Connect ComplianceOS
to the systems you already run

import os
import requests

BASE = "https://api.complianceos.me/api/v1"
HEADERS = {"X-API-Key": os.environ["COMPLIANCEOS_API_KEY"]}
ENTITY_ID = "your-entity-id"

# One row from your ERP's sales or purchase ledger.
invoice = {
    "transaction_date": "2026-09-14",
    "transaction_type": "INCOME",
    "description": "Consulting services - September",
    "amount_aed": "18500.00",
    "invoice_number": "INV-2026-0912",
    "vendor_customer": "Gulf Trading LLC",
    "vendor_country": "AE",
    "counterparty_role": "CUSTOMER",
    "document_type": "INVOICE",
}

resp = requests.post(
    BASE + "/entities/" + ENTITY_ID + "/tax/transactions",
    headers=HEADERS,
    json=invoice,
    timeout=30,
)
if resp.status_code == 409:
    print("Already in ComplianceOS:", invoice["invoice_number"])
else:
    resp.raise_for_status()
    tx = resp.json()
    print("Created", tx["id"])

    # Attach the invoice PDF as evidence for the transaction.
    with open("INV-2026-0912.pdf", "rb") as pdf:
        ev = requests.post(
            BASE + "/entities/" + ENTITY_ID + "/tax/transactions/" + tx["id"] + "/evidence",
            headers=HEADERS,
            files={"file": ("INV-2026-0912.pdf", pdf, "application/pdf")},
            timeout=60,
        )
    ev.raise_for_status()

# Check the file first: nothing is saved with dry_run=true
curl -X POST "https://api.complianceos.me/api/v1/entities/$ENTITY_ID/tax/transactions/import?dry_run=true" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY" \
  -F "file=@ledger-2026-09.xlsx"

# Then import it. Rows already imported are skipped and counted in duplicate_count.
curl -X POST "https://api.complianceos.me/api/v1/entities/$ENTITY_ID/tax/transactions/import" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY" \
  -F "file=@ledger-2026-09.xlsx"

# Classify the new transactions (uses AI credits), then poll the task
curl -X POST "https://api.complianceos.me/api/v1/entities/$ENTITY_ID/tax/transactions/classify-batch" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY"
curl "https://api.complianceos.me/api/v1/tasks/$TASK_ID/status" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY"

# Into the document library
curl -X POST "https://api.complianceos.me/api/v1/entities/$ENTITY_ID/documents" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY" \
  -F "file=@trade-licence-2026.pdf" \
  -F "title=Trade licence 2026" \
  -F "category=LICENCE" \
  -F "folder=Corporate"

# Straight into the Evidence Vault (SHA-256 hashed, verified on every download)
curl -X POST "https://api.complianceos.me/api/v1/entities/$ENTITY_ID/evidence/upload" \
  -H "X-API-Key: $COMPLIANCEOS_API_KEY" \
  -F "file=@board-resolution.pdf" \
  -F "source_type=COMPLIANCE_REPORT"

import os
import requests

BASE = "https://api.complianceos.me/api/v1"
HEADERS = {"X-API-Key": os.environ["COMPLIANCEOS_API_KEY"]}
ENTITY_ID = "your-entity-id"

resp = requests.post(
    BASE + "/entities/" + ENTITY_ID + "/sanctions/screen",
    headers=HEADERS,
    json={
        "subject_name": "Orion Logistics FZE",
        "subject_type": "CUSTOMER",
        "subject_nationality": "AE",
    },
    timeout=60,
)
resp.raise_for_status()
check = resp.json()

# CLEARED: no match above the threshold. PENDING: a possible match that a
# person must review in ComplianceOS before you proceed.
if check["status"] == "CLEARED":
    print("No sanctions match")
else:
    print("Hold onboarding - review check", check["id"], check["matched_entry_name"])

import os
import requests

BASE = "https://api.complianceos.me/api/v1"
HEADERS = {"X-API-Key": os.environ["COMPLIANCEOS_API_KEY"]}
ENTITY_ID = "your-entity-id"

# 1. Create the employee (once; employee_number must be unique in the entity)
resp = requests.post(
    BASE + "/entities/" + ENTITY_ID + "/employees",
    headers=HEADERS,
    json={
        "full_name": "Sample Employee",
        "employee_number": "E-1042",
        "employment_date": "2025-03-01",
        "job_title": "Accountant",
        "department": "Finance",
        "nationality": "India",
        "basic_salary_aed": "12000",
        "allowances_aed": "3000",
        "is_wps_enrolled": True,
    },
    timeout=30,
)
resp.raise_for_status()
employee = resp.json()

# 2. Each month, record the salary payment. Sending the same month again
#    updates that month's record instead of adding a second one.
resp = requests.post(
    BASE + "/entities/" + ENTITY_ID + "/employees/" + employee["id"] + "/wps",
    headers=HEADERS,
    json={
        "period_month": 9,
        "period_year": 2026,
        "paid_date": "2026-09-28",
        "salary_paid_aed": "15000",
        "status": "COMPLIANT",
    },
    timeout=30,
)
resp.raise_for_status()

import json
import os

from flask import Flask, abort, request

app = Flask(__name__)
SECRET = os.environ["COMPLIANCEOS_WEBHOOK_SECRET"]
seen = set()  # use your database in production


@app.post("/complianceos/webhook")
def complianceos_webhook():
    raw = request.get_data()  # raw bytes, not request.json
    if not verify_signature(raw, request.headers.get("X-Webhook-Signature", ""), SECRET):
        abort(401)
    event = json.loads(raw)
    if event["id"] in seen:  # retries carry the same id
        return "", 200
    seen.add(event["id"])
    if event["event"] == "compliance.deadline.approaching":
        create_ticket(event["data"]["title"], event["data"]["due_date"])
    elif event["event"] == "approval.decided":
        sync_status(event["data"]["resource_id"], event["data"]["status"])
    return "", 200