr_456"
-            ],
-            "items": {
-              "type": "string"
-            }
+          "image": {
+            "type": "object",
+            "description": "User profile image URL",
+            "example": "https://example.com/avatar.jpg",
+            "nullable": true
           },
-          "isArchived": {
+          "deactivated": {
             "type": "boolean",
-            "description": "Whether to archive this policy",
-            "example": false
-          },
-          "displayFormat": {
-            "type": "string",
-            "description": "Display format for this policy",
-            "enum": [
-              "EDITOR",
-              "PDF"
-            ],
-            "example": "EDITOR"
-          }
-        }
-      },
-      "CreateVersionDto": {
-        "type": "object",
-        "properties": {
-          "sourceVersionId": {
-            "type": "string",
-            "description": "Optional version ID to base the new version on",
-            "example": "pv_abc123def456"
-          },
-          "changelog": {
-            "type": "string",
-            "description": "Optional changelog to associate with the new version",
-            "example": "Initial draft for quarterly updates"
-          }
-        }
-      },
-      "UpdateVersionContentDto": {
-        "type": "object",
-        "properties": {
-          "content": {
-            "type": "array",
-            "description": "Content of the policy version as TipTap JSON (array of nodes)",
-            "example": [
-              {
-                "type": "heading",
-                "attrs": {
-                  "level": 2,
-                  "textAlign": null
-                },
-                "content": [
-                  {
-                    "type": "text",
-                    "text": "Purpose"
-                  }
-                ]
-              }
-            ],
-            "items": {
-              "type": "object",
-              "additionalProperties": true
-            }
+            "description": "Whether the user is deactivated",
+            "example": false,
+            "nullable": true
           }
         },
         "required": [
-          "content"
+          "id",
+          "name",
+          "email",
+          "image",
+          "deactivated"
         ]
       },
-      "PublishVersionDto": {
+      "AttachmentMetadataDto": {
         "type": "object",
         "properties": {
-          "setAsActive": {
-            "type": "boolean",
-            "description": "Whether to set this version as the active version",
-            "example": true
+          "id": {
+            "type": "string",
+            "description": "Unique identifier for the attachment",
+            "example": "att_abc123def456"
           },
-          "changelog": {
+          "name": {
             "type": "string",
-            "description": "Optional changelog to associate with the published version",
-            "example": "Updated access controls section"
-          }
-        }
-      },
-      "SubmitForApprovalDto": {
-        "type": "object",
-        "properties": {
-          "approverId": {
+            "description": "Original filename",
+            "example": "document.pdf"
+          },
+          "type": {
             "type": "string",
-            "description": "Member ID of the approver",
-            "example": "mem_abc123def456"
+            "description": "File type/MIME type",
+            "example": "application/pdf"
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string",
+            "description": "Upload timestamp",
+            "example": "2024-01-15T10:30:00Z"
           }
         },
         "required": [
-          "approverId"
+          "id",
+          "name",
+          "type",
+          "createdAt"
         ]
       },
-      "AISuggestPolicyRequestDto": {
+      "CommentResponseDto": {
         "type": "object",
         "properties": {
-          "instructions": {
+          "id": {
             "type": "string",
-            "description": "User instructions about what changes to make to the policy",
-            "example": "Update the data retention section to specify a 7-year retention period"
+            "description": "Unique identifier for the comment",
+            "example": "cmt_abc123def456"
           },
-          "chatHistory": {
-            "type": "array",
-            "description": "Chat history for context (array of messages with role and content)",
-            "example": [
-              {
-                "role": "user",
-                "content": "Update the data retention policy"
-              },
+          "content": {
+            "type": "string",
+            "description": "Comment content",
+            "example": "This task needs to be completed by end of week"
+          },
+          "author": {
+            "description": "Comment author information",
+            "allOf": [
               {
-                "role": "assistant",
-                "content": "I can help with that..."
+                "$ref": "#/components/schemas/AuthorResponseDto"
               }
-            ],
+            ]
+          },
+          "attachments": {
+            "description": "Attachment metadata (URLs generated on-demand)",
+            "type": "array",
             "items": {
-              "type": "object",
-              "properties": {
-                "role": {
-                  "type": "string",
-                  "enum": [
-                    "user",
-                    "assistant"
-                  ]
-                },
-                "content": {
-                  "type": "string"
-                }
-              }
+              "$ref": "#/components/schemas/AttachmentMetadataDto"
             }
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string",
+            "description": "Comment creation timestamp",
+            "example": "2024-01-15T10:30:00Z"
           }
         },
         "required": [
-          "instructions"
+          "id",
+          "content",
+          "author",
+          "attachments",
+          "createdAt"
         ]
       },
-      "ExchangeCodeDto": {
-        "type": "object",
-        "properties": {}
-      },
-      "AuthCodeDto": {
-        "type": "object",
-        "properties": {}
-      },
-      "RegisterDeviceDto": {
-        "type": "object",
-        "properties": {}
-      },
-      "CheckInDto": {
-        "type": "object",
-        "properties": {}
-      },
-      "TaskResponseDto": {
+      "CreateCommentDto": {
         "type": "object",
         "properties": {
-          "id": {
-            "type": "string",
-            "description": "Unique identifier for the task",
-            "example": "tsk_abc123def456"
-          },
-          "title": {
+          "content": {
             "type": "string",
-            "description": "Task title",
-            "example": "Implement user authentication"
+            "description": "Content of the comment",
+            "example": "This task needs to be completed by end of week",
+            "maxLength": 2000
           },
-          "description": {
+          "entityId": {
             "type": "string",
-            "description": "Task description",
-            "example": "Add OAuth 2.0 authentication to the platform"
+            "description": "ID of the entity to comment on",
+            "example": "tsk_abc123def456"
           },
-          "status": {
+          "entityType": {
             "type": "string",
-            "description": "Task status",
-            "example": "in_progress",
+            "description": "Type of entity being commented on",
             "enum": [
-              "todo",
