Infrastructure & Network
Infrastructure, Cloud & Network Security​
Cloud Infrastructure​
Definity's cloud infrastructure is hosted on Amazon Web Services (AWS).
AWS provides the underlying cloud infrastructure, while Definity maintains responsibility for the security of its applications, configurations, access controls, and operational processes.
Enterprise Deployment​
Definity supports deployment architectures designed to accommodate different security, privacy, and data-governance requirements.
Customers may deploy Definity using the applicable SaaS architecture or, where required, an internal deployment model.
Regional deployment is available in the United States and European Union, with dedicated regional deployment available subject to the applicable commercial agreement.
Data-Aware Architecture​
Definity's architecture is designed to minimize unnecessary movement of customer data.
Where applicable, Definity receives the metadata and operational information required to provide observability and optimization capabilities while customer data remains within the customer's environment.
For customers with stricter requirements concerning data residency, network isolation, or information leaving their environment, an internal deployment model is available.
Definity's architecture diagrams are in the architecture overview.
Defense in Depth​
Definity's architecture uses multiple layers of security controls, including:
- Authentication
- Authorization
- Encryption
- Network security
- Infrastructure security
- Monitoring
- Vulnerability management
- Security testing
- Incident response
- Operational resilience
Network Security​
Definity AI implements layered network security controls designed to protect application infrastructure, customer environments, and data flows from unauthorized access, malicious traffic, and unintended network exposure.
Firewalls, security groups, access control lists, and other network security controls restrict access to authorized pathways.
Network configurations and security rules are reviewed periodically to help ensure they remain appropriate for the environment.
Network Segmentation​
Production infrastructure is logically segmented to limit unnecessary communication between services and reduce the potential impact of a compromised component.
VPC & Network Isolation​
Definity AI's cloud infrastructure is deployed using private network boundaries and controlled connectivity between application, data, and supporting services. Network access is restricted to approved communication paths.
Web Application Protection​
Internet-facing services are protected through controlled ingress and application-layer security mechanisms designed to detect and mitigate malicious or unauthorized traffic.
Firewall & Security Group Controls​
Network traffic is governed through firewall rules, security groups, and access control lists. Rules are restricted according to business and security requirements and are periodically reviewed.
DDoS Protection​
Definity AI leverages cloud-native protections and network controls designed to mitigate distributed denial-of-service and other volumetric attacks against externally accessible services.
Egress Controls​
Outbound network communication is controlled to limit unnecessary external connectivity and reduce the risk of unauthorized data transfer. Egress access is restricted based on service and operational requirements.
Network Monitoring​
Network activity and security-relevant events are monitored using cloud-native and security monitoring capabilities to support detection, investigation, and response to anomalous or potentially malicious activity.
Infrastructure Hardening​
Definity maintains infrastructure and software hardening standards designed to reduce unnecessary exposure and strengthen the security baseline of the environment.
Physical & Environmental Security​
Physical Security​
Physical access to facilities and infrastructure supporting Definity's operations is protected through appropriate physical security measures.
Access to restricted areas is controlled and monitored to help prevent unauthorized physical access to systems and information.
Visitors are subject to sign-in and identification requirements and are escorted within secure areas where appropriate.
Physical safeguards provide an additional layer of protection around the infrastructure supporting Definity's services.