Move trust GraphQL API under complianceportal v1

Relocate the public trust center GraphQL surface, OAuth handlers,
and SPA serving into the compliance portal API package and remove
the legacy trust v1 server tree.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/server/api/complianceportal/v1/graphql/auth.graphql

@@ -0,0 +1,38 @@
+extend type Mutation {
+  sendMagicLink(input: SendMagicLinkInput!): SendMagicLinkPayload
+    @authentication(required: OPTIONAL)
+  verifyMagicLink(input: VerifyMagicLinkInput!): VerifyMagicLinkPayload
+    @authentication(required: OPTIONAL)
+  updateFullName(input: UpdateFullNameInput!): UpdateFullNamePayload
+    @authentication(required: PRESENT) @sessionOnly
+  signOut: SignOutPayload! @authentication(required: PRESENT) @sessionOnly
+}
+
+input SendMagicLinkInput {
+  email: EmailAddr!
+  continue: String
+}
+
+type SendMagicLinkPayload {
+  success: Boolean!
+}
+
+input VerifyMagicLinkInput {
+  token: String!
+}
+
+type VerifyMagicLinkPayload {
+  continue: String
+}
+
+input UpdateFullNameInput {
+  fullName: String!
+}
+
+type UpdateFullNamePayload {
+  success: Boolean!
+}
+
+type SignOutPayload {
+  success: Boolean!
+}

