/api/v1/company/compliance-profileGet compliance profile
Returns the company's stored compliance profile and its `updatedAt` timestamp. The profile holds company facts that the DPP Assistant tools use as defaults — `role`, `ownBrand`, `categories`, `markets`, `products`, `sizeBand`, `salesChannels`, and `dataSystems`. When the profile has not been set, the response is `{ "complianceProfile": {} }`. The profile holds company facts only: it never stores personal data about individual users.
Counts no scope answer (read-only, no regulatory data served). Auth: an API key or OAuth with `regulatory:read` or `passports:read`. Add `X-Source: assistant` when calling on behalf of the DPP Assistant MCP server — the OAuth account gate then applies (verified, non-disposable email required).
Headers
- Authorizationrequired
string
`Bearer <token>` — either a `tp_` API key (Developer → API Keys; simplest, for server-to-server) or an OAuth 2.0 access token (Developer → OAuth Apps; for user-authorized apps, scoped + revocable). The Authentication page has the full OAuth flow and scope list.
e.g. Bearer tp_REDACTED_xxxxxxxxxxxx
Request
curl -sS https://app.tracepass.eu/api/v1/company/compliance-profile \
-H "Authorization: Bearer tp_REDACTED_xxxxxxxxxxxx"Response
{
"complianceProfile": {
"role": "manufacturer",
"ownBrand": true,
"categories": ["battery"],
"markets": ["EU"],
"sizeBand": "sme",
"salesChannels": ["own_shop", "b2b"],
"dataSystems": "SAP ERP"
},
"updatedAt": "2026-10-11T19:01:12.152Z"
}