COMPLIANCE
GDPR compliance.
Last reviewed · April 18, 2026Audit cycle · annual surveillanceDocument · /compliance/gdpr
Overview
BroadNet processes data on behalf of customers in compliance with the EU General Data Protection Regulation (GDPR). We are a Processor under GDPR terminology; our customers are Controllers. We maintain a Data Processing Agreement (DPA), keep a current list of sub-processors, and notify customers of breaches within 72 hours of confirmation.
§01
Definitions
Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.
Quick reference
- Scope statement
- The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.
- Surveillance audit
- Annual reassessment between full certification cycles to confirm controls remain effective.
- Type I vs Type II
- Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.
- Bridge letter
- Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.
Questions?
Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.
legal@broadnet.meBroadNet Technologies Sarl · Dubai, UAE · Operating since 2003
Related documents