pkg/server/api/complianceportal/v1/graphql/base.graphql

@@ -0,0 +1,320 @@
+directive @goField(
+  forceResolver: Boolean
+  name: String
+  omittable: Boolean
+) on INPUT_FIELD_DEFINITION | FIELD_DEFINITION
+
+directive @goModel(
+  model: String
+  models: [String!]
+) on OBJECT | INPUT_OBJECT | SCALAR | ENUM | INTERFACE | UNION
+
+directive @goEnum(value: String) on ENUM_VALUE
+
+directive @nda on FIELD_DEFINITION | OBJECT
+
+scalar BigInt
+scalar CursorKey
+scalar Datetime
+scalar EmailAddr
+
+interface Node {
+  id: ID!
+}
+
+type Query {
+  viewer: Identity
+  node(id: ID!): Node
+  aliasedNode(alias: String!): Node
+  currentTrustCenter: TrustCenter
+  oidcProviders: [OIDCProviderInfo!]!
+    @goField(forceResolver: true)
+    @authentication(required: OPTIONAL)
+
+  # The current viewer's own data subject requests for this trust center,
+  # scoped by their verified email. Returns an empty connection for guests so
+  # the portal can still render its empty state.
+  myRightsRequests(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): RightsRequestConnection! @goField(forceResolver: true)
+}
+
+type OIDCProviderInfo {
+  name: String!
+  loginURL: String!
+}
+
+type Mutation
+
+type Identity implements Node {
+  id: ID!
+  email: EmailAddr!
+  fullName: String!
+  emailVerified: Boolean!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+type PageInfo {
+  hasNextPage: Boolean!
+  hasPreviousPage: Boolean!
+  startCursor: CursorKey
+  endCursor: CursorKey
+}
+
+enum CountryCode
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.CountryCode") {
+  GLOBAL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGlobal")
+  AD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAD")
+  AE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAE")
+  AF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAF")
+  AG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAG")
+  AI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAI")
+  AL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAL")
+  AM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAM")
+  AO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAO")
+  AQ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAQ")
+  AR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAR")
+  AS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAS")
+  AT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAT")
+  AU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAU")
+  AW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAW")
+  AX @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAX")
+  AZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeAZ")
+  BA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBA")
+  BB @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBB")
+  BD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBD")
+  BE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBE")
+  BF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBF")
+  BG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBG")
+  BH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBH")
+  BI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBI")
+  BJ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBJ")
+  BL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBL")
+  BM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBM")
+  BN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBN")
+  BO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBO")
+  BQ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBQ")
+  BR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBR")
+  BS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBS")
+  BT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBT")
+  BV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBV")
+  BW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBW")
+  BY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBY")
+  BZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeBZ")
+  CA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCA")
+  CC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCC")
+  CD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCD")
+  CF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCF")
+  CG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCG")
+  CH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCH")
+  CI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCI")
+  CK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCK")
+  CL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCL")
+  CM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCM")
+  CN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCN")
+  CO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCO")
+  CR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCR")
+  CU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCU")
+  CV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCV")
+  CW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCW")
+  CX @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCX")
+  CY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCY")
+  CZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeCZ")
+  DE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDE")
+  DJ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDJ")
+  DK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDK")
+  DM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDM")
+  DO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDO")
+  DZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeDZ")
+  EC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeEC")
+  EE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeEE")
+  EG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeEG")
+  EH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeEH")
+  ER @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeER")
+  ES @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeES")
+  ET @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeET")
+  EU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeEU")
+  FI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFI")
+  FJ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFJ")
+  FK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFK")
+  FM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFM")
+  FO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFO")
+  FR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeFR")
+  GA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGA")
+  GB @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGB")
+  GD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGD")
+  GE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGE")
+  GF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGF")
+  GG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGG")
+  GH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGH")
+  GI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGI")
+  GL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGL")
+  GM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGM")
+  GN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGN")
+  GP @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGP")
+  GQ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGQ")
+  GR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGR")
+  GT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGT")
+  GU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGU")
+  GW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGW")
+  GY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeGY")
+  HK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHK")
+  HM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHM")
+  HN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHN")
+  HR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHR")
+  HT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHT")
+  HU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeHU")
+  ID @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeID")
+  IE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIE")
+  IL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIL")
+  IM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIM")
+  IN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIN")
+  IO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIO")
+  IQ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIQ")
+  IR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIR")
+  IS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIS")
+  IT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeIT")
+  JE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeJE")
+  JM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeJM")
+  JO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeJO")
+  JP @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeJP")
+  KE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKE")
+  KG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKG")
+  KH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKH")
+  KI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKI")
+  KM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKM")
+  KN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKN")
+  KP @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKP")
+  KR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKR")
+  KW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKW")
+  KY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKY")
+  KZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeKZ")
+  LA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLA")
+  LB @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLB")
+  LC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLC")
+  LI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLI")
+  LK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLK")
+  LR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLR")
+  LS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLS")
+  LT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLT")
+  LU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLU")
+  LV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLV")
+  LY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeLY")
+  MA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMA")
+  MC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMC")
+  MD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMD")
+  ME @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeME")
+  MF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMF")
+  MG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMG")
+  MH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMH")
+  MK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMK")
+  ML @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeML")
+  MM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMM")
+  MN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMN")
+  MO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMO")
+  MP @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMP")
+  MQ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMQ")
+  MR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMR")
+  MS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMS")
+  MT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMT")
+  MU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMU")
+  MV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMV")
+  MW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMW")
+  MX @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMX")
+  MY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMY")
+  MZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeMZ")
+  NA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNA")
+  NC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNC")
+  NE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNE")
+  NF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNF")
+  NG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNG")
+  NI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNI")
+  NL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNL")
+  NO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNO")
+  NP @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNP")
+  NR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNR")
+  NU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNU")
+  NZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeNZ")
+  OM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeOM")
+  PA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePA")
+  PE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePE")
+  PF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePF")
+  PG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePG")
+  PH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePH")
+  PK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePK")
+  PL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePL")
+  PM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePM")
+  PN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePN")
+  PR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePR")
+  PS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePS")
+  PT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePT")
+  PW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePW")
+  PY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodePY")
+  QA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeQA")
+  RE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeRE")
+  RO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeRO")
+  RS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeRS")
+  RU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeRU")
+  RW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeRW")
+  SA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSA")
+  SB @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSB")
+  SC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSC")
+  SD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSD")
+  SE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSE")
+  SG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSG")
+  SH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSH")
+  SI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSI")
+  SJ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSJ")
+  SK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSK")
+  SL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSL")
+  SM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSM")
+  SN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSN")
+  SO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSO")
+  SR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSR")
+  SS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSS")
+  ST @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeST")
+  SV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSV")
+  SX @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSX")
+  SY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSY")
+  SZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeSZ")
+  TC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTC")
+  TD @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTD")
+  TF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTF")
+  TG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTG")
+  TH @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTH")
+  TJ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTJ")
+  TK @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTK")
+  TL @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTL")
+  TM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTM")
+  TN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTN")
+  TO @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTO")
+  TR @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTR")
+  TT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTT")
+  TV @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTV")
+  TW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTW")
+  TZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeTZ")
+  UA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUA")
+  UG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUG")
+  UM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUM")
+  US @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUS")
+  UY @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUY")
+  UZ @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeUZ")
+  VA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVA")
+  VC @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVC")
+  VE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVE")
+  VG @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVG")
+  VI @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVI")
+  VN @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVN")
+  VU @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeVU")
+  WF @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeWF")
+  WS @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeWS")
+  YE @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeYE")
+  YT @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeYT")
+  ZA @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeZA")
+  ZM @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeZM")
+  ZW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeZW")
+}

