Stub — v0.1, 4 August 2026
Data processing addendum
BriefsDaily is an individual consumer subscription, so most readers do not need a DPA: we act as an independent controller of your account data under our privacy policy. This stub exists for readers whose employers require processing terms before approving an expensed subscription.
What we commit to
- Processing personal data only to provide the service described in the privacy policy, never for advertising or sale.
- The sub-processor list published in the privacy policy, with 30 days' notice by email before adding one.
- Technical measures: row-level isolation of every reader's data enforced in the database, encryption in transit and at rest, secrets confined to the server, audit logging of any staff access to reader content.
- Deletion on request and on account closure, on the retention schedule in the privacy policy.
- Breach notification without undue delay to the affected account email.
- EU/UK transfers covered by our providers' Standard Contractual Clauses.
If your organisation needs a countersigned agreement incorporating these commitments, email privacy@briefsdaily.com and we'll turn it around quickly.