Assembled vs Forethought (2026)

Native integrations with Zendesk, Salesforce, Shopify and others pull data and trigger actions automatically, and interactions are enriched with order history and account details drawn from those systems. Agents carry out actions at the account level instead of only answering, and Copilot offers task execution in one click inside the customer's existing ticketing and CRM. A public API at docs.assembled.com lets customers embed agents in their own product, and connectors that install in one click are listed on the integrations page.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

Forethought connects to helpdesks, knowledge bases, CRM and API management platforms, with more than seventy integrations spanning contact centers and connector platforms including Airtable and Snowflake, and Autoflows reason through business policies to take authenticated action, not hand a suggestion back. Where no API exists at all, Browser Agent completes the workflow directly, so the action surface is not bounded by what partners expose.

Sourceforethought.ai/platformread 2026-09-05

Specialized agents do the work in several steps, instead of one model doing everything.

Agentic workflows use several specialized AI agents to handle multi step, cross channel journeys end to end, combining deterministic logic the customer can rely on with AI reasoning for the unpredictable parts, and Assembled says each agent holds one task so accuracy holds across the chain.

Above the individual case, support orchestration ties automation to staffing, scoring which case types to automate and rebalancing in real time with dynamic handoff logic across human agents, AI agents and outsourcing partners.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

Autoflows is Forethought's agentic reasoning engine. It takes business logic in natural language, not a decision tree, and reasons through complex policies to resolve an issue end to end. Four agents hand off to each other in a set sequence. Discover generates the Autoflows, Solve detects intent and resolves, Triage tags and routes what needs a person, and Assist surfaces the right Autoflow to the human agent who picks it up. Browser Agent executes the steps no API can reach.

Sourceforethought.ai/platformread 2026-09-05

Work reaches the agent by phone, chat and email, and the agent receives work instead of starting it. AI Voice, AI Chat and AI Copilot are named agent products alongside AI Email, and agentic workflows handle cross channel journeys. There is no outbound or proactive trigger, so the agent answers what arrives instead of starting a conversation. SMS is not among the named agents, which are Voice, Chat and Email only. Real time handoff logic and SLA alerts responding to queue demand are workforce management signals inside the customer's own operation, not triggers reaching the agent.

Sourceassembled.com/features/ai-voice-agentread 2026-09-05

Work reaches the agent from any channel. Solve resolves across chat, email, voice, SMS, Slack and in-app, with email answered instantly, phone calls handled end to end, embedded chat, and internal Slack support, and Triage picks up tickets arriving in the helpdesk queue and routes them onward.

Sourceforethought.ai/platformread 2026-09-05

A shared knowledge layer exists, but its internals are not described. Copilot serves agents policies, procedures and knowledge without their having to search documentation, and Assembled says Copilot shares the same knowledge, workflows and data as the AI agents and the workforce management side, so one corpus serves the whole operation.

Interactions are enriched with customer context pulled from connected systems. There is no description of an index, embeddings layer, retrieval architecture, refresh behavior or citation to sources, and no knowledge product page. Knowledge gap analysis is a report on automation opportunities, not a way to ground answers.

Sourceassembled.com/features/ai-copilotread 2026-09-05

Forethought connects to a brand's helpdesk, knowledge base and CRM and learns from its historical support data from day one, with Discover generating Autoflow policies and help center articles from that corpus and Solve answering with the right Autoflow or knowledge base article. There is no stated index, embeddings layer, retrieval architecture, refresh behavior or source-level citation, so a maintained retrieval structure is claimed but not shown. The per-customer fine-tuned models are training, not retrieval.

Sourceforethought.ai/platformread 2026-09-05

There is no memory layer with a stated scope or lifetime. What exists is case continuity and retrieval. Copilot gives agents full case history and keeps context consistent when a case shifts teams, channels or time zones, and interactions are enriched with order history, account details and preferences pulled from the customer's connected systems at the moment of the interaction. Both read records the customer's own helpdesk and commerce systems hold, which is retrieval, not state the agent retains. There is no persistence a customer could name, scope or delete, and no memory product.

Sourceassembled.com/features/ai-copilotread 2026-09-05

There is no stated memory layer with a scope or lifetime. The platform is trained on a brand's historical support data from day one to generate Autoflow policies and surface knowledge gaps, which is training and retrieval over a corpus, not state the agent retains between sessions. The published agent set names Solve, Triage, Assist and Discover with no memory component among them.