pkg/server/api/complianceportal/v1/graphql/file.graphql

@@ -0,0 +1,10 @@
+# Trust File: public assets use /api/files/v1/public/{id} (no auth).
+type File {
+  id: ID!
+  mimeType: String!
+  fileName: String!
+  size: BigInt!
+  downloadUrl: String!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}

pkg/server/api/complianceportal/v1/graphql/mailing_list.graphql

@@ -0,0 +1,53 @@
+type MailingListUpdate implements Node {
+  id: ID!
+  title: String!
+  body: String!
+  updatedAt: Datetime!
+}
+
+type MailingListUpdateConnection {
+  edges: [MailingListUpdateEdge!]!
+  pageInfo: PageInfo!
+}
+
+type MailingListUpdateEdge {
+  cursor: CursorKey!
+  node: MailingListUpdate!
+}
+
+enum MailingListSubscriberStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
+    )
+  CONFIRMED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
+    )
+}
+
+type MailingListSubscriber implements Node {
+  id: ID!
+  fullName: String!
+  email: EmailAddr!
+  status: MailingListSubscriberStatus!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+extend type Mutation {
+  subscribeToMailingList: SubscribeToMailingListPayload! @authentication(required: PRESENT) @sessionOnly
+
+  unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @authentication(required: PRESENT) @sessionOnly
+}
+
+type SubscribeToMailingListPayload {
+  subscription: MailingListSubscriber!
+}
+
+type UnsubscribeFromMailingListPayload {
+  deletedMailingListSubscriberId: ID
+}

