InsuredAudit Developer Portal
InsuredAudit is a tamper-evident audit and evidence platform. Its signed export is the CREB™, the Court Ready Evidence Bundle. This portal documents the public REST API and its OpenAPI specification, webhook contracts, and the operational concepts you need to integrate.
New here? Start with the Quickstart. It walks through provisioning an API key, ingesting your first event, and requesting a signed Court Ready Bundle in under five minutes.
What you can do with the API
- Ingest events - every claim, authorization, decision, payment, communication, or document operation becomes one immutable, hash-chained event in the ledger.
- Store evidentiary documents in the WORM vault - content-addressed by SHA-256, with optional inline malware scanning.
- Request Court Ready Evidence Bundles - a sealed, signed ZIP that proves the state of a member, matter, or incident on a particular date, suitable for legal discovery.
- Manage legal holds + matters that tombstone events against retention sweeps.
- Subscribe to webhooks for downstream automation (HMAC-signed, retried with backoff).
Reference
| Resource | URL |
|---|---|
| API base URL (demo / sandbox) | https://api.insuredaudit.com |
| API base URL (production) | your own internal endpoint - see note below |
| OpenAPI spec | /api/openapi |
| Endpoint index | /api |
| Versioning policy | /api/versioning |
| Status page | status.insuredaudit.com |
| Support | support@insuredaudit.com |
Deployment note.
api.insuredaudit.com is the hosted demo/sandbox. In production, InsuredAudit runs inside your own infrastructure (your cloud or data center, under your HIPAA controls), so member PHI never leaves your boundary. The base URL in every example below becomes your internal endpoint (for example https://insuredaudit.your-plan.internal) - set it once via baseUrl in the SDK or your HTTP client. The API surface, auth, and payloads are identical. See the MCO integration guide.SDKs
TypeScript and Python SDKs are provided to customers and pilot partners on request. The REST API and its OpenAPI specification are public. Both SDKs wrap the same /v1 surface and track the API version through the deprecation window.
- TypeScript / JavaScript: package
@creb/sdk, provided on request (not on the public npm registry). - Python: package
creb-sdk, provided on request (not on PyPI). - Postman + Insomnia collections, auto-generated from the OpenAPI spec on every release.