Global Privacy Statements

Supplemental Privacy Statements

Last Updated: July 2026

Additional Information for Australia Residents

The Ping Identity Privacy Statement (our “Privacy Statement”) describes how we collect, use, and disclose personal information. This section provides additional information for individuals whose personal information is subject to the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Anonymity and Pseudonymity

Where practicable, you have the option of interacting with us anonymously or using a pseudonym.

Access and Correction

You have the right to request access to and correction of your personal information. You can exercise these rights by visiting Your Privacy Choices.

International Data Transfers

As described in our Privacy Statement, your personal information may be transferred to, stored in, or processed in the United States and other countries that may not provide the same level of data protection as Australia. We take reasonable steps to ensure that overseas recipients handle personal information in accordance with applicable law. You can find more information on the categories of third parties we disclose information to in our Privacy Statement.

Complaints

If you believe that we have not handled your personal information in accordance with applicable law, you may contact us at privacy@pingidentity.com. We will take reasonable steps to investigate and respond to your complaint within a reasonable timeframe.

If you are not satisfied with our response, you may contact our Data Protection Officer (DPO) at dpo_privacy@pingidentity.com or lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Additional Information for EEA, Swiss and UK Residents

Last Updated: July 2026

The Ping Identity Privacy Statement (our “Privacy Statement”) provides most of the information required by the EU General Data Protection Regulation and similar data protection laws in Switzerland and the United Kingdom. This supplemental privacy notice gives EEA, Swiss, and UK residents additional information required by these data protection laws.

1. Information about Ping Identity

This notice is being provided by Ping Identity Corporation and its EEA, Swiss and UK affiliates.

Ping Identity
1001 17th Street
Suite 100
Denver, CO 80202 USA
privacy@pingidentity.com

Ping Identity Corporation is based in the United States. Our representative in the UK is:

Ping Identity UK Limited
privacy@pingidentity.com

Our Data Protection Officer (DPO) can be contacted at dpo_privacy@pingidentity.com.

2. The Purposes and Legal Basis for Processing, including Legitimate Interests

Our Privacy Statement explains the reasons why we process your personal information. Applicable law also requires us to state our “legal bases” for processing your personal information. These legal bases include:

• Contract: We may process your personal information as necessary to perform a contract with you or with your company (including providing support and service);
• Legal obligation: We may process your personal information to comply with a legal obligation or request;
• Legitimate interest: We may process your personal information for the purposes of our or another party’s legitimate interests, including to:
  • Subject to your right to object, send you marketing materials;
  • Protect you, Ping Identity or others from threats (such as security threats or fraud);
  • Enable or administer our business, such as for quality control, analytics, consolidated reporting, and product development;
  • Manage corporate transactions, such as mergers or acquisitions; and
  • Operate, secure and improve our business, products and customer relationships generally.
• Consent: We may process your personal information consistent with your consent to the extent permitted by applicable law.

3. Automated Decision-Making and Profiling

We will not make automated decisions about you that have a legal or similarly significant effect on you unless permitted by applicable law, such as where (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) applicable law authorizes us to use the technology.

4. When You Are Required to Provide Personal Information to Ping Identity

Some information is required for us to provide our products and services to you or your company. (For example, our registration forms indicate which data elements are required for our contracts.) If you do not provide this information, we cannot do business with you or your company.

5. Your Privacy Rights

You have certain rights regarding your personal information:

• You have a right to know whether Ping Identity maintains your Personal Information. If we do, you have the right to request a copy (subject to the rights of others), which may be provided in a portable format.
• If your information is incorrect or incomplete, you have the right to ask us to update it.
• You have the right to ask us to delete your Personal Information.
• You have the right to object to certain processing activities.
• You have the right to restrict the way that we process and disclose certain of your information
• You have the right to opt out of the processing of your personal information for automated processing that results in legal or similarly significant effects (if relevant)
• If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time. If you withdraw your consent, it will not affect the lawfulness of processing based on your consent before its withdrawal.

