Skip to content

complyform export

Export assessment results to audit and GRC platforms.

Terminal window
complyform export [options]
FlagTypeDefaultDescription
--formatscc-json|audit-manager|purview|vanta|drata|secureframe|grc-jsonTarget export format
--api-keystringGRC platform API key (Vanta/Drata/Secureframe)
--api-secretstringGRC platform API secret (Secureframe)
--client-idstringOAuth2 client ID (Vanta)
--client-secretstringOAuth2 client secret (Vanta)
--scan-idstringlatestExport specific cached assessment
--project-labelstringlatest scanDashboard project to export
--batchpathBatch export for all projects in manifest (Agency)
--file-onlyboolfalseGenerate files only, skip API push
--outputpath./exportsOutput directory
--include-passingboolfalseInclude PASS findings (default: FAIL + MANUAL_REVIEW only)
--sf-regionus|uk|euusSecureframe API region. Env var: SECUREFRAME_REGION.

Export to SCC format (Team+):

Terminal window
complyform export --format=scc-json

Push to Vanta (Agency):

Terminal window
complyform export --format=vanta --client-id=$VANTA_CLIENT_ID --client-secret=$VANTA_CLIENT_SECRET

File-only export (Agency):

Terminal window
complyform export --format=drata --file-only
  • assess — Run assessment before exporting
  • report — Generate reports instead of exporting