Last Updated: May 15, 2020
Tanium Products and Services Overview
Disclaimer: This Overview is provided for informational and reference purposes only and will not form a part of your agreement with Tanium.
The purpose of this Overview is to provide additional information and context with respect to Tanium’s products and services (collectively, the “Tanium Products”) and the terms and conditions under which you may acquire them.
What are the Tanium Products?
Tanium’s system management and security products are available for on-premises and cloud-based environments.
- On-Premises Software (OPS). Tanium’s unified endpoint management and security OPS is provided for deployment by you in your own information technology environment (“Environment”), both at the server and client level. Tanium is a platform solution that utilizes its proprietary “linear chain” architecture to gather data and execute actions through communication between connected endpoints. Tanium provides a portfolio of product modules, which replace multiple other endpoint solutions and tools, all with a single agent, a single console, and a single server. As a result, you control the deployment of OPS and data in your Environment. Tanium’s OPS is provided under the End User License Agreement located at: www.tanium.com/eula
- Hardware. Tanium hardware is available for OPS deployments. Tanium hardware is available via virtual appliance and physical appliance depending on your Environment and needs. Tanium’s hardware is provided under the Limited Hardware Warranty and Support Services Agreement located at: www.tanium.com/hardware-terms-and-conditions
- Tanium-as-a-Service (TaaS). TaaS is the full functionality of the Tanium platform (described above) delivered as a fully managed, performant, secure, cloud-based service. The primary benefit of TaaS is that you will no longer need to maintain hardware/server infrastructure, or the Tanium platform and product components on-premise. The Tanium client will still be downloaded onto your endpoints, but the Tanium Core server, module server, and product software will be hosted by Tanium (via third-party back-end cloud provider). We are currently utilizing a tenant isolation model via AWS for TaaS, which means that you will (1) be deployed into your own network and (2) receive your own unique configuration for compute/storage/security/automation. You will still have the same access to the Tanium console as before. You are not required to have an existing third-party cloud provider account to purchase TaaS. TaaS runs under Tanium’s account with this its third-party cloud provider. TaaS is provided under the TaaS Subscription Agreement located at: www.tanium.com/taas-subscription-agreement
How does Tanium license its software?
Tanium software is licensed on a subscription-basis per Managed Operating System (OS) Instance. A Managed OS Instance is a physical or virtual hardware device where the Licensed Software can be installed, and where that device is capable of processing data. Managed Operating System Instances include any of the following types of computer devices: mobile/smart phone, diskless workstation, personal computer workstation, networked computer workstation, homeworker/teleworker, home- based system, File Server, Print Server, e-mail server, Internet gateway device, Storage Area Network Server (SANS), Terminal Servers, or portable workstation connected or connecting to a Server or network. In the case of a virtual system, in addition to the virtual Managed Operating System Instances, the hypervisor is considered to be a single instance if the Licensed Software is installed at the hypervisor level.
How does Tanium audit my use of its software?
Tanium’s software itself will indicate to you the number of licenses you have deployed or utilized. Tanium reserves the right to request the deployment report that you run using the software, no more than once per year.
How does Tanium support the Tanium Products?
Tanium Products are primarily supported remotely through teleconferencing and screen sharing applications – this is standard support. Standard support is included with your subscription license. We also offer certain premium support services, both remote and onsite, for an additional fee. Geographic limitations may apply with respect to where you can deploy Tanium Products and receive support.
YOUR AGREEMENT WITH TANIUM
Depending on which Tanium Product you acquire, the End User License Agreement (for OPS), Limited Hardware Warranty and Support Services Agreement (for hardware), and TaaS Subscription Agreement (for TaaS) establishes the terms under which Tanium will provide you with the Tanium Products. These standard agreements establish the general terms governing the relationship between you and Tanium, unless you have entered into a negotiated agreement with you Tanium, in which case the negotiated agreement would govern.
Why Tanium’s agreement?
