Trust Center
How Definable keeps your data safe
Agents work in your apps and talk to your customers, so we hold ourselves to audited standards. Here is what we do to protect your data, who helps us run Definable and how to exercise your rights.
Resources (18)
The policies and documents behind our compliance programme. Legal documents are public; policies, certificates and our Statement of Applicability are shared on request, under a confidentiality agreement.
- Information Security PolicyManagement's commitments for protecting information, and who owns whatPolicy Request access
- AI PolicyHow we build, provide and use AI responsibly, under ISO/IEC 42001Policy Request access
- Access Control PolicyLeast-privilege access, how it is granted and how often it is reviewedPolicy Request access
- Acceptable Use PolicyRules for staff using company systems, devices and dataPolicy Request access
- Cryptography PolicyWhere we encrypt, with which algorithms, and how keys are handledPolicy Request access
- Secure Development PolicyCode review, testing and separate environments for every changePolicy Request access
- Supplier Security PolicyHow suppliers and subprocessors are assessed before and during usePolicy Request access
- Risk Management PolicyHow risks are identified, scored, treated and reviewedPolicy Request access
- Backup PolicyWhat we back up, how often, and how restores are testedPolicy Request access
- Incident Response PlanHow we detect, contain and report security incidents and breachesPolicy Request access
- Business Continuity PlanHow the Services keep running, or recover, when something failsPolicy Request access
- ISO/IEC 27001:2022 certificateOur information security management system certificateDocument Request access
- ISO/IEC 42001:2023 certificateOur AI management system certificateDocument Request access
- Statement of ApplicabilityEach ISO/IEC 27001 Annex A control, and how it applies to usDocument Request access
- Security questionnaireOur answers to a standard security questionnaire, or to yoursDocument Request access
- Terms of ServiceThe agreement between you and Definable for using the platform, its agents and its apps.DocumentView
- Privacy PolicyWhat personal data Definable collects, why, who receives it, how long we keep it and your rights over it.DocumentView
- Data Processing AddendumHow Definable processes personal data on a customer's behalf, under the DPDP Act, GDPR and US state privacy laws.DocumentView