Skip to content
API reference
/
/Tenant Encryption

Company API (v2)

Download OpenAPI description
CompanyApi.json
CompanyApi.yaml
Languages
Servers
Sandbox URL
https://api-ext-sboxmeta.partners.spotnana.com
Spotnana mock server
https://developer.spotnana.com/_mock/openapi/companyapi

Companies

APIs to onboard and manage company.

Operations

Cost Centers

APIs to create and manage company cost centers.

Operations

Offices

APIs to create and manage company offices.

Operations

Departments

APIs to create and manage departments.

Operations

Grades

APIs to create and manage grades.

Operations

Service Charge Plan

APIs to manage service charge plans.

Operations

Partner Public Keys

APIs to manage partner public keys for token exchange authentication.

Operations

Tenant Encryption

APIs to enable per-tenant encryption (PTE) for a company.

Operations

Create or rotate tenant CMK

Request

First call provisions a Spotnana-managed CMK and DEK. Subsequent calls rotate the CMK and re-wrap the existing DEK. Returns 429 if called within the one-hour cooldown window. Requires the COMPANY_MANAGEMENT WRITE permission on the company.

Security
Bearer
Path
companyIdstring(uuid)required

Tenant (company) identifier

Example: 4974a66b-7493-4f41-908c-58ba81093947
curl -i -X POST \
  https://api-ext-sboxmeta.partners.spotnana.com/v3/tenant-encryption/4974a66b-7493-4f41-908c-58ba81093947/key \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>'

Responses

Key provisioned or rotated

Bodyapplication/json
configIdstring(uuid)
Example: "4974a66b-7493-4f41-908c-58ba81093947"
createdboolean

True on first provision; false on CMK rotation.

Example: true
Response
application/json
{
  "configId": "4974a66b-7493-4f41-908c-58ba81093947",
  "created": true
}

Service Charge

Operations

Company Enrollment

Operations

Company Tier

Operations

Stealth Config

Operations
Copyright © 2026 Spotnana Technology, Inc.