# Apperio

> Apperio is a legal spend management and matter management platform for in-house legal teams. Its REST API exposes the same secure, high-performance data that powers Apperio's analytics visualisations — legal spend analytics, matter (engagement) discovery, matter tagging, and e-billing invoice approval workflows across a two-sided business/law-firm platform. Authentication is a user-scoped API token in the Authorization header.

## API
- [Apperio API Documentation](https://developer.apperio.com/): ReDoc reference for the v1 REST API
- [OpenAPI 3.0.3 spec](https://developer.apperio.com/apperio-api.yaml): machine-readable definition (24 paths, 30 operations)
- Base URL (production): https://app.apperio.com/api/v1
- Base URL (sandbox): https://sandbox.apperio.com/api/v1
- Authentication: `Authorization: Token <TOKEN VALUE>` (create on the profile page; contact Customer Success to enable API access)

## Capabilities
- Analytics: `GET /api/v1/data/analytics` — aggregated legal-spend analytics
- Filter/discovery: engagements (matters), invoices, matter tags, matter tag sets (`/api/v1/filter/...`)
- Matter tagging: create/rename/delete tags and link/unlink them to matters
- E-billing: get invoices, change status, approval workflow (approve/reject/adjust/query), invoice attributes, business attributes
- Users: manage API tokens (`/api/v1/users/tokens/`)

## Conventions
- Pagination: cursor via `page` / `page-size` (default 50) with `ordering`; response `pagination` object carries `next`/`previous`/`nextPage`/`previousPage`
- Capabilities: each endpoint declares BUSINESS / LAW_FIRM / PAGINATION access
- Errors: field-keyed message arrays (DRF-style), not RFC 9457; statuses 400/401/403/404/429
- Rate limits: 10,000 requests/hour per token, requests in series (not parallel), HTTP 429 on exceed
- Versioning: URI-path major version (v1); 6-month support window per superseded major version

## Company
- [Apperio website](https://www.apperio.com): product overview and resources
- [Information Security](https://www.apperio.com/information-security): ISO 27001 (#23430), SOC 2 Type 2, Cyber Essentials
- [Privacy Notice](https://www.apperio.com/privacy-notice)
- [Terms and Conditions](https://www.apperio.com/terms-and-conditions)
- [Sign in](https://app.apperio.com/login/)