Skip to content

Advanced Usage

Beyond basic CRUD (create, read, update, delete), the External API supports ownership, form answers, and lookup helpers for Smart Inventory records.

These endpoints mirror what the TrustView app uses internally. They are required for integrations that assign responsible persons, fill questionnaire fields, or set ROPA approvers.

Assign responsible person

  1. GET /external/company/departments/list — find departmentUniqueId
  2. POST /external/smart-inventory/{type}/{id}/responsible-department — set department on the record
  3. GET /external/company/users/list — find userUniqueId (user must belong to that department)
  4. POST /external/smart-inventory/{type}/{id}/responsible-person — assign the user

{type} is vendor, asset, or process. {id} is the record uniqueId.

Submit form field answers

  1. GET /external/smart-inventory/{type}/{id}/item — read the form structure and field uniqueId values
  2. POST /external/smart-inventory/{type}/{id}/form/submit — submit one or more answers

Set ROPA approver

  1. GET /external/company/users/list
  2. POST /external/smart-inventory/process/{ropa}/approver
  1. GET /external/smart-inventory/vendor/list or asset/list — find uniqueId
  2. GET /external/smart-inventory/process/list — find process uniqueId
  3. POST /external/smart-inventory/process/{ropa}/vendor/{vendor}/link or .../asset/{asset}/link
  4. To remove: DELETE .../vendor/{vendor}/unlink or .../asset/{asset}/unlink

Update process status

  1. GET /external/smart-inventory/process/{ropa}/item — check current status
  2. POST /external/smart-inventory/process/{ropa}/status with statusTypeId
  1. GET /external/smart-inventory/asset/list and vendor/list — find uniqueId values
  2. POST /external/smart-inventory/asset/{asset}/vendor/{vendor}/link
  3. To remove: DELETE .../vendor/{vendor}/unlink

Alternatively, pass vendorUniqueId when creating an asset, or parentVendor when editing an asset.

Configure personal data matrix

  1. GET /external/smart-inventory/personal-data/category/list (and attribute/data-subject lists)
  2. POST .../attribute/{id}/relationship or .../category/{id}/relationship to link data subjects
  3. GET /external/smart-inventory/process/{ropa}/personal-data/form
  4. POST .../personal-data/form/submit with answers per attribute and linked assets

Endpoints summary

Endpoint Method Description
/company/users/list GET List company users
/company/departments/list GET List company departments
/smart-inventory/{type}/{id}/responsible-department POST Set responsible department
/smart-inventory/{type}/{id}/responsible-person POST Set responsible person
/smart-inventory/process/{ropa}/approver POST Set process approver
/smart-inventory/{type}/{id}/form/submit POST Submit form answers
/smart-inventory/process/{ropa}/vendor/{vendor}/link POST Link vendor to process
/smart-inventory/process/{ropa}/vendor/{vendor}/unlink DELETE Unlink vendor from process
/smart-inventory/process/{ropa}/asset/{asset}/link POST Link asset to process
/smart-inventory/process/{ropa}/asset/{asset}/unlink DELETE Unlink asset from process
/smart-inventory/process/{ropa}/status POST Update process status
/smart-inventory/asset/{asset}/vendor/{vendor}/link POST Link asset to vendor
/smart-inventory/asset/{asset}/vendor/{vendor}/unlink DELETE Unlink asset from vendor
/smart-inventory/personal-data/category/list GET List personal data categories
/smart-inventory/personal-data/attribute/list GET List personal data attributes
/smart-inventory/personal-data/data-subject/list GET List data subjects
/smart-inventory/personal-data/matrix GET Attribute matrix
/smart-inventory/personal-data/category-matrix GET Category matrix
/smart-inventory/personal-data/attribute/{attribute}/relationship POST Link data subject to attribute
/smart-inventory/personal-data/category/{category}/edit PATCH Edit personal data category
/smart-inventory/personal-data/attribute/{attribute}/edit PATCH Edit personal data attribute
/smart-inventory/personal-data/data-subject/{dataSubject}/edit PATCH Edit data subject
/smart-inventory/personal-data/data-retention GET List data retention options
/smart-inventory/personal-data/data-retention/bulk POST/DELETE Save or remove custom retention values
/smart-inventory/process/{ropa}/personal-data/form GET Get process personal data form
/smart-inventory/process/{ropa}/personal-data/form/submit POST Submit process personal data

See Company Lookups, Smart Inventory Advanced, Process Relationships, Process Status, Asset Vendor Relationships, Personal Data Matrix, Risk Center, and Security Control for request bodies and examples.

What is not included yet

The following app features remain internal-only for now:

  • Full custom form builder editing (sections, rows, attributes CRUD)
  • Inventory sharing, comments, templates, bulk delete

See Widgets & Forms, Files & Import/Export, and DPIA for Phase 4 endpoints.

Basic CRUD remains documented under API Reference.