An entity is something with a distinct identity that people or systems can recognise. It might be a person, company, device, disease or database record. The same idea appears in law, accounting, medicine, computing, cybersecurity and search.
Each field gives an entity a slightly different meaning, but its identity remains central. That identity establishes its existence within a system. Understanding this shared idea makes technical and business terminology easier to follow.
Key Takeaways
- An entity is anything that a defined system can recognise as a distinct subject, whether it is a person, organisation, device, disease or database record.
- Legal entities can hold rights and duties, own property, enter contracts and face claims; a limited company is separate from its shareholders, whilst a sole trader is not.
- In accounting and medicine, an entity may describe a financial reporting unit or a condition with a recognisable cause, pattern or clinical course.
- Database and cybersecurity systems rely on stable identities to preserve records, authenticate users and devices, and apply appropriate permissions as attributes or roles change.
- Search engines and knowledge graphs use entities, relationships and supporting evidence to identify subjects, but structured data and strong rankings cannot guarantee an AI citation or recommendation.
What is an entity in philosophy and ontology?
An entity is something recognised as having its own existence. It can be a physical object, a living person, an organisation, an event or an abstract idea. It may also depend on a particular framework.
A tree is an entity because it has a distinct identity. So is a company, even though its identity comes from legal rules rather than biology. A database customer, a software process and a diagnosed condition can also qualify when a defined system treats each as a separate subject.
The word comes from the Latin entitas, meaning being. Its broad use across philosophy, law, medicine and computing is outlined in this reference on entity.
Why can an abstraction count as an entity?
Ontology examines what exists and how different kinds of things relate to one another. Some philosophical views restrict what counts to physical objects. Others include properties, numbers, institutions, events and possible objects.
An abstraction can count as a distinct subject when a framework gives it a meaningful identity and relationships. A contract has no biological body, yet it creates duties between identifiable parties. A corporation is a legal fiction, but it can own land, borrow money and face legal proceedings.
The important point is that it doesn’t need independent physical reality. It needs a recognised identity within the system being studied. That system might be the physical world, a legal code, a medical classification or a database.
Legal persons, companies and limited liability
A legal entity is a natural person or organization that the law recognises as capable of holding rights and duties. This entity may enter contracts, own property, owe money, bring a claim or face one.
The distinction between human beings and organisations created by law helps explain how businesses operate. An individual, company or public body may be a party to a contract.
| Legal category | Meaning | UK example |
|---|---|---|
| Natural person | A human being with legal rights and obligations | An individual customer or sole trader |
| Artificial person | An organization created or recognised by law | A private limited company |
An individual exists independently of registration, but incorporation gives a company the status of an artificial person. As a corporate entity, it owns its assets and enters contracts in its own name. It is a party to each contract it makes, and the other party deals with it, not its shareholders. Shareholders own shares in the company, rather than owning the company’s individual property.
That separation is central to limited liability. Shareholders generally risk the money they invest, although directors and owners can still face personal responsibility in cases such as fraud, wrongful trading or certain personal guarantees.
A sole trader is a business entity operated by one natural person. It lacks separate legal personality, so business debts can become the owner’s personal debts. An LLP is a legal entity separate from its members. A limited company is also a separate legal person, with its own rules and responsibilities.
In contracts and regulations, each party has rights and duties, and one party may owe money or provide a service. The other party may bring a claim if those duties are not met. Each party must follow the agreement’s terms, while the relevant party may seek a remedy.
Economic entity, accounting units and disease entity
Accounting uses the economic entity concept to separate a business’s financial activity from its owners’ personal affairs. A company’s accounts should record its transactions, not household spending by its owners.
This entity concept supports reliable financial statements under generally accepted accounting principles and other reporting frameworks. The reporting unit might be a company, charity, public authority, subsidiary or group of companies. Group accounts can combine several companies when accounting rules treat them as one reporting unit.
An economic entity is therefore a unit whose financial decisions and transactions can be analysed. It doesn’t always match one legal structure. A business group may contain several companies, whilst a department may be part of one company but still have its own internal budget.
Medicine uses disease entity to describe a condition treated as distinct because it has a recognisable cause, pattern of symptoms, biological process or clinical course. Evidence establishes a disease entity through its causes, symptoms and clinical behaviour. Medical classifications can change as researchers find better evidence, so disease categories aren’t always permanent.
Entities in computer science and database systems
In computer science, an entity is an identifiable object whose identity remains stable even when its attributes change. A customer can change address or telephone number without becoming a new customer.
Entity types, instances and relationships
Within computer science, a database might define a customer as an entity type. Each individual customer is an entity instance. The database stores attributes such as name, email address and billing information, then uses a primary key to maintain a stable identity.
An order is another entity type. A relationship connects it to the customer who placed it. Products, invoices, suppliers and delivery addresses can be modelled in the same way.
This distinction matters in computer science because identity persists when properties change. If a customer updates an address, the system should change the address attribute rather than create a second customer. The identity remains, while one property changes.
