Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Apptio
GDPR evidence
We are the leading provider of Technology Business Management, or TBM
No public evidenceApptio and GDPR
CertReports found no public GDPR evidence for Apptio as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Mar 2018
- Scope
- • To provide you with information about the TBM Council and our events, services and partners. If we received your contact information directly, including from a subsidiary or related company, or if given the context of your provision of information you could have had a reasonable expectation that you would receive communications from us, then we may email you information regarding TBM Council events and affairs, and may send a newsletter type of communication via email which you can opt out of receiving such communications by using the "unsubscribe" link at the bottom of such email and/or by changing the notifications settings for your account on the Website • To diagnose and resolve issues with and otherwise improve our Website or services. • To carry out our obligations and enforce our rights arising from any agreements between you and us. • To monitor and track usage patterns on the Website. • To notify you of changes to our Website. • We may share your Personal Information with our founding sponsor and technical advisor, Apptio, Inc., which may, if given the context of your provision of information you could have had a reasonable expectation that you would receive communications from Apptio, email you information regarding technology business management, including Apptio’s products, services, and events, and may send you communications, including a newsletter type of communication, via email which you can opt out of receiving such communications by using the "unsubscribe" link at the bottom of such email and/or by changing the notification settings for your account on the website • In connection with prospective service engagements, partnerships or vendor relationships where the disclosing party is a prospective partner or vendor to the TBM Council. Noteflight Learn does not collect personal data and only requires a username which is assigned by the school's administrator of the site. Only musical scores are associated with this username. No email, names, or any other information is collected. Noteflight Learn does not disclose student information to any third parties.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Technology Business Management Council: Inactive | Live pagesha256 a0d00b6940 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 13 Oct 2016
- Scope
- Apptio collects personal information from website visitors on its Websites to respond to the website visitors requests and for marketing purposes as permissible under applicable law. Apptio may process contact details and other personal information in connection with a website visitor?s efforts to: (a) request or obtain product and/or marketing materials; (b) register for company or company-related events; (c) request contact with a salesperson; (d) submit questions or inquiries; or (e) engage in interactive features of our website (e.g. bulletin boards, community blog, etc.). Apptio may also use website visitors information to help monitor and analyze usage patterns on the Website, to diagnose and resolve issues with the Website, and otherwise improve and protect the Website. In addition, Apptio collects customer registration information when a customer registers to use Apptios hosted software service, which may include their name, company name, email address, and phone number. Apptio may also request additional profile information such as title, or department name. Apptio uses this information to communicate with its customers and to provide notices, as appropriate. Apptio may also use this information to help monitor and analyzes usage patterns on, to diagnose and resolve issues with, and otherwise improve and protect the hosted software services. Apptio may also collect personal information from vendors and other business partners for business management purposes. In connection with providing its hosted, web-based software service, Apptio acts as a data processor and hosts and processes IT-related information and other business data on behalf and upon instructions of its customers, which may include personal information. As part of these hosted services, customers may upload data onto Apptio-controlled servers. Customers are data controller. Apptio does not choose the data that is uploaded onto the servers and any exposure to or use of such data is associated with performing Apptios contractual obligations to its customer as a processor. Apptio discloses personal data to entities within the Apptio group and business partners, on a need-to-know basis. Apptio uses third-party service providers to process personal data on Apptios behalf, including to provide data storage services. Apptio may need to disclose personal data to public authorities, as required by law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Apptio, Inc.: Inactive | Live pagesha256 0458ba20ce |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 18 Oct 2016
- Scope
- Apptio collects personal information from website visitors on its Websites to respond to the website visitors requests and for marketing purposes as permissible under applicable law. Apptio may process contact details and other personal information in connection with a website visitor?s efforts to: (a) request or obtain product and/or marketing materials; (b) register for company or company-related events; (c) request contact with a salesperson; (d) submit questions or inquiries; or (e) engage in interactive features of our website (e.g. bulletin boards, community blog, etc.). Apptio may also use website visitors information to help monitor and analyze usage patterns on the Website, to diagnose and resolve issues with the Website, and otherwise improve and protect the Website. In addition, Apptio collects customer registration information when a customer registers to use Apptios hosted software service, which may include their name, company name, email address, and phone number. Apptio may also request additional profile information such as title, or department name. Apptio uses this information to communicate with its customers and to provide notices, as appropriate. Apptio may also use this information to help monitor and analyzes usage patterns on, to diagnose and resolve issues with, and otherwise improve and protect the hosted software services. Apptio may also collect personal information from vendors and other business partners for business management purposes. In connection with providing its hosted, web-based software service, Apptio acts as a data processor and hosts and processes IT-related information and other business data on behalf and upon instructions of its customers, which may include personal information. As part of these hosted services, customers may upload data onto Apptio-controlled servers. Customers are data controller. Apptio does not choose the data that is uploaded onto the servers and any exposure to or use of such data is associated with performing Apptios contractual obligations to its customer as a processor. Apptio discloses personal data to entities within the Apptio group and business partners, on a need-to-know basis. Apptio uses third-party service providers to process personal data on Apptios behalf, including to provide data storage services. Apptio may need to disclose personal data to public authorities, as required by law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Cloudability, Inc.: Inactive | Live pagesha256 ae467c1da4 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Apptio GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports5 evidence rows across 3 frameworks entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the IT management category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No IT management vendor has GDPR evidence in the index yet.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read