{"generatedAt":"2026-08-10T16:42:38.293Z","source":"ismscopilot-marketing","contract":"v1","product":"isms-copilot-api","status":"live","canonicalHumanPage":"https://www.ismscopilot.com/products/api","docsPage":"https://docs.ismscopilot.com/docs/api","zdrDocsPage":"https://docs.ismscopilot.com/docs/api/zero-data-retention","apiBaseUrl":"https://api.ismscopilot.com/v1","consoleKeysUrl":"https://platform.ismscopilot.com/keys","zeroDataRetention":true,"note":"Product is live. ZDR for request content (no prompt/output storage; usage metadata only). Prepaid sk-isms credits on platform; not Account MCP pat-isms.","markdown":"# ISMS Copilot API (product truth)\n\nMachine-readable product summary for agents. Human product page: https://www.ismscopilot.com/products/api  \nAuthoritative how-to: https://docs.ismscopilot.com/docs/api  \nZero Data Retention: https://docs.ismscopilot.com/docs/api/zero-data-retention\n\n## Status\n\n**Live.** OpenAI-compatible chat completions for compliance work. Create keys and buy prepaid credits in the developer console.\n\n## Zero Data Retention (ZDR)\n\n**Request content is not retained as customer records.**\n\n| Layer | Retention |\n| --- | --- |\n| ISMS Copilot API data layer | Does **not** store prompts or model outputs in Supabase |\n| Console usage history | Metadata only (model, tokens, cost, status, timestamps, key label) |\n| Upstream global path | OpenRouter account-level ZDR + in-request ZDR flags on zero-retention endpoints |\n| Upstream EU path (`-eu` aliases) | Mistral under commercial ZDR agreement |\n| Training | Content is **not** used to train models |\n\nWhat is retained: usage and billing metadata for prepaid metering, fraud prevention, and statutory accounting (independent controller). Full legal text: https://trust.ismscopilot.com/api/dpa and https://trust.ismscopilot.com/api/subprocessors.\n\nCommercial contrast: many foundation-model APIs retain request content for about 30 days for abuse monitoring. The ISMS Copilot API does not store request content in its own data layer and routes to ZDR upstreams.\n\n## Endpoint\n\n```\nhttps://api.ismscopilot.com/v1\n```\n\nPrimary route: `POST /v1/chat/completions`  \nList aliases: `GET /v1/models`  \nAuth: `Authorization: Bearer sk-isms-…` (shown once at key creation)\n\n## Console\n\n- Keys: https://platform.ismscopilot.com/keys\n- Credits (prepaid): https://platform.ismscopilot.com/credits\n- Models / rates UI: https://platform.ismscopilot.com/models\n- Usage (metadata only): https://platform.ismscopilot.com/usage\n- Pricing: https://platform.ismscopilot.com/pricing\n\n## Model aliases\n\n| Alias | Intent |\n| --- | --- |\n| `isms-fast` | Fast answers (global path when global mode is on) |\n| `isms-thinking` | Deeper reasoning; same unit $/M as Fast; usually more tokens |\n| `isms-fast-eu` | Fast, EU-oriented path |\n| `isms-thinking-eu` | Thinking, EU-oriented path |\n\nUnit rates are listed in the console. Fast and Thinking share the same unit price on each path.\n\n## Billing\n\n- Prepaid credits on the platform, **not** the chat subscription\n- Completions fail with empty balance\n- Optional per-key hour / day / week / month spend caps\n\n## What it is not\n\n- Not Account MCP (`pat-isms-…` / Settings → Connected apps)\n- Not Embed / Assistants widget\n- Not heyGRC\n- Not the chat product retention model (chat conversations and ADP are separate)\n\n## Links\n\n- Get a key + first curl: https://docs.ismscopilot.com/docs/api/get-api-key\n- Zero Data Retention: https://docs.ismscopilot.com/docs/api/zero-data-retention\n- Models and regions: https://docs.ismscopilot.com/docs/api/models-and-regions\n- Credits and limits: https://docs.ismscopilot.com/docs/api/credits-and-limits\n- API DPA: https://trust.ismscopilot.com/api/dpa\n- API sub-processors: https://trust.ismscopilot.com/api/subprocessors\n- Agents (different product): https://www.ismscopilot.com/api/public/agents/v1\n","byteLength":3239}