Security overview
A clear summary of Workforce AI security practices and independent assurance.
- Scope
- Product security overview
- Reviewed
- 2026-07-11
Security, privacy, and assurance
Trust is easier when the answers are in one place.
Review how Workforce AI protects customer data, see independent assurance and accessibility records, check current service health, and request the documents your team needs.
- Independent assurance
- SOC 2 Type IISecurity criterion, 2025 examination period
- Healthcare workflows
- HIPAA programBAA available after workflow review
- Accessibility
- VPAT publishedRevised Section 508 coverage
- Operations
- Live monitoringView current service health
Start your review
Documents you can open now
Open security, privacy, legal, HIPAA, accessibility, and subprocessor information directly.
Open now
Privacy policy
How Workforce AI collects, uses, protects, retains, and shares information.
- Scope
- Website and service privacy terms
- Reviewed
- 2026-07-11
Terms of service
The terms that govern use of Workforce AI.
- Scope
- Workforce AI service terms
- Reviewed
- 2026-07-11
Data processing addendum
Privacy and data-processing commitments for customer agreements.
- Scope
- Customer data processing terms
- Reviewed
- 2026-07-11
Subprocessor list
The service providers Workforce AI uses and the work they support.
- Scope
- Service-provider disclosure
- Reviewed
- 2026-07-11
HIPAA overview
How Workforce AI supports approved healthcare workflows and BAA requests.
- Scope
- HIPAA program and healthcare workflow guidance
- Reviewed
- 2026-07-11
BAA information
Plain-language information about business associate agreements and how to request one.
- Scope
- Business associate agreement information
- Reviewed
- 2026-07-11
VPAT / Accessibility Conformance Report
Workforce AI accessibility conformance report based on VPAT 2.5Rev and covering Revised Section 508.
- Scope
- Workforce AI dashboard accessibility evaluation
- Reviewed
- 2026-07-11
Assurance at a glance
The records most reviews ask for first
Each item names the scope and source so a reviewer can understand exactly what it covers.
SOC 2 Type II
CompletedWorkforce AI completed an independent SOC 2 Type II examination covering the Security trust services criteria for the period July 3 through October 3, 2025. The confidential report is available to qualified reviewers by request.
- Scope
- Workforce AI service and the system described in the report
- Reviewed
- 2026-07-11
HIPAA program
Available by agreementWorkforce AI supports HIPAA-aligned deployments for approved healthcare workflows and can provide a business associate agreement after reviewing the intended use and configuration.
- Scope
- Approved healthcare workflows and configured data paths
- Reviewed
- 2026-07-11
Accessibility conformance
VPAT publishedWorkforce AI publishes a VPAT-based Accessibility Conformance Report covering WCAG 2.0 and the Revised Section 508 standards. The report is available directly from this trust center.
- Scope
- Workforce AI dashboard as evaluated for the July 15, 2025 report
- Reviewed
- 2026-07-11
Customer data and model training
Policy activeWorkforce AI does not use customer business content to train shared AI models.
- Scope
- Customer business content processed by Workforce AI
- Reviewed
- 2026-07-11
Encryption and customer separation
ImplementedWorkforce AI encrypts data in transit with TLS 1.2 or higher, encrypts data at rest with AES-256, and separates customer data by account.
- Scope
- Workforce AI production service
- Reviewed
- 2026-07-11
Operational monitoring
Live monitoringThe trust center checks the public website, account dashboard, API health endpoint, support center, and scheduling service and displays the current result on the status page.
- Scope
- Publicly reachable Workforce AI service components
- Reviewed
- 2026-07-11
Frequently reviewed
Common questions
Can I request the Workforce AI SOC 2 Type II report?
Yes. Submit a document request with your business email and review purpose. Approved requests receive an expiring access link that Workforce AI can revoke when the review is complete.
Is there a HIPAA certification?
HIPAA does not have a general government-issued product certificate. Workforce AI maintains a HIPAA compliance program, supports approved healthcare workflows, and can provide a business associate agreement after reviewing the intended use and configuration.
What is a BAA?
A business associate agreement is a HIPAA contract used when a service provider may handle protected health information for a covered organization. It explains permitted use, safeguards, breach reporting, subcontractor duties, and what happens to the data when the relationship ends.
Does Workforce AI have a VPAT or Section 508 report?
Yes. Workforce AI publishes an Accessibility Conformance Report based on VPAT 2.5Rev that covers WCAG 2.0 and the Revised Section 508 standards.
What happens after I request a document or agreement?
The Workforce AI security team reviews the request, confirms the business purpose, and either approves it, asks a follow-up question, or explains why it cannot be provided. Approved confidential reports receive expiring access; agreement requests move to the appropriate review and signature step.
Keep your review moving
Ask for the report, agreement, or answer you need.
Requests go directly to the Workforce AI security team and receive an email confirmation.