Overview
FormAssembly Inc. (FormAssembly) is committed to ensuring the confidentiality, integrity, and availability (CIA) of all sensitive information that it receives, processes, stores, and/or transmits on behalf of its Customers.
The purpose of the FormAssembly Information Security program is to ensure that sensitive data, such as all electronic protected health information (ePHI) and payment card holder data (CHD), is handled appropriately. FormAssembly intends to maintain compliance, address information security risks, and assure known breaches and disclosures are communicated in a timely and useful manner.
FormAssembly develops and operates software (the "Application" or "FormAssembly"), which is sold under the FormAssembly Inc. brand. Under this brand, FormAssembly provides FormAssembly using the Software-as-a-Service (SaaS) model.
FormAssembly provides the FormAssembly Service as a secure and compliant cloud-based application. The FormAssembly service is offered under three models:
- FormAssembly Professional and Premier Plans - a multi-tenant application
- FormAssembly Enterprise Cloud - a single-tenant option
- FormAssembly Compliance Cloud - a single-tenant option
Compliance
FormAssembly is reviewed and trusted by
Documents
Risk Profile
Product Security
Reports
Self-Assessments
Data Security
App Security
Access Control
Infrastructure
Endpoint Security
Network Security
Corporate Security
Policies
Security Grades
Trust Center Updates
As Okta first became aware that the threat actor had successfully taken screenshots on March 21, 2022, Okta responded with transparency, sharing what Okta knew at the time. On March 22, 2022, Okta began notifying the maximum number of potentially impacted customers, which Okta scoped by examining all of the access performed by all Sitel employees to the SuperUser application during the 5-day window. Okta has shared logs from the SuperUser app with each of those customers, and held meetings that included Okta Security staff to help customers understand their log data.
How is FormAssembly responding to this news?
There was no impact to FormAssembly customers.
Okta in the news
In March 2022, a threat actor known as LAPSUS$ claimed to have compromised Okta, a company FormAssembly and many of our peers use for authentication of third-party apps internally.
How is FormAssembly responding to this news?
We take the security and safety of our company and our platform seriously. We have not identified any impact to FormAssembly. We will continue to actively monitor our systems and take the necessary actions in order to keep our community safe.
If you think you may have discovered a vulnerability, please send us a note.