What is the ConductAtlas API?

The ConductAtlas API is a REST API providing programmatic access to platform policy monitoring data. It returns JSON over HTTPS and exposes entities (tracked platforms), documents (canonical policy documents), diffs (detected changes between document versions), events (classified change records), domains (document categories), and concepts (regulatory framework references). Every record has a stable public_id for citation.

Which subscription tiers include API access?

API access requires an API key or auth token, currently provisioned on request (email contact@conductatlas.com). Any valid key or token is served; requests are rate-limited by the account's tier: Free 100 requests/day, Monitor 1,000/day, Insight 5,000/day, Team 25,000/day, and Enterprise effectively unlimited.

How do I authenticate with the ConductAtlas API?

Authentication uses Django REST Framework Token authentication. POST your credentials to /api/v1/auth/token/ to obtain a token. Include the token in the Authorization header on every request as: 'Authorization: Token YOUR_TOKEN_HERE'. Tokens do not expire unless revoked.

What are the rate limits for the ConductAtlas API?

Requests are rate-limited per day by the account's tier: Free 100, Monitor 1,000, Insight 5,000, Team 25,000, and Enterprise effectively unlimited. A request with no valid key or token receives a 401 challenge. Exceeding your daily allotment returns HTTP 429 with a Retry-After header indicating the seconds until the limit resets at 00:00 UTC.

What endpoints are available?

Available endpoints include GET /api/v1/entities/ (platform list and detail), /api/v1/documents/ (policy document list and detail with version chains), /api/v1/diffs/ (version diffs), /api/v1/events/ (classified change events), /api/v1/domains/ (document categories), and /api/v1/concepts/ (regulatory framework references). All endpoints support filtering, pagination, and detail lookups by public_id.

Can I use the ConductAtlas API in production compliance systems?

Yes. The API is designed for production compliance use cases including vendor monitoring, regulatory watchlist automation, and compliance reporting pipelines. Enterprise customers receive priority support and higher rate limits. Team customers should implement retry logic with exponential backoff and respect the daily rate limit.

Does the API include webhooks?

Webhooks are on the roadmap for Enterprise customers. Current integration approach is polling /api/v1/events/ for new change events. Enterprise customers requiring webhook delivery should contact contact@conductatlas.com to discuss timeline.

How do I get API access?

Email contact@conductatlas.com to request an API key or token — access is currently provisioned on request. Self-serve token generation is coming. All production data is identical to web data; the API reads from the same archive.

API, Platform Policy Intelligence REST API

Base URL

Base https://conductatlas.com/api/v1/

All endpoints return JSON. Authentication required for all requests.

Endpoints

Entities

GET/api/v1/entities/List all tracked entities

GET/api/v1/entities/<id>/Entity detail

GET/api/v1/entities/<id>/documents/All documents for an entity

GET/api/v1/entities/<id>/changes/All change events for an entity

Documents

GET/api/v1/documents/List all tracked documents

GET/api/v1/documents/<id>/Document detail with provisions

GET/api/v1/documents/<id>/versions/Full version chain with SHA-256 hashes

Changes & Diffs

GET/api/v1/events/List all change events

GET/api/v1/events/<id>/Change event detail with plain summary

GET/api/v1/diffs/List computed diffs

GET/api/v1/diffs/<id>/Diff detail with sentence-level stats

Taxonomy

GET/api/v1/domains/List all policy domains

GET/api/v1/concepts/List all governance concepts

Authentication

POST/api/v1/auth/token/Obtain API token

Authentication

Token Authentication

All API requests require an API key or token in the Authorization header. Keys are currently provisioned on request — contact us to obtain yours. Requests are then rate-limited by your account's tier.

# Get your token
curl -X POST https://conductatlas.com/api/v1/auth/token/ \
  -d '{"username": "your@email.com", "password": "yourpassword"}'

# Use your token on all requests
curl https://conductatlas.com/api/v1/events/ \
  -H 'Authorization: Token your_token_here'

Record Identifiers

Every record in ConductAtlas has a stable, citable identifier. These IDs are permanent and can be used in legal filings, research citations, and compliance documentation.

CA-E-00003Entity record

CA-D-000012Document record

CA-V-000074Version record

CA-C-000001Change event record

CA-P-00012002Provision record

Example Response

GET /api/v1/events/?limit=1

Response

{
  "count": 56,
  "results": [{
    "public_id": "a3f8b2c1-...",
    "entity": "Google Gemini",
    "document": "Gemini Apps Privacy Notice",
    "observed_at": "2026-03-28T06:00:00Z",
    "severity_flag": "medium",
    "plain_summary": "Google Gemini updated its privacy policy...",
    "content_hash": "sha256:4a9f..."
  }]
}

Access & Pricing

API access is provisioned on request

Any account can be issued an API key or token; requests are rate-limited by your tier — from 100/day on Free up to 25,000/day on Team, and effectively unlimited on Enterprise. Contact us for a key.

See pricing →

Request API Access

The API is currently in limited access. Contact us to discuss your use case and get credentials.

api@conductatlas.com

ConductAtlas REST API

Base URL

Endpoints

Authentication

Token Authentication

Record Identifiers

Example Response

Access & Pricing

Request API Access