Data Security & Privacy
Customer Data Protection​
Definity applies technical and organizational safeguards designed to protect customer information throughout its lifecycle.
Our approach addresses data from:
Collection → Transmission → Processing → Storage → Access → Retention → Deletion
Data Minimization​
Definity's architecture is designed to minimize the amount of customer data required to deliver applicable services.
What leaves your environment: metadata, execution metrics and query text. Query text includes SQL literals, which may contain data values. Unless spark.definity.privacy.enabled=true, diagnostic samples (a few key values from skewed tasks and the failing row) are also sent. No bulk data or query results are sent.
Where possible, unnecessary movement and exposure of customer information is reduced through architectural and operational controls.
Data Confidentiality​
Access to customer information is restricted through authentication, authorization, role-based access controls, and least-privilege principles.
Data Integrity​
Controls are designed to protect information against unauthorized alteration and support the integrity of information processed by Definity.
Encryption in Transit​
Data transmitted between customers, users, and Definity AI services is protected using TLS 1.2 or higher, helping safeguard information against interception or unauthorized disclosure during transmission.
Encryption at Rest​
Customer data stored within Definity AI environments is encrypted using AES-256 encryption. Encryption keys are managed through controlled key-management processes, with dedicated encryption keys maintained on a per-customer basis to provide logical separation and strengthen data protection.
Key Management & Rotation​
Encryption keys are managed through controlled processes designed to protect their confidentiality and integrity. Keys are subject to a defined rotation policy and cadence, with access to cryptographic material restricted according to least-privilege principles.
Cryptographic Controls​
Cryptographic mechanisms, key-management practices, and encryption configurations are governed through Definity AI's security program and reviewed periodically to ensure they remain aligned with security requirements and industry practices.
Detailed information regarding encryption architecture and cryptographic controls is available to authorized customers through the Definity AI Trust Center.
Data Retention & Deletion​
Customer information is retained for as long as necessary to provide applicable services and in accordance with contractual, legal, and regulatory requirements.
Following termination of services, customer information is handled according to applicable contractual terms and Definity's data-deletion processes.
Certain information may be retained where required or permitted by law, regulation, contractual obligations, dispute resolution, security requirements, or other legitimate purposes.