AI Security and Safety at Assured

Our approach to AI

Assured uses AI to help teams complete work in the Assured platform. We use frontier models from leading providers.

Our approach is built around controlled access to information, task-specific context, customer-configured review steps, and records of AI activity.

Customer data and model training

Assured does not train AI models on customer data today.

We use retrieval-augmented generation, or RAG, and model context to complete tasks. This allows relevant information to be used as context for a task without the need to train a model on customer data.

Information used in AI workflows

AI workflows use the data needed and relevant to complete the task.

This may include provider information and sensitive healthcare-related information when needed for the requested workflow.

Access controls for users and agents

Assured uses role-based access control, or RBAC, for users and agents.

Access to information and workflows is based on customer-defined roles and permissions.

Review before submission or completion

Assured agents can take actions to complete work on the platform.

For applicable workflows, customers can configure agents not to submit or complete work without human review.

This gives customers control over when an agent can proceed independently and when a person must review a submission or completion.

AI activity is logged

Assured logs AI actions.

These records support visibility into AI activity within the Assured platform.

Approved websites and domains

For applicable agent workflows, customers can control which websites their agents can visit and where provider data can be submitted through allowlists.

Customers can create custom allowlists with the exact domains their agents may access or use Assured’s predefined list of approved destinations.

Privacy and third parties

Assured’s Privacy Policy explains how we collect, use, protect, retain, and disclose personal information.

Assured may share information with service providers, business partners, authorized third parties, legal or regulatory authorities, and other parties in the circumstances described in our Privacy Policy. These disclosures may be needed to operate, support, secure, and provide our services.

Retention and deletion

Assured handles information in accordance with its Privacy Policy and applicable legal, contractual, security, audit, and recordkeeping requirements.

Our Privacy Policy states that Assured securely deletes information when it is no longer needed, legally required, or requested. It also describes circumstances in which certain information, including closed-account information and transaction records, may be retained for 7 years.

If you have a deletion request, are closing an account, or have questions about how Assured handles information, please contact us using the details in our Privacy Policy.

Learn more

For more information, please review Assured’s Privacy Policy, Terms of Service, and Cookie Policy.