generated: '2026-08-14'
method: searched
source: >-
  openapi/getaccept-openapi-original.json ; https://www.getaccept.com/security ;
  https://help.getaccept.com/en/collections/9436688-api
standards:
- id: oauth2
  conforms: true
  evidence: openapi securitySchemes type oauth2 (authorizationCode flow)
- id: oauth2-authorization-code
  conforms: true
  evidence: authorizationUrl + tokenUrl at app.getaccept.com/oauth2
- id: bearer-token
  conforms: true
  evidence: http bearer Token security scheme
- id: rest
  conforms: true
  evidence: resource-oriented paths, JSON bodies over HTTPS
- id: pagination-limit-offset
  conforms: true
  evidence: limit/offset query params on list operations
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a plain JSON {error,description,status} envelope, not application/problem+json
- id: idempotency
  conforms: false
  evidence: no idempotency-key mechanism documented
- id: openidconnect
  conforms: false
- id: soc2
  conforms: true
  evidence: SOC 2 attested per https://www.getaccept.com/security
- id: gdpr
  conforms: true
  evidence: GDPR compliance per https://www.getaccept.com/security
- id: ccpa
  conforms: true
  evidence: named on https://www.getaccept.com/security
- id: eidas
  conforms: true
  evidence: >-
    "GetAccept's eSignatures are compliant with eIDAS" (EU Regulation No 910/2014) per
    https://www.getaccept.com/security
- id: esign-act
  conforms: true
  evidence: US ESIGN Act named on https://www.getaccept.com/security
- id: ueta
  conforms: true
  evidence: US UETA named on https://www.getaccept.com/security
- id: uk-electronic-communications-act-2000
  conforms: true
  evidence: named on https://www.getaccept.com/security
- id: iso-27001
  conforms: false
  evidence: not claimed anywhere on the GetAccept security page
- id: rate-limit-headers
  conforms: false
  evidence: >-
    no RateLimit-*/X-RateLimit-* headers and no 429 response declared on any of the 86 operations; see
    rate-limits/getaccept-rate-limits.yml
- id: rfc8594-sunset
  conforms: false
  evidence: no Sunset/Deprecation header or deprecation policy published
- id: security-txt
  conforms: false
  evidence: >-
    RFC 9116 security.txt absent on every host; see well-known/getaccept-well-known.yml