An entity relationship model makes these structures visible before developers build tables and applications. In computer science, object-oriented software often gives an entity object an identity that continues across transactions. A value object, such as a currency amount, may instead be defined entirely by its current values.
The same model applies to an endpoint device, a user, a service and a process. In computer science, a device may change its operating system or network address without losing its identity. An information system may identify a user account, that device and a background process separately. Each device, user and process can then receive different permissions and behaviour.
What does an entity mean in cybersecurity?
Cybersecurity uses a broad identity term. NIST terminology and its glossary define an entity as an individual, organization, device or running software with a distinguishable existence. In some standards, a party, user and device can overlap because each may describe an actor in an information exchange.
The context still matters. A party participates in a transaction. An information system user accesses a service. A device is a physical endpoint, whilst a process is running software. One person can occupy all three roles through an account, an authorised device and a process with appropriate permissions.
In cybersecurity, this term can describe a human or non-human actor, provided the system can identify it and apply rules to it.
Authentication checks whether an entity is genuine or controls a particular credential. NIST SP 800-63 explains digital identity and authentication for that user, whilst NIST SP 800-53 provides access-control guidance. During key establishment, NIST SP 800-56 helps systems identify each party, determine which participants are communicating, and match their keys.
FIPS 186-5 covers digital signatures, whilst FIPS 140-3 applies when cryptographic-module validation is relevant. These FIPS publications and NIST standards use precise terminology because confusion over identity can create security weaknesses. That is why an entity must remain distinguishable. NIST guidance shows that access controls become unreliable when a legitimate service resembles an unknown process.
Entities in SEO, knowledge graphs and AI search
Search engines treat a person, organisation, place, product or event as a distinct subject when they can identify it and connect it to relevant facts. This differs from matching a text string.
For example, “Apple” may refer to a technology company, a fruit or a record label. Context, relationships and supporting information help a search system identify the intended subject. Named entity recognition performs a similar task in natural language processing by finding names and classifying them as people, organisations, locations or other categories.
Knowledge graphs connect identified subjects through facts and relationships. An entity may connect to its address, services, founders, social profiles, products and customer support details. You can find a useful overview of entities in knowledge graphs.
Structured data can help search engines interpret an entity’s relationships. Schema markup may clarify that a page describes an organization, local business, product or person. It doesn’t guarantee a rich result, an AI Overview citation or a recommendation from ChatGPT, Gemini or another answer engine.
Structured data clarifies identity and relationships, but it cannot force an answer engine to cite a page.
Clear authorship, accurate contact details, current service information, named sources and consistent business profiles also matter. Schema and public business information should describe the business entity consistently. Businesses should keep legal and organisational information about the corporate entity accurate, even on pages they don’t directly control. A practical content governance checklist can help teams manage that responsibility.
Traditional SEO still matters because strong rankings can earn visits, links and recognition. Consistent information in a third-party directory can support that visibility, but a top-three position doesn’t guarantee that an AI-generated answer will mention the business or describe it accurately.
A July 2025 Pew Research Center study of 68,879 real searches from 900 US adults found that a search user clicked a traditional result in 8% of searches with an AI Overview, compared with 15% when no overview appeared. Only 1% clicked a link inside the overview. Results vary by country, device and query, but the finding shows why ranking reports don’t capture every form of visibility.
Businesses can measure entity visibility through prompt testing with a user, recording brand mentions, cited pages, competitor appearances and answer accuracy. GA4 referral data, branded searches, form submissions, CRM opportunities, assisted revenue and sales feedback add commercial context. AEO supports SEO by making important information easy for a user to retrieve, verify and quote during the process.
Frequently Asked Questions
What is an entity?
An entity is something with a distinct identity that people or systems can recognise. It may be a physical object, person, organisation, event, abstract idea or digital record, depending on the framework being used.
What is a legal entity?
A legal entity is a person or organisation recognised by law as capable of holding rights and duties. It may own property, enter contracts, owe money, bring a claim or face legal proceedings.
How is an entity used in a database?
A database entity is an identifiable object whose identity remains stable while its attributes change. For example, a customer can update an address without the system creating a second customer, provided its primary key remains the same.
What does entity mean in cybersecurity?
In cybersecurity, an entity can be a person, organisation, device or running software with a distinguishable existence. Systems authenticate entities and apply permissions to them so that users, services and devices receive appropriate access.
How do search engines use entities?
Search engines identify people, organisations, places, products and events as distinct subjects, then connect them to facts and relationships. Structured data can clarify those connections, but it cannot guarantee a rich result, AI citation or recommendation.
Conclusion
An entity is anything a defined system can recognise as a distinct subject. Its underlying existence may differ from the identity assigned by legal, database, cybersecurity or search frameworks.
Law assigns rights and obligations to recognised subjects. Databases preserve records over time, while cybersecurity systems authenticate them and search systems connect them to facts and relationships.
Accurate, current information and credible evidence support a strong digital presence. That is how an entity remains recognisable when people, software and answer engines encounter it across systems.
