> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tic.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a secure link to a company report

> Mints a time-limited encrypted URL to `rapport.tic.io/foretagsrapport/saker-lank/...` that renders the company report without requiring the recipient to authenticate. `ExpiresAtUtc` must be between 1 hour and 31 days from now; defaults to 7 days. When `EmailTo` is set, a localised email with the link is queued for delivery.

<Badge color="yellow" size="sm">Enterprise+ tier</Badge>


## OpenAPI

````yaml post /companies/{companyId}/secure-link
openapi: 3.1.1
info:
  title: TIC Lens API
  description: "The TIC Lens API provides programmatic access to company, person, property, vehicle, and order data.\r\n\r\n## Authentication\r\n\r\nAll requests require an API key passed via the `x-api-key` header:\r\n\r\n```bash\r\ncurl -H \"x-api-key: YOUR_API_KEY\" https://lens-api.tic.io/companies/123\r\n```\r\n\r\nAPI keys are managed through the TIC Lens web application under **Settings → API Keys**.\r\n\r\n## Base URL\r\n\r\n| Environment | URL |\r\n|-------------|-----|\r\n| Production  | `https://lens-api.tic.io` |\r\n\r\n## Feature Access\r\n\r\nEndpoints are gated by your subscription plan. If your plan does not include a feature, the endpoint will return `403 Forbidden`.\r\n\r\n## Rate Limits\r\n\r\nRate limits are applied per API key. If you exceed the limit, requests will return `429 Too Many Requests`.\r\n\r\n## Response Format\r\n\r\nAll responses are JSON. Null values are omitted from responses.\r\n"
  version: v1
servers:
  - url: https://lens-api.tic.io
security:
  - ApiKey: []
tags:
  - name: Addresses
  - name: Bolagsverket
  - name: Brf
  - name: Companies
  - name: Documents
  - name: FlightImages
  - name: Free
  - name: Orders
  - name: OrdersExports
  - name: PaymentControl
  - name: PaymentControlImport
  - name: Persons
  - name: Properties
  - name: PublicSearch
  - name: SearchAutocomplete
  - name: Sentinel
  - name: ServingPermits
  - name: Team
  - name: Teams
  - name: Transportstyrelsen
  - name: Vehicles
  - name: WatchList
paths:
  /companies/{companyId}/secure-link:
    post:
      tags:
        - Companies
      summary: Create a secure link to a company report
      description: >-
        Mints a time-limited encrypted URL to
        `rapport.tic.io/foretagsrapport/saker-lank/...` that renders the company
        report without requiring the recipient to authenticate. `ExpiresAtUtc`
        must be between 1 hour and 31 days from now; defaults to 7 days. When
        `EmailTo` is set, a localised email with the link is queued for
        delivery.
      operationId: CreateCompanySecureLink
      parameters:
        - name: companyId
          in: path
          description: Internal company ID
          required: true
          schema:
            type: integer
            format: int32
      requestBody:
        content:
          application/json-patch+json:
            schema:
              $ref: >-
                #/components/schemas/Ormeo_Web_Lens_Models_Companies_CompanySecureLinkRequest_Dto
          application/json:
            schema:
              $ref: >-
                #/components/schemas/Ormeo_Web_Lens_Models_Companies_CompanySecureLinkRequest_Dto
          text/json:
            schema:
              $ref: >-
                #/components/schemas/Ormeo_Web_Lens_Models_Companies_CompanySecureLinkRequest_Dto
          application/*+json:
            schema:
              $ref: >-
                #/components/schemas/Ormeo_Web_Lens_Models_Companies_CompanySecureLinkRequest_Dto
      responses:
        '200':
          description: Secure link details
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/Ormeo_Web_Lens_Models_Companies_CompanySecureLink_Dto
        '400':
          description: ExpiresAtUtc out of allowed 1h–31d window
        '404':
          description: Company not found or not accessible
components:
  schemas:
    Ormeo_Web_Lens_Models_Companies_CompanySecureLinkRequest_Dto:
      type: object
      properties:
        expiresAtUtc:
          type:
            - 'null'
            - string
          format: date-time
        emailTo:
          type:
            - 'null'
            - string
      additionalProperties: false
    Ormeo_Web_Lens_Models_Companies_CompanySecureLink_Dto:
      type: object
      properties:
        url:
          type:
            - 'null'
            - string
        issuedAtUtc:
          type: string
          format: date-time
        expiresAtUtc:
          type: string
          format: date-time
        emailTo:
          type:
            - 'null'
            - string
      additionalProperties: false
  securitySchemes:
    ApiKey:
      type: apiKey
      name: x-api-key
      in: header

````