Where GDPR touches signage
GDPR applies to personal data about people in the EU and the UK. For signage, that is mostly the people who use the account, and anything personal a screen shows. A review checks where the data is processed, who processes it, and whether there is a data processing agreement between you and the vendor. Screens that show personal data are your own choice and your own processing; Screenly is built so it does not need to hold any of it.
Where Screenly stands
- 01
Personal data Screenly holds
Names, email addresses and roles of the people in your account, support requests, and billing contacts. Screens report their network and hardware details, not people.
What Screenly stores - 02
Where it is processed
On Amazon Web Services and Google Cloud, in the United States. There is no choice of region today.
- 03
Who processes it
Every company that processes customer data is on the sub-processors page, with what it does and what it receives.
- 04
Your rights
Access, correction, deletion, restriction, portability and objection are set out in the privacy policy, with the address to send a request to.
What a GDPR review asks
| Topic | Where Screenly stands |
|---|---|
| A data processing agreement | Not published. Ask us if your review needs one |
| EU hosting or a choice of region | No. Data is processed in the United States |
| A list of sub-processors | Yes |
| ISO/IEC 27001 | Yes, since August 2026 |
Questions
Is there a data processing agreement?
Not published. Ask us if your review needs one.
Can we choose where our data is hosted, such as the EU?
Not today. Data is processed in the United States.
Where is our data hosted?
On Amazon Web Services and Google Cloud, processed in the United States.
Is there a list of the companies that process our data?
Yes. Every company that processes customer data is on the sub-processors page, with what it does and what it receives.