{"platform":"Definite","slug":"definite","category":"Workflow & Automation","website":"https://usedefinite.com","risk_rating":"low","verification":"partially_verified","verification_detail":{"tier":"partially_verified","partial_reason_code":"missing_terms","partial_reason_label":"Terms not yet captured","blocked_core_documents":[]},"rating":{"value":"low","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_partial","canonical":"https://airinetwork.com/platform/definite","machine_url":"https://airinetwork.com/api/machine/platform/definite","last_reviewed":"2026-07-20","findings_count":11,"findings":[{"id":"training-use-428681aeac37b6662201","permalink":"https://airinetwork.com/platform/definite/finding/training-use-428681aeac37b6662201","surface":"training_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" We use the data above to run the checks you configure, investigate exceptions, assemble filings and evidence packages, operate and secure the platform, provide support, and meet our own legal obligations. Agent-assisted investigation runs against your tenant's data only. We do not train models on your data and we do not share it across tenants.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20use%20the,share%20it%20across%20tenants.","structural_citation":"§ 3 (How we use data)","citation_basis":"section_number","char_start":2728,"char_end":3075,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-08156a87f7c20bbadcae","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-08156a87f7c20bbadcae","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Ledgix Inc., doing business as Definite (\"Definite\", \"we\", \"us\"), operates a verification platform for regulated financial reporting. Definite checks a financial institution's books against published regulatory rules and internal rulebooks, investigates exceptions, and produces verifiable evidence for filings such as the FFIEC Call Report, NCUA 5300, and related regulatory returns. Our primary point of contact for privacy matters is contact@usedefinite.com .\n This policy applies to the Definite platform, including the customer console at app.usedefinite.com and our website at usedefinite.com. It does not apply to third-party services your organization connects to Definite.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Ledgix%20Inc.%2C%20doing,organization%20connects%20to%20Definite.","structural_citation":"§ 1 (Who we are)","citation_basis":"section_number","char_start":439,"char_end":1121,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-2651e50eb3480b46df8b","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-2651e50eb3480b46df8b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Account and organization data. When you create an account or accept an invitation, we collect your email address, your organization name, and the authentication credentials required to log in. If your organization configures SSO, your identity provider shares the claims required to authenticate you.\n Connected source data. The core function of Definite is to check your institution's books. When you connect a data source, Definite takes read-only snapshots of the exports you configure, such as core banking exports, general ledger and subledger extracts, capital schedules, loan-level files, and spreadsheets. Each snapshot is hashed on arrival and stored in your tenant's isolated environment. Depending on what your institution exports, these files may contain personal data about your customers, such as borrower names, account identifiers, and loan attributes. For this data we act as a processor on your instructions.\n Check results and receipts. Every deterministic check writes a receipt that records the rule, the rule version, hashes of the inputs, the verdict, timestamps, and cryptographic proof artifacts. Receipts are designed around hashes and references rather than raw customer values.\n Public filings data. We retrieve publicly available regulatory data, such as prior Call Reports and peer filings, from sources like the FFIEC CDR, NCUA, FDIC, and OSFI. This data is already public.\n Support and contact data. If you contact us through the site or by email, we keep the correspondence and the contact details you provide.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Account%20and%20organization,contact%20details%20you%20provide.","structural_citation":"§ 2 (What data we collect)","citation_basis":"section_number","char_start":1155,"char_end":2699,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-0646d49daa42c610db01","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-0646d49daa42c610db01","surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Definite is a B2B platform. We do not sell or rent customer data, we do not run third-party advertising, and we do not use the data you connect to Definite for anything other than providing the service described here.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Definite%20is%20a,the%20service%20described%20here.","structural_citation":"Privacy Policy › “Privacy Policy - Tywin – AI-Powered Developer Tool Template”","citation_basis":"heading_path","char_start":197,"char_end":415,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-e39032b9415482fb6fbe","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-e39032b9415482fb6fbe","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For account, billing, and support data, Definite is the controller. For the financial records and personal data contained in your connected sources, your institution is the controller and Definite processes that data solely on your instructions under our agreement with you.