API Standards

GSCS abides by certain guideline when it comes to updates or changes to existing APIs. See below for additional information.

Non-Breaking Backwards Compatible Changes

You should expect any of the following kind of changes that we make to our APIs to be considered a backwards compatible change:

• Adding new APIs
• Increasing rate limits
• Adding fields to an existing response body or request body
• Adding optional URL query parameters Generally, any addition is considered a backwards compatible update and will not have an upfront communication. These types of updates should be non-breaking/ compatible with existing interfaces and not cause any disruption to calling our APIs.

Breaking Changes

You should expect any of the following kind of changes that we make to our APIs to be considered breaking changes:

• Changing data type of an existing response body or request body
• Changing the data type of URL path or URL query parameters
• Adding mandatory URL query parameters
• Changing datetime format in request body or response body When GSCS implements breaking changes to our APIs, we will do the following:
• We will give advance notice communication with sufficient time to allow out integration partners to be able to adjust on their side accordingly
• If breaking changes are implemented, we will generally change the API version. For example, an API endpoint might go from v1 to v2 if we had to make a breaking change to either the path parameters or the response schema

API Certification Process

These are the steps to connect to our GSCS APIs:

• Paperwork and Documentation: We require certain agreements to be on file before giving UAT or Prod API Access. Our integrations team will work with you to provide relevant documents and answer any questions relating to these documents.
• UAT Testing: Once paperwork is on file, we will provide you access to our testing environment where you can test API calls. You can also log in to a testing level of our advisor portal to view how actions performed via API will appear on the UI.
• UAT Certification: Our Certification process ensures that what you have built complies with our logic and business rules. This generally includes a demo on Zoom of what you have built, with our team validating both the UI and the backend. We also require a PDF with step by step screenshots all the proposed workflows. Our team will work with you on the specifics of what is needed based on your integration.
• Prod Access: After certification, we will provide you API Production access. We will work with you to closely monitor the first few actions performed to ensure that the go-live is seamless.