You can exercise your rights by visiting Your Privacy Choices. Please note that these rights are subject to exemptions and limitations.

If you believe that we have processed your Personal Information inappropriately, you may also contact us at privacy@pingidentity.com. If we do not resolve your complaint, you can also contact our data protection officer.

You also have the right to lodge a complaint with a data protection supervisory authority. You can find a list of the UK and European authorities here.

6. International Transfers

As noted in the Ping Identity Privacy Statement, your personal information may be transferred to, stored at or processed in the United States and other countries which may not have equivalent privacy or data protection laws.

To assure that personal information is protected in accordance with applicable law, we generally use approved Standard Contractual Clauses such as the EU Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK or Switzerland where appropriate). We also participate in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Please contact the Ping Identity Privacy Office at privacy@pingidentity.com if you would like more information about cross-border transfers or to obtain a copy of any applicable Standard Contractual Clauses.

7. Data Retention

We will retain your Personal Information for as long as the information is needed for the purposes set forth in the Ping Privacy Statement and for any additional period that may be required or permitted by law. For more information on our data retention practices, please see the “Data Retention” section of our Privacy Statement.

Additional Information for California Residents

Last Updated: July 2026

This Additional Information for California Residents supplements the Ping Identity Privacy Statement (our “Privacy Statement”). The Privacy Statement describes the categories of personal information we collect, the categories of sources from which we collect it, the purposes for which we collect, use and disclose it, and the categories of third parties with whom we disclose or share personal information. We provide additional California-specific disclosures required by the California Consumer Privacy Act (“CCPA”) below.

1. Your California Privacy Rights

The CCPA provides California residents with specific privacy rights:

• The right to be informed about the categories of personal information we collect or disclose about you; the categories of sources of such personal information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information.
• The right to access your personal information
• The right to correct inaccurate personal information
• The right to request that we delete your personal information
• In the event we use automated decision-making technology to make a significant decision about you (as those terms are defined in the CCPA), you have the right to access certain information about such decision-making. You also have the right to opt out of such decision-making or to appeal a decision to a human reviewer.

You also have the right not to be discriminated against (as provided for in applicable law) for exercising certain of your rights. Certain information may be exempt from such requests under applicable law.

If you are a California resident, you may exercise your rights by:

• Visiting our Privacy Request Center at Your Privacy Choices
• Emailing privacy@pingidentity.com

We may request additional information from you to verify your identity before responding to your request. You may also have the right to designate an authorized agent to make certain requests on your behalf. In order to verify your authorized agent, you must provide the authorized agent with signed, written permission to make such requests on your behalf or power of attorney. If permitted under applicable law, we may also follow up with you to verify your identity before processing the authorized agent’s request. You can also designate an agent by sending an email from your own email address to privacy@pingidentity.com indicating the name and email address of your agent. We will respond to that agent’s requests using both your email address and the agent’s email address.

2. Sensitive Personal Information

Ping Identity uses and discloses various categories of “sensitive personal information” (as defined in the CCPA) as described in more detail in the Privacy Statement. The CCPA allows you to limit the use or disclosure of your sensitive personal information if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.

3. Sale/Sharing of Personal Information

The CCPA sets forth certain obligations for businesses that “sell” or “share” personal information, as those terms as uniquely defined in the CCPA.

“Sales” of personal information. We do not “sell” personal information as the term “sell” is commonly understood. However, we may disclose certain identifiers (like IP address and email address), internet or other electronic network activity information (like information regarding an individual’s browsing interactions on our Websites), and commercial information (like the fact that a browser visited a page directed to people who are considering using our services) to certain analytics, advertising, and marketing providers in ways that may be considered “sales” under the CCPA. To opt out of such disclosures, click the “Your Privacy Choices” link in our website footer.

