Privacy Policy

Entiti is a global legal entity management platform used by organizations and professional service providers to manage legal-entity data, ownership, governance relationships, corporate records, obligations and related workflows.

This Policy covers information that identifies, relates to, describes, or can reasonably be linked with an individual. It does not apply to anonymous or properly de-identified information.

Our privacy role depends on the context:

Website, sales, account and business-contact data.

We generally act as a controller, business, or equivalent role because we determine why and how this information is processed.

Customer Data in Entiti.

Where a customer submits or controls personal information in the platform, we generally act as a processor or service provider on that customer’s behalf.

Security, billing and legal-administration information.

We may act as an independent controller where permitted by law.

If your information is contained in a customer’s Entiti workspace, the relevant customer is usually the best first contact for requests relating to that Customer Data.

Customers should not submit personal information that is unnecessary for their use of the platform and remain responsible for determining what Customer Data is appropriate to upload.

We may collect information directly from you, your employer or organization, customers and authorized users, customer-authorized integrations, service providers, and publicly or commercially available business sources where permitted by law.

• provide, operate, maintain and administer Entiti;
• create accounts, authenticate users and manage permissions;
• process subscriptions, billing and customer administration;
• provide support, implementation and migration assistance;
• secure the platform, prevent abuse and maintain audit records;
• provide search, reporting, analytics and AI-assisted features;
• communicate about service, security, support and contractual matters;
• improve usability, reliability and product functionality;
• conduct lawful business-to-business marketing consistent with preferences;
• comply with law, enforce agreements and establish or defend legal claims; and
• support financing, reorganization, merger, acquisition or similar corporate transactions.

Where applicable law requires a legal basis, we rely as appropriate on performance of a contract, compliance with legal obligations, legitimate interests that are not overridden by your rights, and consent where required.

Legitimate interests may include securing and improving our services, managing customer relationships, preventing fraud or abuse and conducting proportionate B2B marketing.

Customers retain their rights in Customer Data. We process Customer Data to provide the services, follow documented customer instructions, secure the platform, provide support and perform other processing permitted by the applicable customer agreement and data processing addendum.

Imported information does not become authoritative merely because it was uploaded. Product workflows may distinguish imported, extracted, reconciled, reviewed and approved information.

Order Forms, MSAs, DPAs or security addenda may contain additional terms. Those terms control to the extent they conflict with this Policy.

Entiti may provide AI-assisted search, extraction, reconciliation, classification, summarization and related features. Depending on the feature, the system may process Customer Data, user queries and relevant source records to generate results.

AI results are designed to assist users and may require human verification. Entiti may present source records, evidence, confidence indicators or review steps before users take action.

We use Customer Data for AI features only as described in the applicable agreement and product documentation.

We may use cookies and similar technologies necessary for authentication, security, preferences and site operation, and — where permitted — analytics or marketing. Where consent is required, non-essential cookies are used only after the required choice has been made.

See our Cookie Policy for the specific technologies and controls in use.

We may disclose personal information to service providers and subprocessors, customer-authorized integrations and recipients, affiliates, professional advisors, authorities where required by law, and transaction counterparties in a merger, financing, acquisition or similar transaction.

Our current subprocessor list is published on our Subprocessors page.

Entiti does not sell personal information for monetary consideration.

We may process personal information in countries other than where it was collected. Where required, we use recognized safeguards such as adequacy decisions, approved contractual clauses or other lawful transfer mechanisms. Customer-specific data-residency commitments, if any, are governed by the applicable contract and product documentation.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the services, complying with legal obligations, resolving disputes, enforcing agreements and maintaining appropriate security or audit records.

Customer Data retention and deletion are governed by the customer agreement, product functionality and legal requirements.

We use administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. Measures may include access controls, encryption, logging, secure development, monitoring, backups and incident response.

No method of transmission or storage is completely secure, and specific contractual security commitments apply as stated in the relevant customer agreement.

Depending on applicable law, you may have rights to access, obtain information about, correct, delete, restrict or object to processing, request portability, withdraw consent, or complain to a supervisory authority. You may also have rights relating to certain automated decision-making.

For information for which Entiti is the controller, contact [PRIVACY_EMAIL]. If your request concerns Customer Data controlled by an Entiti customer, we may direct you to that customer or assist the customer in responding.

If the California Consumer Privacy Act, as amended, applies, California residents may have rights to know, access, correct and delete personal information, opt out of certain sale or sharing, limit certain uses of sensitive personal information, and exercise rights without unlawful discrimination.

Where India’s Digital Personal Data Protection Act, 2023 and applicable rules apply, we process digital personal data in accordance with applicable notice, consent or other lawful-use requirements and support applicable rights and grievance processes.

Grievance contact: [GRIEVANCE OFFICER CONTACT].

Entiti is a business service and is not directed to children. Customers are responsible for ensuring an appropriate legal basis before submitting personal information concerning children to the platform.

We may update this Policy to reflect changes in our services, practices or legal requirements. We will post the updated version and revise the “Last updated” date, and provide additional notice where required.

[COMPANY LEGAL NAME]

[REGISTERED ADDRESS]

Email

[PRIVACY_EMAIL]

Privacy / DPO contact

[DPO OR PRIVACY LEAD]