Vendors & Subprocessors
Third-Party Risk Management​
Definity recognizes that third-party providers form an important part of the technology ecosystem.
Relevant third parties are evaluated according to applicable:
- Security requirements
- Privacy requirements
- Operational requirements
- Contractual requirements
- Business risk
Where relevant assurance reports are available, they may be reviewed as part of the vendor assessment process.
Subprocessor Oversight​
Third parties that process information on behalf of Definity are subject to applicable contractual, security, privacy, and operational requirements.
Definity maintains appropriate oversight of applicable third-party relationships and reviews relevant providers based on risk.
Current Subprocessors​
Definity maintains transparency regarding applicable subprocessors in accordance with its contractual and privacy obligations.
The current identified subprocessor list includes:
| Service | Purpose | Region |
|---|---|---|
| AWS | Cloud infrastructure and hosting | US and EU |
| Claude (Anthropic) | AI assistant and generative AI services | United States / Global |
Customers can contact Definity for current applicable subprocessor information.