We’re pleased to announce that Assemblic has been assessed against the Australian Government’s Information Security Manual (ISM) at the Official:Sensitive classification level by an accredited IRAP (Infosec Registered Assessors Program) assessor.
This assessment provides Australian government agencies with independent assurance that Assemblic meets the security controls required to handle sensitive government information — removing a significant barrier for agencies looking to adopt Rules as Code at scale.
What the assessment covers
The IRAP assessment evaluated Assemblic’s architecture, infrastructure and security practices against the ISM framework published by the Australian Signals Directorate (ASD). It was conducted by a qualified, independent IRAP assessor.
Buying and using Assemblic
Assemblic is currently available for purchase via Salsa Digital on the Drupal Services Panel. The current packages are for standard subscriptions, and the security-assessed subscriptions will be available later this year.
About Assemblic
Assemblic is an enterprise-grade Rules as Code platform built for OpenFisca coding and hosting. It streamlines the complexities of project setup, handling source code management, deployment pipelines, infrastructure and secure hosting. Its security features include WAF, CDN, and edge computing.