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20For%20account%2C%20billing%2C,our%20agreement%20with%20you.","structural_citation":"§ 4 (Controller and processor roles)","citation_basis":"section_number","char_start":3119,"char_end":3394,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-3d973ff23899c89ebde3","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-3d973ff23899c89ebde3","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Every connection to your systems is read-only. Definite cannot write back to your source systems and cannot initiate transactions. Tenant data is stored in an isolated per-tenant environment, encrypted in transit and at rest. Snapshots are hashed on arrival, and receipts are hash-chained so any alteration is detectable. Access by Definite personnel is limited, logged, and used only for support you request or operations of the service. Deployment options include single-tenant hosting in our cloud or deployment inside your own environment.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Every%20connection%20to,inside%20your%20own%20environment.","structural_citation":"§ 5 (Security and where data lives)","citation_basis":"section_number","char_start":3437,"char_end":3981,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-b17bc62d5e5b1f63223d","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-b17bc62d5e5b1f63223d","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" If we make material changes, we will update this page and notify account administrators by email before the changes take effect.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20If%20we%20make,the%20changes%20take%20effect.","structural_citation":"§ 9 (Changes to this policy)","citation_basis":"section_number","char_start":5109,"char_end":5238,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"privacy-data-use-f5e85031debba1ba5280","permalink":"https://airinetwork.com/platform/definite/finding/privacy-data-use-f5e85031debba1ba5280","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Ledgix Inc. d/b/a Definite. Email: contact@usedefinite.com .","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Ledgix%20Inc.%20d%2Fb%2Fa%20Definite.%20Email%3A%20contact%40usedefinite.com%20.","structural_citation":"§ 10 (Contact)","citation_basis":"section_number","char_start":5260,"char_end":5321,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"data-retention-b47103f90d576a4a486f","permalink":"https://airinetwork.com/platform/definite/finding/data-retention-b47103f90d576a4a486f","surface":"data_retention","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Connected source snapshots are retained according to your tenant's configured retention policy. Receipts and evidence packages are append-only records and are retained for the life of your agreement, and you can export them at any time. Account data is retained while your account is active and deleted or anonymized within a reasonable period after closure, except where law requires longer retention.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Connected%20source%20snapshots,law%20requires%20longer%20retention.","structural_citation":"§ 6 (Retention)","citation_basis":"section_number","char_start":4004,"char_end":4407,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"subprocessors-data-sharing-403942cd463a7450d285","permalink":"https://airinetwork.com/platform/definite/finding/subprocessors-data-sharing-403942cd463a7450d285","surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20share%20data,you%20where%20legally%20permitted.","structural_citation":"§ 7 (Sharing and subprocessors)","citation_basis":"section_number","char_start":4446,"char_end":4738,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}},{"id":"audit-rights-dpa-residency-7dee4843915c101b4def","permalink":"https://airinetwork.com/platform/definite/finding/audit-rights-dpa-residency-7dee4843915c101b4def","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you. For data contained in your institution's connected sources, direct your request to your institution and we will assist it as processor. For anything else, email contact@usedefinite.com .","caution":null,"provenance":{"source_url":"https://usedefinite.com/legal/privacy-policy","snapshot_sha256":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372","wayback_url":null,"deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Depending%20on%20your,else%2C%20email%20contact%40usedefinite.com%20.","structural_citation":"§ 8 (Your rights)","citation_basis":"section_number","char_start":4763,"char_end":5073,"retrieved_at":"2026-07-20T00:12:27.907261+00:00"}}],"documents":[{"doc_type":"privacy","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-07-20","last_verified_scan":"2026-07-20","verified_scan_count":1}],"clause_intelligence":{"clauses_count":11,"risk_patterns_count":4,"stance_events_count":4,"patterns_by_family":{"privacy_sharing":3,"training_use":1},"risk_summary":{"high":2,"medium":1,"low":1},"evidence":[{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"high","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"Definite is a B2B platform. We do not sell or rent customer data, we do not run third-party advertising, and we do not use the data you connect to Definite for anything other than providing the service described here.