“Sharing” personal information. Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites. We “share” information for these purposes to provide more relevant and tailored advertising to you regarding our services. As part of this advertising, we may “share” certain identifiers (like IP address and email address), internet or other electronic network activity information (like information regarding an individual’s browsing interactions on our websites), and commercial information (like the fact that a browser visited a page directed to people who are considering using our services) with advertising platforms and advertising networks. To opt out of “sharing” of your personal information, click the “Your Privacy Choices” link in our website footer.

We do not knowingly collect, use, “sell” or “share” personal information of children under 16.

If we detect that you have established a legally recognized browser-based opt-out preference signal for your device or browser (such as Global Privacy Control), we will endeavor to recognize such preference in accordance with and to the extent required by applicable law.

4. Data Retention

We will retain your Personal Information for as long as the information is needed for the purposes set forth in the Ping Privacy Statement and for any additional period that may be required or permitted by law. For more information on our data retention practices, please see the “Data Retention” section of our Privacy Statement.

5. Notice of Financial Incentives

Ping Identity does not offer financial incentives for the collection or sale of personal information. We may offer individuals the opportunity to receive coupons or discounts via email. If you ask us to delete your information, we will not be able to send you additional coupons or discounts via email, however coupons or discounts sent to you previously will continue to be honored according to their original terms.

Ping Identity Career Center Privacy Notice

Last Updated: July 2026

Ping Identity is committed to protecting the privacy of individuals who participate in our recruiting process.

This Career Center Privacy Notice explains how we collect, use, disclose, and protect personal information in connection with our recruiting and hiring activities and describes your privacy rights.

This Privacy Notice applies to candidates who apply for employment through our Careers page, recruiting systems, or otherwise participate in our recruiting process.

1. Sources of Personal Information

We collect personal information:

• Directly from you, such as when you apply for a position, submit a resume, participate in interviews, or otherwise communicate with us.
• From third parties, such as recruiters, professional references, background screening providers, credential verification providers, and publicly available sources (such as LinkedIn).
• Automatically when you interact with our Careers page or recruiting systems.

If you provide personal information about another individual (such as professional references), you should ensure you are authorized to do so and, where required by law, provide them with appropriate notice regarding our privacy practices. Where consent is legally required, you are responsible for obtaining it.

2. Purposes for Collecting, Using and Disclosing Personal Information

We may collect, use, and disclose candidate personal information to:

• evaluate your qualifications, skills, and experience;
• communicate with you regarding recruiting opportunities;
• conduct interviews;
• determine eligibility to work and assist with immigration or work authorization where applicable;
• conduct post-offer background screening and identity verification, where permitted by applicable law;
• prepare and extend employment offers;
• reimburse interview-related expenses;
• comply with legal obligations;
• administer and improve our recruiting process; and
• Everyday Business Purposes (defined below).

“Everyday Business Purposes” means the following purposes:

• Identity and access management, including identity verification and authentication, issuing ID card and badges, system administration and management of access credentials,
• Security, loss prevention, information security and cybersecurity,
• Legal and regulatory compliance: all uses and disclosures of Personal Information that are required by law or for compliance with legally mandated policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection programs, and ethics and compliance hotlines,
• Corporate audit, analysis and consolidated reporting,
• To enforce our contracts and to protect Ping Identity, our workers, our clients and their employees and the public against injury, theft, legal liability, fraud or abuse, to people or property,
• As needed to de-identify the data or create aggregated datasets, such as for consolidating reporting, research or analytics,
• Business continuity and disaster recovery
• To facilitate corporate transactions (e.g., mergers or acquisitions)

Use of AI and Similar Technologies. We may use artificial intelligence or similar technologies to support aspects of our recruiting process, such as assisting recruiters with administrative tasks, summarization, or drafting content. These tools are used to support, and not replace, human review and decision-making, and do not make hiring decisions on our behalf.