-              "in_progress",
-              "done",
-              "blocked"
-            ]
-          },
-          "createdAt": {
-            "format": "date-time",
-            "type": "string",
-            "description": "Task creation timestamp",
-            "example": "2024-01-15T10:30:00Z"
+              "task",
+              "vendor",
+              "risk",
+              "policy"
+            ],
+            "example": "task"
           },
-          "updatedAt": {
-            "format": "date-time",
+          "contextUrl": {
             "type": "string",
-            "description": "Task last update timestamp",
-            "example": "2024-01-15T10:30:00Z"
+            "description": "Optional URL of the page where the comment was created, used for deep-linking in notifications",
+            "example": "https://app.trycomp.ai/org_abc123/vendors/vnd_abc123?taskItemId=tki_abc123#task-items",
+            "maxLength": 2048
           },
-          "taskTemplateId": {
-            "type": "object",
-            "description": "Task template ID",
-            "example": "frk_tt_68406e353df3bc002994acef",
-            "nullable": true
+          "attachments": {
+            "description": "Optional attachments to include with the comment",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/UploadAttachmentDto"
+            }
           },
-          "integrationScheduleFrequency": {
+          "userId": {
             "type": "string",
-            "description": "Cadence for running the integration check attached to this task",
-            "enum": [
-              "daily",
-              "weekly",
-              "monthly",
-              "quarterly",
-              "yearly"
-            ],
-            "example": "daily"
-          },
-          "integrationLastRunAt": {
-            "type": "object",
-            "description": "Last successful integration check run timestamp",
-            "nullable": true
+            "description": "User ID of the comment author (required for API key auth, ignored for JWT auth)",
+            "example": "usr_abc123def456"
           }
         },
         "required": [
-          "id",
-          "title",
-          "status",
-          "createdAt",
-          "updatedAt",
-          "integrationScheduleFrequency"
+          "content",
+          "entityId",
+          "entityType"
         ]
       },
-      "AttachmentResponseDto": {
+      "UpdateCommentDto": {
         "type": "object",
         "properties": {
-          "id": {
+          "content": {
             "type": "string",
-            "description": "Unique identifier for the attachment",
-            "example": "att_abc123def456"
+            "description": "Updated content of the comment",
+            "example": "This task needs to be completed by end of week (updated)",
+            "maxLength": 2000
           },
-          "name": {
+          "contextUrl": {
             "type": "string",
-            "description": "Original filename",
-            "example": "document.pdf"
+            "description": "Optional URL of the page where the comment was updated, used for deep-linking in notifications",
+            "example": "https://app.trycomp.ai/org_abc123/risk/rsk_abc123?taskItemId=tki_abc123#task-items",
+            "maxLength": 2048
           },
+          "userId": {
+            "type": "string",
+            "description": "User ID of the comment author (required for API key auth, ignored for JWT auth)",
+            "example": "usr_abc123def456"
+          }
+        },
+        "required": [
+          "content"
+        ]
+      },
+      "DomainVerificationDto": {
+        "type": "object",
+        "properties": {
           "type": {
             "type": "string",
-            "description": "File type/MIME type",
-            "example": "application/pdf"
+            "description": "Verification type (e.g., TXT, CNAME)"
           },
-          "size": {
-            "type": "number",
-            "description": "File size in bytes",
-            "example": 1024000
+          "domain": {
+            "type": "string",
+            "description": "Domain for verification"
           },
-          "downloadUrl": {
+          "value": {
             "type": "string",
-            "description": "Signed URL for downloading the file (temporary)",
-            "example": "https://bucket.s3.amazonaws.com/path/to/file.pdf?signature=..."
+            "description": "Verification value"
           },
-          "createdAt": {
-            "format": "date-time",
+          "reason": {
+            "type": "string",
+            "description": "Reason for verification status"
+          }
+        },
+        "required": [
+          "type",
+          "domain",
+          "value"
+        ]
+      },
+      "DomainStatusResponseDto": {
+        "type": "object",
+        "properties": {
+          "domain": {
+            "type": "string",
+            "description": "The domain name"
+          },
+          "verified": {
+            "type": "boolean",
+            "description": "Whether the domain is verified"
+          },
+          "verification": {
+            "description": "Verification records for the domain",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/DomainVerificationDto"
+            }
+          },
+          "cnameTarget": {
             "type": "string",
-            "description": "Upload timestamp",
-            "example": "2024-01-15T10:30:00Z"
+            "description": "The recommended CNAME target for this domain from Vercel",
+            "example": "3a69a5bb27875189.vercel-dns-016.com"
+          },
+          "misconfigured": {
+            "type": "object",
+            "description": "Whether Vercel's /v6/domains/{d}/config call reports the domain as misconfigured. Null when Vercel could not be reached.",
+            "nullable": true
           }
         },
         "required": [
-          "id",
-          "name",
-          "type",
-          "size",
-          "downloadUrl",
-          "createdAt"
+          "domain",
+          "verified"
         ]
       },
-      "UploadAttachmentDto": {
+      "UploadComplianceResourceDto": {
         "type": "object",
         "properties": {
+          "organizationId": {
+            "type": "string",
+            "description": "Organization ID that owns the compliance resource",
+            "example": "org_6914cd0e16e4c7dccbb54426"
+          },
+          "framework": {
+            "type": "string",
+            "description": "Compliance framework identifier",
+            "enum": [
+              "iso_27001",
+              "iso_42001",
+              "gdpr",
+              "hipaa",
+              "soc2_type1",
+              "soc2_type2",
+              "soc3",
+              "pci_dss",
+              "nen_7510",
+              "iso_9001",
+              "pipeda",
+              "ccpa"
+            ],
+            "example": "iso_27001"
+          },
           "fileName": {
             "type": "string",
-            "description": "Name of the file",
-            "example": "document.pdf",
-            "maxLength": 255
+            "description": "Original file name (PDF only)",
+            "example": "iso-27001-certificate.pdf"
           },
           "fileType": {
             "type": "string",
@@ -23607,640 +25045,751 @@
           },
           "fileData": {
             "type": "string",
-            "description": "Base64 encoded file data",
-            "example": "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8/5+hHgAHggJ/PchI7wAAAABJRU5ErkJggg=="
-          },
-          "description": {
-            "type": "string",
-            "description": "Description of the attachment",
