# Is Coassemble SOC 2 compliant?

Yes. Coassemble holds both SOC 2 Type 1 and SOC 2 Type 2, independently audited standards for how we protect customer data. Type 2 is the more rigorous of the two and the one most organisations will care about, because it verifies our controls work over time, not just at a single moment. If you're putting content, learner information, or business insights into Coassemble, this is your assurance that we manage that data to a recognised standard.

## What SOC 2 is

SOC 2 is an auditing standard from the American Institute of CPAs (AICPA). It assesses how a company manages data against five trust service criteria: security, availability, processing integrity, confidentiality, and privacy. Passing means we've implemented and maintained strict controls and had them verified by a third-party audit.

The difference between the two reports:

- **Type 1** checks that the right controls are in place at a specific point in time.
- **Type 2** goes further, verifying that those controls operate effectively over an extended period. This is the more thorough assessment.

## What it means in practice

- Your data is protected with strong access controls, encryption, and continuous monitoring.
- Our systems are built for reliability, with processes to maintain uptime and recover quickly from incidents.
- Our policies, security practices, and infrastructure have been independently audited, not just self-declared.

## What this means for you

- You can confidently use Coassemble for sensitive or compliance-related training, including in regulated industries like finance, health, education, and HR tech.
- Your stakeholders, legal team, or data protection officer can verify we meet a recognised standard for data security.
- SOC 2 is part of a broader, ongoing commitment to improving the platform's resilience and transparency, not a one-off certification.

## Where to get documentation

Our SOC 2 reports and other security documentation are available through the [Coassemble Trust Centre](https://trust.coassemble.com/). If you need a Data Processing Agreement (DPA) for your own records, contact our team.

Security & SOC 2

Accessibility

Our approach to AI

AI & data security

Trust

Getting started in 5 minutes

What is Coassemble?

Terminology

Workspace tour

Getting started FAQ

Sign up

Coassemble as an LMS

Migrate from other tools

Getting started

Supported file types

Create from a document

Create options compared

Cloud storage

Create from slides

Sources overview

Sources you build from

Folders

Creators

Transfer ownership of your workspace

Common questions: Workspaces

Managing account, workspace, and billing settings

Workspace management

Course Collections

Collections overview

Courses overview

End-user (learner) experience

Screens

Brand kit

Create from scratch

The Finish screen

Quizzes

Languages

Media: images

Which screen to use

Create a course

Course creation FAQ

Media: video

Publish a course

Themes

Manage & edit courses

Content curation

White-labeling

AI course creation

Custom fonts

Asset library

What you can build

Course links & access

Publish & share

Share to Slack

SCORM export

Sharing FAQ

Shareable templates

Email invitations

Custom domain

Embed in your product

Deploy via MCP

Where training goes

Learners & tracking

Course analytics

Link analytics

SCORM usage

Reporting FAQ

Quiz results

Sentiment

Collection analytics

Analytics overview

Report dashboard

Webhooks

API events

Write data back via MCP

Where results go

Flow

Pulse

Embed Core

Embed Automate

Embed Partner

Overage & rates

Usage limits

Payments & billing

Plans & pricing overview

Plan changes

Plans & billing

Explore best practices for sharing your knowledge.

Build the business case for Coassemble

Assessment: Best practice for quizzes

Best practices

SCORM files not loading

SCORM session errors on Apple devices

Why isn't my Embed screen working?

Common questions: Troubleshooting

What do I do if there is a bug?

Troubleshooting

Loom

Stripe

Notion

YouTube

HubSpot

Arcade

Vimeo

Unsplash

360Learning

aNewSpring

Docebo

Integrations overview

Slack

Connect with the API

Connect your AI model

Integrations

Release notes

Updates

Resources specifically for Embed (previously referred to as Headless course creation). These are resources that previously lived on the Headless Resources Hub.

Coassemble Embed Partner Security, Data Protection & AI FAQ

Default usage caps for clients

Managing tenant caps

Accessibility guide

AI and Data Security for Coassemble Embed Partners

Coassemble vs. Articulate: Feature comparison guide for course authoring teams

Coassemble is WCAG 2.2 Level AA Conformant

Competitor analysis

Designing effective microlearning courses

How to access and interpret the Headless usage report

How to handle competitor objections when positioning your Embed solution

Guide to pricing models for Coassemble Embed and key competitor benchmarks

Sales enablement guide: Driving user adoption

Customer testimonials for Coassemble Embed course creation (sales enablement)

Our mission: Barrier-free knowledge transfer (partner-friendly positioning language)

Getting started guide

How to communicate Coassemble feature releases to your customers 

How to migrate courses from other authoring tools into Coassemble Embed

Guide to releases

Curate

AI Create

Customize

Learner experience

Self-hosting Coassemble Embed

Initial AWS requirements for self-hosting

Embed Partners

Coassemble's AI: how it builds courses, screens, quizzes, images and narration, and how you stay in control.