Concord Privacy API Overview

Overview

The Concord Privacy API (Privacy V1) provides full access to the Concord platform for registered organizations. Use it from your own servers to sync consent records, manage privacy requests, keep your data map current, and automate project settings.

To connect an AI assistant such as Claude or ChatGPT, you don't need the API. See Connecting AI Assistants to Concord (MCP).

Base URL

https://api.concord.tech/privacy-v1

Authentication

Every request sends an API key in the x-api-key header.

1. In Concord, go to Integrations → AI & API Access → API Keys and click Add API Key.
2. Pick the role the integration needs: Limited (read only, plus adding or editing compliance requests), Admin, or Owner (adds billing). See Adding and Managing API Keys.
3. Keep the key on your server. Never ship it in browser or mobile app code.

curl https://api.concord.tech/privacy-v1/organizations \
  -H "x-api-key: YOUR_API_KEY"

Organization and Project IDs

Most paths are scoped to an organization, and many to a project inside it:

/organizations/{organizationId}/projects/{projectId}/...

Call Get organizations to find your organization ID, then Get projects for project IDs. A project's ID is also shown in Concord under Deployment → Installation → Install Concord.

Endpoint Groups

Organization and Access

• Organizations and Projects
• Users, API Keys, and Public Keys
• Emails (send-from addresses)

Consent

• Consent Events and Consent Types
• Domains, Regions, and Languages
• Trackers
• IAB TCF: Purposes, Stacks, and Vendors

Scans

• Tracker Scans, GCM Scans, and Compliance Scans

Privacy Requests

• Compliance Requests (DSARs and other privacy requests)
• Integrations (connector results for a request)

Data Mapping

• Data Systems and Data System Connections (data flows)
• Processing Activities and ROPA Reports

OpenAPI Specification

The full specification is published at api.concord.tech/docs/json/privacy-v1/ for code generators and API clients.