-            "example": "Meeting notes from Q4 planning session",
-            "maxLength": 500
-          },
-          "userId": {
-            "type": "string",
-            "description": "User ID of the user uploading the attachment (required for API key auth, ignored for JWT auth)",
-            "example": "usr_abc123def456"
+            "description": "Base64 encoded PDF content"
           }
         },
         "required": [
+          "organizationId",
+          "framework",
           "fileName",
           "fileType",
           "fileData"
         ]
       },
-      "UpdateAutomationDto": {
+      "ComplianceResourceResponseDto": {
         "type": "object",
         "properties": {
-          "name": {
+          "framework": {
             "type": "string",
-            "description": "Automation name",
-            "example": "GitHub Security Check - Evidence Collection"
+            "enum": [
+              "iso_27001",
+              "iso_42001",
+              "gdpr",
+              "hipaa",
+              "soc2_type1",
+              "soc2_type2",
+              "soc3",
+              "pci_dss",
+              "nen_7510",
+              "iso_9001",
+              "pipeda",
+              "ccpa"
+            ]
           },
-          "description": {
-            "type": "string",
-            "description": "Automation description",
-            "example": "Collects evidence about GitHub repository security settings"
+          "fileName": {
+            "type": "string"
           },
-          "isEnabled": {
-            "type": "boolean",
-            "description": "Whether the automation is enabled"
+          "fileSize": {
+            "type": "number",
+            "description": "File size in bytes"
           },
-          "evaluationCriteria": {
+          "updatedAt": {
             "type": "string",
-            "description": "Evaluation criteria for the automation"
+            "description": "ISO timestamp when the certificate was last updated"
+          }
+        },
+        "required": [
+          "framework",
+          "fileName",
+          "fileSize",
+          "updatedAt"
+        ]
+      },
+      "ComplianceResourceSignedUrlDto": {
+        "type": "object",
+        "properties": {
+          "organizationId": {
+            "type": "string",
+            "description": "Organization ID that owns the compliance resource",
+            "example": "org_6914cd0e16e4c7dccbb54426"
           },
-          "scheduleFrequency": {
+          "framework": {
             "type": "string",
+            "description": "Compliance framework identifier",
             "enum": [
-              "daily",
-              "weekly",
-              "monthly",
-              "quarterly",
-              "yearly"
+              "iso_27001",
+              "iso_42001",
+              "gdpr",
+              "hipaa",
+              "soc2_type1",
+              "soc2_type2",
+              "soc3",
+              "pci_dss",
+              "nen_7510",
+              "iso_9001",
+              "pipeda",
+              "ccpa"
             ],
-            "description": "Automation schedule cadence"
+            "example": "iso_27001"
           }
-        }
+        },
+        "required": [
+          "organizationId",
+          "framework"
+        ]
       },
-      "AuthorResponseDto": {
+      "ComplianceResourceUrlResponseDto": {
         "type": "object",
         "properties": {
-          "id": {
-            "type": "string",
-            "description": "User ID",
-            "example": "usr_abc123def456"
-          },
-          "name": {
-            "type": "string",
-            "description": "User name",
-            "example": "John Doe"
-          },
-          "email": {
-            "type": "string",
-            "description": "User email",
-            "example": "john.doe@company.com"
+          "signedUrl": {
+            "type": "string"
           },
-          "image": {
-            "type": "object",
-            "description": "User profile image URL",
-            "example": "https://example.com/avatar.jpg",
-            "nullable": true
+          "fileName": {
+            "type": "string"
           },
-          "deactivated": {
-            "type": "boolean",
-            "description": "Whether the user is deactivated",
-            "example": false,
-            "nullable": true
+          "fileSize": {
+            "type": "number",
+            "description": "File size in bytes"
           }
         },
         "required": [
-          "id",
-          "name",
-          "email",
-          "image",
-          "deactivated"
+          "signedUrl",
+          "fileName",
+          "fileSize"
         ]
       },
-      "AttachmentMetadataDto": {
+      "ListComplianceResourcesDto": {
         "type": "object",
         "properties": {
-          "id": {
-            "type": "string",
-            "description": "Unique identifier for the attachment",
-            "example": "att_abc123def456"
-          },
-          "name": {
-            "type": "string",
-            "description": "Original filename",
-            "example": "document.pdf"
-          },
-          "type": {
-            "type": "string",
-            "description": "File type/MIME type",
-            "example": "application/pdf"
-          },
-          "createdAt": {
-            "format": "date-time",
+          "organizationId": {
             "type": "string",
-            "description": "Upload timestamp",
-            "example": "2024-01-15T10:30:00Z"
+            "description": "Organization ID that owns the compliance resources",
+            "example": "org_6914cd0e16e4c7dccbb54426"
           }
         },
         "required": [
-          "id",
-          "name",
-          "type",
-          "createdAt"
+          "organizationId"
         ]
       },
-      "CommentResponseDto": {
+      "UploadTrustDocumentDto": {
         "type": "object",
         "properties": {
-          "id": {
+          "organizationId": {
             "type": "string",
-            "description": "Unique identifier for the comment",
-            "example": "cmt_abc123def456"
+            "description": "Organization ID that owns the document",
+            "example": "org_6914cd0e16e4c7dccbb54426"
           },
-          "content": {
+          "fileName": {
             "type": "string",
-            "description": "Comment content",
-            "example": "This task needs to be completed by end of week"
+            "description": "Original file name",
+            "example": "security-overview.pdf"
           },
-          "author": {
-            "description": "Comment author information",
-            "allOf": [
-              {
-                "$ref": "#/components/schemas/AuthorResponseDto"
-              }
-            ]
+          "fileType": {
+            "type": "string",
+            "description": "MIME type (optional)",
+            "example": "application/pdf"
           },
-          "attachments": {
-            "description": "Attachment metadata (URLs generated on-demand)",
-            "type": "array",
-            "items": {
-              "$ref": "#/components/schemas/AttachmentMetadataDto"
-            }
+          "fileData": {
+            "type": "string",
+            "description": "Base64-encoded file contents (no data URL prefix)"
           },
-          "createdAt": {
-            "format": "date-time",
+          "description": {
             "type": "string",
-            "description": "Comment creation timestamp",
-            "example": "2024-01-15T10:30:00Z"
+            "description": "Optional description shown in the trust portal",
