Skip to content

Compliance Attestation Not Applicable

URI: https://docs.ankatech.co/errors/compliance-attestation-not-applicable
HTTP Status: 422 Unprocessable Entity

When you see this

A tenant recorded a compliance attestation (POST /api/v3/admin/tenants/{tenantId}/compliance-remediation/{packId}/attestations) whose itemKey is not an attestable item of the pack. An item is attestable only when the evaluation reports it NOT_EVALUATED with reason CUSTOMER_ATTESTED or UNVERIFIED: its evidence lies outside the platform. An item the platform measures from its own state is decided by the evaluation, and an attestation cannot stand in for it. Nothing was stored and no audit row was written.

See Compliance Remediation Plans — attestations.

Common Causes

  • The itemKey names an AUTOMATED control, such as a cryptoperiod or an admissibility control.
  • The itemKey names an item of another pack.

Response Example

{
  "type": "https://docs.ankatech.co/errors/compliance-attestation-not-applicable",
  "title": "Attestation Not Applicable",
  "status": 422,
  "detail": "The item is not attested by the customer in this compliance pack: the platform measures it, or the pack does not declare it.",
  "instance": "/api/v3/admin/tenants/6f1b2c4e-8a3d-4f7e-9c21-5b0d7e9a1f34/compliance-remediation/NSA_CNSA_2_0/attestations",
  "extensions": {
    "requestId": "5e2b8d14-9c6a-4f3e-a7b1-0d4c8e2f6a97"
  }
}

Content-Type: application/problem+json — the response follows RFC 9457 Problem Details.

How to Resolve

  1. Read the plan (GET /api/v3/admin/tenants/{tenantId}/compliance-remediation/{packId}): it lists the pack's attestable items.
  2. For a measured item that fails, use its remediation action instead.

For full schema definitions, examples, and interactive testing, see the Developer Hub Reference.