Trust Center
Security, Privacy, Compliance & Enterprise Trust
Definity AI provides enterprise-grade, AI-powered solutions that help organizations optimize, monitor, and protect their data pipelines and lakehouse infrastructure.
Compliance & Governance
- Security Governance
- Risk Management
- GDPR
Product & Application Security
- Secure Software Development Lifecycle
- Security Testing & Penetration Testing
- Patch Management
Access Control
- Authentication
- Privileged Access
- Access Lifecycle
Infrastructure & Network
- Cloud Infrastructure
- Network Segmentation
- DDoS Protection
Deployment Models
- Option 1 - SaaS (Recommended)
- Option 2 - Dedicated Tenant
- Option 3 - Self-Hosted
Endpoint & Corporate Security
- Endpoint Detection & Response
- Security Awareness & Training
- Employee Lifecycle
Data Security & Privacy
- Encryption in Transit
- Encryption at Rest
- Key Management & Rotation
AI Security & Responsible AI
- Customer Content Is Not Used to Train AI Models
- Responsible AI
- AI Transparency Notice
Resilience & Operations
- Incident Response
- Disaster Recovery
- Service Availability
Vendors & Subprocessors
- Third-Party Risk Management
- Subprocessor Oversight
- Current Subprocessors
Documents & Disclosure
- Security Documentation
- Responsible Disclosure Program
- How to Report
🔒Security Documents
Available to Definity customers.
Request access →Security as an Ongoing Program​
Definity treats security as an ongoing organizational responsibility, not a one-time compliance exercise.
Our security program brings together governance, risk management, security policies, access controls, secure software development, vulnerability management, security testing, monitoring, incident response, business continuity, disaster recovery, third-party risk management, privacy, and continuous improvement.
We continuously evaluate our people, processes, technologies, and external dependencies to identify and reduce risk and strengthen our security posture.
Enterprise Security Assurance​
Enterprise customers need more than a point-in-time assessment. They need confidence that security is embedded across the organization.
Definity's security program is supported by independent assurance, third-party security testing, external cybersecurity expertise, recurring risk assessments, continuous monitoring, and documented security processes.
Our current assurance and security program includes:
- SOC 2 Type II independent assurance
- Independent third-party penetration testing at least annually
- External cybersecurity expertise
- Formal security governance and risk management
- Secure software development practices
- Vulnerability and patch management
- Strong identity and access controls
- Encryption at rest and in transit
- Security monitoring and incident response
- Business continuity and disaster recovery
- Third-party and subprocessor oversight
- Privacy and data protection practices
Security at a Glance​
| Area | Definity AI |
|---|---|
| SOC 2 | SOC 2 Type II |
| Trust Services Criterion | Security |
| Independent Auditor | Deloitte |
| SOC 2 Result | Clean report with no exceptions |
| Penetration Testing | Independent third party, at least annually |
| Cloud Infrastructure | Amazon Web Services (AWS) |
| Deployment Regions | United States and European Union |
| Dedicated Regional Deployment | Available subject to commercial agreement |
| Encryption | At rest and in transit |
| Authentication | MFA and SSO |
| Privacy | GDPR and CCPA/CPRA commitments |
| AI Training | Customer content and personal data are not used to train AI models |
| Security Log Retention | 12 months |
| Backups | Daily |
| Backup Retention | 7 days |
| Target RTO | 1 hour |
| Target RPO | 24 hours |
| Disaster Recovery Testing | At least annually |
| Cybersecurity Simulation | Included in annual resilience testing |
| External Cybersecurity Advisor | Yes |
About this Trust Center​
Built for enterprise environments, Definity AI is designed to support organizations with complex data ecosystems and demanding requirements for security, privacy, reliability, and operational resilience.
Security and privacy are fundamental to how we design, develop, deploy, and operate our services. Our program combines independent assurance, security governance, technical and organizational controls, ongoing security testing, privacy commitments, external security expertise, operational resilience, and continuous improvement.
This Trust Center provides customers and prospects with an overview of Definity AI's approach to security, privacy, compliance, data protection, AI governance, resilience, and risk management.
Definity primarily processes metadata required for analysis. The agent transmits SQL queries and execution plans, and samples specific data values when needed for bottleneck analysis. Definity AI does not access, process, or use the underlying customer data beyond what is necessary to deliver the agreed services.
Our Commitment to Trust​
Security is foundational to the way Definity builds and operates its services.
From employee onboarding and security awareness to secure software development, continuous vulnerability management, strong identity controls, encryption, monitoring, incident response, AI governance, third-party oversight, and tested recovery capabilities, security is embedded across the Definity organization.
We continuously invest in our people, processes, technology, and external expertise to identify and reduce risk, strengthen resilience, and protect the information entrusted to us.
Our goal is simple: to make security, privacy, and resilience fundamental to the Definity experience, and to earn our customers' trust every day.
Contact​
For questions regarding Definity's security program, privacy practices, compliance documentation, or enterprise security reviews, please contact the Definity team through the applicable security: [email protected] or privacy [email protected] channels.