+            "example": "Overview of our security program"
           }
         },
         "required": [
-          "id",
-          "content",
-          "author",
-          "attachments",
-          "createdAt"
+          "organizationId",
+          "fileName",
+          "fileData"
         ]
       },
-      "CreateCommentDto": {
+      "TrustDocumentResponseDto": {
         "type": "object",
         "properties": {
-          "content": {
+          "id": {
             "type": "string",
-            "description": "Content of the comment",
-            "example": "This task needs to be completed by end of week",
-            "maxLength": 2000
+            "example": "tdoc_abc123"
           },
-          "entityId": {
+          "name": {
             "type": "string",
-            "description": "ID of the entity to comment on",
-            "example": "tsk_abc123def456"
+            "example": "security-overview.pdf"
           },
-          "entityType": {
-            "type": "string",
-            "description": "Type of entity being commented on",
-            "enum": [
-              "task",
-              "vendor",
-              "risk",
-              "policy"
-            ],
-            "example": "task"
+          "description": {
+            "type": "object",
+            "example": "Overview of our security program"
           },
-          "contextUrl": {
+          "createdAt": {
             "type": "string",
-            "description": "Optional URL of the page where the comment was created, used for deep-linking in notifications",
-            "example": "https://app.trycomp.ai/org_abc123/vendors/vnd_abc123?taskItemId=tki_abc123#task-items",
-            "maxLength": 2048
-          },
-          "attachments": {
-            "description": "Optional attachments to include with the comment",
-            "type": "array",
-            "items": {
-              "$ref": "#/components/schemas/UploadAttachmentDto"
-            }
+            "example": "2026-01-02T10:15:00.000Z"
           },
-          "userId": {
+          "updatedAt": {
             "type": "string",
-            "description": "User ID of the comment author (required for API key auth, ignored for JWT auth)",
-            "example": "usr_abc123def456"
+            "example": "2026-01-02T10:15:00.000Z"
           }
         },
         "required": [
-          "content",
-          "entityId",
-          "entityType"
+          "id",
+          "name",
+          "createdAt",
+          "updatedAt"
         ]
       },
-      "UpdateCommentDto": {
+      "TrustDocumentSignedUrlDto": {
         "type": "object",
         "properties": {
-          "content": {
-            "type": "string",
-            "description": "Updated content of the comment",
-            "example": "This task needs to be completed by end of week (updated)",
-            "maxLength": 2000
-          },
-          "contextUrl": {
-            "type": "string",
-            "description": "Optional URL of the page where the comment was updated, used for deep-linking in notifications",
-            "example": "https://app.trycomp.ai/org_abc123/risk/rsk_abc123?taskItemId=tki_abc123#task-items",
-            "maxLength": 2048
-          },
-          "userId": {
+          "organizationId": {
             "type": "string",
-            "description": "User ID of the comment author (required for API key auth, ignored for JWT auth)",
-            "example": "usr_abc123def456"
+            "description": "Organization ID that owns the document",
+            "example": "org_6914cd0e16e4c7dccbb54426"
           }
         },
         "required": [
-          "content"
+          "organizationId"
         ]
       },
-      "DomainVerificationDto": {
+      "TrustDocumentUrlResponseDto": {
         "type": "object",
         "properties": {
-          "type": {
-            "type": "string",
-            "description": "Verification type (e.g., TXT, CNAME)"
-          },
-          "domain": {
-            "type": "string",
-            "description": "Domain for verification"
-          },
-          "value": {
-            "type": "string",
-            "description": "Verification value"
+          "signedUrl": {
+            "type": "string"
           },
-          "reason": {
-            "type": "string",
-            "description": "Reason for verification status"
+          "fileName": {
+            "type": "string"
           }
         },
         "required": [
-          "type",
-          "domain",
-          "value"
+          "signedUrl",
+          "fileName"
         ]
       },
-      "DomainStatusResponseDto": {
+      "DeleteTrustDocumentDto": {
         "type": "object",
         "properties": {
-          "domain": {
+          "organizationId": {
             "type": "string",
-            "description": "The domain name"
+            "description": "Organization ID that owns the document",
+            "example": "org_6914cd0e16e4c7dccbb54426"
+          }
+        },
+        "required": [
+          "organizationId"
+        ]
+      },
+      "CreateAccessRequestDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
           },
-          "verified": {
-            "type": "boolean",
-            "description": "Whether the domain is verified"
+          "email": {
+            "type": "string"
           },
-          "verification": {
-            "description": "Verification records for the domain",
-            "type": "array",
-            "items": {
-              "$ref": "#/components/schemas/DomainVerificationDto"
-            }
+          "company": {
+            "type": "string"
           },
-          "cnameTarget": {
-            "type": "string",
-            "description": "The recommended CNAME target for this domain from Vercel",
-            "example": "3a69a5bb27875189.vercel-dns-016.com"
+          "jobTitle": {
+            "type": "string"
           },
-          "misconfigured": {
-            "type": "object",
-            "description": "Whether Vercel's /v6/domains/{d}/config call reports the domain as misconfigured. Null when Vercel could not be reached.",
-            "nullable": true
+          "purpose": {
+            "type": "string"
+          },
+          "requestedDurationDays": {
+            "type": "number",
+            "minimum": 1
           }
         },
         "required": [
-          "domain",
-          "verified"
+          "name",
+          "email"
         ]
       },
-      "UploadComplianceResourceDto": {
+      "ApproveAccessRequestDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
-            "type": "string",
-            "description": "Organization ID that owns the compliance resource",
-            "example": "org_6914cd0e16e4c7dccbb54426"
-          },
-          "framework": {
-            "type": "string",
-            "description": "Compliance framework identifier",
-            "enum": [
-              "iso_27001",
-              "iso_42001",
-              "gdpr",
-              "hipaa",
-              "soc2_type1",
-              "soc2_type2",
-              "soc3",
-              "pci_dss",
-              "nen_7510",
-              "iso_9001",
-              "pipeda",
-              "ccpa"
-            ],
-            "example": "iso_27001"
-          },
-          "fileName": {
-            "type": "string",
-            "description": "Original file name (PDF only)",
-            "example": "iso-27001-certificate.pdf"
+          "durationDays": {
+            "type": "number",
+            "minimum": 1
+          }
+        }
+      },
+      "DenyAccessRequestDto": {
+        "type": "object",
+        "properties": {
