> For the complete documentation index, see [llms.txt](https://docs.pagsmile.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pagsmile.com/reference/remittance-api/business/reference/upload-material-document.md).

# Upload Material Document

Uploads a supporting document and returns the file identifier used by material and compliance requests.

**Endpoint**

`POST /remittance/material/upload-material-document`

**Sandbox base URL:** `https://rem-api-sandbox.pagsmile.com`\
**Content-Type:** `application/json; charset=UTF-8`

The request uses the standard [Remittance API request envelope](https://docs.pagsmile.com/remittance-api/common). The fields below describe the decrypted `biz_data` object.

{% hint style="info" %}
**Requirement:** `M` = Mandatory, `O` = Optional, and `C` = Conditional. A conditional field is mandatory only when the condition stated in its description applies.
{% endhint %}

{% hint style="warning" %}
Encrypt `biz_data`, encrypt the AES key into `random_key`, and sign the request according to the Common request specification.
{% endhint %}

**Request body**

**Decrypted `biz_data` fields**

| Field          | Type    | Requirement | Description                                                                                                                                                                                                                                                                                                                 |
| -------------- | ------- | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `merchant_id`  | long    | M           | Pagsmile-assigned unique identifier of the merchant.                                                                                                                                                                                                                                                                        |
| `file_type`    | Integer | M           | <p>Category of the uploaded supporting document.<br>Supported values:<br><code>5</code> — PI/CI/PO contract<br><code>15</code> — Store and backend screenshot<br><code>26</code> — Payment contract or agreement<br><code>99</code> — Other. Use the category that matches the material's business and transaction type</p> |
| `file_content` | string  | M           | Base64-encoded content of the document being uploaded.                                                                                                                                                                                                                                                                      |
| `file_name`    | string  | M           | <p>Original name of the uploaded document, including its file extension.<br>Maximum UTF-8 byte length: <code>256</code>.</p>                                                                                                                                                                                                |
| `file_desc`    | string  | O           | Human-readable description of the uploaded document.                                                                                                                                                                                                                                                                        |

**Plaintext `biz_data` example**

{% hint style="info" %}
This example includes mandatory fields and representative optional or conditional fields. Submit fields marked `C` only when the condition in the field description applies.
{% endhint %}

```json
{
  "merchant_id": 100398,
  "file_type": 5,
  "file_content": "JVBERi0xLjQK...",
  "file_name": "document.pdf",
  "file_desc": "Example reference"
}
```

**Request example**

```bash
curl --request POST \
  --url https://rem-api-sandbox.pagsmile.com/remittance/material/upload-material-document \
  --header 'Content-Type: application/json; charset=UTF-8' \
  --data '{
    "partner_id": "<your_partner_id>",
    "app_id": "<your_app_id>",
    "timestamp": "2026-07-20 10:30:00",
    "version": "2.0",
    "language": "en",
    "random_key": "<RSA-encrypted AES key>",
    "request_id": "<globally_unique_request_id>",
    "sign_type": "RSA",
    "biz_data": "<AES-encrypted biz_data>"
  }'
```

{% hint style="info" %}
Use the `partner_id` and `app_id` assigned to your integration. The values above are placeholders.
{% endhint %}

**Response**

{% tabs %}
{% tab title="Success" %}
The `data` field in the response envelope is AES-encrypted. Decrypt `random_key` with your RSA private key, then use the resulting AES key to decrypt `data`. See [Security](https://docs.pagsmile.com/remittance-api/security) for implementation details.

**Encrypted response example**

```json
{
  "code": "10000",
  "msg": "Success",
  "data": "<AES-encrypted response data>",
  "random_key": "<RSA-encrypted AES key>",
  "sign_type": "RSA",
  "app_id": "2017051914172236111"
}
```

**Decrypted `data` example**

```json
{
  "file_id": 100001
}
```

{% endtab %}

{% tab title="Invalid signature" %}

```json
{
  "code": "40002",
  "msg": "Business Failed",
  "sub_code": "invalid-signature",
  "sub_msg": "invalid signature"
}
```

{% endtab %}
{% endtabs %}

**Response data fields**

| Field     | Type | Requirement | Description                                                   |
| --------- | ---- | ----------- | ------------------------------------------------------------- |
| `file_id` | long | O           | Pagsmile-assigned unique identifier of the uploaded document. |

**Related APIs**

* [Query Bank List](https://docs.pagsmile.com/remittance-api/business/reference/query-bank-list)