API Reference
Integrate Policy into your product. Generate and manage policies programmatically via REST.
Base URL
All endpoints are HTTPS only. HTTP requests are redirected. The API uses JSON for both requests and responses.
Authentication
All API requests require a Bearer token in the Authorization header. Obtain your API key from Dashboard → Settings → API Keys.
API keys are plan-scoped. Rotate them from the dashboard at any time. Never expose keys in client-side code.
Endpoints
| Method | Path |
|---|---|
| POST | /policies/generate |
| GET | /policies |
| GET | /policies/:id |
| DELETE | /policies/:id |
| GET | /auth/profile |
Example: Generate a Policy
POST /policies/generate — request body:
{
"type": "privacy",
"businessName": "Acme Corp",
"websiteUrl": "https://acme.com",
"businessType": "saas",
"language": "en",
"jurisdiction": "gdpr",
"collectsPayments": true,
"collectsUserData": true,
"usesAnalytics": false,
"thirdPartyServices": ["stripe", "sendgrid"]
}Returns a policy object with id, content, riskScore, and complianceFlags.
Agency Plan Required
API access is available on the Agency plan only. Starter and Pro users can generate policies via the dashboard. Upgrade to Agency to unlock programmatic access and bulk generation endpoints.