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Definite is a B2B platform. We do not sell or rent customer data, we do not run third-party advertising, and we do not use the data you connect to Definite for anything other than providing the service described here.","source_url":"https://usedefinite.com/legal/privacy-policy","deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Definite%20is%20a,the%20service%20described%20here.","structural_citation":"Privacy Policy › “Privacy Policy - Tywin – AI-Powered Developer Tool Template”","citation_basis":"heading_path","char_start":197,"char_end":415}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"high","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","source_url":"https://usedefinite.com/legal/privacy-policy","deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20share%20data,you%20where%20legally%20permitted.","structural_citation":"§ 7 (Sharing and subprocessors)","citation_basis":"section_number","char_start":4446,"char_end":4738}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","source_url":"https://usedefinite.com/legal/privacy-policy","deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20share%20data,you%20where%20legally%20permitted.","structural_citation":"§ 7 (Sharing and subprocessors)","citation_basis":"section_number","char_start":4446,"char_end":4738}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"high","stance_key":"model_training","stance_value":"no_training_claim","evidence":"We use the data above to run the checks you configure, investigate exceptions, assemble filings and evidence packages, operate and secure the platform, provide support, and meet our own legal obligations. Agent-assisted investigation runs against your tenant's data only. We do not train models on your data and we do not share it across tenants.","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"We use the data above to run the checks you configure, investigate exceptions, assemble filings and evidence packages, operate and secure the platform, provide support, and meet our own legal obligations. Agent-assisted investigation runs against your tenant's data only. We do not train models on your data and we do not share it across tenants.","source_url":"https://usedefinite.com/legal/privacy-policy","deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20use%20the,share%20it%20across%20tenants.","structural_citation":"§ 3 (How we use data)","citation_basis":"section_number","char_start":2728,"char_end":3075}}]},"tier_conditions":[{"tier":"Business","surface":"privacy_data_use","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"eece91a5-b24e-4b04-82bf-34bf4b84271c","quote":" Ledgix Inc., doing business as Definite (\"Definite\", \"we\", \"us\"), operates a verification platform for regulated financial reporting. Definite checks a financial institution's books against published regulatory rules and internal rulebooks, investigates exceptions, and produces verifiable evidence for filings such as the FFIEC Call Report, NCUA 5300, and related regulatory returns. Our primary point of contact for privacy matters is contact@usedefinite.com .\n This policy applies to the Definite platform, including the customer console at app.usedefinite.com and our website at usedefinite.com. It does not apply to third-party services your organization connects to Definite.","source_url":"https://usedefinite.com/legal/privacy-policy","deep_link":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Ledgix%20Inc.%2C%20doing,organization%20connects%20to%20Definite.","structural_citation":"§ 1 (Who we are)"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Definite — AI policy risk findings","description":"Verified, cited policy findings for Definite across 13 risk surfaces.","url":"https://airinetwork.com/platform/definite","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"partially_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":1}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/training-use-428681aeac37b6662201","text":" We use the data above to run the checks you configure, investigate exceptions, assemble filings and evidence packages, operate and secure the platform, provide support, and meet our own legal obligations. Agent-assisted investigation runs against your tenant's data only. We do not train models on your data and we do not share it across tenants.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-08156a87f7c20bbadcae","text":" Ledgix Inc., doing business as Definite (\"Definite\", \"we\", \"us\"), operates a verification platform for regulated financial reporting. Definite checks a financial institution's books against published regulatory rules and internal rulebooks, investigates exceptions, and produces verifiable evidence for filings such as the FFIEC Call Report, NCUA 5300, and related regulatory returns. Our primary point of contact for privacy matters is contact@usedefinite.com .\n This policy applies to the Definite platform, including the customer console at app.usedefinite.com and our website at usedefinite.com. It does not apply to third-party services your organization connects to Definite.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-2651e50eb3480b46df8b","text":" Account and organization data. When you create an account or accept an invitation, we collect your email address, your organization name, and the authentication credentials required to log in. If your organization configures SSO, your identity provider shares the claims required to authenticate you.\n Connected source data. The core function of Definite is to check your institution's books. When you connect a data source, Definite takes read-only snapshots of the exports you configure, such as core banking exports, general ledger and subledger extracts, capital schedules, loan-level files, and spreadsheets. Each snapshot is hashed on arrival and stored in your tenant's isolated environment. Depending on what your institution exports, these files may contain personal data about your customers, such as borrower names, account identifiers, and loan attributes. For this data we act as a processor on your instructions.