> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # API de finalisation du rapport FIU > Revalidez et générez le XML goAML et le PDF d'un rapport, téléversez-les et marquez les alertes SAR/STR/TFR comme déclarées avec Didit. Prompt de l'API de finalisation du rapport Copier le prompt dans le presse-papiers \

\`Finalize a FIU report through the Management API.

Endpoint:
POST https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/finalize/

Authentication:
Use the x-api-key header with my Didit API key.

Goal:
\- Re-validate the report, then render the goAML XML and a PDF, upload both to S3, and mark the report FINALIZED (irreversible for edits; deleting it later requires an explicit confirmation).
\- On SAR, STR, and TFR reports, this also moves the case's transaction alerts from Pending SAR to SAR filed.

Example call:
curl -X POST "https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/finalize/" \
-H "x-api-key: YOUR_API_KEY"

Response 200: RegulatoryReportDetail with status "FINALIZED", finalized_at set. Fetch files via GET .../download-url/?file=xml|pdf.

Failure modes:
\- 400 - validation failed: {"detail": "Report failed validation.", "errors": [{"field": "rentity_id", "message": "Reporting entity ID is required."}, ...]}. errors is an array of {field, message} objects.
\- 409 - report is not in a finalizable state (e.g. already finalized).
\- 401/403 - auth/permission errors (requires write:cases).

Side effects: generates and stores XML + PDF in S3; updates linked transaction alerts' SAR-filed marking; irreversible for edits. A finalized report can still be deleted with confirm_delete: true; see Delete Report.

