NewEdge360 trust centre
Data Processing Terms
Baseline data-processing responsibilities for customer personal information handled through NewEdge360 services.
Last updated 15 October 2026
Roles and instructions
For personal information a customer submits to a subscribed service, the customer determines the business purpose and lawful basis and NewEdge360 processes the information to provide, secure and support the service under the customer's documented instructions and applicable agreement.
Customer responsibilities
The customer must have authority to collect and disclose personal information, provide required notices, honour individual rights, configure access appropriately and avoid submitting information that the ordered service is not intended to process.
Confidentiality and access
Personnel and authorised providers receive access only where needed for their role and are subject to confidentiality obligations. Tenant, role and branch controls are used to limit customer-data access within the service.
Security measures
NewEdge360 applies reasonable technical and organisational safeguards appropriate to the service, including access control, tenant isolation, encryption in transit, protected credentials, audit evidence, deployment controls and operational monitoring. No control eliminates every risk.
Service providers
NewEdge360 may use contracted infrastructure, communications, payment, security and support providers to deliver the services. Providers receive only the information needed for their function and are required to protect it under applicable contractual obligations.
International processing
Service providers and support operations may process information in more than one country. Where applicable law requires a transfer mechanism or additional safeguard, the parties will use the mechanism agreed for the relevant service.
Security incidents
NewEdge360 will investigate confirmed security incidents affecting customer personal information and notify the customer without undue delay where notification is required by the applicable agreement or law. The customer remains responsible for notices it must give to individuals or regulators.
Individual requests and assistance
Taking into account the nature of the service, NewEdge360 will provide reasonable assistance for eligible access, correction, deletion, restriction or export requests when the customer cannot fulfil the request using available controls.
Return, deletion and retention
Customer data is retained for service delivery, security, financial and legal purposes described in the agreement and Privacy Policy. At the end of service, eligible customer data is returned or deleted under the applicable offboarding process; protected backups expire on their normal cycle unless a legal hold applies.
Evidence and review
NewEdge360 will make reasonable information about relevant controls available for customer due diligence. Any additional audit, questionnaire or evidence obligation depends on the subscribed service, risk, confidentiality requirements and applicable order.
Questions or procurement review
If anything is unclear, contact NewEdge360 before purchasing or continuing to use the service. We can identify the documents and service schedule that apply to your intended order.