Security and compliance, built in
- SOC 2 Type II, ISO 27001:2022, HIPAA, PCI-DSS Level 1, and GDPR
- Ofcom registered in the UK, FCC registered in the US
- We do not train shared AI models on your data
- Full recording controls, retention, and audit trails
Yes, Assist Telecom is HIPAA and SOC 2 compliant. The platform is certified to SOC 2 Type II, ISO 27001:2022, HIPAA, PCI-DSS Level 1, and GDPR. It is a registered communications provider, Ofcom in the UK and Europe and FCC in the US. Your data is encrypted, and it is never used to train shared AI models.
Certified, not just claimed
SOC 2 Type II
Independently audited controls for security, availability, and confidentiality.
ISO 27001:2022
Certified information security management.
HIPAA
Built to handle protected health information.
PCI-DSS Level 1
The highest level for handling card payments.
GDPR
Compliant handling of personal data.
A registered communications provider, not a reseller
UK and Europe
Assist Telecommunications Ltd
Ofcom registered communications provider.
United States
Assist Telecommunications USA LLC
FCC registered communications provider.
Accountable as the provider, not a layer sitting on top of someone else's network.
Your data is not used to train shared AI models
Many AI platforms train their models on the data that runs through them. We do not. Your calls and your data are yours.
- Not used to train shared or foundation models
- Not shared across customers
- What is yours stays yours
Your data, protected
- Encrypted in transit and at rest
- Data held in the UK or US, with regional storage provisioned where a deployment requires it
- Role based access, so people see only what they should
- Encrypted messaging across your team
Control over recordings and retention
- Choose what is recorded and how long it is kept
- Searchable, filterable, and exportable audit logs of every user and system action
- Retention policies set to your requirements
Built for regulated industries
Healthcare, finance, and any operation that answers for its data. The certifications, the data controls, and the no-training position are why regulated businesses trust their calls to the platform.
Frequently asked questions
Talk to us about your requirements
Tell us your security and compliance requirements. We will show you how the platform meets them.