PrivaBase Documentation
The compliance automation platform for privacy, security, and regulatory frameworks. One API, every framework.
What is PrivaBase?
PrivaBase is a compliance automation API. You register frameworks (GDPR, CCPA, HIPAA, SOC 2, etc.), run compliance checks against your business profile, get gap assessments, generate policies, and track remediation — all through a REST API.
Every framework gets the same 9 endpoints automatically. Add a framework definition and it's instantly available for compliance checks, requirements listing, gap assessments, control mappings, policy generation, remediation guidance, and evidence tracking.
Core Features
Compliance Checks
Run automated compliance checks against any framework using your business profile. Get pass/fail results per rule.
Gap Assessments
Identify compliance gaps with detailed assessment reports. Prioritized by severity with remediation guidance.
Policy Generation
Generate framework-specific compliance policies from templates. Privacy policies, data processing agreements, and more.
57 Frameworks
GDPR, CCPA, HIPAA, SOC 2, PCI DSS, ISO 27001, and 48 more — US federal, 18 state privacy laws, 16 international, and 13 standards.
DSR Management
Full data subject request lifecycle — intake, verification, assignment, tracking, and completion.
Vendor Management
Track vendor compliance, run assessments, manage questionnaires, and map data flows.
Quick Links
- Quickstart Guide — Sign up, run your first compliance check in 5 minutes
- Frameworks API — The core of PrivaBase: 9 endpoints per framework
- Supported Frameworks — Full list of 57 regulatory frameworks
- Authentication — JWT tokens and API keys
- Integration Guide — REST API integration patterns
- Integrations API — Connect cloud providers, IdPs, and DevOps tools
- Evidence Collection — Automated evidence vault with drift detection
- Custom Frameworks — Build and assess your own compliance frameworks
- Risk Register — FAIR quantification and Monte Carlo analysis
- Audits — Full audit lifecycle with magic-link auditor portal
- Trust Center — Public compliance pages with NDA-gated docs
- SCIM Provisioning — Enterprise directory sync (RFC 7644)
Base URL
https://api.privabase.com/api/v1All API endpoints are prefixed with /api/v1. Authentication is via JWT Bearer token or API key.
Interactive Swagger UI available at api.privabase.com/docs