Documents & Disclosure
Security Documentation​
Access Security & Compliance Documentation​
Definity AI provides customers and prospects with access to detailed security, privacy, compliance, and assurance documentation through our secure Trust Center.
The Trust Center is designed to support enterprise security reviews, procurement processes, privacy assessments and ongoing customer due diligence. Authorized users can securely access and download relevant documentation, including:
- 🔒 SOC 2 Type II Report
- 🔒 SOC 2 Bridge Letter
- 🔒 Independent Penetration Testing Reports or Executive Summaries
- 🔒 ISMS
- 🔒 DPA
Secure, Controlled Access​
Certain security and compliance documents contain sensitive information and are therefore available only through authenticated access to the Definity AI Trust Center.
Customers and authorized reviewers can request access and, once approved, securely view or download the documentation relevant to their assessment.
Need access to our security documentation?
Customers with Trust Center credentials can 🔒 open the security documents. To request access, contact [email protected].
Our security team is available to support additional documentation requests or questions that arise during your security, privacy, legal, procurement, or compliance review.
Responsible Disclosure Program​
Definity AI welcomes responsible security research and provides a defined process for reporting potential security vulnerabilities.
Our Responsible Disclosure Program is designed to help security researchers and customers communicate security findings directly with our security team and supports a consistent process for reporting, validation, investigation, remediation, and responsible coordination.
Scope​
The program defines the Definity AI assets and services that are eligible for security research, together with applicable testing guidelines and activities that are not permitted.
How to Report​
Security vulnerabilities can be submitted through our designated security reporting channel. Reports should include sufficient technical detail to allow our security team to reproduce and validate the reported issue.
Validation & Response​
Reported vulnerabilities are reviewed and validated by the Definity AI security team. Confirmed findings are assessed based on severity, exploitability, customer impact, and other relevant risk factors. Remediation is prioritized according to the severity and risk associated with the finding.
Researcher Recognition​
Definity AI recognizes responsible security researchers who help improve the security of our products and services.
Responsible Coordination​
We ask researchers to provide reasonable time for investigation and remediation before publicly disclosing vulnerabilities. Definity AI is committed to working constructively with researchers to resolve valid security issues and strengthen the security of our platform.
Report a Vulnerability: [email protected]