Retrieves a previously submitted document together with the full forensic analysis result.

Identifier formats

The :id path parameter accepts any of the three identifiers Bynn returns when a document is submitted:

Polling / webhook for analysis completion

Forensic analysis is asynchronous, we recommend using webhook and get the result from there. Immediately after creation status is pending; once analysis finishes it becomes analyzed (or error if it could not be processed). Poll this endpoint, or subscribe to the document webhook, to receive the final result. Recommended polling interval is 30 seconds. The endpoint is rate-limited to 500 requests per minute per organization.

Response

Returns the same payload that is delivered to the configured document.analyzed webhook. Notable fields include:

• submission_id — prefixed document_<token>, matches submission_id from the create response
• request_id — humanized document ID (e.g. 5PGACUU2E)
• status — pending, analyzed, or error
• analysis_risk_status — pending, trusted, low, medium, high, fraud, or rejected
• analysis_risk_score — integer 0–100
• document_content_type — detected document type (e.g. passport, bank_statements, invoice)
• ai_generated_score, ai_deepfake_score, ai_generated_or_modified — AI-generation signals
• ai_analysis, image_manipulation, tampering_results, address_validation, signature_details, barcode_details, qr_tax_system, exif, xray — detailed forensic findings
• risk_tags, risk_tags_detailed — human-readable risk indicators
• original_file_url, media — signed URLs to the uploaded file and rendered previews
• reference_id — the customer-supplied reference_id from creation
• created_at, updated_at — ISO 8601 timestamps

Errors

• 401 authentication_error — no key, malformed key, or the key has been revoked.
• 404 not_found — no document with the given identifier exists in this organization. Deleted documents (see DELETE /documents/:id) also return 404.