marketing.docsPage.API Domains — ActLoom Documentation

API Domains

This page groups the product by API and integration domain rather than by UI section. It is intended for technical teams who need to know where the machine surfaces live, how they relate to product features, and which docs sections to pair with them.

How to use this page

Choose the domain you automate

Do not start from the whole API surface. Start from the business domain you want to integrate.

Pair machine and human workflows

Most automation works best when you also understand the dashboard workflow behind the same domain.

Keep auth models clear

Settings and admin flows generally use dashboard sessions, while machine automation uses scoped API keys and versioned endpoints.

Domain Map

Domain	Typical routes	Related product docs
AI systems	/api/ai-systems, /api/ai-systems/classify, /api/v1/ai-systems, /api/v1/ai-systems/batch, /api/v1/ai-systems/import	AI Systems, Feature Index
Assessments	/api/compliance/assessments, /api/v1/assessments, /api/v1/assessments/bulk, /api/v1/assessments/import, /api/v1/assessments/export	Compliance Assessment
Remediation	/api/compliance/remediation, /api/compliance/remediation/plans/, /api/compliance/remediation/tasks/, /api/v1/remediation/*	Compliance Assessment, Governance
Reports and evidence	/api/reports/, /api/evidence/, /api/v1/reports/, /api/v1//export	Documents
Incidents and monitoring	/api/incidents/, /api/post-market/, /api/v1/incidents/*	Incident Management, Post-Market Monitoring
Governance / AIMS	/api/compliance/aims/*	Governance
Trust and external sharing	/api/trust-center/*, /api/reports/[id]/share	Trust Center, Documents
Integrations and settings	/api/settings/, /api/integrations/, /api/sso/*	Integrations/API, Security, Team
GPAI and literacy	/api/gpai/, /api/compliance/ai-literacy/	GPAI Compliance, AI Literacy Training

Authentication Models

Surface	Auth model	Typical purpose
Settings and dashboard admin flows	Authenticated dashboard session	Human operations such as API key management, webhooks, provider connections, trust settings, and SSO setup
Versioned machine API	Bearer API key	Automated reads and writes for systems, assessments, reports, audit, incidents, and remediation
OAuth provider connections	Provider-specific OAuth plus stored encrypted credentials	Jira, Confluence, SharePoint, or ServiceNow connectivity

Do not mix operator and machine flows

A common mistake is trying to automate settings-management endpoints as if they were machine APIs. Use session-backed routes for admin setup tasks and the versioned API for repeatable automation.

Common Integration Patterns

Pattern	Typical starting domain	Why teams do it
Registry sync	AI systems	Mirror internal product inventory into ActLoom so compliance starts from reality rather than manual re-entry
Assessment workflow sync	Assessments and remediation	Push requirement status or remediation state into PM, GRC, or engineering workflows
Report automation	Reports and evidence	Generate recurring artifacts for procurement, leadership, or audit response
Incident escalation	Incidents and monitoring	Create tickets, pages, or downstream notifications when serious events occur
Governance evidence sync	Governance / AIMS	Keep review and audit records aligned with broader management systems

Technical Reading Order

Recommended path for technical teams

Read Integrations/API for setup mechanics and operator-facing configuration.
Read Security to understand identity, secrets, authorization, and machine access boundaries.
Read the specific product section for the domain you automate, such as AI Systems, Compliance Assessment, Documents, or Incident Management.
Use Feature Index when you know the feature name but need the fastest mapping to docs and API surfaces.

Related Sections

Integrations/API

Read the operator-facing setup details, key management flows, webhook model, and release gate mechanics.

Security

Use this for identity boundaries, secret handling, audit trail expectations, and machine access controls.

Artifacts

Follow this when the technical goal is to export or sync a specific compliance output rather than browse by route family.

Feature Index

Use this when you know the capability name and need to map it back to the right API or operational domain.

Ready to get started?

Join hundreds of companies using ActLoom to simplify AI Act compliance. Start your free assessment today — no credit card required.

Start Free Assessment View Pricing

Questions? Contact us at support@actloom.com