OptiTech API

The OptiTech API is the programmatic interface to your compliance program. It provides a secure, stateless interface to your controls and evidence, letting you check, query, and automate compliance directly from pipelines, internal tools, and scripts using standard HTTP methods. Key benefits include:

• Compliance checks in CI/CD

  Block deploys that would break controls: a storage bucket about to go public, a service losing its encryption setting, an infrastructure change that violates your baseline. The deploy fails with the control reference and the fix, the same way a test failure would.

• Query anything

  Control status, evidence history, open findings, and vendor answers are all queryable, so your internal dashboards and tools can show compliance posture without anyone opening the Console.

• Secure by default

  Every API request is authenticated, scoped by role, and captured in the same audit log as Console actions, so automation never becomes a hole in your evidence chain. Access follows the same RBAC as your team's Console permissions.

• CI/CD integration

  Wire checks into GitHub Actions or any pipeline runner, and gate merges and deploys on the controls that matter for the affected system.

Terraform provider

The OptiTech API pairs with a Terraform provider, so compliance-relevant configuration can live as code alongside the infrastructure it governs. Define controls and ownership in the same review as the resources they cover, and let terraform plan show compliance drift before it ships.

Quickstart

• 

  Get Started

  Set up your program first: the API automates what the platform already verifies.

• 

  Product principles

  How evidence-first, API-first workflows fit together in the platform.

• 

  Plan availability

  API and CLI access is included on the Enterprise plan.

• 

  Ask the copilot

  Let the AI copilot draft the queries and checks you need.

• 

  Get help

  Talk to us about pipeline patterns and rollout.