The company profile is scoped to the current tenant. Profile document endpoints return DocumentDto.
Endpoints
| Method | Path | Description |
|---|---|---|
GET | /api/v1/company/profile | Get the current tenant company profile |
PUT | /api/v1/company/profile | Initialize the current tenant company profile |
POST | /api/v1/company/profile/logo | Upload the company logo |
PUT | /api/v1/company/profile/logo | Replace the company logo |
GET | /api/v1/company/profile/documents | List company profile documents |
POST | /api/v1/company/profile/policies/{policyType}/document | Upload a policy document |
PUT | /api/v1/company/profile/policies/{policyType}/document | Replace a policy document |
POST | /api/v1/company/profile/certifications/{certificationType}/document | Upload a certification attachment |
PUT | /api/v1/company/profile/certifications/{certificationType}/document | Replace a certification attachment |
POST | /api/v1/company/profile/questionnaire/attachments/{field} | Upload questionnaire attachment |
PUT | /api/v1/company/profile/questionnaire/attachments/{field} | Replace questionnaire attachment |
POST | /api/v1/company/profile/training/{trainingType}/document | Upload training attachment |
Profile
GET /api/v1/company/profile and PUT /api/v1/company/profile return CompanyProfileDto with id, logoDocumentId, createdAt and updatedAt.
Multipart uploads
All profile document write endpoints use multipart/form-data with a required file field.
| Path parameter | Applies to | Description |
|---|---|---|
policyType | Policy document endpoints | Policy slot to upload or replace |
certificationType | Certification document endpoints | Certification slot to upload or replace |
field | Questionnaire attachments | Questionnaire field key |
trainingType | Training document endpoint | Training slot to upload |
POST upload endpoints return 201 Created; PUT replacement endpoints return 200 OK.