--- title: Sprinto API Integration on Truto slug: sprinto category: Compliance canonical: "https://truto.one/integrations/detail/sprinto/" --- # Sprinto API Integration on Truto **Category:** Compliance **Status:** Generally available ## MCP-ready AI tools Truto exposes 5 tools for Sprinto that AI agents can call directly. - **list_all_sprinto_workflow_checks** — List workflow checks in Sprinto using cursor-based pagination. Returns a paginated collection of workflow check edges, each containing a node with the check's pk and title, plus a cursor string used for page navigation. - **create_a_sprinto_background_verification_report** — Upload a background verification report for a staff member in Sprinto. Returns: message. Required: email, verificationCompletedOn, verificationReportFile. - **create_a_sprinto_workflow_check_evidence** — Upload evidence for a workflow check in Sprinto. Returns workflowCheck containing the evidenceStatus of the check after the upload. Required: workflowCheckPk, evidenceRecordDate, evidenceFile. - **sprinto_staff_members_mark_in_scope** — Mark a Sprinto staff member account as in-scope, including them in the audit compliance scope so they are mapped against configured controls and automated checks. Returns a user object containing pk, firstName, lastName, fullName, and email. Required: email. - **sprinto_staff_members_mark_not_in_scope** — Mark a Sprinto staff member account as not in-scope, excluding them from the audit compliance scope so Sprinto does not perform security tasks (such as policy acceptance or training) for that account. Returns a user object containing pk, firstName, lastName, fullName, and email. Required: email. Optional: reason. ## How it works 1. **Link your customer's Sprinto account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Sprinto.** The Proxy API is a 1-to-1 mapping of the Sprinto API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate background check delivery into GRC** — Background screening platforms can push completed verification reports directly into their customers' Sprinto instances, eliminating the manual PDF download-and-reupload dance that HR teams do for every new hire during SOC 2 or ISO 27001 audits. - **Ship security evidence to compliance checks automatically** — DevSecOps tools like SAST scanners, pen testing platforms, and vulnerability management products can map their scan outputs to specific Sprinto workflow checks, so their customers get audit-ready evidence without engineering teams stitching reports together manually. - **Sync employment scope for continuous compliance** — HRIS, payroll, and contractor management platforms can automatically mark employees as in-scope or out-of-scope in Sprinto based on employment type and role, ensuring security training and endpoint monitoring workflows only apply to the right people. - **Turn product events into compliance evidence** — Any B2B SaaS producing audit-relevant artifacts (access reviews, incident reports, training completions) can offer a native Sprinto connection so their customers stop screenshotting dashboards for auditors. ## What you can build - **One-click Sprinto connection in your app** — Let end users authenticate their Sprinto workspace from your product using Truto's managed auth, without you handling tokens or credential storage. - **Automated evidence uploads to workflow checks** — Fetch the customer's workflow checks, let them map your product's outputs to specific checks, and push evidence files with the correct record date whenever a new artifact is generated. - **Background verification report sync** — When a background check completes in your platform, automatically create the corresponding verification report in Sprinto against the employee's email with the completion date and PDF attached. - **Employment-driven scope management** — Trigger in-scope or not-in-scope updates in Sprinto based on lifecycle events in your HRIS or payroll product, with an optional reason string for auditability. - **Workflow check picker UI** — Use the list of workflow checks to render a native picker inside your app so customers can choose which Sprinto control each of your data streams should feed. - **Scheduled evidence refresh jobs** — Run recurring jobs that regenerate reports (e.g., weekly vulnerability scans) and push a fresh evidence file to the same Sprinto workflow check, keeping controls perpetually green. ## FAQs ### How does authentication work for Sprinto? Truto handles Sprinto authentication for you. Your end users connect their Sprinto workspace through Truto's link flow, and Truto securely stores and refreshes the credentials, so you never touch API keys or tokens directly. ### Which Sprinto operations are supported through Truto today? The current toolset covers listing workflow checks, creating workflow check evidence, creating background verification reports, and marking staff members as in-scope or not-in-scope. If you need additional Sprinto endpoints, Truto can add them on request. ### How do I push evidence against a specific compliance control? First call list_all_sprinto_workflow_checks to retrieve the customer's checks with their node PKs and titles, then call create_a_sprinto_workflow_check_evidence with the chosen workflowCheckPk, an evidenceRecordDate, and the evidenceFile. This updates the check's evidenceStatus in Sprinto. ### What identifiers do I need for staff and background check operations? Sprinto's staff and BGV operations key off the employee's email. Marking a staff member in or out of scope requires the email (with an optional reason for the not-in-scope case), and creating a background verification report requires the email, verificationCompletedOn date, and the verificationReportFile. ### Does Truto handle pagination when listing workflow checks? Yes. Truto normalizes pagination for list_all_sprinto_workflow_checks so you can iterate through a customer's full set of checks without dealing with Sprinto's underlying cursor or page semantics. ### How fresh is the data returned from Sprinto? Truto calls Sprinto's APIs in real time on each request, so listed workflow checks and the results of evidence, BGV, and scope mutations reflect the live state of the customer's Sprinto workspace. ## Related reading - [Why Sprinto opted for Truto despite already using a leading Unified API](https://truto.one/blog/why-sprinto-opted-for-truto-despite-already-using-a-leading-unified-api/) — Learn why Sprinto chose Truto to deliver a PrimePay HRIS integration, gaining the speed and flexibility missing from their current industry-leading unified API. - [Connect Sprinto to ChatGPT: Manage Evidence and Compliance Checks](https://truto.one/blog/connect-sprinto-to-chatgpt-manage-evidence-and-compliance-checks/) — Learn how to connect Sprinto to ChatGPT using Truto's managed MCP server. Automate evidence uploads, manage staff compliance scopes, and query workflow checks with AI agents. - [Connect Sprinto to Claude: Automate Staff Scoping and Verifications](https://truto.one/blog/connect-sprinto-to-claude-automate-staff-scoping-and-verifications/) — Learn how to connect Sprinto to Claude using a managed MCP server to automate staff scoping, background verification uploads, and compliance evidence. - [Connect Sprinto to ChatGPT: Automate Audit Evidence & Staff Scoping](https://truto.one/blog/connect-sprinto-to-chatgpt-automate-audit-evidence-staff-scoping/) — Learn how to connect Sprinto to ChatGPT using an MCP server. Automate compliance evidence uploads, background checks, and staff scoping with AI agents. - [Connect Sprinto to AI Agents: Orchestrate Security Audit Workflows](https://truto.one/blog/connect-sprinto-to-ai-agents-orchestrate-security-audit-workflows/) — Learn how to connect Sprinto to AI Agents using Truto's unified tools endpoint. Build autonomous compliance workflows, handle strict rate limits, and map staff scoping safely. - [Connect Sprinto to AI Agents: Sync Workflow Evidence & Staff Scope](https://truto.one/blog/connect-sprinto-to-ai-agents-sync-workflow-evidence-staff-scope/) — Learn how to connect Sprinto to AI agents using Truto. Fetch AI-ready tools, bind them to your LLM, and automate compliance workflows and staff scoping.