Export identity data (GDPR Art. 15 DSAR)
Export identity data (GDPR Art. 15 DSAR)
Returns a JSON bundle containing every record Verifa holds for this
identity, decrypted and ready to deliver as part of a GDPR Article 15
Subject Access Request (DSAR).
For each session linked to the identity, this endpoint runs the same
aggregation as `GET /api/v1/sessions/{session_id}/export` and embeds
the result under `sessions[]`. It also adds identity-level fields,
`identity_links`, `identity_relationships`, and a
`face_embeddings_count` (count only — raw embedding bytes are
never returned, even in a DSAR).
**Audit:** Every successful call writes an `api.identity.export`
audit-log entry recording the actor, identity ID, and IP.
**Required scope:** `identities:read`
Authentication
X-API-Keystring
Organization API key. Keys are prefixed with vk_live_ (production) or
vk_sandbox_ (sandbox).
Path parameters
identity_id
Identity ID (idn_*) or external reference.
Headers
Verifa-Version
API version date string (e.g. 2026-02-01). If omitted, the version
pinned to your API key is used.
Key-Inflection
Response key casing. Defaults to snake.
Allowed values:
Response
Decrypted DSAR bundle for the identity.
identity
sessions
Per-session export bundles for every session linked to the identity.
identity_links
Same-person links between identity records.
identity_relationships
Typed relationships to other identities (e.g. spouse, employer).
face_embeddings_count
Number of face embeddings stored against this identity. Raw
embedding bytes are intentionally excluded from DSAR output.
Errors
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error