MattAlfieDemo Trust Center

Security & Compliance Data

Get MattAlfieDemo’s security and compliance information programmatically. Public details are open to anyone; protected documents and records require approved access.

Base URL: https://dev-trust.intelligrc.app

Open information — available to anyone

Method	Endpoint
GET	This documentation page The plain-English guide to everything listed here. https://dev-trust.intelligrc.app/api/docs Developer details This page.

Protected — for approved requesters

These need an approved access grant and an API token. See How access works below.

Method	Endpoint
GET	Protected document list The list of documents that sit behind approval. https://dev-trust.intelligrc.app/api/documents Developer details NDA-gated document list with download links. Returns 401/403 when not authorized.
GET	Open a document A one-time secure link to open a specific protected document. https://dev-trust.intelligrc.app/api/documents/{documentId}/download Developer details Resolves a grant-scoped document download URL (302 redirect to SAS URL). Returns 404 when document is not visible from this slug.
GET	Protected package list The list of document bundles behind approval. https://dev-trust.intelligrc.app/api/packages Developer details NDA-gated package list. Returns 401/403 when not authorized.
GET	Download a bundle A secure ZIP of a bundle's documents. https://dev-trust.intelligrc.app/api/packages/{packageId}/download Developer details Streams a grant-scoped package ZIP (200 with application/zip). Returns 404 when package is not visible from this slug.
GET	System Security Plan (OSCAL) — CMMC 2.0 Level 2 A full System Security Plan for CMMC 2.0 Level 2 in the NIST OSCAL format, for GRC and compliance tools. https://dev-trust.intelligrc.app/api/oscal/ssp/cmmc-2-0-level-2.json Developer details OSCAL 1.2.2 SSP for CMMC 2.0 Level 2, built from the tenant evaluation. Access-gated. Returns 401 (no identity) or 403 (no grant).
GET	Your access log Your own access history for this Trust Center — the events, targets, and times of your own activity. https://dev-trust.intelligrc.app/account/access-log Developer details Returns only your own events, never another requester's; no IP address or user agent is ever recorded. Access summaries are retained for at least six months.

The Agency Access Report (federal-agency inventory and access history) is produced by the trust-center operator and shared with FedRAMP on request. It is a federal-only artifact and excludes non-federal requesters; it is not exposed as a public API endpoint.

How access works

Request access from the Trust Center home page.
Wait to be approved by MattAlfieDemo.
Once approved, create an API token on your account page.

Send that token as a Bearer token in the Authorization header on every request to a protected endpoint:

Authorization: Bearer <your-token>