Skip to main content

API Deprecation Policy

API deprecation policy.

Audact gives customers a minimum of12 months’ noticebefore removing or breaking any/apis/*endpoint. This applies to public REST endpoints, webhook payloads, and stable SDK surface area.

1. Notice channels

  • Deprecation announcement in the publicchangelog
  • HTTPDeprecationandSunsetresponse headers (RFC 8594)
  • Email notification to the customer admin contact and registered technical contact
  • Banner in the platform dashboard

2. Dual-running window

Old and new endpoints run in parallel for the full 12-month window, with migration documentation published the same day the deprecation notice is issued. Compatibility shims may extend the window for breaking changes with regulatory implications.

3. Security exceptions

Where an endpoint must be removed faster due to a security or compliance defect, Audact will give the shortest reasonable notice (target ≥ 30 days), publish a CVE-style advisory, and assist affected customers with migration at no additional cost.