Request a DSAR / tenant-export job
Request a new DSAR / tenant-export job. scope.kind selects the export semantics: DATA_SUBJECT (GDPR DSAR for one subject — requires scope.dataSubjectId; configuration sections are excluded under data minimisation), TENANT_FULL (operator-initiated full-tenant backup), or TENANT_SLICE (time-windowed slice — requires scope.windowStart + scope.windowEnd). The job lands REQUESTED; drive it with POST /v1/compliance/dsar/{jobId}/run. Per-tenant cap: 5 active (non-terminal) jobs at once — beyond the cap the request returns 429 RATE_LIMITED with a retry-after header. Requires scope audit:read — the job reads everything and destroys nothing.
Authorizations
API key sent as Authorization: Bearer <api-key>.