An API Commons schema for publishing a provider’s compliance layer as machine-readable data. Compliance attestations: certification, scope, issuing body, period and report access (public, NDA, on request), as data.
API Commons Compliance
The API Commons Compliance schema is one of eight business layers that make the political side of an API machine-readable, beside the technical contract. Compliance attestations: certification, scope, issuing body, period and report access (public, NDA, on request), as data.
It profiles existing work rather than inventing: see OSCAL and CSA STAR. Generated documents for catalog providers are stamped with x-apis-io-derivation and live in each provider’s repository; the schema, under Apache 2.0, is at github.com/api-commons/compliance.
Background: The Technical Side Translated. The Business Side Did Not.
Industry: api-specification
