API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Data Subject Requests

AdminUpdated Sep 11, 2026

Data Subject Requests

Backend API — secret key (Authorization: Bearer sk_…).

4 routes. Each row is one endpoint with its explanation, required scope, and whether it honours the Idempotency-Key header.

Method & path

Scope

Idem

Explanation

GET /v1/data_subject_requests

data_subject_requests:read

List GDPR/DSAR export and erasure requests, filterable by type/status/user (cursor pagination).

GET /v1/data_subject_requests/:id

data_subject_requests:read

Fetch a data-subject request, including an export's produced package.

POST /v1/data_subject_requests/:id/fulfill

data_subject_requests:write

✓

Fulfil a request now: build the export package, or run the erasure through the same soft-delete + PII-purge path a user-delete uses, ahead of the grace window. Terminal — a fulfilled erasure is irreversible.

POST /v1/data_subject_requests/:id/reject

data_subject_requests:write

✓

Reject a request with a recorded reason. Terminal — cannot be re-actioned.

Was this page helpful?
Data Subject Requests