Patient Communication AI

Assort Health Vendor Risk Profile

Assort Health provides generative AI voice agents specifically designed for healthcare call centers to automate patient access, including scheduling, triage, intake, and referrals.

Verification pendingConditional / Verify BAAHigh RiskYesHIPAA: Yes

Risk Score

/100

AI Trust

/100

Compliance Overview

HIPAA Compatible

Yes

BAA Available

Yes

Hosting Model

—

Healthcare Focused

Yes

Approval Status

Conditional / Verify BAA

Risk Level

High Risk

Last Reviewed

2026-08-18

Last Verified

Verification pending

Review Frequency

Quarterly

Verification reflects VNDRIQ's latest automated source check. Editorial review is a separate human assessment.

AI & Data Policies

AI Training Policy

The platform is built on a model trained on over 200 million specialty patient interactions; it utilizes Gemini 2.5 Flash for processing.

Data Retention Policy

Retains call recordings and transcripts to facilitate live staff handoffs and for quality assurance purposes.

Support Access Risk

—

Approved Use Cases

Automating patient-facing phone interactions such as appointment scheduling, cancellations, and clinical triage for specialty medical groups and health systems.

Restricted Use Cases

Requires deep EHR integration for full functionality; enterprise custom pricing applies; users must verify that all downstream AI subprocessors (STT/LLM/TTS) are covered by the vendor's BAA.

Deployment & Data Residency

Deployment Type

SaaS

Model Type

—

Deployment Environment

—

Hosting Regions

—

Available Regions

—

Data Residency

—

Customer Data Residency Options

—

Cross-Border Data Transfer

—

Data Residency Controls

—

Security & Compliance

SOC 2

Yes (SOC 2 Type II Certified)

ISO 27001

Not Verified

ISO 42001

—

HIPAA Documentation

—

Encryption

Data is encrypted in transit and at rest.

SSO

Not Verified

MFA

Not Verified

Private Networking

—

Private Endpoints

—

Subprocessors

—

Incident Notifications

—

Security Whitepaper

—

Executive Summary

Primary Use Cases

Assort Health provides generative AI voice agents specifically designed for healthcare call centers to automate patient accessincluding schedulingtriageintakeand referrals.

Key Procurement Considerations

Product MaturityCustomer Support InformationCompliance DocumentationVendor-documented restrictions — verify applicability

Vendor Trust Score

Limited Trust Data

7

/100

HIPAA Readiness17
BAA Availability0*
Security Controls0*
Governance Documentation0*
Transparency0*
Product Maturity0*
Healthcare Focus33
Integration Readiness25
Customer Support Information0*
Compliance Documentation0*

Informational framework based on publicly available and registry data. Not a certification or guarantee. Asterisks indicate categories with limited registry data.

Security & Compliance Dashboard

Standardized view of available registry security information. Not Verified indicates the registry has no documented data.

HIPAA StatusNot Verified
BAA AvailabilityNot Verified
SOC 2Not Verified
ISO 27001Not Verified
HITRUSTNot Verified
Encryption at RestNot Verified
Encryption in TransitNot Verified
Single Sign-On (SSO)Not Verified
Multi-Factor AuthNot Verified
Audit LoggingNot Verified
Role-Based AccessNot Verified
Data ResidencyNot Verified
Public Security DocsNot Verified
Incident ResponseNot Verified

AI Governance Maturity

Foundational4/100

Minimal governance documentation; early-stage controls.

Foundational
Developing
Established
Advanced
Leading

Assessed Indicators

Governance Documentation
Human Oversight
AI Policies
Compliance Transparency
Risk Management
Security Controls
Operational Governance

Procurement Risk Considerations

Informational considerations for procurement evaluation, not definitive ratings.

Governance Maturity

Foundational

Elevated Consideration

Security Readiness

0/100 security controls

Elevated Consideration

Compliance Readiness

0/100 compliance documentation

Elevated Consideration

Integration Complexity

API not verified — verify integration path

Moderate Consideration

Operational Complexity

Not Verified

Vendor Transparency

0/100 transparency

Elevated Consideration

Healthcare Experience

Healthcare focus not verified

Moderate Consideration

Documentation Completeness

0/100 governance docs

Elevated Consideration

Vendor Lifecycle & Change History

Available registry milestones. Detailed change tracking expands as the registry matures.

