GDPR

26 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

GET/gdpr/exportToken

Antworten

200CSV file download

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/export" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET/gdpr/recordsToken

Parameter

Name	Ort	Typ	Beschreibung
`organizationId`	Query	`string`	Compatibility organization ID. Ignored; auth context is trusted.
`spreadsheet_id`	Query	`string`	Compatibility spreadsheet UUID filter
`is_archived`	Query	`string`	Filter by archive state ('true' or 'false')
`search`	Query	`string`	Full-text search term
`page`	Query	`string`	Page number (1-based)
`pageSize`	Query	`string`	Page size (max 200)
`page_size`	Query	`string`	Legacy snake_case page size alias
`assignee_id`	Query	`string`	Filter by assignee UUID
`column_filters`	Query	`string`	JSON encoded column filter map

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/recordsToken

Request-Body`application/jsonCreateRecordDto`

Name	Typ	Beschreibung
`organizationId`	`string`	Compatibility organization ID. Ignored; auth context is trusted.
`spreadsheetId`	`string`	Legacy spreadsheet UUID. Accepted for compatibility.
`spreadsheet_id`	`string`	Legacy snake_case spreadsheet UUID. Accepted for compatibility.
`cell_data`	`object`	Cell data as key-value pairs
`row_order`	`number`	–
`assignee_id`	`string`	Assigned user UUID

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/records" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"organizationId":"…","spreadsheetId":"…","spreadsheet_id":"…"}'

GET/gdpr/records/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PUT/gdpr/records/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateRecordDto`

Name	Typ	Beschreibung
`id`	`string`	Legacy body record UUID. Route param remains authoritative.
`organizationId`	`string`	Compatibility organization ID. Ignored; auth context is trusted.
`cell_data`	`object`	Cell data as key-value pairs
`row_order`	`number`	–
`is_archived`	`boolean`	–
`assignee_id`	`object`	Assigned user UUID or null to unassign
`version`Pflicht	`number`	Current record version for optimistic locking

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"version":0}'

DELETE/gdpr/records/{id}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PATCH/gdpr/records/{id}/archiveToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonToggleArchiveDto`

Name	Typ	Beschreibung
`is_archived`Pflicht	`boolean`	–

Antworten

200OK

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/archive" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"is_archived":true}'

GET/gdpr/records/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/records/{id}/attachmentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/attachments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET/gdpr/records/{id}/attachments/{aid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`aid`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/attachments/{aid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

DELETE/gdpr/records/{id}/attachments/{aid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`aid`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/attachments/{aid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET/gdpr/records/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/records/{id}/commentsToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Request-Body`application/jsonCreateGdprCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	–

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/comments" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

PUT/gdpr/records/{id}/comments/{cid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`cid`Pflicht	Pfad	`string`	–

Request-Body`application/jsonUpdateGdprCommentDto`

Name	Typ	Beschreibung
`content`Pflicht	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/comments/{cid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"content":"…"}'

DELETE/gdpr/records/{id}/comments/{cid}Token

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–
`cid`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/comments/{cid}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET/gdpr/records/{id}/comments/countToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/comments/count" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

GET/gdpr/records/{id}/historyToken

Parameter

Name	Ort	Typ	Beschreibung
`id`Pflicht	Pfad	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/records/{id}/history" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/records/bulk-updateToken

Request-Body`application/jsonBulkUpdateCellsDto`

Name	Typ	Beschreibung
`updates`Pflicht	`CellUpdateItemDto[]`	Max 100 items
`updates[].record_id`Pflicht	`string`	Record UUID to update
`updates[].column_id`Pflicht	`string`	Column key to update (matches columnId in column_config)
`updates[].value`Pflicht	`object`	New value for the cell (any type)
`updates[].version`Pflicht	`number`	Current record version for optimistic locking

Antworten

200OK

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/records/bulk-update" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"updates":[]}'

POST/gdpr/records/reorderToken

Request-Body`application/jsonReorderRecordsDto`

Name	Typ	Beschreibung
`updates`Pflicht	`RecordOrderItemDto[]`	–
`updates[].record_id`Pflicht	`string`	–
`updates[].row_order`Pflicht	`number`	–
`updates[].new_order`Pflicht	`number`	–

Antworten

200OK

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/records/reorder" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"updates":[]}'

GET/gdpr/spreadsheetToken

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

PUT/gdpr/spreadsheetToken

Request-Body`application/jsonUpdateSpreadsheetDto`

Name	Typ	Beschreibung
`title`	`string`	–
`description`	`string`	–
`column_config`	`string[]`	Full column configuration array (IColumnConfig[])
`sticky_columns`	`object`	–
`default_row_height`	`number`	Standard: `32`

Antworten

200OK

Beispiel (cURL)

curl -X PUT "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"title":"…","description":"…","column_config":[]}'

