For Enterprise customers and GDPR compliance.
Last updated: May 17, 2026
This Data Processing Agreement (DPA) applies to AnyNews.ai's processing of personal data on behalf of customers (Controllers). This DPA supplements the Terms of Service and Privacy Policy.
"Personal Data" means any information relating to an identified or identifiable natural person. "Processing" means any operation performed on personal data. "Sub-processor" means a third party engaged by AnyNews.ai to process personal data.
AnyNews.ai processes personal data only on documented instructions from the Controller, including transfers to third countries. Processing is limited to providing the AnyNews.ai service as described in the Terms of Service.
We implement appropriate technical and organizational measures including: encryption of data in transit (TLS 1.3) and at rest (AES-256); access controls and authentication; regular security testing and vulnerability assessments; incident response procedures; employee security training and confidentiality agreements.
Current sub-processors are listed at anynews.ai/sub-processors. We notify Controllers 30 days before engaging new sub-processors. Controllers may object within that period.
We assist Controllers in responding to data subject requests (access, rectification, erasure, portability, restriction, objection) within the timeframes required by applicable law.
We notify Controllers of personal data breaches without undue delay and within 72 hours of becoming aware, providing all information required under Article 33 of the GDPR.
Upon termination, we delete or return all personal data within 30 days, unless retention is required by law. Certification of deletion is provided upon request.
Controllers may audit AnyNews.ai's compliance with this DPA once per year with 30 days' notice. We provide access to relevant documentation and facilities.
DPA inquiries: dpo@anynews.ai