generated: '2026-07-18'
method: derived
source: https://avify.com/docs/introduccion-api
# Cross-cutting standards conformance derived from the documented API surface.
# No published compliance certifications (SOC 2 / ISO 27001 / PCI / etc.) were found.
standards:
  - id: graphql
    conforms: true
    evidence: Primary API is GraphQL (https://api.avify.com/graphql).
  - id: rest
    conforms: true
    evidence: Secondary REST API under /api/v1.
  - id: oauth2
    conforms: false
    evidence: API uses a static api-key header; no OAuth2.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a custom envelope (error.code/displayMessage/status), not application/problem+json.
  - id: iso8601-timestamps
    conforms: true
    evidence: Order created/updated fields use ISO-8601 strings (plus Unix epoch variants).
  - id: iso4217-currency
    conforms: true
    evidence: costs.baseCurrencyCode / orderCurrencyCode use ISO 4217 codes.
  - id: iso3166-country
    conforms: true
    evidence: shipping/billing country uses alpha-2 country codes.
  - id: pagination
    conforms: true
    evidence: products query paginated via pageNum/pageSize.
  - id: idempotency
    conforms: false
    evidence: No idempotency-key mechanism documented.