Skip to content
papii

Document template · generic.it.security_incident

Security Incident Report

  • Render-verified
  • Informational
  • Version 1.0.0

Internal record of a cybersecurity or information-security incident. Distinct from eu.gdpr.data_breach_notification_authority — the GDPR Art. 33 notification is a downstream output when this incident affects personal data and meets the notification threshold.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 20 fields:

Field Required Type Description
incident_id Required string
detected_on Required string
detected_by Required string
severity Required enum
classification Required enum
affected_systems Optional array of string
affected_users_estimated Optional integer
timeline Optional array of object
timeline[].timestamp Required string
timeline[].action Required string
initial_assessment Required string
containment_actions Optional array of string
eradication_actions Optional array of string
recovery_actions Optional array of string
root_cause Optional string
lessons_learned Optional array of string
gdpr_notifiable Optional boolean
art33_reference Optional string Reference of the GDPR Art. 33 filing if gdpr_notifiable is true.
post_incident_owner Required string
closed_on Optional date

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "generic.it.security_incident",
    "data": { ... },
    "options": {"language": "en"}
  }' -o security-incident.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Security Incident Report”?

Internal record of a cybersecurity or information-security incident. Distinct from eu.gdpr.data_breach_notification_authority — the GDPR Art. 33 notification is a downstream output when this incident affects personal data and meets the notification threshold. On papii this document is available as template generic.it.security_incident: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Security Incident Report with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Security Incident Report template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.