/api/v1/company/compliance-profileGet compliance profile
Returns the company's stored compliance profile and its updatedAt timestamp. The profile holds company facts that the DPP Assistant tools use as defaults — role, ownBrand, categories, markets, products, sizeBand, salesChannels, and dataSystems. When the profile has not been set, the response is { "complianceProfile": {} }. The profile holds company facts only: it never stores personal data about individual users.
Counts no scope answer (read-only, no regulatory data served). Auth: an API key or OAuth with regulatory:read or passports:read. Add X-Source: assistant when calling on behalf of the DPP Assistant MCP server — the OAuth account gate then applies (verified, non-disposable email required).
Headers
- Authorizationrequired
string
Bearer <token>— either atp_API key (Developer → API Keys; simplest, for server-to-server) or an OAuth 2.0 access token (Developer → OAuth Apps; for user-authorized apps, scoped + revocable). The Authentication page has the full OAuth flow and scope list.e.g. Bearer tp_REDACTED_xxxxxxxxxxxx
Request
curl -sS https://app.tracepass.eu/api/v1/company/compliance-profile \
-H "Authorization: Bearer tp_REDACTED_xxxxxxxxxxxx"Response
{
"complianceProfile": {
"role": "manufacturer",
"ownBrand": true,
"categories": ["battery"],
"markets": ["EU"],
"sizeBand": "sme",
"salesChannels": ["own_shop", "b2b"],
"dataSystems": "SAP ERP"
},
"updatedAt": "2026-10-11T19:01:12.152Z"
}