# Identity & Preference Centre

> An identity and preference management service. People sign in, see what
> data is held about them, and control how they are contacted.

## For automated clients

This service is API-first. If you are trying to accomplish something rather
than read about it, use the API rather than parsing these pages.

- [OpenAPI specification](https://portal.autom8ion.uk/openapi.json) — every endpoint, with schemas
- Authentication: bearer API key, issued per tenant by that tenant's administrator
- Format: send `Accept: application/json` or `Accept: text/markdown` to any
  public page for a structured response

## Data protection

This service processes personal data under UK/EU GDPR. Data subjects can:

- Request a copy of their data (Article 15 / 20)
- Have it corrected (Article 16)
- Have it erased (Article 17)
- Withdraw consent to marketing at any time (Article 7)

These are exercised through the tenant that holds the data, not through this
service directly.

## Not available

Person records, tenant lists, usage figures and administrative pages are not
accessible without authentication, in any format. Requesting them with a
different `Accept` header or User-Agent will not change that.