Skip to content
papii

Document template · generic.it.access_review

Access Review

  • Render-verified
  • Informational
  • Version 1.0.0

Periodic user-access rights review for a system, evidencing the recertification required by ISO/IEC 27001:2022 control A.5.18 (access rights), NIS2 Art. 21(2)(i) and Art. 32 GDPR (appropriateness of technical and organisational measures).

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 26 fields:

Field Required Type Description
entity Required object
entity.name Required string
entity.registration Required string
entity.address Optional string
system_name Required string
system_description Optional string
review_period Required object
review_period.from Required date
review_period.to Required date
reviewer Required object
reviewer.name Required string
reviewer.title Required string
users Required array
summary Required object
summary.total_users Required integer
summary.kept Required integer
summary.revoked Required integer
summary.adjusted Required integer
follow_up_actions Required array of object
follow_up_actions[].action Required string
follow_up_actions[].owner Required string
follow_up_actions[].due_date Required date
sign_off Required object
sign_off.reviewer Required object
sign_off.business_owner Required object
sign_off.date Required date

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "generic.it.access_review",
    "data": { ... },
    "options": {"language": "en"}
  }' -o access-review.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Access Review”?

Periodic user-access rights review for a system, evidencing the recertification required by ISO/IEC 27001:2022 control A.5.18 (access rights), NIS2 Art. 21(2)(i) and Art. 32 GDPR (appropriateness of technical and organisational measures). On papii this document is available as template generic.it.access_review: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Access Review with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Access Review template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.