1. Roles
Client acts as Controller. BNS acts as Processor, or as Controller where context and law require.
2. Processing Scope
Processing scope includes ad exposure tracking, engagement data processing, and attribution analytics for defined business purposes.
3. Security Measures
Encryption, logging, monitoring, and access controls are enforced.
4. Subprocessors
Subprocessors may include cloud providers, analytics platforms, and adtech vendors. All subprocessors are contractually bound to compliance obligations.
5. Breach Notification And Audit Rights
BNS notifies clients within 72 hours of confirmed breach and supports reasonable client audit requests with prior notice.