API regulations