Tanium’s agreement is unique to its products and services, incorporates programmatic aspects of the Tanium offerings applicable across customers, and its risk allocation model and agreements balance each party’s respective rights and obligations in a fair and meaningful manner consistent with industry standards. As a result, the most efficient and balanced terms are those Tanium has created for its specific products and services.
How can I transact with Tanium under the agreement?
Tanium’s agreements allow you to transact by either executing a transactional order document, e.g., a schedule, or by issuing a purchase order expressly referencing Tanium’s quote.
Can I terminate my order or agreement with Tanium?
Tanium relies on your commitment to a certain quantity and term for its products and services to meet the customer’s price/discount points. While Tanium’s agreement allows customers to terminate for breach, it does not allow customers to terminate for convenience while there are active or pending orders.
How do I evaluate or test Tanium Products under the agreement?
You may evaluate Tanium Products in your production environment. Please send the request to your account manager identifying the products you wish to evaluate.
What is Tanium’s risk allocation and liability model?
You are ultimately responsible for your use of the Tanium Products, including the data you send through the system.
With respect to TaaS, your data resides with a third-party cloud provider. Tanium simply allows you visibility and control over that system. As a result, while Tanium is willing to share the risks associated with this type of model, it does limit its liability in this regarding since you ultimately control the data you send through the system and only you can implement back-up plans and safeguards appropriate to protect your data if an error in the software or services causes computer problems and related data loss, which is consistent with standards in the software-as-a-service industry. Tanium assumes responsibility for ensuring TaaS is available-as-a-service.
With respect to OPS, except for data you elect to transmit to Tanium, either manually or by enabling functionality that automatically transmits the data to Tanium, all systems and data operate in your closed environment. Tanium’s risk allocation model is based on that premise in that Tanium provides a warranty that the Tanium Products operate in substantial conformance to the technical documentation and provides support to correct errors.
Regardless of the type of product you acquire, Tanium stands behind the Tanium Products through its contractual obligations and offers indemnity protections against third-party claims of infringement. Geographic limitations may apply.
Does Tanium offer a service level agreement?
Service Level Agreements (SLAs) are available for certain Tanium Products. If applicable, the SLAs will be incorporate into your agreement with Tanium.
Does Tanium offer acceptance testing?
In lieu of acceptance testing after purchasing Tanium Products, Tanium prefers that its customers fully evaluate and be comfortable with the Tanium Products before purchasing them. This allows the customer enough time to evaluate the software without impacting the transaction. Tanium Products are Commercial-Off-The-Shelf products.
What data will Tanium collect?
Performance and analytics information relating to your use of the Tanium Products, metadata relating to your Environment, device identifiers, network telemetry, endpoint telemetry, system configuration, and data generated through the foregoing (referred to as “Systems Information”).
Will Tanium automatically collect data, including personal data?
You must opt-in to use data sharing features. Furthermore, Tanium does not require personal data from your Environment to provide or support Tanium Products.
How will data be used and stored by Tanium?
To provide you with the service, including technical support, and to research, develop, and improve Tanium Products, and, on an anonymized basis, for marketing purposes. Tanium stores all customer data on encrypted volumes, including platform data at rest and Tanium database data. Tanium retains all customer data for up to 30 days after termination or expiration of the agreement, and Systems Information for a reasonable duration thereafter.
How does Tanium protect customer data?
Tanium uses key security controls such as instance security, data isolation, data encryption (using industry standard TLS when in transit), user authentication (integrated with single sign-on solutions including two factor authentication), and other handling controls and practices, such as access controls, auditability, and assurance of data integrity. All platform keys are stored on a FIPS 140-2 Level 3 Hardware Security Module.
How do customers retrieve their data?
You can export any data using the Tanium Platform.
Does Tanium have a Data Processing Agreement (DPA)?
Yes, it’s located at: www.tanium.com/dpa. Tanium’s sub-processors are identified in the DPA.
Yes, it’s located at www.tanium.com/privacy-policy.