Security and Compliance
Learn about Factory’s industry-leading security measures and compliance standards for Assembly
At Factory, we understand that the security of your code and data is paramount. Our commitment to security and compliance ensures that Factory leads the industry in protecting your intellectual property and maintaining the highest standards of data protection.
Visit Our Trust Center
For comprehensive details on our security measures, compliance certifications, and privacy policies, visit our Trust Center.
Industry-Grade Security and Compliance
Factory adheres to the highest security standards and compliance certifications:SOC 2
Certified for security, availability, and confidentiality
GDPR
Compliant with EU data protection regulations
CCPA
Adherent to California Consumer Privacy Act
ISO 42001
Pioneering adherence to AI system security standards
Setting a New Standard
Factory is among the first organizations globally to adhere to the new ISO 42001 standard, which specifies requirements for establishing, implementing, and maintaining a secure and compliant AI software system within enterprise organizations.Key Security Features
Droid Shield: Securing Code & IP
Our proprietary Droid Shield system enhances code safety by:- Detecting and removing security vulnerabilities
- Identifying and mitigating potential bugs
- Preventing IP breaches in Droid-generated code
Data Protection Measures
Never Misusing Your Data
Never Misusing Your Data
Your code is your IP. We build products that protect your IP at all costs:
- We do not use your code to train our models
- Your data remains solely yours, always
Securely Hosted
Securely Hosted
Assembly is hosted within a sandboxed, single-tenant environment:
- Each instance has its own Virtual Private Cloud (VPC)
- Ensures isolation and enhanced security for your data
Comprehensive Audit Logging
Comprehensive Audit Logging
- Access detailed, configurable audit logs of your company’s Assembly usage
- Export logs to your SIEM for monitoring and alerting
- Maintain full visibility into system access and actions
Strict Permissions Enforcement
Strict Permissions Enforcement
- Assembly only shows information you have permission to access
- Permissions changes are reflected immediately in Assembly’s results
- Ensures data access aligns with your organization’s policies
Encryption of All Data
Encryption of All Data
- All data encrypted at rest using AES 256
- Data in transit encrypted using TLS 1.2+
- Robust controls to limit data exfiltration risks
Our Commitment to Your Security
At Factory, we’re dedicated to maintaining the highest standards of security and compliance. Our team continuously works to stay ahead of potential threats and adapt to evolving security landscapes.Factory achieved SOC 2 Certification on April 8, 2024, further demonstrating our commitment to maintaining the highest standards of security and compliance.