Privacy Policy

Last updated: January 1, 2026

This Privacy Notice ("Privacy Notice") explains the processing of personal data by Strider Technologies, Inc. and its affiliates (“we” or “Strider”). 

Strider provides a “Strategic Intelligence Platform” to help its customers secure and advance their technology, people, and supply chains.  Section I of this Notice describes the data processing necessary to provide our Strategic Intelligence Platform, including Strider’s data collection (1.1), data processing and delivery to customers (1.2), and the respective roles of Strider and its customers under data privacy law and the legal basis (1.3).

Overview and Purpose: Strider captures selected open source intelligence from publicly accessible data sources. This data includes data captured using crawlers and purchased data, all stored in a continuously updated database (“OSINT Database”). This data is curated and shared with Strider’s clients to help them secure and advance their technology, people, and supply chains.   

Data sources: Strider collects publicly accessible data from the following data categories, all of which may contain personal data:

Method of collection: These documents are collected using crawlers which search publicly accessible websites or licensed/purchased from third parties who collected data from publicly accessible sources. 

Collected personal data: The personal data that Strider captures is publicly accessible and generally about individuals’ professional and academic history. The personal data contained in the collected documents depends on their specific content, but will regularly include name, education history, employment history, conference or event attendance history, professional or industry group association history, publication history, intellectual property filing history, information regarding defense, military or government ties, and areas of technological expertise or other information that is contained in the collected documents. 

Overview and Purpose: Strider uses the created OSINT Database to provide its Strategic Intelligence Platform. The platform helps Strider’s customers to identify potential risks associated with state-sponsored intellectual property theft, talent acquisition, and supply chain vulnerabilities. Data may also be delivered to customers through Services, which are customized, hands-on economic security research projects and program development support. Services are based on Strider’s OSINT Database and leverage the analysis and techniques developed by Strider in a customized manner depending on the scope of work agreed upon with the customer.

Processing and Analysis: Strider processes such personal data to identify unique individuals, and determine whether individuals or organizations could possibly present one or more risks to its customers. This process is generally carried out in the following steps:

Role: Strider is the data controller (or equivalent under other privacy laws) for providing the Strategic Intelligence Platform and Services. As controller, Strider is responsible for its own compliance with data privacy law. Customers are independent controllers of the Strider data. 

Legal basis for collection: Strider relies on its legitimate interests as its legal basis to collect personal data in connection with services under Article 6 (1) (f) of the EU/UK GDPR. Strider’s purpose of processing personal data is offering its products to its customers, and its processing presents a benefit to Strider’s customers in that Strider’s products enable its clients to understand and evaluate their exposure to nation-state actors by helping them detect and combat insider threats and other threats to people, technology, and supply chains. Those threats might otherwise result in talent loss, IP theft, forced technology transfer, supply chain or other similar risks. Strider’s clients have a commercial interest in mitigating such threats. Strider had conducted a legitimate interests analysis and can share that upon request. 

If you access our website, some personal data is temporarily stored. In particular, the following data is collected when you visit our website:

The temporary storage of this personal data is necessary to deliver the website to you. The legal basis for this processing of your personal data is our legitimate interest in effective corporate communications.

Further storage of this data takes place in log files, in order to ensure the functionality of our website and, if necessary, to check and enforce our rights, our terms of use and the rights of third parties. The log files are stored as long as necessary for the respective purpose, usually no longer than one (1) year. The legal basis is our legitimate interest in providing the website securely.

We process personal data that you provide in the context of using certain content and functions on our website. For example, if you use a contact form on our website, we use this personal data to respond to your queries, and/or provide the services and/or information that you have requested. The same applies to communication by other means, such as e-mail, messenger or telephone. The legal basis for this data processing is our legitimate interest in effective corporate communications.

We process contact details of the respective contact persons of our business partners (e.g., address, telephone number, mobile phone number, e-mail address) and other personal data of the respective contact persons, insofar as the respective business partner makes these available to us in the context of the business relationship.

The processing of the personal data of contact persons serves the following purposes: 

Furthermore, we process your personal data: 

We share information about you as follows or as otherwise described in this Privacy Notice:

Personal data of individuals who visit our website or otherwise interact with us may be transferred and accessed from around the world, such as from countries where we or our group entities operate. If we transfer your personal data outside of the European Economic Area (“EEA”) to a country which provides a different level of data privacy, we will use a transfer mechanism to ensure the same level of data privacy as within the EEA. For this purpose, we mainly use Standard Contractual Clauses ("SCC") and in individual cases other appropriate guarantees. You can request a copy of the SCC or other contract ensuring the appropriate level of data privacy by contacting us by the contact methods described in section 9.

In addition to the processing purposes mentioned above, we also use cookies and similar technologies such as pixels or web storage (together: "Cookies") if they are technically necessary to offer our website or if we are obliged to do so. 

