Data Privacy Framework Notice

Last Updated: August 14, 2026

Tanium Inc. (“Tanium,” “we,” “us,” “our”) is committed to protecting your privacy. This Data Privacy Framework Notice sets out the privacy principles we follow with respect to transfers of personal information from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland to the United States. For information about who this notice applies to, the types of data collected and purpose of data collection, please refer to our Privacy Policy.

Participation in the Data Privacy Framework

Tanium complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), together the “DPF,” as set forth by the U.S. Department of Commerce. Tanium has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Tanium has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF (the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles are together referred to as the “Principles”). If there is any conflict between the terms in this notice and the Principles, the Principles shall govern. To learn more about the DPF program, please visit https://www.dataprivacyframework.gov/. To view our certification on the DPF List, please visit https://www.dataprivacyframework.gov/list.

Tanium’s Commitment to the DPF

Tanium commits to subject all personal data it receives from the EU in reliance on the EU-U.S. DPF, from the UK in reliance on the UK Extension, and from Switzerland in reliance on the Swiss-U.S. DPF, to the Principles. If Tanium transfers personal data to a third party acting as an agent and that party processes it in a manner inconsistent with the Principles, Tanium remains liable unless it can demonstrate it is not responsible for the event giving rise to the damage. Information about the types of third parties to which Tanium discloses personal information and the purposes for which it does so is described in our Privacy Policy.

Jurisdiction

The Federal Trade Commission has jurisdiction over Tanium’s compliance with the DPF. In certain situations, Tanium may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Dispute Resolution

EEA, UK, and Swiss individuals with inquiries or complaints regarding the Principles should first contact us by email at privacy@tanium.com or in writing to the contact information listed below. We will investigate and attempt to resolve any DPF-related complaints or disputes within forty-five (45) days of receipt.

If your complaint is not resolved by Tanium directly, you may contact the following independent recourse mechanisms free of charge: (i) For EU individuals: EU Data Protection Authorities at https://www.edpb.europa.eu/contact/file-a-complaint_en; (ii) For UK individuals: UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/; and (iii) For Swiss individuals: Swiss Federal Data Protection and Information Commissioner at https://www.edoeb.admin.ch/en/model-complaint-form-swiss-us-dpf.

For complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website at https://www.dataprivacyframework.gov/.

Your Data Privacy Rights

We will provide you with an opportunity to opt out where personal information we control about you is to be disclosed to an independent third party, or is to be used for a purpose that is materially different from those set out in our Privacy Policy. If you otherwise wish to limit the use or disclosure of your personal information, please write to us at the contact information listed below. For information about your broader data protection rights, including access, correction, deletion, and portability, please refer to our Privacy Policy.

Changes to this Notice

We reserve the right to amend this Notice from time to time consistent with the Principles’ requirements.

Contact Information

By Email to privacy@tanium.com, or in writing to: Tanium Inc., Attn: Privacy, 2100 Powell Street, Suite 1600, Emeryville, CA 94608, USA

You may also contact Tanium's representative in the EEA for data protection matters by email at legal@tanium.com or by post to Tanium Netherlands B.V., EEA Representative (Data Protection), Barbara Strozzilaan 201, 1083HN Amsterdam, Netherlands.