GET/gdpr/spreadsheet-with-recordsToken

Parameter

Name	Ort	Typ	Beschreibung
`organizationId`	Query	`string`	Compatibility organization ID. Ignored; auth context is trusted.
`spreadsheet_id`	Query	`string`	Compatibility spreadsheet UUID filter
`is_archived`	Query	`string`	Filter by archive state ('true' or 'false')
`search`	Query	`string`	Full-text search term
`page`	Query	`string`	Page number (1-based)
`pageSize`	Query	`string`	Page size (max 200)
`page_size`	Query	`string`	Legacy snake_case page size alias
`assignee_id`	Query	`string`	Filter by assignee UUID
`column_filters`	Query	`string`	JSON encoded column filter map

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet-with-records" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/spreadsheet/columnsToken

Request-Body`application/jsonAddColumnDto`

Name	Typ	Beschreibung
`column`Pflicht	`ColumnConfigItemDto`	–
`column.id`Pflicht	`string`	Column identifier
`column.visible`Pflicht	`boolean`	Whether the column is visible
`column.order`Pflicht	`number`	Display order (0-based)

Antworten

201Erstellt

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet/columns" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"column":"…"}'

PATCH/gdpr/spreadsheet/columns/{columnId}Token

Parameter

Name	Ort	Typ	Beschreibung
`columnId`Pflicht	Pfad	`string`	–

Request-Body`application/jsonRenameColumnDto`

Name	Typ	Beschreibung
`new_label`Pflicht	`string`	New label for the column

Antworten

200OK

Beispiel (cURL)

curl -X PATCH "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet/columns/{columnId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"new_label":"…"}'

DELETE/gdpr/spreadsheet/columns/{columnId}Token

Parameter

Name	Ort	Typ	Beschreibung
`columnId`Pflicht	Pfad	`string`	–

Antworten

204Kein Inhalt

Beispiel (cURL)

curl -X DELETE "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet/columns/{columnId}" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

POST/gdpr/spreadsheet/columns/reorderToken

Request-Body`application/jsonReorderColumnsDto`

Name	Typ	Beschreibung
`column_order`Pflicht	`ColumnOrderDto[]`	–
`column_order[].columnId`Pflicht	`string`	–
`column_order[].order`Pflicht	`number`	–

Antworten

200OK

Beispiel (cURL)

curl -X POST "https://xapi.ambertech.cloud/api/v1/gdpr/spreadsheet/columns/reorder" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"column_order":[]}'

GDPR

Export GDPR records to CSV#

Antworten

List GDPR records with filters and pagination#

Parameter

Antworten

Create a GDPR record#

Request-Bodyapplication/jsonCreateRecordDto

Antworten

Get a single GDPR record#

Parameter

Antworten

Update a GDPR record (optimistic locking)#

Parameter

Request-Bodyapplication/jsonUpdateRecordDto

Antworten

Delete a GDPR record (cascades storage)#

Parameter

Antworten

Toggle archive state of a GDPR record#

Parameter

Request-Bodyapplication/jsonToggleArchiveDto

Antworten

List attachments for a GDPR record#

Parameter

Antworten

Upload an attachment to a GDPR record (max 50 MB)#

Parameter

Antworten

Get a signed URL for a GDPR attachment (60 s)#

Parameter

Antworten

Delete a GDPR attachment#

Parameter

Antworten

Get comments for a GDPR record#

Parameter

Antworten

Add a comment to a GDPR record#

Parameter

Request-Bodyapplication/jsonCreateGdprCommentDto

Antworten

Update a GDPR record comment (author only)#

Parameter

Request-Bodyapplication/jsonUpdateGdprCommentDto

Antworten

Delete a GDPR record comment (author only)#

Parameter

Antworten

Get comment count for a GDPR record#

Parameter

Antworten

Get audit history for a GDPR record#

Parameter

Antworten

Bulk update cells across multiple records (max 100)#

Request-Bodyapplication/jsonBulkUpdateCellsDto

Antworten

Reorder GDPR records#

Request-Bodyapplication/jsonReorderRecordsDto

Antworten

Get or auto-create the GDPR spreadsheet#

Antworten

Update GDPR spreadsheet metadata#

Request-Bodyapplication/jsonUpdateSpreadsheetDto

Antworten

Get GDPR spreadsheet with all matching records#

Parameter

Antworten

Add a column to the spreadsheet#

Request-Bodyapplication/jsonAddColumnDto

Antworten

Rename a spreadsheet column#

Parameter

Request-Bodyapplication/jsonRenameColumnDto

Antworten

Remove a spreadsheet column#

Parameter

Antworten

Reorder spreadsheet columns#

Request-Body`application/jsonCreateRecordDto`

Request-Body`application/jsonUpdateRecordDto`

Request-Body`application/jsonToggleArchiveDto`

Request-Body`application/jsonCreateGdprCommentDto`

Request-Body`application/jsonUpdateGdprCommentDto`

Request-Body`application/jsonBulkUpdateCellsDto`

Request-Body`application/jsonReorderRecordsDto`

Request-Body`application/jsonUpdateSpreadsheetDto`

Request-Body`application/jsonAddColumnDto`

Request-Body`application/jsonRenameColumnDto`

Request-Body`application/jsonReorderColumnsDto`