Cookies that are not technically necessary (e.g., for analytical purposes) are only processed with your consent, if required by the applicable jurisdiction. 

Unless otherwise stated in this Privacy Notice, Cookies remain stored as long as necessary to fulfil the respective processing purposes. You can object to the storage of Cookies by browser preferences and delete them manually in your browser settings. Please note, however, that some Cookies may be mandatory for the use of our website or its individual functions.

For more information about the Cookies set on this website and how to revoke or give your consent, please use our Data Access Request form. 

Our website and app are not designed for or directed to children under the age of 16 and we do not knowingly collect personal data from children. If you have reason to believe that we have inadvertently collected personal data about a child, please contact us and we will take steps to delete this data.

For data shared by a customer with Strider through the Strider products, the customer can set its own data retention period or request Strider delete such customer data. Otherwise, unless a specific retention period is specified in this Privacy Notice, we will only process your data as long as this is necessary for the respective purposes or as long as there are legal retention obligations. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted. 

If required under law in your applicable jurisdiction, you can request access to the personal data stored by us. If you have provided personal data on the basis of a contract or consent, you have the right to receive this personal data in a standard and machine-readable format.

You can also request the deletion, correction or restriction of the processing of your personal data subject to certain exceptions or limitations. You can revoke your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal.

If you have provided your consent, you can withdraw your consent at any time.

For those based in the EEA, you can object to the data processing on the basis of our legitimate interests at any time based on grounds relating to your particular situation.

To exercise your rights you can use our Data Access Request form and contact us using the contact details provided below in Section 9.

In case of questions and in case of possible concerns about the data processing, you can also complain to a data protection authority. 

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. More information about Strider’s security practices is here: https://trust.striderintel.com/

This section applies only to residents of the State of California. The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), grants California residents specific rights regarding their personal information. If you are a California resident, you have the right to know what personal information is collected and how it's used and shared. You also have the right to request the deletion or correction of your personal information. Additionally, you have the right to opt-out of the sale or sharing of your personal information and to limit the use and disclosure of sensitive personal information. We will not discriminate against you for exercising these rights. To exercise these rights, use our Data Access Requestform. We will verify your identity and respond to your request within the required timeframes.

Individuals located in other jurisdictions (such as other states in the USA, Canada, or Brazil) may have similar rights under their local privacy laws, which Strider will honor where applicable.

Strider complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the “DPF”) as set forth by the U.S. Department of Commerce. Strider has certified to the U.S. Department of Commerce that it adheres to the DPF Principles with respect to the processing of personal data transferred from the European Union, the United Kingdom (and Gibraltar), and Switzerland to the United States. If there is any conflict between the terms in this Privacy Notice and the DPF Principles, the DPF Principles shall govern. All U.S. subsidiaries using brand name “Strider” adhere to the EU-U.S. DPF Principles, including the UK Extension to the EU-U.S. DPF. Strider is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may transfer personal data to third parties acting as agents or service providers for the purposes described in this notice. Strider remains liable under the DPF if a third party processes personal data in a manner inconsistent with the Framework’s principles, unless we prove that we are not responsible for the event giving rise to the damage.

For more information about the Data Privacy Framework program, and to view our certification, please visit the U.S. Department of Commerce’s Data Privacy Framework website at:
https://www.dataprivacyframework.gov/

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Strider commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the International Centre for Dispute Resolution – American Arbitration Association (ICDR-AAA DPF IRM Service), an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit: https://go.adr.org/dpf_irm.html for more information or to file a complaint.  The services of ICDR-AAA DPF IRM are provided at no cost to you.

In certain circumstances, individuals may have the right to invoke binding arbitration to resolve residual claims regarding the processing of their personal data that have not been resolved through other available dispute resolution mechanisms. This option is available only after other required avenues for redress have been exhausted and subject to the conditions set forth in the applicable Data Privacy Framework and its arbitration procedures.

If you have any questions about our data processing or want to exercise your rights under data privacy law, please contact us at privacy-request@strider.tech or at:

Strider Technologies, Inc., Attn: Privacy 10355 S. Jordan Gateway #600, South Jordan, UT 84095

VeraSafe has been appointed as Strider’s representative in the EU and UK for data privacy matters, pursuant to Article 27 of the EU/UK GDPR. If you are in the European Economic Area or UK, VeraSafe can be contacted in addition to Strider, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at: +420 228 881 031.

Alternatively, you can contact VeraSafe at:

EU: VeraSafe Ireland Ltd., Unit 3D North Point House North Point Business Park New Mallow Road, Cork, T23AT2P Ireland

UK: VeraSafe United Kingdom Ltd., 37 Albert Embankment, London SE1 7TL, United Kingdom

We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Policy periodically to stay informed about our information practices and the choices available to you.