+          "reason": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "reason"
+        ]
+      },
+      "RevokeGrantDto": {
+        "type": "object",
+        "properties": {
+          "reason": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "reason"
+        ]
+      },
+      "SignNdaDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
           },
-          "fileType": {
-            "type": "string",
-            "description": "MIME type of the file",
-            "example": "application/pdf"
+          "email": {
+            "type": "string"
           },
-          "fileData": {
-            "type": "string",
-            "description": "Base64 encoded PDF content"
+          "accept": {
+            "type": "boolean"
           }
         },
         "required": [
-          "organizationId",
-          "framework",
-          "fileName",
-          "fileType",
-          "fileData"
+          "name",
+          "email",
+          "accept"
         ]
       },
-      "ComplianceResourceResponseDto": {
+      "ReclaimAccessDto": {
         "type": "object",
         "properties": {
-          "framework": {
-            "type": "string",
-            "enum": [
-              "iso_27001",
-              "iso_42001",
-              "gdpr",
-              "hipaa",
-              "soc2_type1",
-              "soc2_type2",
-              "soc3",
-              "pci_dss",
-              "nen_7510",
-              "iso_9001",
-              "pipeda",
-              "ccpa"
-            ]
-          },
-          "fileName": {
+          "email": {
             "type": "string"
+          }
+        },
+        "required": [
+          "email"
+        ]
+      },
+      "CreateControlTemplateDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "Access Control Policy"
           },
-          "fileSize": {
-            "type": "number",
-            "description": "File size in bytes"
-          },
-          "updatedAt": {
+          "description": {
             "type": "string",
-            "description": "ISO timestamp when the certificate was last updated"
+            "example": "Ensures access controls are properly managed"
+          },
+          "documentTypes": {
+            "example": [
+              "penetration-test",
+              "rbac-matrix"
+            ],
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           }
         },
         "required": [
-          "framework",
-          "fileName",
-          "fileSize",
-          "updatedAt"
+          "name",
+          "description"
         ]
       },
-      "ComplianceResourceSignedUrlDto": {
+      "UpdateControlTemplateDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
+          "name": {
             "type": "string",
-            "description": "Organization ID that owns the compliance resource",
-            "example": "org_6914cd0e16e4c7dccbb54426"
+            "example": "Access Control Policy"
           },
-          "framework": {
+          "description": {
             "type": "string",
-            "description": "Compliance framework identifier",
-            "enum": [
-              "iso_27001",
-              "iso_42001",
-              "gdpr",
-              "hipaa",
-              "soc2_type1",
-              "soc2_type2",
-              "soc3",
-              "pci_dss",
-              "nen_7510",
-              "iso_9001",
-              "pipeda",
-              "ccpa"
+            "example": "Ensures access controls are properly managed"
+          },
+          "documentTypes": {
+            "example": [
+              "penetration-test",
+              "rbac-matrix"
             ],
-            "example": "iso_27001"
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
+      "CreateFrameworkDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "SOC 2"
+          },
+          "version": {
+            "type": "string",
+            "example": "2024"
+          },
+          "description": {
+            "type": "string",
+            "example": "SOC 2 Type II compliance framework"
+          },
+          "visible": {
+            "type": "boolean",
+            "example": false
           }
         },
         "required": [
-          "organizationId",
-          "framework"
+          "name",
+          "version",
+          "description"
         ]
       },
-      "ComplianceResourceUrlResponseDto": {
+      "ImportFrameworkMetaDto": {
         "type": "object",
         "properties": {
-          "signedUrl": {
+          "name": {
             "type": "string"
           },
-          "fileName": {
+          "version": {
             "type": "string"
           },
-          "fileSize": {
-            "type": "number",
-            "description": "File size in bytes"
+          "description": {
+            "type": "string"
+          },
+          "visible": {
+            "type": "boolean"
           }
         },
         "required": [
-          "signedUrl",
-          "fileName",
-          "fileSize"
+          "name",
+          "version",
+          "description"
         ]
       },
-      "ListComplianceResourcesDto": {
+      "ImportFrameworkDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
+          "version": {
             "type": "string",
-            "description": "Organization ID that owns the compliance resources",
-            "example": "org_6914cd0e16e4c7dccbb54426"
+            "example": "1"
+          },
+          "exportedAt": {
+            "type": "string"
+          },
+          "framework": {
+            "$ref": "#/components/schemas/ImportFrameworkMetaDto"
+          },
+          "requirements": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "controlTemplates": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "policyTemplates": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "taskTemplates": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           }
         },
         "required": [
-          "organizationId"
+          "version",
+          "framework"
         ]
       },
-      "UploadTrustDocumentDto": {
+      "UpdateFrameworkDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
-            "type": "string",
-            "description": "Organization ID that owns the document",
-            "example": "org_6914cd0e16e4c7dccbb54426"
-          },
-          "fileName": {
-            "type": "string",
-            "description": "Original file name",
-            "example": "security-overview.pdf"
-          },
-          "fileType": {
+          "name": {
             "type": "string",
-            "description": "MIME type (optional)",
-            "example": "application/pdf"
+            "example": "SOC 2"
           },
-          "fileData": {
+          "version": {
             "type": "string",
-            "description": "Base64-encoded file contents (no data URL prefix)"
+            "example": "2024"
           },
           "description": {
             "type": "string",
-            "description": "Optional description shown in the trust portal",
-            "example": "Overview of our security program"
+            "example": "SOC 2 Type II compliance framework"
+          },
+          "visible": {
+            "type": "boolean",
+            "example": false
           }
-        },
-        "required": [
-          "organizationId",
-          "fileName",
-          "fileData"
-        ]
+        }
       },
-      "TrustDocumentResponseDto": {
+      "CreatePolicyTemplateDto": {
         "type": "object",
         "properties": {
-          "id": {
-            "type": "string",
-            "example": "tdoc_abc123"
-          },
           "name": {
             "type": "string",
