Build on Bounda
Integrate HR compliance intelligence directly into your systems. Embed our chatbot, automate document generation, and keep your workforce tools in sync with your handbook.
What you can build
Connect Bounda to your existing tools and workflows. Here's what our enterprise customers are building.
Embed the Handbook Chatbot
Add an AI assistant to your intranet, Slack, or Teams that answers employee policy questions using your actual handbook.
Automate Document Generation
Trigger HR document creation from your HRIS, ticketing system, or custom workflows. 40+ document types covering employment, leave, performance, exit and more — each generated as a Word document.
Sync Compliance Status
Pull real-time compliance scores and gap analysis into your dashboards. Know instantly when policies need attention.
Surface Legal Change Alerts
Poll the legal-change feed and pipe UK employment-law updates into your GRC, ticketing, or alerting stack — bridged via your own scheduler, no Bounda-managed webhooks required.
Five capability areas, 25+ endpoints
Bounda exposes the parts of the platform that integrate cleanly — read access, AI analysis, exports, and the legal-change feed. Editor and billing endpoints stay internal to the SaaS app.
Capabilities
- Server-Sent Events streaming for token-by-token answers
- Source citations attached to every response
- Session-aware: pass a `sessionId` to continue a conversation
- Counts against the customer's monthly chat session limit
- Slack, Teams, intranet, and mobile-app integration patterns
Key Endpoints
Streaming SSE response
Non-streaming JSON response
Need an endpoint that isn't listed here? Section editing, tone profiles, and policy group management are available on request for specific Enterprise integrations — talk to us about your use case.
Five APIs that do the heavy lifting
These are the endpoints our enterprise customers use most. Each one unlocks significant automation potential.
RAG-Powered Chatbot
POST /handbooks/{id}/query/streamAsk natural language questions against the handbook. Streaming SSE responses with source citations, follow-up suggestions, and session-based conversation history.
Compliance Analysis
POST /sections/analysePaste any policy text and get instant compliance analysis. Issues categorised by severity (critical/high/medium/low) with legal citations and recommendations.
AI Redrafting
POST /sections/redraftGenerate compliant versions of non-compliant policies. Tracks all changes with explanations and respects your company tone profile.
Document Generation
POST /document-checker/generateGenerate 40+ HR document types via guided wizard. Automatically checks handbook coverage, detects gaps, and exports to Word.
Export Formats
GET /handbooks/{id}/versions/{v}/export-docxExport complete handbooks or individual versions as Word (.docx) or branded PDF.
RAG-Powered Chatbot API
Embed an AI assistant that answers employee questions using your actual handbook content. Streaming responses, source citations, and conversation history built in.
Real-time Streaming
Server-Sent Events (SSE) for instant, token-by-token responses
Source Citations
Every answer includes references to specific handbook sections
Conversation Context
Session-based history for natural follow-up questions
// Stream chatbot responses with source citations
const response = await fetch(
'https://bounda-co-uk.onrender.com/api/v1/handbooks/{id}/query/stream',
{
method: 'POST',
headers: {
'X-API-Key': 'YOUR_API_KEY',
'Content-Type': 'application/json'
},
body: JSON.stringify({
query: "What's our policy on flexible working?"
})
}
);
// Handle SSE streaming response
const reader = response.body.getReader();
const decoder = new TextDecoder();
while (true) {
const { done, value } = await reader.read();
if (done) break;
const chunk = decoder.decode(value);
// SSE events include:
// - text: streaming answer tokens
// - sources: referenced handbook sections
// - suggestions: follow-up questions
}Works where your team works
Bring HR compliance intelligence to the tools your employees already use.
Slack
Build a Slack bot that lets employees ask policy questions directly in channels or DMs.
Microsoft Teams
Create a Teams bot or tab that surfaces handbook information where your team works.
Intranet / SharePoint
Embed a chatbot widget on your company intranet for self-service policy queries.
Mobile Apps
Add policy Q&A to your employee mobile app with our REST API.
Built for developers
Clean APIs, comprehensive documentation, and predictable behaviour. Get up and running quickly.
RESTful JSON API
Standard REST conventions with JSON request/response bodies under a versioned `/api/v1/*` prefix. Easy to integrate from any language.
Real-time Streaming
Server-Sent Events (SSE) for chatbot responses. Token-by-token streaming for responsive UX, with metadata events carrying source citations.
Pollable Legal Change Feed
The legal-change endpoint is built for polling on your schedule. Drives your own GRC dashboards, ticketing, or alerting — no Bounda-managed webhook delivery to configure.
API Key Authentication
Per-organisation API key, supplied via the `X-API-Key` header. Issued to Enterprise customers as part of integration onboarding.
OpenAPI Documentation
Swagger UI is shared with Enterprise customers during onboarding. Tagged by capability area so the schema matches the categories on this page.
Rate Limiting
AI endpoints rate-limited per organisation with `X-RateLimit-*` and `Retry-After` headers. The chatbot has a separate per-handbook limiter; both share state across the `/api/*` and `/api/v1/*` mounts.
Enterprise-grade security
Your handbook data is sensitive. We treat it that way.
Encryption
All data encrypted in transit (TLS) via the platform edge, and at rest by the managed Postgres provider. HSTS enforced.
Authentication
Per-organisation API key via the `X-API-Key` header. Each key is scoped to a single tenant — never cross-organisation. Keys can be rotated or revoked on request.
Activity Logging
Authenticated API calls are written to a per-organisation activity log with method, route template, status code, and duration — available to your team on request for audit and debugging.
Compliance
GDPR aligned. UK/EU data residency through our managed hosting. Data Processing Agreement provided to Enterprise customers.
Ready to integrate?
API access is available on our Enterprise plan. Talk to our team about your integration needs.