pkg/server/api/complianceportal/v1/graphql/nda.graphql

@@ -0,0 +1,149 @@
+type NonDisclosureAgreement {
+  fileName: String!
+  fileUrl: String! @goField(forceResolver: true)
+  viewerSignature: ElectronicSignature @goField(forceResolver: true)
+}
+
+enum ElectronicSignatureStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusPending"
+    )
+  ACCEPTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusAccepted"
+    )
+  PROCESSING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusProcessing"
+    )
+  COMPLETED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusCompleted"
+    )
+  FAILED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusFailed"
+    )
+}
+
+enum ElectronicSignatureDocumentType
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentType"
+  ) {
+  NDA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeNDA"
+    )
+  DPA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeDPA"
+    )
+  MSA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeMSA"
+    )
+  SOW
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSOW"
+    )
+  SLA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSLA"
+    )
+  TOS
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeTOS"
+    )
+  PRIVACY_POLICY
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypePrivacyPolicy"
+    )
+  OTHER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeOther"
+    )
+}
+
+enum ElectronicSignatureEventType
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventType"
+  ) {
+  DOCUMENT_VIEWED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeDocumentViewed"
+    )
+  CONSENT_GIVEN
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeConsentGiven"
+    )
+  FULL_NAME_TYPED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeFullNameTyped"
+    )
+  SIGNATURE_ACCEPTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureAccepted"
+    )
+  SIGNATURE_COMPLETED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureCompleted"
+    )
+  SEAL_COMPUTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSealComputed"
+    )
+  TIMESTAMP_REQUESTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeTimestampRequested"
+    )
+  CERTIFICATE_GENERATED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeCertificateGenerated"
+    )
+  PROCESSING_ERROR
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeProcessingError"
+    )
+}
+
+type ElectronicSignature implements Node {
+  id: ID!
+  status: ElectronicSignatureStatus!
+  documentType: ElectronicSignatureDocumentType!
+  consentText: String!
+  lastError: String
+  signedAt: Datetime
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+extend type Mutation {
+  acceptElectronicSignature(
+    input: AcceptElectronicSignatureInput!
+  ): AcceptElectronicSignaturePayload @authentication(required: PRESENT) @sessionOnly
+
+  recordSigningEvent(
+    input: RecordSigningEventInput!
+  ): RecordSigningEventPayload @authentication(required: PRESENT) @sessionOnly
+}
+
+input AcceptElectronicSignatureInput {
+  signatureId: ID!
+}
+
+type AcceptElectronicSignaturePayload {
+  signature: ElectronicSignature!
+}
+
+input RecordSigningEventInput {
+  signatureId: ID!
+  eventType: ElectronicSignatureEventType!
+}
+
+type RecordSigningEventPayload {
+  success: Boolean!
+}

pkg/server/api/complianceportal/v1/graphql/rights_request.graphql

@@ -0,0 +1,71 @@
+enum RightsRequestType
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.RightsRequestType") {
+  ACCESS @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeAccess")
+  DELETION
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeDeletion")
+  RECTIFICATION
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeRectification"
+    )
+  PORTABILITY
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypePortability"
+    )
+  OBJECTION
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeObjection")
+  COMPLAINT
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestTypeComplaint")
+}
+
+enum RightsRequestState
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.RightsRequestState") {
+  TODO @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateTodo")
+  IN_PROGRESS
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateInProgress"
+    )
+  DONE @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateDone")
+  REJECTED
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.RightsRequestStateRejected")
+}
+
+type RightsRequest implements Node {
+  id: ID!
+  requestType: RightsRequestType!
+  requestState: RightsRequestState!
+  dataSubject: String
+  contact: String
+  details: String
+  deadline: Datetime
+  actionTaken: String
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+type RightsRequestConnection {
+  edges: [RightsRequestEdge!]!
+  pageInfo: PageInfo!
+}
+
+type RightsRequestEdge {
+  cursor: CursorKey!
+  node: RightsRequest!
+}
+
+extend type Mutation {
+  # Submit a data subject request. Requires a verified viewer; the request is
+  # attributed to the viewer's email, so no NDA gate applies.
+  createRightsRequest(
+    input: CreateRightsRequestInput!
+  ): CreateRightsRequestPayload! @authentication(required: PRESENT)
+}
+
+input CreateRightsRequestInput {
+  requestType: RightsRequestType!
+  dataSubject: String
+  details: String
+}
+
+type CreateRightsRequestPayload {
+  rightsRequestEdge: RightsRequestEdge!
+}

