Assembled

Named integrations with authenticated write action: Assembled publishes native integrations with Zendesk, Salesforce, Shopify and others that pull data and trigger actions automatically, and interactions are enriched with order history and account details drawn from those systems.

Agents execute account-level actions rather than only answering, and Copilot offers one-click task execution inside the customer's existing ticketing and CRM. A public API is documented at docs.assembled.com for embedding agents into the customer's own product, and one-click connectors are published on the integrations page.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

Multi-step execution by specialized agents rather than a single do-everything model: agentic workflows are published as multiple specialized AI agents handling multi-step, cross-channel journeys end to end, combining deterministic logic the customer can rely on with AI reasoning for the unpredictable parts, with the vendor stating each agent holds one task so accuracy holds across the chain. Above the individual case, support orchestration ties automation to staffing, scoring which case types to automate and rebalancing in real time with dynamic handoff logic across human agents, AI agents and outsourcing partners.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

A shared knowledge layer is documented and its internals are not. Copilot serves agents policies, procedures and knowledge without their having to search documentation, and Assembled states that Copilot shares the same knowledge, workflows and data as the AI agents and the workforce management side, so one corpus serves the whole operation rather than each surface holding its own. Interactions are enriched with customer context pulled from connected systems.

No index, embeddings layer, retrieval architecture, refresh behavior or source-level citation is documented, so a maintained retrieval structure is asserted rather than shown, and no knowledge product page exists in the navigation to describe one. Knowledge-gap analysis is an automation-opportunity report rather than a grounding mechanism.

Sourceassembled.com/features/ai-copilotread 2026-09-05

The gate is customer-defined and sits inside the flow. Assembled states that the customer defines the exact guardrails and policies, and that those guardrails include steps for human review or escalation placed within the workflow itself, so a sensitive path stops for a person rather than routing after the fact.

Agentic workflows are built to combine LLM reasoning with hard rules that enforce policy every time, giving deterministic control where it is needed, and brand style and company guidelines are configurable so responses hold to a set standard. Copilot carries the human side, guiding agents through cases that cannot be fully automated.

Sourceassembled.com/blog/agentic-workflowsread 2026-09-05

Compliance and access controls are both documented, across three Assembled pages.

On compliance, the pages list SOC 2 Type II attested by The Cadence Group against the 2017 Trust Services Criteria, HIPAA compliance with Business Associate Agreements stated to be in place with every entity that could transfer protected health information and a BAA obtainable on request, GDPR adherence with a successful re-certification under the EU-U.S. Data Privacy Framework, an SSL Labs A+ rating, annual third-party penetration testing using dynamic fault injection and source-code review, secure development checks across the lifecycle, annual employee security training and a named incident-response channel.

A Vanta-hosted trust center at trust.assembled.com holds SOC 2 reports, penetration test reports and incident response plans; it is gated rather than open, with access granted manually on request. On access, the agentic workflows page names role-based access control and multi-factor authentication as enterprise security properties of the platform, alongside single sign-on, AES-256 at rest and SSL/TLS in transit, with employee access to customer data logged and audited. RBAC, MFA and SSO are controls the customer uses. ISO 27001 is not claimed.

Sourcesupport.assembled.com/hc/en-us/articles/40487316559629-how-does-assembled-keep-data-secureread 2026-09-05

Reconstruction rather than reporting: the agentic workflows page publishes complete decision logs for every interaction, covering which data was used, what steps were taken, and why each path was selected, framed explicitly as full transparency into AI reasoning rather than a black box.

The vendor's own agentic-workflows post adds that every action and API call is logged and reviewable and that AI steps are explainable and traceable. Around that sit adoption, usage and impact metrics spanning agent performance, response quality and handle time, plus real-time visibility across human agents, AI agents and outsourcing partners.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05

No memory layer with a stated scope or lifetime is documented. What exists is case continuity and retrieval: Copilot gives agents full case history and keeps context consistent when a case shifts teams, channels or time zones, and interactions are enriched with order history, account details and preferences pulled from the customer's connected systems at the moment of the interaction.

Both are reads against records the customer's own helpdesk and commerce systems hold, which is retrieval rather than state the agent retains, and a store is not a memory layer whoever writes it. No persistence a buyer could name, scope or delete is documented, and no memory product exists in the navigation.

Sourceassembled.com/features/ai-copilotread 2026-09-05

Hosting region and residency options are not stated on Assembled's public pages. The security page covers encryption, access, penetration testing, incident response and secure development but names no region or cloud provider, and the help-center security and compliance article answers SOC 2, HIPAA and GDPR but not hosting location.

The trust center at trust.assembled.com is gated, with access granted manually on request within a few days, and holds SOC 2 reports, penetration test reports and incident response plans rather than a stated residency offering. The EU-U.S. Data Privacy Framework re-certification covers data transfer, not a location a buyer selects. Residency pages from similarly named companies, AssemblyAI, Assembly and Assembly Studio, do not describe Assembled. 2026-09-05

A named set of agents adopted by role and channel, each published with its own product page: AI Voice, AI Chat, AI Email and AI Copilot on the agent side, with AI-powered scheduling, ML-based forecasting, real-time analytics and vendor management as workforce modules alongside. A buyer selects the ones their operation needs rather than assembling each from parts. Custom agents are created rather than cloned, and no browsable template gallery or marketplace exists, so the adoption route is the named product set rather than a catalog.

Sourceassembled.com/features/ai-copilotread 2026-09-05

Three channels are documented and the agent receives rather than initiates. Assembled publishes AI Voice, AI Chat and AI Copilot as named agent products alongside AI Email, so work reaches the agent by phone, chat and email, and agentic workflows are described as handling cross-channel journeys.

No outbound or proactive trigger is documented, so the agent answers what arrives rather than starting a conversation. SMS does not appear in the product navigation, where the named agents are Voice, Chat and Email only. Real-time handoff logic and SLA alerts responding to queue demand are workforce-management signals inside the customer's own operation rather than triggers reaching the agent.

Sourceassembled.com/features/ai-voice-agentread 2026-09-05

No model selection, routing or bring-your-own-model control is exposed to the customer. Assembled's own site currently promotes a webinar on building a Claude skill, and a model provider's customer story describes Assembled Assist running on Claude and switching providers within twenty minutes during another provider's outage, which points to a third-party frontier model behind the product that the vendor can change at its discretion. What is absent is customer choice, not vendor-side flexibility.

Sourceassembled.com/securityread 2026-09-05

The platform is callable from outside through a documented public interface: Assembled publishes API documentation at docs.assembled.com, linked from the site navigation under Product Help and again from the footer, so a developer can read the surface without a sales conversation or an account. An integrations surface is published alongside it.

Sourcedocs.assembled.com/#introductionread 2026-09-05

Measurement after deployment is documented; a gate before it is not. Assembled tracks adoption, usage and impact across agent performance, response quality and handle time, reports automation impact, and scores which case types to automate, so a change can be judged against readable outcomes once live. No simulation, scenario set, regression suite or scored evaluation of a proposed agent change before customers see it is documented. Scenario testing of schedules and forecast accuracy reporting exercise staffing plans and forecasts, not the agent.

Sourceassembled.com/features/ai-copilotread 2026-09-05

No browser control, hosted session, virtual desktop or computer use appears anywhere on the site. Instead, agents act programmatically, through native integrations with Zendesk, Salesforce, Shopify and others that pull data and trigger actions, through account-level actions inside connected systems, and through a documented public API.

Sourceassembled.com/features/agentic-workflowsread 2026-09-05