Customers API

Manage customer records. All customer data is encrypted at rest (AES-256-GCM).

List Customers

GET /api/customers

[
  {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "name": "Max Mustermann",
    "company": "Acme GmbH",
    "email": "[email protected]",
    "phone": "+43 1 234 5678",
    "address": "Mariahilfer Strasse 1, 1060 Wien",
    "vatId": "ATU12345678",
    "currency": "EUR",
    "paymentTermDays": 14,
    "createdAt": "2026-01-15T10:00:00.000Z"
  }
]

Create Customer

POST /api/customers

{
  "name": "Max Mustermann",
  "company": "Acme GmbH",
  "email": "[email protected]",
  "address": "Mariahilfer Strasse 1, 1060 Wien",
  "vatId": "ATU12345678"
}

Update Customer

PUT /api/customers/:id

Delete Customer

DELETE /api/customers/:id

Soft Delete

Customers are soft-deleted (deletedAt timestamp). Permanently removed after 7 years (GDPR compliance).

Fields

Field	Type	Required	Description
name	string	Yes	Full name
company	string	No	Company name
email	string	No	Email address
phone	string	No	Phone number
address	string	No	Full postal address
vatId	string	No	VAT ID (e.g. ATU12345678)
currency	string	No	Default currency (EUR)
paymentTermDays	number	No	Payment terms in days
color	string	No	Color tag (hex)