pkg/server/api/complianceportal/v1/graphql/trust_center.graphql

@@ -0,0 +1,544 @@
+type TrustCenter implements Node {
+  id: ID!
+  active: Boolean!
+  slug: String!
+  logo: File @goField(forceResolver: true)
+  darkLogo: File @goField(forceResolver: true)
+
+  description: String
+  websiteUrl: String
+  email: String
+  headquarterAddress: String
+  title: String!
+
+  nonDisclosureAgreement: NonDisclosureAgreement @goField(forceResolver: true)
+
+  viewerSubscription: MailingListSubscriber @goField(forceResolver: true)
+
+  documents(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+    filter: TrustCenterVisibilityFilter
+  ): DocumentConnection! @goField(forceResolver: true)
+
+  audits(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+    filter: TrustCenterVisibilityFilter
+  ): AuditConnection! @goField(forceResolver: true)
+
+  subprocessors(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+    filter: SubprocessorFilter
+  ): SubprocessorConnection! @goField(forceResolver: true)
+
+  subprocessorCategories: [SubprocessorCategory!]!
+    @goField(forceResolver: true)
+
+  subprocessorCountries: [CountryCode!]! @goField(forceResolver: true)
+
+  references(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): TrustCenterReferenceConnection! @goField(forceResolver: true)
+
+  commitmentGroups(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): CompliancePortalCommitmentGroupConnection! @goField(forceResolver: true)
+
+  trustCenterFiles(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+    filter: TrustCenterVisibilityFilter
+  ): TrustCenterFileConnection! @goField(forceResolver: true)
+
+  complianceFrameworks(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): ComplianceFrameworkConnection! @goField(forceResolver: true)
+
+  customLinks(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): ComplianceCustomLinkConnection! @goField(forceResolver: true)
+
+  updates(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): MailingListUpdateConnection! @goField(forceResolver: true)
+}
+
+enum DocumentType
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.DocumentType") {
+  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeOther")
+  GOVERNANCE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeGovernance")
+  POLICY @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePolicy")
+  PROCEDURE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeProcedure")
+  PLAN @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePlan")
+  REGISTER
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRegister")
+  RECORD @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRecord")
+  REPORT @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeReport")
+  TEMPLATE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeTemplate")
+  STATEMENT_OF_APPLICABILITY
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.DocumentTypeStatementOfApplicability"
+    )
+}
+
+enum TrustCenterVisibility
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.TrustCenterVisibility") {
+  PRIVATE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.TrustCenterVisibilityPrivate")
+  PUBLIC
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.TrustCenterVisibilityPublic")
+}
+
+input TrustCenterVisibilityFilter {
+  visibility: TrustCenterVisibility
+}
+
+type Document implements Node @nda {
+  id: ID!
+  title: String!
+  documentType: DocumentType!
+  alias: String @goField(forceResolver: true)
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type DocumentConnection @nda {
+  edges: [DocumentEdge!]!
+  pageInfo: PageInfo!
+}
+
+type DocumentEdge @nda {
+  cursor: CursorKey!
+  node: Document!
+}
+
+type Framework implements Node @nda {
+  id: ID!
+  name: String!
+  lightLogo: File @goField(forceResolver: true)
+  darkLogo: File @goField(forceResolver: true)
+}
+
+type AuditReport implements Node @nda {
+  id: ID!
+  fileName: String!
+  alias: String @goField(forceResolver: true)
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type Audit implements Node @nda {
+  id: ID!
+  name: String
+  framework: Framework! @goField(forceResolver: true)
+  reportFile: AuditReport @goField(forceResolver: true)
+}
+
+type AuditConnection @nda {
+  edges: [AuditEdge!]!
+  pageInfo: PageInfo!
+}
+
+type AuditEdge @nda {
+  cursor: CursorKey!
+  node: Audit!
+}
+
+type ComplianceFramework implements Node {
+  id: ID!
+  framework: Framework! @goField(forceResolver: true)
+}
+
