Enterprise API

Coming soon

The Enterprise API and the services behind it - Gateway, Key Broker, and Companion Agent - are in development and not yet available. The reference below previews the planned control plane.

The Enterprise API covers identity, key management, policy, and audit for managed and self-hosted deployments. It is the control plane behind the Gateway, Key Broker, and Companion Agent.

Authentication

All requests use OAuth 2.0 bearer tokens issued through your identity provider (Microsoft Entra ID, OIDC, or SAML). Admin and analyst tokens require phishing-resistant MFA.

text

Authorization: Bearer <token>

Issue an access lease

bash

curl -X POST https://api.osdfsystems.com/v1/access/lease \  -H "Authorization: Bearer $TOKEN" \  -d '{ "doc_id": "01J9…", "compartment": "clinical", "ttl": "300s" }'

json

{ "lease_id": "lse_…", "wrapped_dek": "base64url…", "expires": "2026-02-11T17:09:00Z" }

Policy & audit

Endpoint	Purpose
`POST /v1/policy/evaluate`	Evaluate an access decision
`GET /v1/audit/events`	Stream signed audit events
`POST /v1/keys/rotate`	Rotate a customer KEK epoch
`GET /v1/keys/epochs`	List signed key epochs

Deployment

The control plane runs as a managed service or fully self-hosted in your cloud or on-prem environment, with customer-held KEKs in your own HSM or KMS.