Enterprise API

Build on Bounda

Integrate HR compliance intelligence directly into your systems. Embed our chatbot, automate document generation, and keep your workforce tools in sync with your handbook.

25+
Public API Endpoints
5
Capability Areas
REST
JSON + SSE
Use Cases

What you can build

Connect Bounda to your existing tools and workflows. Here's what our enterprise customers are building.

Embed the Handbook Chatbot

Add an AI assistant to your intranet, Slack, or Teams that answers employee policy questions using your actual handbook.

Slack bot for policy Q&ATeams integrationIntranet widgetMobile app assistant

Automate Document Generation

Trigger HR document creation from your HRIS, ticketing system, or custom workflows. 40+ document types covering employment, leave, performance, exit and more — each generated as a Word document.

Auto-generate offer letters from ATSCreate disciplinary docs from HR ticketsCompliance-check uploaded employment docsSettlement agreement drafting

Sync Compliance Status

Pull real-time compliance scores and gap analysis into your dashboards. Know instantly when policies need attention.

Executive compliance dashboardRisk management integrationAudit reportingPolicy health monitoring

Surface Legal Change Alerts

Poll the legal-change feed and pipe UK employment-law updates into your GRC, ticketing, or alerting stack — bridged via your own scheduler, no Bounda-managed webhooks required.

Hourly poll into a GRC dashboardAuto-create JIRA ticketsSlack/Teams alert botsCustom email digests
API Reference

Five capability areas, 25+ endpoints

Bounda exposes the parts of the platform that integrate cleanly — read access, AI analysis, exports, and the legal-change feed. Editor and billing endpoints stay internal to the SaaS app.

Capabilities

  • Server-Sent Events streaming for token-by-token answers
  • Source citations attached to every response
  • Session-aware: pass a `sessionId` to continue a conversation
  • Counts against the customer's monthly chat session limit
  • Slack, Teams, intranet, and mobile-app integration patterns

Key Endpoints

POST/handbooks/{id}/query/stream

Streaming SSE response

POST/handbooks/{id}/query

Non-streaming JSON response

Need an endpoint that isn't listed here? Section editing, tone profiles, and policy group management are available on request for specific Enterprise integrations — talk to us about your use case.

Power Features

Five APIs that do the heavy lifting

These are the endpoints our enterprise customers use most. Each one unlocks significant automation potential.

RAG-Powered Chatbot

POST /handbooks/{id}/query/stream

Ask natural language questions against the handbook. Streaming SSE responses with source citations, follow-up suggestions, and session-based conversation history.

Real-time streamingSource citationsFollow-up suggestionsSession history

Compliance Analysis

POST /sections/analyse

Paste any policy text and get instant compliance analysis. Issues categorised by severity (critical/high/medium/low) with legal citations and recommendations.

Severity ratingsLegal citationsActionable recommendationsIssue tracking

AI Redrafting

POST /sections/redraft

Generate compliant versions of non-compliant policies. Tracks all changes with explanations and respects your company tone profile.

Change trackingTone profile supportLegal groundingBefore/after diff

Document Generation

POST /document-checker/generate

Generate 40+ HR document types via guided wizard. Automatically checks handbook coverage, detects gaps, and exports to Word.

40+ document typesGap detectionGuided wizardDOCX export

Export Formats

GET /handbooks/{id}/versions/{v}/export-docx

Export complete handbooks or individual versions as Word (.docx) or branded PDF.

Word exportPDF exportVersioned exportsProfessional formatting
Featured API

RAG-Powered Chatbot API

Embed an AI assistant that answers employee questions using your actual handbook content. Streaming responses, source citations, and conversation history built in.

Real-time Streaming

Server-Sent Events (SSE) for instant, token-by-token responses

Source Citations

Every answer includes references to specific handbook sections

Conversation Context

Session-based history for natural follow-up questions

chatbot-example.js
// Stream chatbot responses with source citations
const response = await fetch(
  'https://bounda-co-uk.onrender.com/api/v1/handbooks/{id}/query/stream',
  {
    method: 'POST',
    headers: {
      'X-API-Key': 'YOUR_API_KEY',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      query: "What's our policy on flexible working?"
    })
  }
);

// Handle SSE streaming response
const reader = response.body.getReader();
const decoder = new TextDecoder();

while (true) {
  const { done, value } = await reader.read();
  if (done) break;
  
  const chunk = decoder.decode(value);
  // SSE events include:
  // - text: streaming answer tokens
  // - sources: referenced handbook sections
  // - suggestions: follow-up questions
}
Integrations

Works where your team works

Bring HR compliance intelligence to the tools your employees already use.

Slack

Build a Slack bot that lets employees ask policy questions directly in channels or DMs.

Slash commandsInteractive messagesThread replies

Microsoft Teams

Create a Teams bot or tab that surfaces handbook information where your team works.

Bot frameworkAdaptive cardsTab integration

Intranet / SharePoint

Embed a chatbot widget on your company intranet for self-service policy queries.

Embeddable widgetSSO supportCustom styling

Mobile Apps

Add policy Q&A to your employee mobile app with our REST API.

iOS & AndroidPush notificationsOffline cache
Developer Experience

Built for developers

Clean APIs, comprehensive documentation, and predictable behaviour. Get up and running quickly.

RESTful JSON API

Standard REST conventions with JSON request/response bodies under a versioned `/api/v1/*` prefix. Easy to integrate from any language.

Real-time Streaming

Server-Sent Events (SSE) for chatbot responses. Token-by-token streaming for responsive UX, with metadata events carrying source citations.

Pollable Legal Change Feed

The legal-change endpoint is built for polling on your schedule. Drives your own GRC dashboards, ticketing, or alerting — no Bounda-managed webhook delivery to configure.

API Key Authentication

Per-organisation API key, supplied via the `X-API-Key` header. Issued to Enterprise customers as part of integration onboarding.

OpenAPI Documentation

Swagger UI is shared with Enterprise customers during onboarding. Tagged by capability area so the schema matches the categories on this page.

Rate Limiting

AI endpoints rate-limited per organisation with `X-RateLimit-*` and `Retry-After` headers. The chatbot has a separate per-handbook limiter; both share state across the `/api/*` and `/api/v1/*` mounts.

Security

Enterprise-grade security

Your handbook data is sensitive. We treat it that way.

Encryption

All data encrypted in transit (TLS) via the platform edge, and at rest by the managed Postgres provider. HSTS enforced.

Authentication

Per-organisation API key via the `X-API-Key` header. Each key is scoped to a single tenant — never cross-organisation. Keys can be rotated or revoked on request.

Activity Logging

Authenticated API calls are written to a per-organisation activity log with method, route template, status code, and duration — available to your team on request for audit and debugging.

Compliance

GDPR aligned. UK/EU data residency through our managed hosting. Data Processing Agreement provided to Enterprise customers.

Ready to integrate?

API access is available on our Enterprise plan. Talk to our team about your integration needs.

Enterprise Plan includes:

Full API access
Custom branding
SSO integration
Dedicated support
SLA guarantee
Priority rate limits