+type ComplianceFrameworkConnection
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/complianceportal/v1/types.ComplianceFrameworkConnection"
+  ) {
+  edges: [ComplianceFrameworkEdge!]!
+  pageInfo: PageInfo!
+}
+
+type ComplianceFrameworkEdge {
+  cursor: CursorKey!
+  node: ComplianceFramework!
+}
+
+enum SubprocessorCategory
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategory") {
+  ANALYTICS
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryAnalytics")
+  CLOUD_MONITORING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryCloudMonitoring"
+    )
+  CLOUD_PROVIDER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryCloudProvider"
+    )
+  COLLABORATION
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryCollaboration"
+    )
+  CUSTOMER_SUPPORT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryCustomerSupport"
+    )
+  DATA_STORAGE_AND_PROCESSING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryDataStorageAndProcessing"
+    )
+  DOCUMENT_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryDocumentManagement"
+    )
+  EMPLOYEE_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryEmployeeManagement"
+    )
+  ENGINEERING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryEngineering")
+  FINANCE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryFinance")
+  IDENTITY_PROVIDER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryIdentityProvider"
+    )
+  IT @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryIT")
+  MARKETING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryMarketing")
+  OFFICE_OPERATIONS
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryOfficeOperations"
+    )
+  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryOther")
+  PASSWORD_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryPasswordManagement"
+    )
+  PRODUCT_AND_DESIGN
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryProductAndDesign"
+    )
+  PROFESSIONAL_SERVICES
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryProfessionalServices"
+    )
+  RECRUITING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryRecruiting")
+  SALES @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategorySales")
+  SECURITY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategorySecurity")
+  VERSION_CONTROL
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ThirdPartyCategoryVersionControl"
+    )
+}
+
+type Subprocessor implements Node @nda {
+  id: ID!
+  name: String!
+  description: String
+  category: SubprocessorCategory!
+  websiteUrl: String
+  privacyPolicyUrl: String
+  countries: [CountryCode!]!
+}
+
+input SubprocessorFilter {
+  query: String
+  category: SubprocessorCategory
+  country: CountryCode
+}
+
+type SubprocessorConnection
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/complianceportal/v1/types.SubprocessorConnection"
+  ) @nda {
+  edges: [SubprocessorEdge!]!
+  pageInfo: PageInfo!
+  totalCount: Int! @goField(forceResolver: true)
+}
+
+type SubprocessorEdge @nda {
+  cursor: CursorKey!
+  node: Subprocessor!
+}
+
+type TrustCenterReference implements Node @nda {
+  id: ID!
+  name: String!
+  description: String
+  websiteUrl: String!
+  logo: File! @goField(forceResolver: true)
+}
+
+type TrustCenterReferenceConnection @nda {
+  edges: [TrustCenterReferenceEdge!]!
+  pageInfo: PageInfo!
+}
+
+type TrustCenterReferenceEdge @nda {
+  cursor: CursorKey!
+  node: TrustCenterReference!
+}
+
+enum CompliancePortalCommitmentIcon
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIcon") {
+  LOCK_KEY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLockKey")
+  EYE_SLASH
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEyeSlash")
+  FINGERPRINT
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconFingerprint")
+  SHIELD_WARNING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldWarning")
+  SHIELD_CHECK
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldCheck")
+  SIREN
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconSiren")
+  KEY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconKey")
+  LOCK
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLock")
+  CLOUD
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCloud")
+  DATABASE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconDatabase")
+  GLOBE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGlobe")
+  EYE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEye")
+  USERS
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconUsers")
