Snapshot 223536
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Overview At ASAPP, safeguarding customer data and maintaining trust are foundational to how we build and deliver AI products. This Trust Portal is designed to give you clear, centralized access to our security, privacy, and compliance information, enabling you to conduct your due diligence with confidence. We believe trust is earned through transparency, and this portal is part of our commitment to making that trust verifiable. Our programs are guided by a strong commitment to continuous oversight and alignment with global standards. We undergo independent audits, maintain SOC 2 Type II and PCI DSS certifications, and align with privacy regulations such as GDPR and CCPA. We welcome your review of our practices and documentation, and we’re committed to supporting your security, legal, and procurement evaluations with clarity and responsiveness Compliance SOC 2 Type 2 PCI DSS v4.0.1 HITRUST AWS Advanced Technology Partner CCPA HIPAA GDPR ASAPP is trusted by JetBlue Dish Network Astound Broadband EY Alvaria Inc F500 Insurance F500 Sportswear F500 Telco F100 Retailer Documents Featured Documents COMPLIANCESOC 2 Type 2 COMPLIANCEPCI DSS v4.0.1 PRODUCT SECURITYGenAgent Security Overview PRODUCT SECURITYGenAgent Security & Safety FAQs Product Security Audit Logging Web Application Firewall GenAgent Security & Safety FAQs View more Data Privacy Automated Redaction of Sensitive Data Privacy by Design Customer Data Isolation View more Data Security Data Isolation Data Retention Data Classification View more AI Safety & Security AI Safety Evaluation & Red Teaming Input & Output Safety View more AI Red Teaming Dynamic Risk Benchmarking & Regulatory Alignment Continuous Adversarial Red Teaming Program Agentic & Operational Security View more Network Security Host-based IDS Security Information and Event Management (SIEM) Encrypted Data Transmission View more Endpoint Security MDM Enforced Anti-Malware Disk Encryption View more Incident Response Documented Incident Response Plan Designated Response Personnel Post-Incident Reviews and Remediation View more Infrastructure Amazon Web Services Environment Isolation Infrastructure as Code (IaC) View more Access Control Multi-Factor Authentication (MFA) Role-Based Access Control (RBAC) SSO Enforcement View more BC/DR Business Continuity & Disaster Recovery Overview Documented Business Continuity Plan BCDR Tested Annually View more Legal Privacy Policy Subprocessors Cyber Insurance View more Organizational Security Background Checks Onboarding Training Employee Handbook & Code of Conduct View more Risk Management Risk Assessments Third-Party Risk Management Risk Register Training Security & Privacy Training Phishing Training Ransomware Awareness View more Policies Access Control Policy AI Security and Compliance Policy Remote Work Policy View more Trust Center Updates ASAPP Successfully Completes SOC 2 Type II Audit for the ASAPP Customer Experience Platform (CXP) Compliance We're happy to announce that ASAPP has successfully completed its latest SOC 2 Type II audit. This independent assessment, conducted over a defined review period, evaluated security controls supporting the ASAPP Customer Experience Platform (CXP), our unified AI-native platform for enterprise contact centers. This outcome reflects our ongoing commitment to enterprise-grade assurance and the trust placed in us by security, legal, and compliance teams. A copy of the report is available under NDA through this Trust Portal. ASAPP Launches Continuous Red Teaming across Customer Experience Platform General ASAPP now runs adversarial AI red teaming continuously against every model and agent in our Customer Experience Platform. It's built into our model evaluation pipeline and is powered by Promptfoo, the system that probes for 50+ classes of AI-specific vulnerabilities on an ongoing basis. Coverage spans the attack surface that matters for production AI: Jailbreaks and indirect prompt injection RAG data exfiltration and cross-session PII leakage Agentic risks like BOLA and SSRF in tool-using systems 40+ additional vectors aligned to the OWASP Top 10 for LLMs The program is governed under the NIST AI Risk Management Framework, and it's findings flow into our standard vulnerability triage and remediation process. See our latest blog for technical deep-dive. ASAPP Achieves HITRUST Certification Compliance As of January 28, ASAPP has achieved HITRUST certification, further strengthening our security, privacy, and compliance posture. HITRUST provides a comprehensive, certifiable framework that harmonizes leading standards and regulatory requirements. This milestone reinforces our commitment to enterprise-grade assurance and independent validation of our control environment. Additional details on our HITRUST journey are available here Introducing the ASAPP AI Transparency Portal General ASAPP has launched its AI Transparency Portal, a centralized resource outlining our approach to AI governance, safety, and security. The portal provides visibility into our model oversight practices, data protection controls, hallucination mitigation strategies, human-in-the-loop safeguards, and ongoing monitoring processes. This initiative reflects our commitment to responsible AI deployment and proactive transparency for enterprise customers. Visit our AI Transparency Portal at https://trust.asapp.com/ai Learn more about ASAPP's AI Transparency Portal here ASAPP Successfully Completes SOC 2 Type II Audit Across All Products Compliance We’re happy to announce that ASAPP has successfully completed its latest SOC 2 Type II audit. This independent assessment, conducted over a defined review period, evaluated 64 security controls across our full product suite, including GenAgent, Messaging Platform, AutoTranscribe, AutoSummary, and AutoCompose. This outcome reflects our ongoing commitment to enterprise-grade assurance and the trust placed in us by security, legal, and compliance teams. A copy of the report is available under NDA through this Trust Portal.