\n Check results and receipts. Every deterministic check writes a receipt that records the rule, the rule version, hashes of the inputs, the verdict, timestamps, and cryptographic proof artifacts. Receipts are designed around hashes and references rather than raw customer values.\n Public filings data. We retrieve publicly available regulatory data, such as prior Call Reports and peer filings, from sources like the FFIEC CDR, NCUA, FDIC, and OSFI. This data is already public.\n Support and contact data. If you contact us through the site or by email, we keep the correspondence and the contact details you provide.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-0646d49daa42c610db01","text":" Definite is a B2B platform. We do not sell or rent customer data, we do not run third-party advertising, and we do not use the data you connect to Definite for anything other than providing the service described here.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-e39032b9415482fb6fbe","text":" For account, billing, and support data, Definite is the controller. For the financial records and personal data contained in your connected sources, your institution is the controller and Definite processes that data solely on your instructions under our agreement with you.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-3d973ff23899c89ebde3","text":" Every connection to your systems is read-only. Definite cannot write back to your source systems and cannot initiate transactions. Tenant data is stored in an isolated per-tenant environment, encrypted in transit and at rest. Snapshots are hashed on arrival, and receipts are hash-chained so any alteration is detectable. Access by Definite personnel is limited, logged, and used only for support you request or operations of the service. Deployment options include single-tenant hosting in our cloud or deployment inside your own environment.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-b17bc62d5e5b1f63223d","text":" If we make material changes, we will update this page and notify account administrators by email before the changes take effect.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/privacy-data-use-f5e85031debba1ba5280","text":" Ledgix Inc. d/b/a Definite. Email: contact@usedefinite.com .","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/data-retention-b47103f90d576a4a486f","text":" Connected source snapshots are retained according to your tenant's configured retention policy. Receipts and evidence packages are append-only records and are retained for the life of your agreement, and you can export them at any time. Account data is retained while your account is active and deleted or anonymized within a reasonable period after closure, except where law requires longer retention.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/subprocessors-data-sharing-403942cd463a7450d285","text":" We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/definite/finding/audit-rights-dpa-residency-7dee4843915c101b4def","text":" Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you. For data contained in your institution's connected sources, direct your request to your institution and we will assist it as processor. For anything else, email contact@usedefinite.com .","isBasedOn":"https://usedefinite.com/legal/privacy-policy","dateCreated":"2026-07-20T00:12:27.907261+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"}}],"variableMeasured":[{"@type":"PropertyValue","name":"training_use","value":"low","description":" We use the data above to run the checks you configure, investigate exceptions, assemble filings and evidence packages, operate and secure the platform, provide support, and meet our own legal obligations. Agent-assisted investigation runs against your tenant's data only. We do not train models on your data and we do not share it across tenants.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3 (How we use data)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20use%20the,share%20it%20across%20tenants."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Ledgix Inc., doing business as Definite (\"Definite\", \"we\", \"us\"), operates a verification platform for regulated financial reporting. Definite checks a financial institution's books against published regulatory rules and internal rulebooks, investigates exceptions, and produces verifiable evidence for filings such as the FFIEC Call Report, NCUA 5300, and related regulatory returns. Our primary point of contact for privacy matters is contact@usedefinite.com .\n This policy applies to the Definite platform, including the customer console at app.usedefinite.com and our website at usedefinite.com. It does not apply to third-party services your organization connects to Definite.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 1 (Who we are)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Ledgix%20Inc.%2C%20doing,organization%20connects%20to%20Definite."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Account and organization data. When you create an account or accept an invitation, we collect your email address, your organization name, and the authentication credentials required to log in. If your organization configures SSO, your identity provider shares the claims required to authenticate you.