+  CERTIFICATE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCertificate")
+  GAVEL
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGavel")
+  HEARTBEAT
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconHeartbeat")
+  BELL
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBell")
+  BUG
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBug")
+  CODE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCode")
+  SERVER
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconServer")
+}
+
+type CompliancePortalCommitmentGroup implements Node {
+  id: ID!
+  title: String!
+  description: String!
+
+  commitments(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): CompliancePortalCommitmentConnection! @goField(forceResolver: true)
+}
+
+type CompliancePortalCommitmentGroupConnection {
+  edges: [CompliancePortalCommitmentGroupEdge!]!
+  pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentGroupEdge {
+  cursor: CursorKey!
+  node: CompliancePortalCommitmentGroup!
+}
+
+type CompliancePortalCommitment implements Node {
+  id: ID!
+  icon: CompliancePortalCommitmentIcon!
+  eyebrow: String!
+  title: String!
+  description: String!
+}
+
+type CompliancePortalCommitmentConnection {
+  edges: [CompliancePortalCommitmentEdge!]!
+  pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentEdge {
+  cursor: CursorKey!
+  node: CompliancePortalCommitment!
+}
+
+type TrustCenterFile implements Node @nda {
+  id: ID!
+  name: String!
+  category: String!
+  alias: String @goField(forceResolver: true)
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type TrustCenterFileConnection @nda {
+  edges: [TrustCenterFileEdge!]!
+  pageInfo: PageInfo!
+}
+
+type TrustCenterFileEdge @nda {
+  cursor: CursorKey!
+  node: TrustCenterFile!
+}
+
+type ComplianceCustomLink implements Node {
+  id: ID!
+  name: String!
+  url: String!
+  rank: Int!
+}
+
+type ComplianceCustomLinkConnection {
+  edges: [ComplianceCustomLinkEdge!]!
+  pageInfo: PageInfo!
+}
+
+type ComplianceCustomLinkEdge {
+  cursor: CursorKey!
+  node: ComplianceCustomLink!
+}
+
+type TrustCenterAccess implements Node {
+  id: ID!
+  email: EmailAddr!
+  name: String!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+enum DocumentAccessStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatus"
+  ) {
+  REQUESTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRequested"
+    )
+  GRANTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusGranted"
+    )
+  REJECTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRejected"
+    )
+  REVOKED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRevoked"
+    )
+}
+
+type DocumentAccess implements Node {
+  id: ID!
+  status: DocumentAccessStatus!
+}
+
+extend type Mutation {
+  requestAllAccesses: RequestAccessesPayload! @authentication(required: PRESENT) @nda
+
+  exportDocumentPDF(input: ExportDocumentPDFInput!): ExportDocumentPDFPayload!
+    @authentication(required: OPTIONAL) @nda
+
+  exportReportPDF(input: ExportReportPDFInput!): ExportReportPDFPayload!
+    @authentication(required: OPTIONAL) @nda
+
+  exportTrustCenterFile(
+    input: ExportTrustCenterFileInput!
+  ): ExportTrustCenterFilePayload! @authentication(required: OPTIONAL) @nda
+
+  requestDocumentAccess(
+    input: RequestDocumentAccessInput!
+  ): RequestDocumentAccessPayload! @authentication(required: PRESENT) @nda
+
+  requestReportAccess(
+    input: RequestReportAccessInput!
+  ): RequestReportAccessPayload! @authentication(required: PRESENT) @nda
+
+  requestTrustCenterFileAccess(
+    input: RequestTrustCenterFileAccessInput!
+  ): RequestFileAccessPayload! @authentication(required: PRESENT) @nda
+}
+
+type RequestDocumentAccessPayload {
+  document: Document
+}
+
+type RequestReportAccessPayload {
+  audit: Audit
+}
+
+type RequestFileAccessPayload {
+  file: TrustCenterFile
+}
+
+type RequestAccessesPayload {
+  trustCenterAccess: TrustCenterAccess!
+}
+
+input ExportDocumentPDFInput {
+  documentId: ID!
+}
+
+input ExportReportPDFInput {
+  reportId: ID!
+}
+
+input RequestDocumentAccessInput {
+  documentId: ID!
+}
+
+input RequestReportAccessInput {
+  reportId: ID!
+}
+
+input RequestTrustCenterFileAccessInput {
+  trustCenterFileId: ID!
+}
+
+input ExportTrustCenterFileInput {
+  trustCenterFileId: ID!
+}
+
+type ExportDocumentPDFPayload {
+  data: String!
+}
+
+type ExportReportPDFPayload {
+  data: String!
+}
+
+type ExportTrustCenterFilePayload {
+  data: String!
+}