Tenable

Tenable is a cybersecurity company specializing in enterprise security and device management.

3.3/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes, but you may opt-out

4/10

Score

Yes

Yes, but you may opt-out

35%

Yes, but you must opt-in

70%

100%

Citation

Targeted and advertising cookies

These cookies track your browsing habits to enable us to show advertising which is more likely to be of interest to you. These cookies use information about your browsing history to group you with other users who have similar interests. Based on that information, and with our permission, third party advertisers can place cookies to enable them to show adverts which we think will be relevant to your interests while you are on third party websites.

You can disable cookies which remember your browsing habits and target advertising at you by visiting http://www.youronlinechoices.com/ or http://optout.aboutads.info/. If you choose to remove targeted or advertising cookies, you will still see advertisements, but they may not be relevant to you. Even if you do choose to remove cookies by the companies listed at the above link, not all companies that serve online behavioral advertising are included in this list, and so you may still receive some cookies and tailored advertisements from companies that are not listed.

Notes

Altough the opt-out is done with more cookies, either from http://www.youronlinechoices.com or http://optout.aboutads.info/.

Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Score

Yes, by contacting someone

60%

Yes, using an automated mechanism

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Your California Privacy Rights

The California Consumer Privacy Act of 2018 (“CCPA”) gives California residents certain rights as described below. For this section, we use the terms “personal information” and “sale” as those are defined in the CCPA.

Request to know – You have the right to request a copy of the categories or specific pieces of personal information that Tenable collects, uses, shares or sells about you.
          Request to delete - You have the right to request that Tenable delete the personal information we have collected from you.
          You have the right to request to opt out from the sale of your personal information. Because Tenable does not sell your personal information, you do not need to exercise this right.

Your right to know and right to delete are subject to certain exceptions under the CCPA, for example as necessary to perform or evidence a transaction or contract, comply with a legal obligation, or when a consumer’s identity cannot be reasonably verified.
Exercising your CCPA Rights

To make a CCPA request, you can:

Call us toll-free at 833-720-0398.
          Email us at privacy@tenable.com using “CCPA Request” in the subject line.

Notes

ONLY IN CALIFORNIA

Does the service allow third-party access to private personal data? Yes

0/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

Sharing Your Personal Data

We may share your Personal Data as follows:

Third Parties Designated by You. We may share your Personal Data with third parties where you have provided your consent to do so.
          
          Our Third Party Service Providers. We may share your Personal Data with our third-party service providers who provide services such as data analysis, distribution partners, resellers, information technology and related infrastructure provision (such as Amazon Web Services), email delivery, auditing, and other similar services. We may also give information to one of our partners, located here https://www.tenable.com/partners/channel-partner-directory. These third parties are only permitted to use your Personal Data to the extent necessary to enable them to provide their services to us. They are required to follow our express instructions and to comply with appropriate security measures to protect your Personal Data.
          
          Third Party Advertisers. We may share Personal Data with advertisers and advertising networks that require the data to select and serve relevant advertisements to you and others.

When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

Other Disclosures. We may share Personal Data as we believe necessary or appropriate: (a) to comply with applicable laws; (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities to meet national security or law enforcement requirements; (c) to enforce our Policy; and (d) to protect our rights, privacy, safety or property, and/or that of you or others.

Transparency

Does the policy outline the service's general security practices? No

0/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Security

We seek to use reasonable organizational, technical, and administrative measures to protect Personal Data within our organization. Unfortunately, no transmission or storage system can be guaranteed to be completely secure, and transmission of information via the internet is not completely secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us using the details in Section 17 below.

Is the policy's history made available? Only the date it was last modified

3/5

Does the policy require users to be notified in case of a data breach? Not necessarily

0/7

Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Collection

Does the service collect personal data from third parties? Yes

0/10

Is it clear why the service collects the personal data that it does? No

0/10

Score

Somewhat

30%

Mostly

70%

Yes

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Why do we need your Personal Data?

We will only collect and/or process your Personal Data in compliance with applicable data protection and privacy laws and in accordance with this Policy. In order to provide you with access to the Site, we may process your Personal Data in accordance with this Policy. If you create a profile or register with us, you will be asked to agree to provide certain information in order to access our services or view our content. By agreeing to do so you consent to your Personal Data being processed by us. This consent provides us with the legal basis to process your Personal Data. If you change your mind and wish to withdraw your consent to us processing your Personal Data, you may withdraw your consent at any time.There may also be instances where you are required to provide your information to purchase products or access the Tenable Community and Tenable University. In such cases, Tenable has a legitimate business interest to process your Personal Data. If you do not agree to our use of your Personal Data in line with this Policy, please do not use our Site.

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? On an opt-out basis, for all non-critical data/uses

6/10

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Score

On an opt-out basis, but only for some non-critical data/uses

30%

On an opt-out basis, for all non-critical data/uses

60%

On an opt-in basis

60%

N/A (no data used for non-critical purposes)

100%

Citation

Your Rights

You have certain rights relating to your Personal Data, subject to local data protection laws. Depending on the applicable laws, and, in particular, if you are located in the EEA, these rights may include:

Opt-out. You may contact us anytime to opt-out of: (i) direct marketing communications; (ii) automated decision-making and/or profiling; (iii) our collection of sensitive Personal Data; (iv) any new processing of your Personal Data that we may carry out beyond the original purpose; or (v) the transfer of your Personal Data outside the EEA. Please note that your use of some of the Site  may be ineffective upon opt-out.

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

Collecting Your Personal Data

We collect information about you in the following ways:

Information You Give Us. This may include:

any Personal Data you provide to us, including name, postal address, email address, telephone number, and a username;
          any Personal Data that may be contained in any video, comment, or other submission you upload or post to the Site;
          any Personal Data you provide when you report a problem with our Site or when we provide you with technical support for your evaluation license;
          any Personal Data you provide when you make a purchase through our Site;
          any Personal Data you provide when you use our Site’s live chat feature; and
          any Personal Data you provide when you correspond with us by phone, email, or otherwise.

Information from Social Networking Sites. Our Site includes interfaces that allow you to connect with social networking sites (each a “SNS”). If you connect to a SNS through our Site, you authorize us to access, use and store the information that you agreed the SNS could provide to us based on your settings on that SNS. We will access, use and store that information in accordance with this Policy. You can revoke our access to the information you provide in this way at any time by amending the appropriate settings from within your account settings on the applicable SNS.

Information We Get from Others. We may also get information about you from other sources, for example, if you have agreed to share information with one of our partners, listed here: https://www.tenable.com/partners/channel-partner-directory, or through our e-commerce provider, content syndicators, or other associated business partners.

Information Automatically Collected. We automatically log information about you and your computer or mobile device when you access our Site. For example, when visiting our Site, we identify an initial public IP address to identify where you are located, we log your computer or mobile device operating system name and version, browser type, browser language, screen resolution, the website you visited before browsing to our Site, pages you viewed, how long you spent on a page, access times and information about your use of and actions on our Site. We collect this information about you by using cookies. Please refer to the sections on cookies, flash technology and pixel tags below.

Automated Decision Making and Profiling. We may use automated decision making and/or profiling in regard to your Personal Data for some services and products, for example, when logging into Tenable’s Community, Tenable will need to identify if you are a customer or not, or messaging may change depending on your prior visits to our site. You can request a manual review of the accuracy of an automated decision that you are unhappy with or limit or object to such automated decision making and/or profiling by contacting us at privacy@tenable.com.

Last Updated

June 27, 2020

Sources

Source #1 ↗

Contributors

newuser_CTscb