For the full integration shape, see /integration/integration-prompt.`

\
Coller dans Finaliser un rapport. C'est le point de non-retour pour les modifications : un rapport finalisé ne peut plus être modifié, seulement téléchargé. Il peut toujours être supprimé avec `confirm_delete: true` ; voir [Supprimer le rapport](https://docs.didit.me/fr/management-api/regulatory-reports/delete.md).## Voir aussi- [Télécharger le rapport](https://docs.didit.me/fr/management-api/regulatory-reports/download-url.md) - [Supprimer le rapport](https://docs.didit.me/fr/management-api/regulatory-reports/delete.md) - [Valider le rapport](https://docs.didit.me/fr/management-api/regulatory-reports/validate.md) - [Imprimer le dossier](https://docs.didit.me/fr/management-api/cases/print.md) ## OpenAPI ````yaml fr/openapi-25.json POST /v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/finalize/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: API de vérification d'identité. Authentifiez-vous avec l'en-tête x-api-key. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/finalize/: post: tags: - Regulatory Reports summary: Finaliser le rapport description: >- Valider à nouveau, puis générer le XML goAML et le PDF et les téléverser tous deux vers S3. Pour les rapports SAR/STR/TFR, cette action fait également passer les alertes de transaction du dossier du statut SAR en attente au statut SAR déposé. operationId: finalize_regulatory_report parameters: - name: organization_id in: path required: true schema: type: string format: uuid description: UUID de l'organisation. - name: application_id in: path required: true schema: type: string format: uuid description: UUID de l'application. - name: report_uuid in: path required: true schema: type: string format: uuid example: 5ec00000-0000-4000-8000-000000000007 description: UUID du rapport. responses: '200': description: Rapport finalisé ; xml_s3_key et pdf_s3_key sont définis. content: application/json: schema: $ref: '#/components/schemas/RegulatoryReportDetail' '400': description: Échec de validation du rapport. content: application/json: schema: type: object properties: detail: type: string errors: type: array items: type: object properties: field: type: string message: type: string '409': description: Le rapport n'est pas dans un état finalisable. content: application/json: schema: type: object properties: detail: type: string security: - ApiKeyAuth: [] x-codeSamples: - lang: curl label: curl source: >- curl -X POST 'https://verification.didit.me/v3/organization/11111111-2222-3333-4444-555555555555/application/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/regulatory-reports/5ec00000-0000-4000-8000-000000000007/finalize/' \ -H 'x-api-key: YOUR_API_KEY' - lang: python label: Python source: |- from didit import Didit # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. client = Didit() result = client.regulatory_reports.finalize( "5ec00000-0000-4000-8000-000000000007", ) print(result) - lang: javascript label: Node.js source: >- import Didit from "@didit-protocol/sdk-node"; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. const didit = new Didit(); const result = await didit.regulatoryReports.finalize("5ec00000-0000-4000-8000-000000000007"); console.log(result); - lang: go label: Go source: "ctx := context.Background()\n// Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID\n// and DIDIT_APPLICATION_ID.\nclient := didit.NewClient()\n\nresult, err := client.RegulatoryReports.Finalize(ctx, \"5ec00000-0000-4000-8000-000000000007\")\nif err != nil {\n\tlog.Fatal(err)\n}\nfmt.Printf(\"%+v\\n\", result)" - lang: java label: Java source: >- import me.didit.Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. Didit client = new Didit(); var result = client.regulatoryReports().finalize_("5ec00000-0000-4000-8000-000000000007"); System.out.println(result); - lang: php label: PHP source: >- regulatoryReports->finalize('5ec00000-0000-4000-8000-000000000007'); print_r($result->toArray()); - lang: ruby label: Ruby source: >- require "didit" # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. didit = Didit::Client.new result = didit.regulatory_reports.finalize("5ec00000-0000-4000-8000-000000000007") puts result.to_h - lang: csharp label: .NET source: >- using System; using System.Text.Json; using Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. using var client = new DiditClient(); var result = await client.RegulatoryReports.FinalizeAsync("5ec00000-0000-4000-8000-000000000007"); Console.WriteLine(JsonSerializer.Serialize(result)); components: schemas: RegulatoryReportDetail: type: object properties: uuid: type: string format: uuid case_uuid: type: string format: uuid case_number: type: string nullable: true report_type: type: string enum: - SAR - STR - CTR - TTR - UTR - IFT - CBR - TFR report_type_display: type: string report_code: type: string description: Code de rapport goAML dérivé de report_type, par ex. STR, CTR, BCR. report_number: type: string nullable: true status: type: string enum: - DRAFT - VALIDATED - FINALIZED status_display: type: string jurisdiction: type: string minLength: 2 maxLength: 2 rentity_id: type: string nullable: true description: Identifiant de l'entité déclarante délivré par la CRF. rentity_branch: type: string nullable: true submission_code: type: string enum: - E - M entity_reference: type: string nullable: true fiu_ref_number: type: string nullable: true currency_code_local: type: string minLength: 3 maxLength: 3 nullable: true submission_date: type: string format: date-time nullable: true reporting_person: type: object location: type: object reason: type: string nullable: true action: type: string nullable: true activity: type: string nullable: true narrative: type: object description: Sections narratives des cinq W. properties: who: type: string what: type: string when: type: string where: type: string why: type: string how: type: string report_indicators: type: array items: type: string included_fields: type: array items: type: string transactions: type: array items: type: string format: uuid validation_errors: type: array description: >- Résultat de la validation la plus récente ; chaque entrée est un objet {field, message}. items: type: object properties: field: type: string message: type: string validated_at: type: string format: date-time nullable: true finalized_at: type: string format: date-time nullable: true created_by_email: type: string nullable: true created_by_name: type: string nullable: true created_at: type: string format: date-time updated_at: type: string format: date-time securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- La clé API de votre application, issue de Développeurs -> Clés API dans la Business Console. La clé principale dispose d'un accès complet. Une clé nommée peut être restreinte : aucun, lecture ou écriture par ressource, limitée à certains workflows ou aux sessions approuvées, à une liste d'adresses IP et à une date d'expiration. 401 signifie que la clé est incorrecte, révoquée ou expirée ; 403 signifie qu'aucune clé n'a été envoyée, que la clé n'a pas accès à cette ressource ou action, ou que la requête provient d'une adresse hors de sa liste d'IP ; 404 sur une route de session signifie que la session est hors des workflows ou des statuts de la clé. Une clé sans accès aux médias reçoit les URL d'images, de vidéos et de PDF à null, et une clé sans accès en écriture aux sessions reçoit les liens et tokens de session à null. Voir https://docs.didit.me/console/api-keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.