// Trust & Security Report
AssemblyAI
Voice AI infrastructure platform: real-time and pre-recorded speech-to-text APIs, voice agent APIs, speech understanding, guardrails, and LLM gateway routing. Enterprise-grade infrastructure serving developers and enterprises.
Certifications held
6
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on app.vanta.com“ype_2_Report 2026_PCI_DSS_AOC 2026_Security_Scorecard View 10 more General 2026-SOC-2-Bridge-Letter 2026-ISO-27001-Engagement-Letter 2025-SSL-Labs-Scan 2025-Network-Diagram View 2 more Policies Access Cont”
Verify on app.vanta.com“ype_2_Report 2026_PCI_DSS_AOC 2026_Security_Scorecard View 10 more General 2026-SOC-2-Bridge-Letter 2026-ISO-27001-Engagement-Letter 2025-SSL-Labs-Scan 2025-Network-Diagram View 2 more Policies Access Cont”
Verify on assemblyai.com“Today, we are announcing significant enhancements to our security infrastructure and data residency capabilities, including EU Data Residency, ISO 27001 Certification, and renewed SOC 2 Type 2 Coverage.”
Verify on app.vanta.com“Terms of Service, or otherwise. Compliance SOC 2 Type II ISO 27001:2022 PCI DSS GDPR HIPAA Resources View all Reports 2026_ISO27001_Certificate 2026_SOC_2_Type_2_Report 2026_PCI_DSS_AOC”
Verify on app.vanta.com“of Service, or otherwise. Compliance SOC 2 Type II ISO 27001:2022 PCI DSS GDPR HIPAA Resources View all Reports 2026_ISO27001_Certificate 2026_SOC_2_Type_2_Report 2026_PCI_DSS_AOC 2026_Security_Scorecard”
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
US (primary); EU data residency available (Dublin, Ireland) via self-serve API parameters
By default, AssemblyAI uses customer data (including audio transcripts) to train AI/ML models for service improvement and benchmarking. Paid customers can opt out by emailing data-opt-out@assemblyai.com; free users cannot opt out. When BAA is signed, customer data is explicitly NOT used for model training. Zero data retention option available for LLM Gateway with Anthropic and Google inference models when BAA is executed.
// Security controls
Data retention for BAA customers
3-day TTL (auto-delete); zero retention with LLM Gateway + Anthropic/Google models
support.assemblyai.comData protection agreements
DPA with standard clauses; EU-U.S., UK-U.S., Swiss-U.S. DPF certified
assemblyai.com// Products & data scope
Data it handles: Customer uploads audio; transcripts returned; by default trained on unless opt-out or BAA signed
Universal-3.5 Pro and Universal-2 models. Supports 99 languages. Includes guardrails for PII redaction and content moderation.
Data it handles: Streaming audio; transcripts in real-time; subject to same training policies
Universal-3.5 Pro Realtime, Universal-Streaming, Whisper-Streaming. Unlimited concurrent streams.
Data it handles: Voice conversations; subject to training policies
Production-ready voice agents with turn detection and interruption handling.
Data it handles: Audio input; extracts speaker ID, sentiment, chapters, summaries
Advanced NLP on audio; subject to training policies.
Data it handles: LLM prompts and outputs; zero retention with BAA + Anthropic/Google
Routes between GPT, Claude, Gemini, community models. Built-in fallback handling.
Data it handles: Inline PII redaction and content moderation
Prevents sensitive data from reaching logs or downstream LLMs.
// At a glance
Pricing model
Pay-as-you-go; free tier available (limited, no opt-out); paid plans with no concurrency limits or throttles
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on AssemblyAI, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-09-30. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
assemblyai.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.