Our customer’s data is incredibly sensitive. We apply the principle of least privilege to ensure maximum data confidentiality. All access to production systems and customer data is limited to employees with a specific business need.

Access to all internal systems requires multiple authentication factors, including context-aware access control for administrative access.

In addition to our Responsible Disclosure program, we conduct rigorous annual penetration tests with best-in-breed independent security firms.

For more information, please see our Security Controls.

We encrypt all sensitive data both at rest and in transit using robust, industry-leading encryption algorithms.

Our production environments run in an isolated Virtual Private Cloud network with only necessary services enabled. External administrative access is mediated through context-aware access control proxies.

We’ve built our infrastructure from the ground up for security. We use declarative, immutable infrastructure and have adopted services and tools that help us minimize risk across our technology stack.

Assemble’s security team continuously evaluates our security controls and monitors employee devices, cloud environments, and networks for malicious activity.

Our team has hands-on experience building and operating security products in the U.S. Intelligence Community and the private sector, and we are committed to maintaining the highest standard of enterprise security available. We are continuously evaluating best-in-class security practices and technologies to remain state-of-the-art.