Veridact API Reference

Copyconst VERIDACT_API_KEY = process.env.VERIDACT_API_KEY;

// Reusable helper with auth header
const veridact = async (path, options = {}) => {
  const res = await fetch(`https://veridact.solutions/api/v1${path}`, {
    ...options,
    headers: {
      'Authorization': `Bearer ${VERIDACT_API_KEY}`,
      'Content-Type': 'application/json',
      ...(options.headers || {})
    }
  });
  if (!res.ok) throw new Error(`HTTP ${res.status}: ${await res.text()}`);
  return res.json();
};

Copyimport os, requests

BASE_URL = "https://veridact.solutions/api/v1"
HEADERS = {
    "Authorization": f"Bearer {os.environ['VERIDACT_API_KEY']}",
    "Content-Type": "application/json"
}

# Reusable session
session = requests.Session()
session.headers.update(HEADERS)

Copyconst data = await veridact('/screening/cdd', {
  method: 'POST',
  body: JSON.stringify({
    query: 'Roman Abramovich',
    entity_type: 'individual',
    jurisdiction: 'Russia'
  })
});
const { screening } = data;

Copyres = session.post(
    f"{BASE_URL}/screening/cdd",
    json={
        "query": "Roman Abramovich",
        "entity_type": "individual",
        "jurisdiction": "Russia"
    }
)
res.raise_for_status()
screening = res.json()["screening"]

Copyconst { screening } = await veridact('/screening/edd', {
  method: 'POST',
  body: JSON.stringify({
    query: 'Volkov Industries GmbH',
    entity_type: 'company',
    jurisdiction: 'Germany',
    source_of_wealth: 'Manufacturing and exports since 1998'
  })
});
// screening.edd_analysis contains the AI deep-dive text
console.log(screening.edd_analysis);

Copyres = session.post(
    f"{BASE_URL}/screening/edd",
    json={
        "query": "Volkov Industries GmbH",
        "entity_type": "company",
        "jurisdiction": "Germany",
        "source_of_wealth": "Manufacturing and exports since 1998"
    }
)
screening = res.json()["screening"]
print(screening.get("edd_analysis"))  # AI deep-dive analysis text

Copyconst { screening } = await veridact('/screening/ma', {
  method: 'POST',
  body: JSON.stringify({
    target_name: 'CloudSync Technologies Ltd',
    target_jurisdiction: 'United Kingdom',
    target_industry: 'SaaS / Cloud Infrastructure',
    deal_type: 'acquisition',
    deal_value: '$120M'
  })
});
// screening.ma_analysis has the AI due diligence report

Copyres = session.post(
    f"{BASE_URL}/screening/ma",
    json={
        "target_name": "CloudSync Technologies Ltd",
        "target_jurisdiction": "United Kingdom",
        "deal_type": "acquisition",
        "deal_value": "$120M"
    }
)
screening = res.json()["screening"]

Copyconst { screening } = await veridact('/screening/2848');

Copyres = session.get(f"{BASE_URL}/screening/2848")
screening = res.json()["screening"]

Copyconst res = await fetch(
  'https://veridact.solutions/api/v1/screening/2848/report',
  { headers: { 'Authorization': `Bearer ${process.env.VERIDACT_API_KEY}` }, redirect: 'follow' }
);
const pdfBuffer = await res.arrayBuffer();
fs.writeFileSync('report.pdf', Buffer.from(pdfBuffer));

Copyres = session.get(
    f"{BASE_URL}/screening/2848/report",
    allow_redirects=True
)
with open("report.pdf", "wb") as f:
    f.write(res.content)

Copyconst { screenings, pagination } = await veridact(
  '/screenings?risk_level=high&limit=10'
);
console.log(`${pagination.total} high-risk screenings`);

Copyres = session.get(
    f"{BASE_URL}/screenings",
    params={"risk_level": "high", "limit": 10}
)
data = res.json()
screenings = data["screenings"]
pagination = data["pagination"]

Copyconst { person_check } = await veridact('/person-checks', {
  method: 'POST',
  body: JSON.stringify({
    full_name: 'James R. Wilson',
    purpose: 'employment',
    fcra_consent: true,
    date_of_birth: '1982-04-15',
    locations: ['California', 'Texas']
  })
});
console.log(`Check ID: ${person_check.id}, Result: ${person_check.result}`);

Copyres = session.post(
    f"{BASE_URL}/person-checks",
    json={
        "full_name": "James R. Wilson",
        "purpose": "employment",
        "fcra_consent": True,
        "date_of_birth": "1982-04-15",
        "locations": ["California", "Texas"]
    }
)
person_check = res.json()["person_check"]

Copyconst { person_check } = await veridact('/person-checks/VDC-A8F3C2B1-P');

Copyres = session.get(f"{BASE_URL}/person-checks/VDC-A8F3C2B1-P")
person_check = res.json()["person_check"]
for finding in person_check.get("findings", []):
    print(f"[{finding['severity'].upper()}] {finding['category']}: {finding['description']}")

Copyconst { person_checks, pagination } = await veridact(
  '/person-checks?result=adverse_found&limit=20'
);

Copyres = session.get(
    f"{BASE_URL}/person-checks",
    params={"result": "adverse_found", "limit": 20}
)
person_checks = res.json()["person_checks"]

Copyimport hmac, hashlib, os
from flask import Flask, request, abort

app = Flask(__name__)

@app.route('/webhooks/veridact', methods=['POST'])
def webhook():
    signature = request.headers.get('X-Veridact-Signature', '')
    secret = os.environ['VERIDACT_WEBHOOK_SECRET'].encode()

    # Compute expected signature
    expected = 'sha256=' + hmac.new(
        secret,
        request.data,  # raw bytes, not parsed JSON
        hashlib.sha256
    ).hexdigest()

    # Use compare_digest to prevent timing attacks
    if not hmac.compare_digest(signature, expected):
        abort(400)

    payload = request.get_json()
    # Acknowledge immediately, process async
    process_webhook_async.delay(payload)
    return '', 200

Copy# The algorithm in pseudocode:
#
# 1. Read the raw request body as bytes (before JSON parsing)
# 2. Compute:  expected = "sha256=" + HMAC_SHA256(secret, raw_body).hexdigest()
# 3. Compare:  signature == expected  (use constant-time comparison)
# 4. Reject with 400 if they don't match
#
# Key points:
#   - Use raw bytes, NOT the parsed/re-serialized JSON
#   - Always use constant-time comparison (prevents timing attacks)
#   - Respond 200 immediately, process payload asynchronously
#   - Optionally check X-Veridact-Timestamp is within ±5 min to prevent replay

Copy# Generate a TypeScript SDK using openapi-generator:
npx @openapitools/openapi-generator-cli generate \
  -i https://veridact.solutions/api/v1/openapi.json \
  -g typescript-fetch \
  -o ./veridact-sdk

# Python SDK:
openapi-generator generate \
  -i https://veridact.solutions/api/v1/openapi.json \
  -g python \
  -o ./veridact-python-sdk

Copycurl https://veridact.solutions/api/v1/openapi.json \
  -o veridact-openapi.json