| CPC G06F 21/105 (2013.01) [G06F 9/546 (2013.01); G06F 9/547 (2013.01); G06Q 20/027 (2013.01); G06Q 20/227 (2013.01); G06Q 30/018 (2013.01); G06F 21/1077 (2023.08)] | 21 Claims |

|
1. A method for processing application programming interface (API) requests to retrieve content with compliance control, the method comprising:
establishing, by a server, a plurality of API endpoints each tailored to a respective compliance content type of a plurality of compliance content types, wherein the plurality of API endpoints forms a hierarchy of linked responders to API invocations;
receiving, from a requesting application and by a first API endpoint of the plurality of API endpoints that is tailored to a first compliance type of the plurality of compliance content types, a first API invocation comprising a first argument identifying one or more units of compliance content of the first compliance type to return;
responsive to the first API invocation:
constructing a first response message containing the one or more units of compliance content of the first compliance type identified by the first argument, the one or more units of compliance content of the first compliance type including content identifying information that identifies one or more units of compliance content of a second compliance type of the plurality of compliance content types; and
transmitting the first response message to the requesting application; receiving, from the requesting application and by a second API endpoint of the plurality of API endpoints that is tailored to the second compliance type of the plurality of compliance content types, a second API invocation comprising a second argument identifying the one or more units of compliance content of the second compliance type to return, using at least a portion of the content identifying information included in the first response message;
responsive to the second API invocation:
constructing a second response message containing the one or more units of compliance content of the second compliance type as identified by the second argument, the one or more units of compliance content of the second compliance type including a mandate object that includes, for a particular mandate:
a copy of the particular mandate; and
identifying information for a control to which the particular mandate has been mapped constituting a deduplication of the particular mandate against one or more equivalent other mandates, the identifying information usable used by the requesting application to retrieve an object containing the control via a third API endpoint; and
transmitting the second response message to the requesting application.
|