Profile Updated

2026-08-26

Last Registry Review

2026-08-18

Registry Added

2026-08-18

Regulated Use Assessment

Healthcare

Healthcare Focused

Yes

HIPAA Compatibility

Yes

BAA Availability

Yes

Financial Services

SOC 2

Yes (SOC 2 Type II Certified)

ISO 27001

Not Verified

VNDRIQ does not classify vendors as HIPAA Compliant, SEC Compliant, or FINRA Approved unless official evidence exists. Vendor suitability depends on each organization's governance requirements, contractual obligations, deployment model, risk tolerance, and applicable regulations.

Review Notes

Assort Health claims full HIPAA compliance and SOC 2 Type II certification. The vendor emphasizes the necessity of BAAs for the entire AI subprocessor chain (telephony, STT, LLM, TTS). The platform is marketed as being trained on hundreds of millions of patient interactions.

Quick Facts

Category

Patient Communication AI

Headquarters

San Francisco, CA

Year Founded

2023

Deployment Type

SaaS

Website

assorthealth.com
Pending Verification

Risk Score

/100

AI Trust Score

/100

Last Reviewed

2026-08-18

Last Verified

Verification pending

Request Vendor Evaluation

Get a structured risk assessment and governance recommendation for Assort Health.

Vendor Governance

Approval Tier

Conditional / Verify BAA

BAA Verification

Not Started

PHI Exposure

High

AI Risk Level

High

Last Review

2026-08-18

Next Review Due

2026-11-18

Verification Status

Pending Review

Next Review Date

2026-11-18

Review Frequency

Quarterly

Vendor Completeness Score

100/100

Complete

Website Present

+20

Category Assigned

+15

Approval Status Present

+15

BAA Status Present

+15

PHI Exposure Classified

+10

Risk Level Present

+10

Review Date Present

+10

Verification Notes Present

+5

Trust & Transparency

Last Reviewed Date

2026-08-18

Review Frequency

Quarterly

Vendor Verification Process

Every vendor is reviewed against public documentation, trust centers, and contract evidence before classification.

Editorial Independence Statement

VNDRIQ classifications are independent of vendor relationships. Ratings reflect available evidence and governance risk only.

Registry Update Policy

The registry is reviewed on a monthly cycle. All updates are editor-reviewed before publication; no automated public data changes.

Editorial Methodology

Vendors are evaluated across compliance, security, AI governance, and enterprise readiness. Each review follows a standardized 12-point checklist covering website, HIPAA, BAA, security, compliance, AI capabilities, deployment, pricing, product changes, ownership, integrations, and documentation.

Trust Signals

Editorial Review StatusPending Review
Last Reviewed2026-08-18
Last Updated2026-08-26
Verification DateNot Verified
Registry ConfidenceNot Verified
Governance MaturityFoundational
Trust Score7/100
Compliance SnapshotNot Verified
Security SnapshotNot Verified

Vendor Benchmarking

Comparison against registry averages where supported. Benchmarks are informational and based on registry data.

Governance Maturity4 ↑ 0 vs avg 4
Security Readiness0 ↑ 0 vs avg 10
Documentation Completeness0 ↑ 0 vs avg 0
Integration Readiness25 ↑ 15 vs avg 10
Healthcare Specialization33 ↑ 18 vs avg 15
Compliance Transparency0 ↑ 0 vs avg 7
Overall Trust Score7 ↑ 0 vs avg 9
This vendorRegistry average

Ask VNDRIQ About This Vendor

Ask questions about Assort Health using registry data.

Ask VNDRIQ About Healthcare AI Vendors

Explore healthcare AI vendors, compare capabilities, identify documentation gaps, and understand procurement and governance considerations using information from the VNDRIQ registry.

Suggested prompts

VNDRIQ provides vendor intelligence and educational procurement support. Responses do not constitute legal, medical, cybersecurity, compliance, or procurement advice. Vendor information may be incomplete, vendor-reported, under review, or subject to change.

Do not enter patient information, PHI, passwords, or sensitive data.

VNDRIQ vendor ratings are for operational risk screening and governance support. Final approval should include legal, compliance, security, and contract review before any PHI or regulated data is shared. Risk classifications are based on available public information and internal review at time of last verification.