-            "example": "security-overview.pdf"
+            "example": "Information Security Policy"
           },
           "description": {
-            "type": "object",
-            "example": "Overview of our security program"
+            "type": "string",
+            "example": "Establishes information security practices"
           },
-          "createdAt": {
+          "frequency": {
             "type": "string",
-            "example": "2026-01-02T10:15:00.000Z"
+            "enum": [
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "annually"
           },
-          "updatedAt": {
+          "department": {
             "type": "string",
-            "example": "2026-01-02T10:15:00.000Z"
+            "enum": [
+              "none",
+              "admin",
+              "gov",
+              "hr",
+              "it",
+              "itsm",
+              "qms"
+            ],
+            "example": "it"
           }
         },
         "required": [
-          "id",
           "name",
-          "createdAt",
-          "updatedAt"
+          "description",
+          "frequency",
+          "department"
         ]
       },
-      "TrustDocumentSignedUrlDto": {
+      "UpdatePolicyTemplateDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
+          "name": {
             "type": "string",
-            "description": "Organization ID that owns the document",
-            "example": "org_6914cd0e16e4c7dccbb54426"
+            "example": "Information Security Policy"
+          },
+          "description": {
+            "type": "string",
+            "example": "Establishes information security practices"
+          },
+          "frequency": {
+            "type": "string",
+            "enum": [
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "annually"
+          },
+          "department": {
+            "type": "string",
+            "enum": [
+              "none",
+              "admin",
+              "gov",
+              "hr",
+              "it",
+              "itsm",
+              "qms"
+            ],
+            "example": "it"
           }
-        },
-        "required": [
-          "organizationId"
-        ]
+        }
       },
-      "TrustDocumentUrlResponseDto": {
+      "UpdatePolicyContentDto": {
         "type": "object",
         "properties": {
-          "signedUrl": {
-            "type": "string"
-          },
-          "fileName": {
-            "type": "string"
+          "content": {
+            "type": "object",
+            "description": "TipTap JSON content for the policy document"
           }
         },
         "required": [
-          "signedUrl",
-          "fileName"
+          "content"
         ]
       },
-      "DeleteTrustDocumentDto": {
+      "CreateRequirementDto": {
         "type": "object",
         "properties": {
-          "organizationId": {
+          "frameworkId": {
             "type": "string",
-            "description": "Organization ID that owns the document",
-            "example": "org_6914cd0e16e4c7dccbb54426"
+            "example": "frk_abc123"
+          },
+          "name": {
+            "type": "string",
+            "example": "CC1.1"
+          },
+          "identifier": {
+            "type": "string",
+            "example": "cc1-1"
+          },
+          "description": {
+            "type": "string",
+            "example": "Control environment requirements"
           }
         },
         "required": [
-          "organizationId"
+          "frameworkId",
+          "name",
+          "description"
         ]
       },
-      "CreateAccessRequestDto": {
+      "UpdateRequirementDto": {
         "type": "object",
         "properties": {
           "name": {
             "type": "string"
           },
-          "email": {
+          "identifier": {
             "type": "string"
           },
-          "company": {
+          "description": {
             "type": "string"
+          }
+        }
+      },
+      "CreateTaskTemplateDto": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Task template name",
+            "example": "Monthly Security Review"
           },
-          "jobTitle": {
-            "type": "string"
+          "description": {
+            "type": "string",
+            "description": "Detailed description of the task template",
+            "example": "Review and update security policies on a monthly basis"
           },
-          "purpose": {
-            "type": "string"
+          "frequency": {
+            "type": "string",
+            "description": "Frequency of the task",
+            "enum": [
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "monthly"
           },
-          "requestedDurationDays": {
-            "type": "number",
-            "minimum": 1
+          "department": {
+            "type": "string",
+            "description": "Department responsible for the task",
+            "enum": [
+              "none",
+              "admin",
+              "gov",
+              "hr",
+              "it",
+              "itsm",
+              "qms"
+            ],
+            "example": "it"
           }
         },
         "required": [
-          "name",
-          "email"
+          "name"
         ]
       },
-      "ApproveAccessRequestDto": {
+      "UpdateTaskTemplateDto": {
         "type": "object",
         "properties": {
-          "durationDays": {
-            "type": "number",
-            "minimum": 1
+          "name": {
+            "type": "string",
+            "description": "Task template name",
+            "example": "Monthly Security Review"
+          },
+          "description": {
+            "type": "string",
+            "description": "Detailed description of the task template",
+            "example": "Review and update security policies on a monthly basis"
+          },
+          "frequency": {
+            "type": "string",
+            "description": "Frequency of the task",
+            "enum": [
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "example": "monthly"
+          },
+          "department": {
+            "type": "string",
+            "description": "Department responsible for the task",
+            "enum": [
+              "none",
+              "admin",
+              "gov",
+              "hr",
+              "it",
+              "itsm",
+              "qms"
+            ],
+            "example": "it"
+          },
+          "automationStatus": {
+            "type": "string",
+            "description": "Automation status of the task",
+            "enum": [
+              "AUTOMATED",
+              "MANUAL"
+            ],
+            "example": "AUTOMATED"
           }
         }
       },
-      "DenyAccessRequestDto": {
-        "type": "object",
-        "properties": {
-          "reason": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "reason"
-        ]
-      },
-      "RevokeGrantDto": {
+      "CreateFindingTemplateDto": {
         "type": "object",
         "properties": {
-          "reason": {
-            "type": "string"
+          "category": {
+            "type": "string",
+            "description": "Category of the finding template",
+            "example": "evidence_issue"
+          },
+          "title": {
+            "type": "string",
+            "description": "Short title of the finding template",
+            "example": "Issue with uploaded evidence"
+          },
+          "content": {
+            "type": "string",
+            "description": "Full message content of the finding template",
+            "example": "The uploaded evidence does not clearly show the Organization Name or URL. Please provide a screenshot showing the context."
