Upload a Compliance Document

Upload a compliance document

curl --request POST \
  --url https://public.api.live.turrisfi.com/v2/downstream/documents \
  --header 'Content-Type: multipart/form-data' \
  --form 'category=E&O' \
  --form file='@example-file' \
  --form downstreamEntityId=6610b3d2c2e0a51b8c0d1f02

const form = new FormData();
form.append('category', 'E&O');
form.append('file', '<string>');
form.append('downstreamEntityId', '6610b3d2c2e0a51b8c0d1f02');

const options = {method: 'POST'};

options.body = form;

fetch('https://public.api.live.turrisfi.com/v2/downstream/documents', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://public.api.live.turrisfi.com/v2/downstream/documents"

files = { "file": ("example-file", open("example-file", "rb")) }
payload = {
    "category": "E&O",
    "downstreamEntityId": "6610b3d2c2e0a51b8c0d1f02"
}

response = requests.post(url, data=payload, files=files)

print(response.text)

{
  "data": {
    "fileDocumentId": "66a1b2c3d4e5f6a7b8c9d0e3",
    "name": "E&O Policy",
    "category": "E&O",
    "versions": [
      {
        "s3VersionId": "xN3TmQ8bJ0dY5fLpQ2rV9wK1sA6cE4hZ",
        "metadataModel": "EAndOPolicy",
        "size": 284913,
        "mimeType": "application/pdf",
        "originalFileName": "example-eando-2026.pdf"
      }
    ],
    "subCategory": "<string>",
    "createdAt": "2025-01-15T10:30:00.000Z",
    "updatedAt": "2026-02-12T09:00:00.000Z"
  },
  "requestId": "dev-2c5e7cf2-9acf-4c8c-ab2f-b81f39d775a8",
  "timestamp": "2025-11-12T20:49:03.293Z"
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

POST

downstream

documents

Upload a compliance document

curl --request POST \
  --url https://public.api.live.turrisfi.com/v2/downstream/documents \
  --header 'Content-Type: multipart/form-data' \
  --form 'category=E&O' \
  --form file='@example-file' \
  --form downstreamEntityId=6610b3d2c2e0a51b8c0d1f02

const form = new FormData();
form.append('category', 'E&O');
form.append('file', '<string>');
form.append('downstreamEntityId', '6610b3d2c2e0a51b8c0d1f02');

const options = {method: 'POST'};

options.body = form;

fetch('https://public.api.live.turrisfi.com/v2/downstream/documents', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://public.api.live.turrisfi.com/v2/downstream/documents"

files = { "file": ("example-file", open("example-file", "rb")) }
payload = {
    "category": "E&O",
    "downstreamEntityId": "6610b3d2c2e0a51b8c0d1f02"
}

response = requests.post(url, data=payload, files=files)

print(response.text)

{
  "data": {
    "fileDocumentId": "66a1b2c3d4e5f6a7b8c9d0e3",
    "name": "E&O Policy",
    "category": "E&O",
    "versions": [
      {
        "s3VersionId": "xN3TmQ8bJ0dY5fLpQ2rV9wK1sA6cE4hZ",
        "metadataModel": "EAndOPolicy",
        "size": 284913,
        "mimeType": "application/pdf",
        "originalFileName": "example-eando-2026.pdf"
      }
    ],
    "subCategory": "<string>",
    "createdAt": "2025-01-15T10:30:00.000Z",
    "updatedAt": "2026-02-12T09:00:00.000Z"
  },
  "requestId": "dev-2c5e7cf2-9acf-4c8c-ab2f-b81f39d775a8",
  "timestamp": "2025-11-12T20:49:03.293Z"
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

{
  "statusCode": 123,
  "requestId": "<string>",
  "errorType": "validation_error",
  "errorMessage": [
    "<string>"
  ],
  "timestamp": "<string>",
  "details": {}
}

Uploads a PDF into one of the four compliance slots for one of your entities, and queues it for data extraction. Send it as multipart/form-data with the file in the file part.

A category is a slot, not a folder

An entity holds one errors-and-omissions document, one cyber, one W9, one crime-and-fidelity. Uploading into a slot the entity already fills adds a version to that document and returns the same fileDocumentId — which is what a renewal should do. If your client expects a new id per upload, this is the one thing to change. Read fileDocumentId from the response rather than assuming it is new.

Limits

PDF only

Anything else is rejected with 400 before the body is buffered.

10 MB maximum

A larger file returns 413.

Visibility

A document uploaded here is visible to you and not to your carriers. The agency application’s “share with all markets” switch is deliberately not exposed: it fans ownership out to every carrier from a single flag, and this API has no way to undo that.

Extraction

Turris reads the policy details out of the PDF after upload. That runs asynchronously, so the fields it populates are not on the response to this request — poll List Documents or check the compliance status shortly afterwards. Send an Idempotency-Key header. See Idempotency.

Headers

idempotency-key

string

UUID to ensure idempotent request processing

Example:

"550e8400-e29b-41d4-a716-446655440000"

x-idempotency-key

string

Alternative UUID header for idempotent request processing

Example:

"550e8400-e29b-41d4-a716-446655440000"

Body

multipart/form-data

Response

The document, with its versions

data

object

required

Show child attributes

requestId

string

required

Unique request identifier

Example:

"dev-2c5e7cf2-9acf-4c8c-ab2f-b81f39d775a8"

timestamp

string

required

Response timestamp

Example:

"2025-11-12T20:49:03.293Z"

Start Here

Shared Endpoints

Licensed Entities

Producers

Contacts

Licenses

Actions Required

Licensing Overview

Appointments

License Requests

Compliance Configurations

Markets

Corporate Registrations

Documents

Surplus Lines

A category is a slot, not a folder

Limits

PDF only

10 MB maximum

Visibility

Extraction

Headers

Body

Response

​A category is a slot, not a folder

​Limits

PDF only

10 MB maximum

​Visibility

​Extraction

Headers

Body

Response

A category is a slot, not a folder

Limits

Visibility

Extraction