\n Connected source data. The core function of Definite is to check your institution's books. When you connect a data source, Definite takes read-only snapshots of the exports you configure, such as core banking exports, general ledger and subledger extracts, capital schedules, loan-level files, and spreadsheets. Each snapshot is hashed on arrival and stored in your tenant's isolated environment. Depending on what your institution exports, these files may contain personal data about your customers, such as borrower names, account identifiers, and loan attributes. For this data we act as a processor on your instructions.\n Check results and receipts. Every deterministic check writes a receipt that records the rule, the rule version, hashes of the inputs, the verdict, timestamps, and cryptographic proof artifacts. Receipts are designed around hashes and references rather than raw customer values.\n Public filings data. We retrieve publicly available regulatory data, such as prior Call Reports and peer filings, from sources like the FFIEC CDR, NCUA, FDIC, and OSFI. This data is already public.\n Support and contact data. If you contact us through the site or by email, we keep the correspondence and the contact details you provide.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2 (What data we collect)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Account%20and%20organization,contact%20details%20you%20provide."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Definite is a B2B platform. We do not sell or rent customer data, we do not run third-party advertising, and we do not use the data you connect to Definite for anything other than providing the service described here.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Privacy Policy - Tywin – AI-Powered Developer Tool Template”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Definite%20is%20a,the%20service%20described%20here."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" For account, billing, and support data, Definite is the controller. For the financial records and personal data contained in your connected sources, your institution is the controller and Definite processes that data solely on your instructions under our agreement with you.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4 (Controller and processor roles)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20For%20account%2C%20billing%2C,our%20agreement%20with%20you."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Every connection to your systems is read-only. Definite cannot write back to your source systems and cannot initiate transactions. Tenant data is stored in an isolated per-tenant environment, encrypted in transit and at rest. Snapshots are hashed on arrival, and receipts are hash-chained so any alteration is detectable. Access by Definite personnel is limited, logged, and used only for support you request or operations of the service. Deployment options include single-tenant hosting in our cloud or deployment inside your own environment.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5 (Security and where data lives)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Every%20connection%20to,inside%20your%20own%20environment."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" If we make material changes, we will update this page and notify account administrators by email before the changes take effect.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9 (Changes to this policy)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20If%20we%20make,the%20changes%20take%20effect."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Ledgix Inc. d/b/a Definite. Email: contact@usedefinite.com .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10 (Contact)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Ledgix%20Inc.%20d%2Fb%2Fa%20Definite.%20Email%3A%20contact%40usedefinite.com%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"unknown","description":" Connected source snapshots are retained according to your tenant's configured retention policy. Receipts and evidence packages are append-only records and are retained for the life of your agreement, and you can export them at any time. Account data is retained while your account is active and deleted or anonymized within a reasonable period after closure, except where law requires longer retention.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6 (Retention)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Connected%20source%20snapshots,law%20requires%20longer%20retention."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" We share data only with the subprocessors needed to run the service, such as cloud infrastructure, authentication, and email providers, each bound by data protection terms. We do not sell personal data. We may disclose data if required by law, and we will notify you where legally permitted.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7 (Sharing and subprocessors)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20We%20share%20data,you%20where%20legally%20permitted."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you. For data contained in your institution's connected sources, direct your request to your institution and we will assist it as processor. For anything else, email contact@usedefinite.com .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"02c3246fdfc7635e1ca0e921022fbdc22c89c582c3c4d94004d840177681b372"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://usedefinite.com/legal/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8 (Your rights)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://usedefinite.com/legal/privacy-policy#:~:text=%20Depending%20on%20your,else%2C%20email%20contact%40usedefinite.com%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:12:27.907261+00:00"}]}]}}