+          },
+          "order": {
+            "type": "number",
+            "description": "Display order for the template",
+            "example": 0
           }
         },
         "required": [
-          "reason"
+          "category",
+          "title",
+          "content"
         ]
       },
-      "ReclaimAccessDto": {
+      "UpdateFindingTemplateDto": {
         "type": "object",
         "properties": {
-          "email": {
-            "type": "string"
+          "category": {
+            "type": "string",
+            "description": "Category of the finding template",
+            "example": "evidence_issue"
+          },
+          "title": {
+            "type": "string",
+            "description": "Short title of the finding template",
+            "example": "Issue with uploaded evidence"
+          },
+          "content": {
+            "type": "string",
+            "description": "Full message content of the finding template",
+            "example": "The uploaded evidence does not clearly show the Organization Name or URL. Please provide a screenshot showing the context."
+          },
+          "order": {
+            "type": "number",
+            "description": "Display order for the template",
+            "example": 0
           }
-        },
-        "required": [
-          "email"
-        ]
+        }
       },
       "CreateFindingDto": {
         "type": "object",
@@ -24324,6 +25873,10 @@
             ],
             "default": "medium"
           },
+          "templateId": {
+            "type": "string",
+            "description": "Finding template ID"
+          },
           "content": {
             "type": "string",
             "description": "Finding content/message",
@@ -24451,17 +26004,314 @@
         "type": "object",
         "properties": {}
       },
-      "DeclineSOADocumentDto": {
+      "DeclineSOADocumentDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "SubmitSOAForApprovalDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "ExportSOADocumentDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "ContextResponseDto": {
+        "type": "object",
+        "properties": {
+          "contextId": {
+            "type": "string"
+          },
+          "isNew": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "contextId",
+          "isNew"
+        ]
+      },
+      "CreateSessionDto": {
+        "type": "object",
+        "properties": {
+          "contextId": {
+            "type": "string",
+            "description": "Browserbase context ID"
+          }
+        },
+        "required": [
+          "contextId"
+        ]
+      },
+      "SessionResponseDto": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string"
+          },
+          "liveViewUrl": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "sessionId",
+          "liveViewUrl"
+        ]
+      },
+      "CloseSessionDto": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "description": "Browserbase session ID"
+          }
+        },
+        "required": [
+          "sessionId"
+        ]
+      },
+      "NavigateToUrlDto": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "description": "Browserbase session ID"
+          },
+          "url": {
+            "type": "string",
+            "description": "URL to navigate to"
+          }
+        },
+        "required": [
+          "sessionId",
+          "url"
+        ]
+      },
+      "CheckAuthDto": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "description": "Browserbase session ID"
+          },
+          "url": {
+            "type": "string",
+            "description": "URL to check auth status on"
+          }
+        },
+        "required": [
+          "sessionId",
+          "url"
+        ]
+      },
+      "AuthStatusResponseDto": {
+        "type": "object",
+        "properties": {
+          "isLoggedIn": {
+            "type": "boolean"
+          },
+          "username": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "isLoggedIn"
+        ]
+      },
+      "CreateBrowserAutomationDto": {
+        "type": "object",
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "description": "Task ID this automation belongs to"
+          },
+          "name": {
+            "type": "string",
+            "description": "Automation name"
+          },
+          "description": {
+            "type": "string",
+            "description": "Automation description"
+          },
+          "targetUrl": {
+            "type": "string",
+            "description": "Target URL to start from"
+          },
+          "instruction": {
+            "type": "string",
+            "description": "Natural language instruction for navigation"
+          },
+          "evaluationCriteria": {
+            "type": "string",
+            "description": "Optional natural-language criteria used to evaluate the automation result. When set, the run gets a pass/fail verdict."
+          },
+          "scheduleFrequency": {
+            "type": "string",
+            "enum": [
+              "daily",
+              "weekly",
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "description": "Automation schedule cadence"
+          }
+        },
+        "required": [
+          "taskId",
+          "name",
+          "targetUrl",
+          "instruction"
+        ]
+      },
+      "BrowserAutomationResponseDto": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "description": {
+            "type": "string"
+          },
+          "taskId": {
+            "type": "string"
+          },
+          "targetUrl": {
+            "type": "string"
+          },
+          "instruction": {
+            "type": "string"
+          },
+          "isEnabled": {
+            "type": "boolean"
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "updatedAt": {
+            "format": "date-time",
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "taskId",
+          "targetUrl",
+          "instruction",
+          "isEnabled",
+          "createdAt",
+          "updatedAt"
+        ]
+      },
+      "UpdateBrowserAutomationDto": {
         "type": "object",
-        "properties": {}
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Automation name"
+          },
+          "description": {
+            "type": "string",
+            "description": "Automation description"
+          },
+          "targetUrl": {
+            "type": "string",
+            "description": "Target URL to start from"
+          },
+          "instruction": {
+            "type": "string",
+            "description": "Natural language instruction"
+          },
+          "evaluationCriteria": {
+            "type": "string",
+            "description": "Optional natural-language criteria used to evaluate the automation result. Pass an empty string to clear."
