# Add a processing activity the generator cannot see

`POST /compliance/center/ropa/activities` · Rivier · compliance

Add a processing activity the generator cannot see.

- Scope: compliance:write
- Mcp: rivier_compliance_ropa_add
- Graphql: Mutation.complianceRopaActivityAdd
- Sdk: compliance.ropaActivity.add
- Cli: compliance ropa activity add

## Request body

`application/json`

```json
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "minLength": 2,
      "maxLength": 160
    },
    "purpose": {
      "type": "string",
      "minLength": 2,
      "maxLength": 400
    },
    "dataSubjects": {
      "type": "string",
      "minLength": 2,
      "maxLength": 200
    },
    "dataCategories": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 120
      },
      "maxItems": 30
    },
    "specialCategories": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 120
      },
      "maxItems": 10,
      "default": []
    },
    "lawfulBasis": {
      "type": "string",
      "minLength": 2,
      "maxLength": 300
    },
    "recipients": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 160
      },
      "maxItems": 30,
      "default": []
    },
    "transfers": {
      "type": "string",
      "maxLength": 300,
      "default": "none"
    },
    "retention": {
      "type": "string",
      "maxLength": 200,
      "default": "not set"
    },
    "security": {
      "type": "string",
      "maxLength": 500,
      "default": "Access control per person and role; tenant isolation; encryption in transit; secrets sealed; audit log of actions and refusals; kill switches."
    }
  },
  "required": [
    "name",
    "purpose",
    "dataSubjects",
    "dataCategories",
    "lawfulBasis"
  ],
  "additionalProperties": false
}
```

## Responses

- `200`: Success
- `400`: The request was malformed
- `401`: No valid credential
- `403`: The credential lacks the scope, origin or address
- `429`: Over the key's rate limit; see Retry-After

## Example

```sh
curl -X POST 'https://api.rivier.ai/compliance/center/ropa/activities' \
  -H 'Authorization: Bearer $KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "name": "string",
  "purpose": "string",
  "dataSubjects": "string",
  "dataCategories": [
    "string"
  ],
  "lawfulBasis": "string"
}'
```