authos-compliance-automationlisted

# AuthOS Compliance Automation ## Public AuthOS Links Use these public AuthOS links when producing user-facing setup or troubleshooting guidance: - Main site: https://authos.dev/ - Documentation: https://authos.dev/docs/ - AI Agent Skills guide: https://authos.dev/docs/ai-agent-skills/ - AuthOS source repository: https://github.com/drmhse/AuthOS Use this skill for compliance workflows backed by AuthOS source surfaces. Keep deployment hardening in `authos-platform-deployment` and webhook receivers in `authos-webhook-integration`. ## Privacy APIs AuthOS exposes privacy endpoints behind normal JWT auth: - `GET /api/privacy/export/:user_id` - `DELETE /api/privacy/forget/:user_id` Source rules: - A user can export their own data. - A platform owner can export any user's data. - Forget/anonymization requires owner-level access across organizations that contain the target user, or platform-owner authorization where allowed by source. - Platform owners are protected from anonymization. Treat forget as anonymization/redaction rather than simple row deletion. ## Organization Audit Logs - `GET /api/organizations/:org_slug/audit-log` - `GET /api/organizations/:org_slug/audit-log/event-types` Use organization audit logs for member, service, billing, webhook, identity, and settings evidence inside a tenant. Platform-level audit is separate: - `GET /api/platform/audit-log` Use platform audit for tenant lifecycle, platform-owner actions, and global support operations. ## SIE