Sourceforethought.ai/platformread 2026-09-05

The customer defines the gate, and it sits inside the flow. The customer sets the exact guardrails and policies, including steps for human review or escalation placed within the workflow itself, so a sensitive path stops for a person instead of being routed after the fact. Agentic workflows combine LLM reasoning with hard rules that enforce policy every time, giving deterministic control where it is needed, and brand style and company guidelines are configurable so responses hold to a set standard. Copilot carries the human side, guiding agents through cases that cannot be fully automated.

Sourceassembled.com/blog/agentic-workflowsread 2026-09-05

The gate before an action sits in Forethought's own product, in two forms. Browser Agent runs only inside pre-approved policies with encrypted credentials and human-in-the-loop checkpoints, with approval steps configurable per workflow, so the customer decides which browser actions the agent may take unattended. Alongside that sit configurable escalation paths and an approval workflow in which Assist drafts a response and a person approves before it is sent.

Sourceforethought.ai/webinars/ai-that-clicks-for-you-automate-76-percent-of-cx-work-apis-cant-reachread 2026-09-05

SOC 2 Type II is attested by The Cadence Group against the 2017 Trust Services Criteria, and Assembled is HIPAA compliant, with Business Associate Agreements in place with every entity that could transfer protected health information and a BAA available on request.

It adheres to GDPR and has renewed its certification under the EU-U.S. Data Privacy Framework, holds an SSL Labs A+ rating, runs annual third party penetration testing using dynamic fault injection and source code review, checks security across the development lifecycle, trains employees on security every year and runs a named incident response channel. A Vanta hosted trust center at trust.assembled.com holds SOC 2 reports, penetration test reports and incident response plans, gated and opened by hand on request.

For access, the platform offers role based access control, multi factor authentication and single sign on, which customers use themselves, with AES-256 at rest and SSL/TLS in transit, and employee access to customer data is logged and audited. ISO 27001 is not claimed.

Sourcesupport.assembled.com/hc/en-us/articles/40487316559629-how-does-assembled-keep-data-secureread 2026-09-05

The platform is independently audited and certified for security, availability and confidentiality, with annual SOC 2 Type II audits, controls aligned to NIST 800-53, HIPAA, GDPR and CCPA, encryption at rest and TLS in transit, production secrets managed in AWS tooling, a DPA reflecting GDPR and CCPA, security-design reviews, threat models, regular third-party penetration tests, a named Data Protection Officer, a HackerOne bug bounty, a trust center at trust.forethought.ai, and a fully published subprocessor table naming each processor's identity, purpose and location.

Automated redaction removes PII, PHI and financial data at ingestion with the original securely deleted within 24 hours. Forethought reports ISO 27001 compliance and SOC 2 certification, and it is not FedRAMP certified. Role based access is claimed on the platform page but not repeated on the security page or in the legal documents.

Sourceforethought.ai/platform/securityread 2026-09-05

Every interaction has a complete decision log covering which data was used, what steps were taken and why each path was selected, which Assembled presents as full transparency into AI reasoning. Every action and API call is logged and reviewable, and AI steps are explainable and traceable. Around that sit adoption, usage and impact metrics spanning agent performance, response quality and handle time, plus real time visibility across human agents, AI agents and outsourcing partners.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

Discover surfaces insights across all support interactions and detects where the agent is failing, Triage gives CX leaders real-time visibility into agent performance and coaching opportunities, and audit trails and automatic redaction of personal, health and financial data at ingestion are in place. This reports on outcomes and content gaps, not on the run. There is no stated step-level decision trace, tool-call log, Autoflow execution record or retrieval log, which matters more on a product whose Browser Agent clicks and types inside third-party systems.

Sourceforethought.ai/platform/triageread 2026-09-05

Hosting region and residency options are not stated. Assembled's security information covers encryption, access, penetration testing, incident response and secure development but names no region or cloud provider, and its security and compliance help article answers SOC 2, HIPAA and GDPR but not hosting location.

The trust center at trust.assembled.com is gated, with access granted by hand on request within a few days, and holds SOC 2 reports, penetration test reports and incident response plans, not a residency offering. The EU-U.S. Data Privacy Framework re-certification covers data transfer, not a location a customer selects.

Every core processor that hosts customer data sits in the United States. Amazon Web Services, MongoDB, Microsoft Hosting Services and Google are all listed as web hosting in the United States, with Cloudflare, OpenAI, Groq, Mistral and Pusher likewise, and only Datadog for logging and Snowflake for warehousing add Germany. The subprocessor table names each location.

