AnnexOps AI

Compliance as an API. Modular. Pay-per-request.

47 REST API endpoints covering every EU AI Act compliance function. Use only what you need. Integrate classification, document generation, vault access, and monitoring into any product or workflow.

✓ 47 endpoints

✓ OpenAPI 3.1 spec-first

✓ All routes /v1/

API design principles

Built for developers who care about correctness

Scoped API keys

Seven permission scopes: systems:read/write, classify:write, vault:read/write, monitoring:write, reports:read. Grant only what each integration needs.

Async long-running operations

Classification, document generation, and report creation return 202 Accepted with a job_id and poll_url. Webhook notifications when jobs complete. No blocking timeouts.

OpenAPI 3.1 spec-first

Every endpoint defined in the OpenAPI spec before implementation. Generate TypeScript, Python, or Go clients automatically. Spec and implementation stay in sync.

Correlation IDs everywhere

Every request and response includes X-Correlation-ID. Trace any API call through classification, document generation, and monitoring with a single ID.

API capabilities

47 endpoints. Everything you need to build on.

Scoped API keys

Fine-grained permission scopes so each integration receives only the access it needs. API keys are SHA-256 hashed at storage — never stored in plain text.

202 async pattern

Long-running operations return immediately with a job_id. Poll the status endpoint or receive a webhook when the job completes. No timeout errors, no blocking.

OpenAPI 3.1 spec

The full OpenAPI spec is published and downloadable. Use any code generator to create a type-safe client in TypeScript, Python, or Go in seconds.

Correlation IDs

X-Correlation-ID injected at the API gateway on every request. Use it to trace a classification through every downstream service in one query.

Cursor pagination

All list endpoints use cursor-based pagination. No offset drift on live data. Consistent results even when items are added between page requests.

org_id always isolated

org_id is derived from your API key — never a request parameter. Every database query is automatically scoped to your organisation. Isolation is architectural.

Integrations

Works With Your Existing Stack

  • 🐙 GitHub Actions
  • 🦊 GitLab CI
  • 🤗 HuggingFace
  • 🧠 Anthropic Claude
  • 🌟 Mistral AI
  • ☁️ AWS SageMaker
  • 📊 Grafana
  • 🔴 Jira
  • 💼 Linear
  • 🔔 Slack
  • 🔷 Google Vertex AI
  • 🤖 OpenAI API

FAQs

Some Frequently Asked Questions and Their Answers

What is an AI compliance API and how does it help with EU AI Act compliance?

An AI compliance API allows platforms and applications to programmatically access compliance capabilities such as AI system registration, risk classification, monitoring, and audit readiness. It enables integration of EU AI Act requirements directly into existing systems without building compliance logic from scratch.

How is the AnnexOps API different from the SDK?

The API is designed for external integration, allowing systems to send and retrieve compliance data. The SDK, on the other hand, is embedded within applications to automatically capture system-level data. Together, they provide a complete compliance infrastructure.

What capabilities does the AnnexOps AI compliance API provide?

The API enables:

  • AI system registration
  • risk classification queries
  • compliance status retrieval
  • monitoring data ingestion
  • audit and documentation access

This allows platforms to integrate AI governance features directly.

Can the API be used to manage compliance across multiple applications?

Yes. The AnnexOps API is designed to support multi-system and multi-application environments. It allows centralized compliance management while enabling distributed integration across different platforms.

Read Our Blog

News & Articles

47 endpoints. Every EU AI Act function. One API.

Read the full spec or start with the free public endpoint — no API key required.