+          },
+          "isEnabled": {
+            "type": "boolean",
+            "description": "Whether automation is enabled"
+          },
+          "scheduleFrequency": {
+            "type": "string",
+            "enum": [
+              "daily",
+              "weekly",
+              "monthly",
+              "quarterly",
+              "yearly"
+            ],
+            "description": "Automation schedule cadence"
+          }
+        }
       },
-      "SubmitSOAForApprovalDto": {
+      "RunAutomationResponseDto": {
         "type": "object",
-        "properties": {}
+        "properties": {
+          "runId": {
+            "type": "string"
+          },
+          "success": {
+            "type": "boolean"
+          },
+          "screenshotUrl": {
+            "type": "string"
+          },
+          "error": {
+            "type": "string"
+          },
+          "needsReauth": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "runId",
+          "success"
+        ]
       },
-      "ExportSOADocumentDto": {
+      "BrowserAutomationRunResponseDto": {
         "type": "object",
-        "properties": {}
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "automationId": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string"
+          },
+          "startedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "completedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "durationMs": {
+            "type": "number"
+          },
+          "screenshotUrl": {
+            "type": "string"
+          },
+          "error": {
+            "type": "string"
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "automationId",
+          "status",
+          "createdAt"
+        ]
       },
       "TaskItemAssigneeDto": {
         "type": "object",
@@ -24820,6 +26670,52 @@
           "entityId"
         ]
       },
+      "AssistantChatMessageDto": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "example": "msg_abc123"
+          },
+          "role": {
+            "type": "string",
+            "enum": [
+              "user",
+              "assistant"
+            ],
+            "example": "user"
+          },
+          "text": {
+            "type": "string",
+            "example": "How do I invite a teammate?"
+          },
+          "createdAt": {
+            "type": "number",
+            "example": 1735781554000,
+            "description": "Unix epoch millis"
+          }
+        },
+        "required": [
+          "id",
+          "role",
+          "text",
+          "createdAt"
+        ]
+      },
+      "SaveAssistantChatHistoryDto": {
+        "type": "object",
+        "properties": {
+          "messages": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AssistantChatMessageDto"
+            }
+          }
+        },
+        "required": [
+          "messages"
+        ]
+      },
       "CreateRoleDto": {
         "type": "object",
         "properties": {
@@ -25245,11 +27141,199 @@
             "type": "string",
             "description": "Repository URL containing the target application code",
             "example": "https://github.com/org/repo"
+          },
+          "pipelineTesting": {
+            "type": "boolean",
+            "description": "Whether to enable pipeline testing mode",
+            "default": false
+          },
+          "webhookUrl": {
+            "type": "string",
+            "description": "Optional webhook URL to notify when report generation completes"
+          },
+          "testMode": {
+            "type": "boolean",
+            "description": "Whether to run the pentest in simulation mode",
+            "default": false
+          },
+          "scanDepth": {
+            "type": "string",
+            "description": "Scan depth profile to run",
+            "enum": [
+              "quick",
+              "standard",
+              "deep"
+            ]
+          },
+          "evidenceLevel": {
+            "type": "string",
+            "description": "Evidence validation level for findings",
+            "enum": [
+              "report_only",
+              "safe_proof",
+              "impact_proof"
+            ]
+          },
+          "checks": {
+            "type": "array",
+            "description": "Maced check IDs to include in the scan",
+            "items": {
+              "type": "string",
+              "enum": [
+                "discovery",
+                "secrets_info_disclosure",
+                "technology_config",
+                "xss",
+                "injection",
+                "authentication",
+                "authorization",
+                "idor_bola",
+                "ssrf_xxe",
+                "csrf",
+                "race_conditions",
+                "business_logic"
+              ]
+            }
           }
         },
         "required": [
           "targetUrl"
         ]
+      },
+      "BillingPreferencesDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BillingSetupSessionDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BillingSetupSuccessDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BillingPortalDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BillingSubscriptionCheckoutDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "RequestBackgroundCheckDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "AttachCustomBackgroundCheckDto": {
+        "type": "object",
+        "properties": {
+          "fileName": {
+            "type": "string",
+            "description": "Name of the file",
+            "example": "document.pdf",
+            "maxLength": 255
+          },
+          "fileType": {
+            "type": "string",
+            "description": "MIME type of the file",
+            "example": "application/pdf"
+          },
+          "fileData": {
+            "type": "string",
+            "description": "Base64 encoded file data",
+            "example": "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8/5+hHgAHggJ/PchI7wAAAABJRU5ErkJggg=="
+          },
+          "description": {
+            "type": "string",
+            "description": "Description of the attachment",
+            "example": "Meeting notes from Q4 planning session",
+            "maxLength": 500
+          },
+          "userId": {
+            "type": "string",
+            "description": "User ID of the user uploading the attachment (required for API key auth, ignored for JWT auth)",
+            "example": "usr_abc123def456"
+          }
+        },
+        "required": [
+          "fileName",
+          "fileType",
+          "fileData"
+        ]
+      },
+      "BackgroundCheckSetupSessionDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BackgroundCheckSetupSuccessDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "BackgroundCheckBillingPortalDto": {
+        "type": "object",
+        "properties": {}
+      },
+      "CreateTemplateItemDto": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string",
+            "description": "Checklist item title",
+            "example": "Collect access badges"
+          },
+          "description": {
+            "type": "string",
+            "description": "Guidance text for the admin"
+          },
+          "evidenceRequired": {
+            "type": "boolean",
+            "description": "Whether evidence upload is required"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      },
+      "UpdateTemplateItemDto": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          },
+          "description": {
+            "type": "string"
+          },
+          "evidenceRequired": {
+            "type": "boolean"
+          },
+          "sortOrder": {
+            "type": "number"
+          },
+          "isEnabled": {
+            "type": "boolean"
+          }
+        }
+      },
+      "CompleteChecklistItemDto": {
+        "type": "object",
+        "properties": {
+          "notes": {
+            "type": "string",
+            "description": "Optional notes"
+          },
+          "fileName": {
+            "type": "string",
+            "description": "Evidence file name"
+          },
+          "fileType": {
+            "type": "string",
+            "description": "Evidence file MIME type"
+          },
+          "fileData": {
+            "type": "string",
+            "description": "Base64 encoded evidence file"
+          }
+        }
       }
     }
   }