New: every message picks a fast or a slow model

Trust Center

How Definable keeps your data safe

Agents work in your apps and talk to your customers, so we hold ourselves to audited standards. Here is what we do to protect your data, who helps us run Definable and how to exercise your rights.

Compliance

Details
  • ISO27001
    ISO/IEC 27001:2022Certified
  • ISO42001
    ISO/IEC 42001:2023Certified
  • DPDPIndia
    Digital Personal Data Protection Act, 2023Compliant
  • SOC 2Underway
    SOC 2In progress

At a glance

Founded
2025, Gurugram
Data stored in
Germany and the United States
Encryption
TLS in transit, AES-256-GCM for credentials
Breach notice
Within 48 hours
New subprocessors
30 days' notice
Training on your data
Never

Controls

Details

Data security

  • Workspace isolation
  • Encrypted credentials
  • Hashed sessions
View 5 more

Application security

  • No passwords
  • One-time sign-in codes
  • Short-lived sessions
View 4 more

AI governance

  • Approvals before actions
  • Every step traced
  • Evals before publish
View 5 more

Infrastructure security

  • Certified data centres
  • Encryption in transit
  • Files encrypted at rest
View 2 more

Privacy

  • DPA for every customer
  • Data rights
  • Grievance Officer
View 4 more

Organisational security

  • Security programme
  • Internal audit and review
  • Risk management
View 7 more

Resources

Details
  • Information Security PolicyPolicy
  • AI PolicyPolicy
  • Access Control PolicyPolicy
  • Acceptable Use PolicyPolicy
  • Cryptography PolicyPolicy
  • Secure Development PolicyPolicy
+12 more

Subprocessors

Details
  • HHetznerInfrastructure
  • AAmazon Web ServicesInfrastructure
  • SStytchAuthentication
  • CComposioApp connections
  • TTinyFishWeb search
  • AAnthropicArtificial intelligence
+4 more
Want to see, correct or delete your data?Send a request to access, correct, erase or move your personal data, and our Grievance Officer will answer within 30 days.