Vendor record · assemblyai.com
What AssemblyAI promises about your data.
Where AssemblyAI publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We watch assemblyai.com/legal/subprocessors for AssemblyAI's sub-processor list, but our latest reading found 0 named sub-processors where an earlier reading of the same page found 16, so we are holding it back for a person.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at assemblyai.com/legal/data-processing-addendum (read October 14, 2026) gives you 10 days' notice and 10 to object.
- Window
- 10
- Pages
- 7
- Copies
- 57
days' notice and 10 to object when it adds a sub-processor
pages we watch
dated copies of all its pages, since August 31, 2026
AssemblyAI DPA
AssemblyAI's data processing agreement states a window of 10 days on new sub-processors. Here is the clause, from our October 14, 2026 copy:
10
days' notice and 10 to object
“At least ten (10) days before enabling any third party other than existing Authorized Subprocessors to access or participate in the processing of Personal Data, AssemblyAI will add such third party to the List and notify Customer via the email address subscribed to receive notifications of New Subprocessors as described herein. Customer may object to such an engagement by informing AssemblyAI within ten (10) days of receipt of the aforementioned notice to Customer, provided such objection is in writing and based on reasonable grounds relating to data protection.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that AssemblyAI published it.
assemblyai.com/legal/data-processing-addendum · read 2026-10-14 · fingerprint 226d91d93b25ccb7…
How it says it sends notice
“AssemblyAI may provide a mechanism to subscribe to notifications of new Authorized Subprocessors and Customer agrees to subscribe to such notifications where available.”
assemblyai.com/legal/data-processing-addendum · read 2026-10-14
What it says if you do not object
“If Customer does not object during this period, that third party will be deemed an Authorized Subprocessor.”
assemblyai.com/legal/data-processing-addendum · read 2026-10-14
Notice windows across every vendor we watch · Silence as consent
AssemblyAI sub-processors
We watch assemblyai.com/legal/subprocessors for AssemblyAI's sub-processor list, and our latest reading found 0 named sub-processors where an earlier reading of the same page found 16, so we are holding it back for a person.
Every public change we have recorded · Where vendors publish their lists
How long AssemblyAI keeps your data
AssemblyAI's trust and security page (assemblyai.com/security, in the copy read October 7, 2026) says: “For pre-recorded audio, uploads are deleted within 24–48 hours and transcripts after 30 days by default.”
Training on customer data
“For information on how to opt-out of AssemblyAI’s use of Customer Data for purposes of training its artificial intelligence and machine learning models (to the extent applicable to Customer’s pricing plan), please visit: https://www.assemblyai.com/docs/faq/how-to-opt-out-of-data-sharing-for-our-model-improvement-program…”
assemblyai.com/terms · read 2026-10-01
Training on customer data
“A signed BAA opts you out automatically. How to opt out.”
assemblyai.com/security · read 2026-10-07
Training on customer data
“We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not disclose such data in a manner that could identify you.”
assemblyai.com/privacy-policy · read 2026-10-01
Training on customer data
“(i) use or otherwise exploit the Services or any Output to develop, train, optimize or improve the functionality or performance of any speech-to-text, text-to-speech, speech-language-model, speech-to-speech model, or large language model that takes audio as inputs, or any similar model that is developed, owned or operated by Customer or a third party;”
assemblyai.com/terms · read 2026-10-01
Training on customer data
“Do you offer zero data retention? expand_more For Streaming, yes: audio and transcripts aren't stored once you've opted out of model training.”
assemblyai.com/security · read 2026-10-07
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · SOC 2 Type II
Retirements announced · every vendor's retirements
2025-02-11
Additionally, we have sunset the lemur/v3/generate/action-items endpoint.
2024-10-28
Claude 1 & 2 sunset
2025-02-11
Claude 2 sunset
2025-10-23
Claude 3.5 & 3.7 Sonnet Sunset
2025-07-31
Claude 3 Sonnet Sunset & Speaker Diarization Improvement; bugfix
2026-07-10
Deprecated: Async speech_model Parameter
The pages' own stamps: revised 2020-09-25
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What AssemblyAI does not publish where we can read it
Of the 7 public pages we watch for AssemblyAI, these give us nothing right now.
Sub-processor list
our latest reading found 0 named sub-processors where an earlier reading of the same page found 16, so we are holding it back for a person
assemblyai.com/legal/subprocessorsBefore you conclude anything
This only means we couldn’t read it on a public page. AssemblyAI may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates AssemblyAI. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at AssemblyAI? With an email at assemblyai.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is AssemblyAI in your product? Hear the morning we read a change.
You get the lines that moved, in AssemblyAI’s own words, and the date any window closes. No card. Nothing to cancel.