FormAssembly Inc. (FormAssembly) is committed to ensuring the confidentiality, integrity, and availability (CIA) of all sensitive information that it receives, processes, stores, and/or transmits on behalf of its Customers.

The purpose of the FormAssembly Information Security program is to ensure that sensitive data, such as all electronic protected health information (ePHI) and payment card holder data (CHD), is handled appropriately. FormAssembly intends to maintain compliance, address information security risks, and assure known breaches and disclosures are communicated in a timely and useful manner.

FormAssembly develops and operates software (the "Application" or "FormAssembly"), which is sold under the FormAssembly Inc. brand. Under this brand, FormAssembly provides FormAssembly using the Software-as-a-Service (SaaS) model.

FormAssembly provides the FormAssembly Service as a secure and compliant cloud-based application. The FormAssembly service is offered under three models:

1. FormAssembly Professional and Premier Plans - a multi-tenant application
2. FormAssembly Enterprise Cloud - a single-tenant option
3. FormAssembly Compliance Cloud - a single-tenant option