How do I export everything Maditon holds about my company?
Two self-serve endpoints. GET /api/data-act/export returns all organisation-level data as machine-readable JSON under EU Data Act Article 4, and GET /api/data-act/evidence returns every evidence file as a ZIP. There is no approval step, no support ticket and no waiting period — and a separate GDPR export covers an individual user's personal data.
The EU Data Act gives customers — organisations, not only individuals — the right to everything their use of a product generates. Maditon implements that as two ordinary API calls.
GET /api/data-act/export returns the account-level data: AI systems,
classifications and their citations, obligation checklists and their status,
evidence metadata, registration records, audit log, billing history,
configuration. JSON, documented schema, no proprietary format.
GET /api/data-act/evidence returns the evidence files themselves as a
ZIP archive.
GET /api/gdpr/export is the separate, narrower one: an individual’s
personal data under GDPR Articles 15 and 20, scoped to the authenticated user.
The design constraint is that leaving must not be harder than staying. No ticket, no approval gate, no notice period, no drip-feed pagination, and open formats throughout — a customer who exports everything and migrates to a competitor should find the export sufficient to do it.
Related API endpoints
/api/data-act/export bearer Export all organisation-level data (EU Data Act Article 4)
/api/data-act/evidence bearer Download all evidence files as a ZIP archive
/api/gdpr/export bearer Export the authenticated user's personal data (GDPR Articles 15 and 20)
Base URL https://api.maditon.app ·
full specification at openapi.json
Regulation references
- Regulation (EU) 2023/2854 (EU Data Act) · CELEX 32023R2854
- Regulation (EU) 2016/679 (GDPR) · CELEX 32016R0679
Read next
A free Solo account runs a real classification on one of your own systems — no card, no sales call.
Run a free classification