# Compliance

URL: https://docs.hanzo.ai/docs/cli/compliance

> The `hanzo compliance` commands.

Also for this capability: [API](https://docs.hanzo.ai/docs/openapi/compliance) · **CLI** · [MCP](https://docs.hanzo.ai/docs/mcp-tools/compliance) · [SDKs](https://docs.hanzo.ai/docs/sdks)

Your KYC/KYB onboarding, accreditation records, and the evidence trail behind them.

[API reference →](https://docs.hanzo.ai/docs/openapi/compliance)

```bash
hanzo compliance subjects list
```

Every command takes `--json` for the raw response and `--help` for its own flags. Sign in once with `hanzo auth login`; the commands below use that session, and the org they act in is the one it carries.

| Command                    | What it does                                                                                                                                                      |
| -------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo compliance audit`   | The compliance read of the SHARED tamper-evident audit plane — the SOC 2 posture surface (privileged actions: who started/decided what, when).                    |
| `hanzo compliance health`  | Reports subsystem liveness and the wired verification provider.                                                                                                   |
| `hanzo compliance records` | The unified compliance-record view for the org: its verifications and accreditation records together, each provider-reported or tracked, never platform-asserted. |
| `hanzo compliance status`  | The org's honest posture read: the wired provider and the per-status tally of its verifications.                                                                  |

### Accreditation

| Command                                        | What it does                                                                                                                                                                                                         |
| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo compliance accreditation create`        | Records an ASSERTED accreditation state for a subject — the subject's own assertion, with no verifier.                                                                                                               |
| `hanzo compliance accreditation decision <id>` | Records an org reviewer's decision on an accreditation record — a reviewer confirmation, a provider verification the reviewer has evidence of (a CPA/attorney letter, a verifier report), a rejection, or an expiry. |
| `hanzo compliance accreditation get <id>`      | Returns one tracked accreditation record.                                                                                                                                                                            |
| `hanzo compliance accreditation list`          | Returns the org's tracked accreditation-state records, newest first — evidence entries the org keeps, never a platform certification.                                                                                |

### Subjects

| Command                              | What it does                                                                                                                      |
| ------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo compliance subjects create`   | Records a party the org is verifying as part of its own onboarding/compliance — a team member, vendor, customer, or counterparty. |
| `hanzo compliance subjects get <id>` | Returns one subject WITH its contact PII — the only surface that returns it, and only to the owning org.                          |
| `hanzo compliance subjects list`     | Returns the org's subjects as PII-MINIMIZED summaries — no name or email, only whether an email is on file.                       |

### Verifications

| Command                                        | What it does                                                                                                                                                           |
| ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `hanzo compliance verifications create`        | Begins a KYC/KYB verification of a subject through the wired provider — an existing subject by id, or one created inline from the request.                             |
| `hanzo compliance verifications decision <id>` | Records a privileged reviewer's MANUAL decision on a verification — the human-in-the-loop path, and the ONLY route to a passing status when no real provider is wired. |
| `hanzo compliance verifications get <id>`      | Returns one verification — its opaque subject reference and provider-reported status, no subject PII.                                                                  |
| `hanzo compliance verifications list`          | Returns the org's KYC/KYB verifications, newest first — opaque subject references and provider-reported statuses only, no subject PII.                                 |
| `hanzo compliance verifications refresh <id>`  | Polls the wired provider for its current decision and records it, ATTRIBUTED to the provider — the internal PULL reconcile.                                            |
| `hanzo compliance verifications webhook`       | Provider push that settles a verification, authenticated by HMAC signature                                                                                             |