Compliance Receipt Layer API

Back ยท OpenAPI: /openapi.json

1) Start checkout
POST /api/public/lead
{
  "email":"you@company.com",
  "company":"Acme",
  "compliance_scope":"SOC2, GDPR, HIPAA evidence chain",
  "plan":"starter|dfy"
}

2) After payment, issue/rotate key (same billing email)
POST /api/public/access-key
{
  "email":"you@company.com"
}

3) Use key on protected endpoints
Header: x-api-key: dwk_...

POST /v1/receipts/create
POST /v1/receipts/verify
GET  /v1/receipts/{receipt_id}

Billing status + Stripe webhook
GET  /v1/billing/status?email=you@company.com
POST /v1/billing/webhook