InsuredAudit Developer Portal
The InsuredAudit platform (internal codename CREB — Court Ready Evidentiary Bundle) is a tamper-evident audit and evidence platform for regulated industries. This portal documents the public REST API, official SDKs (TypeScript and Python), webhook contracts, and operational concepts you need to integrate.
New here? Start with the Quickstart. It walks through provisioning an API key, ingesting your first event, and requesting a signed Court Ready Bundle in under five minutes.
What you can do with the API
- Ingest events — every claim, authorization, decision, payment, communication, or document operation becomes one immutable, hash-chained event in the ledger.
- Store evidentiary documents in the WORM vault — content-addressed by SHA-256, with optional inline malware scanning.
- Request Court Ready Evidentiary Bundles — a sealed, signed ZIP that proves the state of a member, matter, or incident on a particular date, suitable for legal discovery.
- Manage legal holds + matters that tombstone events against retention sweeps.
- Subscribe to webhooks for downstream automation (HMAC-signed, retried with backoff).
Reference
| Resource | URL |
|---|---|
| API base URL (demo / sandbox) | https://api.insuredaudit.com |
| API base URL (production) | your own internal endpoint — see note below |
| OpenAPI spec | /api/openapi |
| Endpoint index | /api |
| Versioning policy | /api/versioning |
| Status page | status.insuredaudit.com |
| Support | [email protected] |
Deployment note.
api.insuredaudit.com is the hosted demo/sandbox. In production, InsuredAudit runs inside your own infrastructure (your cloud or data center, under your HIPAA controls), so member PHI never leaves your boundary. The base URL in every example below becomes your internal endpoint (for example https://insuredaudit.your-plan.internal) — set it once via baseUrl in the SDK or your HTTP client. The API surface, auth, and payloads are identical. See the MCO integration guide.SDKs
Two official SDKs ship today; both wrap the same /v1 surface and track the API version through the deprecation window.
- TypeScript / JavaScript —
@creb/sdkon npm. - Python —
creb-sdkon PyPI. - Postman + Insomnia collections — auto-generated from the OpenAPI spec on every release.
