> ## Documentation Index > Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt > Use this file to discover all available pages before exploring further. # Attach a document to a compliance profile > Attach an already-uploaded compliance document (from the tenant document library) to this profile under a specific KYC role, so it is included when the profile is submitted to carriers. The document must already exist, and the same document may be attached under more than one role. Only editable profiles accept attachments. Owner/admin/developer only. ## OpenAPI ````yaml /openapi.yaml post /api/v1/compliance/compliance-profiles/{id}/documents openapi: 3.1.0 info: title: Devotel CPaaS API description: Orbit by Devotel — Communications Platform as a Service API version: 1.0.0 contact: name: Devotel url: https://devotel.io email: support@devotel.io license: name: Proprietary servers: - url: https://api.orbit.devotel.io description: Production security: - Bearer: [] - ApiKey: [] tags: - name: Messages description: >- Send and manage messages across all channels (SMS, WhatsApp, RCS, Email, Viber, etc.) - name: Fax description: >- List and track fax (MMS/T.38) transmissions on Telnyx-backed fax numbers (sending flows through the Messaging API) - name: Agents description: AI agent creation, configuration, and execution - name: Voice description: Voice calls, IVR, conferencing, and SIP trunking - name: OnCall description: On-call rotations and escalation policy planning for incident alerting - name: Webhooks description: Webhook endpoint management and delivery logs - name: Numbers description: Phone number search, provisioning, and configuration - name: Brand Identity description: >- Unified cross-channel brand trust posture (10DLC, toll-free, WhatsApp, RCS, branded calling, number KYC) - name: Contacts description: Contact management, segmentation, and lifecycle tracking - name: Campaigns description: Marketing campaign orchestration and analytics - name: Flows description: Automation flow builder and execution engine - name: Templates description: Message template management and approval workflows - name: Settings description: Organization, channel, and user preference settings - name: Verify description: OTP generation and verification across channels - name: Push description: Push notification delivery via FCM and APNs - name: Integrations description: Third-party service connections and OAuth management - name: CDP description: >- Customer Data Platform — activation surface (CRM object sync, streaming destinations, ad-audience activation) - name: Files description: >- Server-to-server media upload, listing, retrieval, and deletion (signed-URL backed) - name: Commerce description: >- Omnichannel conversational-commerce — persistent cart + checkout state machine, channel-agnostic hosted pay-by-link, native WhatsApp checkout, and AP2-style agent payment mandates. - name: Sync description: >- Real-time shared-state primitive (Twilio Sync parity) — Documents, Maps, Lists, and ephemeral Streams, with change events relayed over the /api/v1/ws/sync WebSocket gateway - name: Risk description: >- Unified cross-channel Trust & Fraud risk scoring — fuses SMS-pumping, URL-reputation, Verify Fraud Guard, and Voice Biometrics signals into one composite verdict queryable before a send or a call. - name: Orby description: >- In-dashboard Orby operator assistant: streamed assistant turns, conversation threads, product knowledge-base search, and the tool-action approval gate. Available to signed-in operators only (dashboard session auth — API-key requests are rejected). paths: /api/v1/compliance/compliance-profiles/{id}/documents: post: tags: - Compliance summary: Attach a document to a compliance profile description: >- Attach an already-uploaded compliance document (from the tenant document library) to this profile under a specific KYC role, so it is included when the profile is submitted to carriers. The document must already exist, and the same document may be attached under more than one role. Only editable profiles accept attachments. Owner/admin/developer only. parameters: - schema: type: string in: path name: id required: true requestBody: required: true content: application/json: schema: type: object required: - document_id - role properties: document_id: type: string description: Id of a document in the tenant document library. role: type: string enum: - id_proof - address_proof - business_doc - authorization - other description: The KYC role this document fills for the profile. example: document_id: cdoc_1a2b3c4d5e6f role: business_doc responses: '200': description: The document was attached to the profile. content: application/json: schema: type: object properties: data: type: object properties: attached: type: boolean meta: $ref: '#/components/schemas/ResponseMeta' example: data: attached: true meta: request_id: req_1a2b3c4d5e6f timestamp: '2026-08-07T12:00:00.000Z' components: schemas: ResponseMeta: type: object required: - request_id - timestamp additionalProperties: false properties: request_id: type: string description: Unique request identifier (also returned as X-Request-Id header) timestamp: type: string format: date-time docs_url: type: string format: uri nullable: true securitySchemes: Bearer: type: http scheme: bearer bearerFormat: JWT description: Dashboard JWT token from Clerk ApiKey: type: apiKey name: X-API-Key in: header description: Server-to-server API key (dv_live_sk_*) ````