generated: '2026-07-20'
method: derived
source: openapi/ondemand-openapi.json
standards:
- id: oauth2
  conforms: false
  evidence: No oauth2 securityScheme; the API uses an apiKey (apikey header) scheme.
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use standard HTTP status codes, not application/problem+json.
- id: rfc8594-sunset-header
  conforms: false
- id: pagination
  conforms: true
  evidence: Documents offset-based and cursor-based pagination with sort.
- id: rate-limiting
  conforms: true
  evidence: Per-object rate limits documented; 429 on exceed.
- id: webhooks
  conforms: true
  evidence: Chat and media APIs support a webhook response mode.
- id: json
  conforms: true
  evidence: Requests/responses are application/json.
compliance_program:
  published: false
  note: >-
    No public trust center, SOC 2 / ISO 27001 / HIPAA / PCI / FedRAMP
    certification page was found during this pass. No Compliance pointer emitted.