// Trust & Security Report
AssemblyAI, Inc.
Voice AI infrastructure platform: real-time and pre-recorded speech-to-text APIs, voice agent APIs, speech understanding, guardrails, and LLM gateway routing. Enterprise-grade infrastructure serving developers and enterprises.
Certifications held
6
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on assemblyai.com“AssemblyAI follows internal security controls, policies, and procedures upheld by the American Institute of Certified Public Accountants (AICPA).”
Verify on assemblyai.com“SOC 2 Type 2 Coverage expanded to include all Trust Service Criteria (security, availability, integrity and privacy controls). Renewed February 3, 2025.”
Verify on assemblyai.com“ISO 27001 Certification successfully achieved, validating sophisticated approach to protecting enterprise data and managing information security risks. Announced February 3, 2025.”
Verify on assemblyai.com“GDPR third-party assessment completed with documented compliance testing of security controls. EU Data Residency available (Dublin, Ireland). EU-U.S., UK-U.S., and Swiss-U.S. Data Privacy Framework (DPF) certified.”
Verify on assemblyai.com“AssemblyAI is a Business Associate under HIPAA and offers standard BAA to paid customers. Data under BAA is not used for model training. BAA available at www.assemblyai.com/legal/business-associate-agreement. As of Nov 26, 2024, BAA customers have 3-day TTL on transcripts.”
Verify on assemblyai.com“PCI-DSS 4.0 Level 1 certified as of March 31, 2025. Upgraded from previous PCI-DSS 3.2.1 certification. Latest Attestation of Compliance available in Trust Center.”
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
US (primary); EU data residency available (Dublin, Ireland) via self-serve API parameters
By default, AssemblyAI uses customer data (including audio transcripts) to train AI/ML models for service improvement and benchmarking. Paid customers can opt out by emailing data-opt-out@assemblyai.com; free users cannot opt out. When BAA is signed, customer data is explicitly NOT used for model training. Zero data retention option available for LLM Gateway with Anthropic and Google inference models when BAA is executed.
// Security controls
Data retention for BAA customers
3-day TTL (auto-delete); zero retention with LLM Gateway + Anthropic/Google models
support.assemblyai.comData protection agreements
DPA with standard clauses; EU-U.S., UK-U.S., Swiss-U.S. DPF certified
assemblyai.com// Products & data scope
data: Customer uploads audio; transcripts returned; by default trained on unless opt-out or BAA signed
Universal-3.5 Pro and Universal-2 models. Supports 99 languages. Includes guardrails for PII redaction and content moderation.
data: Streaming audio; transcripts in real-time; subject to same training policies
Universal-3.5 Pro Realtime, Universal-Streaming, Whisper-Streaming. Unlimited concurrent streams.
data: Voice conversations; subject to training policies
Production-ready voice agents with turn detection and interruption handling.
data: Audio input; extracts speaker ID, sentiment, chapters, summaries
Advanced NLP on audio; subject to training policies.
data: LLM prompts and outputs; zero retention with BAA + Anthropic/Google
Routes between GPT, Claude, Gemini, community models. Built-in fallback handling.
data: Inline PII redaction and content moderation
Prevents sensitive data from reaching logs or downstream LLMs.
// At a glance
Pricing model
Pay-as-you-go; free tier available (limited, no opt-out); paid plans with no concurrency limits or throttles
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on AssemblyAI, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
assemblyai.com