Use this article when you’re doing a vendor risk assessment, a procurement review, or ongoing due diligence on Assembled. It covers our certifications and how to get our security documentation from the Trust Center. For how we handle personal data, see Privacy and data handling. For how our AI products handle data, see AI data security.
SOC 2
Assembled is SOC 2 Type II audited by an independent auditor. The auditor checks our systems against the Trust Services Criteria, and the audit covers our approach to security management, risk assessment, and third-party risk controls. For more about our security practices, see Security at Assembled.
HIPAA
Assembled is HIPAA compliant. We follow the required safeguards to protect personal health information, and keep healthcare-related data confidential.
We have Business Associate Agreements (BAAs) in place with every entity that could transfer personal health information to Assembled, and we follow them strictly. If you represent a healthcare organization and need a BAA with Assembled for HIPAA compliance, contact our team.
GDPR
Assembled follows the European Union’s General Data Protection Regulation (GDPR), which gives people more control over their personal data.
We’ve also re-certified under the EU-U.S. Data Privacy Framework, so we can transfer and process personal data from the EU in a way that’s recognized as compliant with GDPR.
For data subject requests and managing your own data, see Privacy and data handling. For specific GDPR questions, such as data anonymization or retention policies, contact our team.
Request compliance documentation
The fastest way to get our compliance documentation is the Assembled Trust Center. It’s a self-service portal with our security documentation, including the controls and policies we use to protect customer data, such as SOC 2 reports, penetration testing reports, and incident response plans.
All documents and policies are on the Resources tab. You can download each document, or share it with a direct link.
Get access to the Trust Center
If you don’t have access to the Trust Center yet, our team grants it by hand, usually within a few days.
- Go to trust.assembled.com.
- Fill out the request form with your full name and your work email address.
- We review your request. When access is granted, you get an email that helps you sign in.
If you need help with the Trust Center or have questions about a document, contact our team.