Assembly

Assembly is an AI app builder for organizations that need authenticated client workflows or internal tools, with a branded workspace around the apps they publish. It is most compelling when client access and permissions matter as much as building the workflow; it is the wrong fit for public websites or consumer products.

Overview

Users describe an app in plain language, review a proposed plan, publish it, and refine it through conversation. More than 30 templates cover tasks such as collecting documents, tracking projects, preparing proposals, and supporting clients, offering useful starting points for common business workflows.

Published apps sit together in a branded client experience. Connections to third-party services can be made by authenticating the service or providing an API key during setup. Assembly’s MCP connector can also connect the workspace to AI tools such as ChatGPT and Claude for analysis and workspace actions.

A meaningful distinction is that Assembly handles client authentication, roles, permissions, and client data scoping at the platform level rather than leaving those controls to generated apps. Assembly says its platform is SOC 2 Type II certified, stores customer data in the United States, encrypts it in transit with TLS and at rest with AES-256, and does not use workspace or client data to train AI models. HIPAA support with a BAA is reserved for Advanced, and AI features are excluded from that support.

Assembly is designed for authenticated experiences, not public-facing websites, directories, or consumer apps. Teams building a public product should choose a different kind of builder.

Key features

• Prompt-based app creation: Describe a workflow, review Assembly’s proposed plan, and refine the published app through conversation. This makes iteration part of the product, though the stated build-credit allowances still constrain how much teams can build each month.
• Templates and integrations: More than 30 templates address common client and operational workflows. Third-party connections use authentication or an API key, while the MCP connector extends workspace analysis and actions to ChatGPT and Claude.
• Branded client workspace: Published apps appear together in a branded experience, which suits organizations that want clients to enter through one consistent place rather than separate standalone tools.
• Platform-managed access: Assembly manages authentication, roles, permissions, and client data scoping. That is a practical advantage for teams serving multiple clients, because access control is not left to AI-generated app logic.
• Security and compliance: Assembly says the platform is SOC 2 Type II certified and uses TLS in transit and AES-256 at rest. Advanced includes HIPAA support with a BAA, but that support does not extend to AI features.

Pricing

Assembly is freemium. Free is free, forever, and includes 5 active contacts, 1 internal user, 50 build credits per month, 3 apps, and community support. It is a sensible way for one person to explore a small workflow, but the five-contact and three-app ceilings make it difficult to serve a growing client base.

Starter costs $29 a month billed annually, or $49 billed monthly. It raises the allowance to 50 active contacts and 5 apps, with 1 internal user, 200 build credits per month, and email support. This is the entry paid tier for a small practice that needs more contacts and support; it still provides no additional internal-user capacity over Free.

Professional costs $99 a month billed annually. It supports 500 active contacts and 3 internal users, with 200 build credits per month, 5 apps, custom domains, and priority email support. The higher contact limit and domain option suit client-facing teams that need a more established presentation, though the build-credit and app caps remain the same as Starter.

Advanced costs $499 a month billed annually. It includes unlimited active contacts, 5 internal users, 200 build credits per month, 5 apps, an audit log, enforced MFA, HIPAA compliance with a BAA, and priority call support. This is the relevant tier for teams that need the stated HIPAA support or stronger administrative controls; it is a substantial jump in price without an increase in build credits or app count.

Enterprise has custom pricing and is arranged through a demo. It includes unlimited users, contacts, and apps, custom SSO, volume-based build credits, and a dedicated architect and success manager, making it the tier for organizations that need capacity and deployment support beyond Advanced. Paid plans are billed annually at the stated monthly rates unless choosing Starter’s $49 billed monthly option.

Platforms

Assembly is available on the web and as a desktop app for macOS on Apple silicon or Intel and Windows 10 or later (64-bit). The desktop options cover the major desktop systems, while the web app provides browser access.

Who it's for

Assembly suits service businesses and internal teams building authenticated client portals, intake flows, document collection, project tracking, or support tools. Request intake, work tracking, file sharing, custom domains, and single sign-on are among its supported capabilities. The plan limits matter for teams: the Free plan has one internal user and five active contacts, while even Professional is capped at three internal users and five apps. Larger organizations may need Enterprise for unlimited users and apps.

It is not the right choice for public-facing sites, public directories, or consumer apps. Teams with HIPAA requirements should also distinguish between Advanced’s BAA support and AI features, which are not covered.

Pros and cons

• Pro: Assembly handles authentication, roles, permissions, and client data scoping at the platform level, reducing the need to rely on generated app logic for these core client controls.
• Pro: A branded workspace, 30+ templates, third-party connections, and an MCP connector bring app building and client access into one workflow.
• Pro: The free plan provides 3 apps and 50 monthly build credits, enough to start with a limited workflow without paying.
• Con: Lower tiers cap contacts and internal users tightly: Free allows 5 active contacts and 1 internal user, and Starter still permits only 1 internal user.
• Con: Paid plans through Advanced remain limited to 5 apps and 200 build credits per month, even as contact allowances and support increase.
• Con: Advanced’s HIPAA support excludes AI features, so teams cannot treat the BAA as covering the entire product experience.
• Con: Its authenticated-app focus rules out public websites, directories, and consumer apps.

Alternatives

For legal practices weighing a client portal against dedicated legal software, the right alternative depends on the workflow. 8am MyCase is a better fit for case and contact management, time entry, invoicing, and trust accounting; its MyCase Basic plan is $50 a month billed annually, and it has iOS and macOS apps.

LawConnect is the more suitable choice for consumers seeking free AI legal information, with lawyer fees potentially applying if they hire. For broader matter management, document management, billing, and payments, Filevine offers custom-built packages with optional intake, deposition, signature, and AI packages.

Jursu is another freemium option. SimpleLaw Document Automation is worth considering for document automation, with a free Law Firm plan for connecting with potential leads and a $59 a month annual-pricing tier for up to 39 users.

If the priority is launching a website rather than an authenticated client workspace, B12 is the more relevant alternative: its Website plan is $24 a month and includes 100 AI credits per month, up to 10 launched projects, and a free custom domain for the first year. Lawcus and Visn Enterprise are additional alternatives to consider.

Readers comparing portal products can also browse Legal Client Portal Software and Customer Portal Software.

Verdict

Choose Assembly for authenticated client apps and internal tools when a branded client experience and platform-managed access controls are central to the job. Its template-led, conversational building approach is paired with meaningful security controls, but low-tier user and contact caps, fixed app and credit allowances, and its exclusion of public products narrow the fit. Teams needing HIPAA support must choose Advanced and keep in mind that its BAA does not cover AI features.