There is no stated region menu, residency commitment, VPC, single-tenant or self-hosted option, and the security page, which covers compliance, encryption, product design, training, oversight, PII handling, FedRAMP scope and HIPAA in detail, does not address residency. A customer with an EU or UK residency requirement can see the answer and cannot change it.

Sourceforethought.ai/data-subprocessorsread 2026-09-05

Customers adopt a named set of agents by role and channel, each with its own product page, with AI Voice, AI Chat, AI Email and AI Copilot on the agent side and AI powered scheduling, ML based forecasting, real time analytics and vendor management as workforce modules. A customer picks the ones its operation needs instead of assembling each from parts. Custom agents are created from scratch, not cloned, and there is no browsable template gallery or marketplace, so customers adopt from the named product set.

Sourceassembled.com/features/ai-copilotread 2026-09-05

Prebuilt agents come as a named set the customer adopts as units, each with its own product page. They are Solve for end-to-end customer resolution, Triage for classification and routing, Assist as an in-helpdesk copilot, Discover for gap detection and content generation, plus Browser Agent and Voice. Discover also generates Autoflows from a brand's own history, so the customer starts with populated workflows, not a blank builder.

Sourceforethought.ai/platformread 2026-09-05

Customers get no model selection, routing or bring your own model control. Assembled promotes a webinar on building a Claude skill, and a model provider's customer story describes Assembled Assist running on Claude and switching providers within twenty minutes during another provider's outage, which points to a third party frontier model behind the product that Assembled can change at its discretion. What is missing is customer choice, not flexibility on Assembled's side.

Sourceassembled.com/securityread 2026-09-05

OpenAI, Groq and Mistral are listed as subprocessors under AI Models, alongside Gladia and Deepgram for speech recognition and ElevenLabs and Cartesia for text to speech on the voice product. The platform runs across several providers, not one, and its per-customer fine-tuned models sit on top of that mix. Cloudflare, AWS, MongoDB, Microsoft and Google on the same table are infrastructure, not model providers. The routing is vendor-internal and no model selection, override or bring-your-own-model control is exposed to the customer.

Sourceforethought.ai/data-subprocessorsread 2026-09-05

A public interface lets outside systems call the platform. API documentation at docs.assembled.com is linked from the site navigation and the footer, so a developer can read it without a sales conversation or an account. An integrations surface sits alongside it.

Sourcedocs.assembled.com/#introductionread 2026-09-05

A Headless channel ships as a named product surface for embedding the agent into a customer's own systems, alongside a mobile SDK for in-app chat, an Assist browser extension delivered into the helpdesk, and connector integrations reaching API management platforms, with code and no-code deployment paths. There is no published API reference, SDK documentation site or MCP server for Forethought's own platform, so the headless surface is named as a capability but not documented as one.

Sourceforethought.ai/channels/headlessread 2026-09-05

Measurement happens after deployment, with no gate before it. Assembled tracks adoption, usage and impact across agent performance, response quality and handle time, reports automation impact, and scores which case types to automate, so a change can be judged against readable outcomes once live. There is no simulation, scenario set, regression suite or scored evaluation of a proposed agent change before customers see it. Scenario testing of schedules and forecast accuracy reporting exercise staffing plans and forecasts, not the agent.

Sourceassembled.com/features/ai-copilotread 2026-09-05

The Discover agent runs an improvement loop after deployment. It analyzes a brand's support data, surfaces knowledge gaps, and generates both help center content and new Autoflows to close them, so live performance feeds back into what the agent can resolve. The QA Agent, a named product at forethought.ai/platform/agent-qa, scores 100 percent of human agent tickets, not the AI agent's own behavior, and there is no stated simulation environment, scored test suite or evaluation harness for the customer's own agent.

Sourceforethought.ai/platform/agent-qaread 2026-09-05

Agents act programmatically, not through a browser, hosted session, virtual desktop or computer use. They work through native integrations with Zendesk, Salesforce, Shopify and others that pull data and trigger actions, through actions at the account level inside connected systems, and through a public API.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

Browser Agent drives a real interface itself. It logs in, clicks, types and completes the same browser-based workflows human agents run today, using pre-approved policies and encrypted credentials, and Forethought aims it at the work that APIs cannot reach.

Sourceforethought.ai/webinars/ai-that-clicks-for-you-automate-76-percent-of-cx-work-apis-cant-reachread 2026-09-05