SOC 2, InfoSec Questionnaires, and Other Security Certifications

At Tatum, we understand that security and compliance are important priorities for our customers. Whether you need documentation for your vendor due diligence process, support with an information security questionnaire, or access to our security assurance materials, we are here to help. Because some of this information is sensitive, specific request steps must be followed.

Why Security Assurance Materials Matter

Tatum’s SOC 2 Type II report and ISO/IEC 27001 certification demonstrate that Tatum maintains a formal security and compliance program aligned with recognized industry standards. These materials help customers assess how Tatum protects data, manages security controls, and supports vendor risk and compliance requirements.

How to Request Security Documentation

To request Tatum’s SOC 2 Type II report or ISO/IEC 27001 certificate, please use our Drata Trust Center:

https://app.drata.com/trust/9cbe6e8a-0c38-11ee-865f-029d78a187d9

Please note:

• The SOC 2 Type II report is available through the Trust Center and requires acceptance of an NDA before access is granted.
• The ISO/IEC 27001 certificate does not require an NDA and can be requested directly through the Trust Center.

How to Request Assistance With a Security Questionnaire

If you would like Tatum to review or complete a security questionnaire, please follow these steps:

1. Contact the Tatum Sales Team
   Please reach out to our team through:
   https://tatum.io/get-in-touch

2. Prepare for NDA Review, if required
   Depending on the nature of the request and the materials involved, Tatum may require a Non-Disclosure Agreement (NDA) before sharing sensitive security information or completing detailed security questionnaires.

3. Provide the Required Request Information
   To help us process your request efficiently, please be prepared to provide:

   Authorized Contact / Signatory Information

   • Full name
   • Job title
   • Company name
   • Business email address
   • Phone number, if needed

   Company Information

   • Full legal company name
   • Company address
   • Company registration number, if applicable
   • Company website, if applicable

4. Questionnaire Submission
   Please share the questionnaire together with any submission deadline and any specific instructions or priority areas. This helps us route the request appropriately and respond more efficiently.

5. Request Processing
   Once the request is reviewed and any required NDA is completed, Tatum will provide the requested documentation or review the questionnaire through the appropriate internal process.

Why an NDA May Be Required

The SOC 2 Type II report and certain detailed security responses may contain sensitive information about Tatum’s internal security controls and operating environment. Where appropriate, Tatum requires an NDA to help protect this information and ensure it is used only for legitimate due diligence and compliance purposes.