Skip to main content

Evidence Export Pack

Evidence Export produces a bundled JSON file containing audit logs, workflow step records, and HITL approval decisions for a specified time window. Use it to share governance evidence with internal reviewers, security teams, or compliance stakeholders without giving them direct API access.

This feature is available starting with the Evaluation tier (free).

Evaluation Tier

Evidence Export is available with a free Evaluation license. Register at getaxonflow.com/evaluation-license and set AXONFLOW_LICENSE_KEY on your server.


How It Works

  1. Call the export endpoint with a date range and optional record types
  2. AxonFlow bundles matching audit logs, workflow steps, and HITL approvals into a single JSON response
  3. The response includes export metadata, record counts, and daily usage tracking
  4. Evaluation exports include a top-level disclaimer field; Enterprise exports omit it

Tier Comparison

CapabilityCommunityEvaluationEnterprise
Evidence Export--
Evidence Summary--
Time window--14 days maxUnlimited
Max records per export--5,000Unlimited
Exports per day--3Unlimited
Disclaimer--Top-level fieldNo (clean)
Regulator-specific formats----EU AI Act, SEBI, MAS, EBA
Scheduled exports----

API Reference

Export Evidence Pack

POST /api/v1/evidence/export
curl -X POST "http://localhost:8081/api/v1/evidence/export" \
-H "X-Tenant-ID: my-org" \
-H "Content-Type: application/json" \
-d '{
"start_date": "2026-02-15",
"end_date": "2026-03-01",
"types": ["audit_logs", "workflow_steps", "hitl_approvals"],
"limit": 1000
}'
FieldTypeRequiredDescription
start_datestringYesStart of date range (YYYY-MM-DD or RFC3339)
end_datestringNoEnd of date range (defaults to now)
typesstring[]NoRecord types to include: audit_logs, workflow_steps, hitl_approvals (all if omitted)
limitintegerNoMax records per type (capped by tier limit)

Response:

{
"export_id": "3a7c9e2f-1b4d-4e8a-9c6f-2d5e8b1a3c7f",
"tenant_id": "my-org",
"tier": "Evaluation",
"date_range": {
"start": "2026-02-15T00:00:00Z",
"end": "2026-03-01T00:00:00Z"
},
"disclaimer": "NOT FOR REGULATORY SUBMISSION - EVALUATION LICENSE",
"record_count": 142,
"audit_logs": [
{
"id": "f1a2b3c4-...",
"tenant_id": "my-org",
"client_id": "client-1",
"request_type": "chat",
"query": "Transfer $500,000 to...",
"blocked": true,
"risk_score": 0.92,
"created_at": "2026-02-28T14:22:00Z"
}
],
"workflow_steps": [
{
"id": 1,
"workflow_id": "wf-abc-123",
"step_id": "step-2",
"step_type": "llm_call",
"status": "completed",
"tenant_id": "my-org",
"started_at": "2026-02-28T14:22:01Z",
"completed_at": "2026-02-28T14:22:03Z"
}
],
"hitl_approvals": [
{
"id": 1,
"request_id": "req-abc-123",
"tenant_id": "my-org",
"original_query": "review-step",
"request_type": "wcp_step_gate",
"status": "approved",
"severity": "high",
"created_at": "2026-02-28T14:22:03Z",
"expires_at": "2026-03-01T14:22:03Z",
"reviewed_at": "2026-02-28T14:35:00Z"
}
],
"exported_at": "2026-03-01T12:00:00Z",
"daily_usage": {
"used": 1,
"limit": 3
}
}
FieldTypeDescription
export_idstringUnique export identifier (UUID)
tenant_idstringTenant that owns the data
tierstringCurrent license tier
date_rangeobjectstart and end timestamps
disclaimerstringWatermark text (Evaluation only, omitted for Enterprise)
record_countintegerTotal records across all types
audit_logsarrayAudit log records (if requested)
workflow_stepsarrayWorkflow step records (if requested)
hitl_approvalsarrayHITL approval records (if requested)
exported_atstringISO 8601 export timestamp
daily_usageobjectExport quota usage (omitted for Enterprise/unlimited)

Evidence Summary

Returns aggregate counts by record type. Useful for quick checks before running a full export.

GET /api/v1/evidence/summary
curl -X GET "http://localhost:8081/api/v1/evidence/summary" \
-H "X-Tenant-ID: my-org"

The summary looks back over the tier's window (14 days for Evaluation, up to 10 years for Enterprise). No query parameters are needed -- the window is determined by your license tier.

Response:

{
"tenant_id": "my-org",
"tier": "Evaluation",
"window_days": 14,
"counts": {
"audit_logs": 1247,
"workflow_steps": 389,
"hitl_approvals": 42,
"total": 1678
},
"generated_at": "2026-03-01T12:00:00Z",
"disclaimer": "NOT FOR REGULATORY SUBMISSION - EVALUATION LICENSE"
}
FieldTypeDescription
tenant_idstringTenant that owns the data
tierstringCurrent license tier
window_daysintegerLookback window in days
counts.audit_logsintegerNumber of audit log records
counts.workflow_stepsintegerNumber of workflow step records
counts.hitl_approvalsintegerNumber of HITL approval records
counts.totalintegerSum of all record counts
generated_atstringISO 8601 timestamp
disclaimerstringWatermark text (Evaluation only, omitted for Enterprise)

Evaluation Tier Limits

LimitValue
Max time window14 days
Max records per export5,000
Exports per day3
DisclaimerTop-level disclaimer field in response
Regulator-specific formatsNot available (Enterprise only)
Scheduled exportsNot available (Enterprise only)
Evaluation Disclaimer

Evaluation exports include a top-level disclaimer field:

"disclaimer": "NOT FOR REGULATORY SUBMISSION - EVALUATION LICENSE"

This disclaimer appears once in the export response and in the summary response. It is omitted entirely in Enterprise exports.


Use Cases

Internal Security Review

Export audit logs for a weekly security review:

curl -X POST "http://localhost:8081/api/v1/evidence/export" \
-H "X-Tenant-ID: my-org" \
-H "Content-Type: application/json" \
-d '{
"start_date": "2026-02-22",
"end_date": "2026-03-01",
"types": ["audit_logs"]
}'

HITL Approval Audit

Export all approval decisions for review:

curl -X POST "http://localhost:8081/api/v1/evidence/export" \
-H "X-Tenant-ID: my-org" \
-H "Content-Type: application/json" \
-d '{
"start_date": "2026-02-15",
"end_date": "2026-03-01",
"types": ["hitl_approvals", "workflow_steps"]
}'

Pre-Upgrade Baseline

Before upgrading from Evaluation to Enterprise, export a baseline of your governance activity:

# Check what's available
curl -X GET "http://localhost:8081/api/v1/evidence/summary" \
-H "X-Tenant-ID: my-org"

# Export everything
curl -X POST "http://localhost:8081/api/v1/evidence/export" \
-H "X-Tenant-ID: my-org" \
-H "Content-Type: application/json" \
-d '{
"start_date": "2026-02-15",
"end_date": "2026-03-01"
}'