Data Processing Addendum

For personal data in Customer Content and media lists you upload, you are the controller (or business) and we are your processor (or service provider). For account and billing data, and for our opt-in journalist network, we are an independent controller.

We process customer personal data only to provide Emerald Beacon News Wire as described in the Terms and your documented instructions. We do not sell it, retain it, use it or disclose it for any other purpose, and we do not combine it with other data except as allowed by law.

Personnel with access are bound by confidentiality. We maintain technical and organizational measures including encryption in transit, database-enforced tenant isolation, MFA for privileged access and audit logging.

You authorize the subprocessors listed, with 30 days' notice of changes and a right to object.

Transfers out of the EEA, UK or Switzerland rely on the Standard Contractual Clauses, incorporated by reference.

We help you answer data-subject requests, notify you of a personal-data breach without undue delay, and delete or return customer personal data at the end of the service, subject to the retention periods in the Privacy Policy.

Email legal@emeraldwire.com to request a countersigned copy.