Mandatory vs. Voluntary Information. Some information is required for us to employ you, administer payroll/benefits, provide equipment and system access, maintain security, and comply with legal obligations (for example, tax, social benefits, and workplace safety). If you do not provide required information, we may be unable to (i) complete onboarding, (ii) process payroll/benefits, (iii) provide necessary access to systems or facilities, or (iv) maintain your employment where the information is necessary to meet legal or contractual requirements. Other information is optional; where optional, your choice not to provide it will not affect your employment unless the information is necessary for a specific request you make (e.g., a voluntary benefit).

Legal Bases for Processing. Some jurisdictions require us to state our “legal bases” for processing your personal information as described in this Policy (e.g., EU/UK). These legal bases are:

• Contract: We may process your personal information as necessary to perform a contract with you, such as to administer payroll and provide benefits.
• Legal obligation: We may process your personal information to comply with a legal obligation or request, such as to comply with employment and tax regulations.
• Legitimate interest: We may process your personal information for purposes of our or another party’s legitimate interests, such as to maintain the security of our systems and premises, personnel, and property.
• Consent: We may process your personal information consistent with your consent to the extent permitted by applicable law.

3. Categories of Personal Information

This chart describes the categories of personal information that we may collect from candidates in connection with our recruiting functions, along with representative data elements, sources, purposes, and recipients of that information. The examples below are illustrative and may vary depending on your role, location, and applicable law.

If you interview with us, we may collect additional data as needed to facilitate the interview. For example, we collect Audio-visual Information if we conduct interviews using video-conferencing tools. We may collect Financial Information, of needed to reimburse you for expenses, or Health Information if you need an accommodation. In each case, we only use and disclose the information for the purpose for which it was collected and our Everyday Business Purposes.

4. Sensitive Personal Information

We may collect, use, and disclose the following sensitive personal information only as necessary for employment, benefits, security, and legal compliance purposes, or with your consent, and in accordance with applicable law:

• government-issued identifiers for background screening and identity verification;
• demographic information voluntarily provided, where permitted by law, for equal employment opportunity monitoring and legal reporting obligations;
• health information needed to provide accommodations during the recruiting process;
• financial information needed to reimburse interview expenses; and
• biometric information where identity verification is required as part of the recruiting process and permitted by applicable law.

We do not process sensitive personal information for the purpose of inferring characteristics about you. If you receive and accept a conditional offer of employment, we may collect additional information necessary to conduct background screening, identity verification, and employment eligibility verification, where permitted by applicable law.

5. Collection of Personal Information by Third Parties

In most cases, third parties process personal information on our behalf as service providers under contract. In some cases, third parties interact with you directly and process your information subject to their own privacy notices. For example, we may receive personal information from third parties that we hire to identify candidates for us. These recruiters may collect personal information from you directly or from platforms where you have posted your biographic data such as job boards, professional organization or platforms such as LinkedIn.

6. Disclosures to Service Providers, Contractors and Other Entities

We do not sell candidate personal information or share it with third parties for cross-contextual behavioral targeting. We may disclose your personal information to the categories of recipients listed above in the following circumstances:

• Within the Ping Identity corporate group;
• To service providers supporting recruiting, background screening, travel, or recruiting technologies, such as providers of artificial intelligence or similar technologies that support recruiting systems, subject to contractual safeguards;
• Where required by law, including to law enforcement agencies and courts in the countries where we operate; and
• With your consent, such as to background screening providers;
• As reasonably needed to protect your vital interests, such as in the event of a medical emergency or natural disaster;
• To our auditors and advisors, such as in connection with any internal investigations or for legal matters;
• In connection with a corporate transaction, such as a sale or transfer of some or all our business.

7. Your Privacy Choices

Depending on your country or state or residence, you may have certain rights regarding your personal information, which may include:

• The right to be informed about our collection, use and disclosure of your personal information.
• The right to know if we maintain your personal information, and if we do, to access that information (subject to the rights of others) and to request that we provide your information in a portable format.
• The right to ask us to correct your information if it is incomplete or incorrect.
• The right to ask that we delete your personal information.
• The right to object to or request restriction of certain processing activities.

Where we process your personal information based on your consent and not another legal basis, you may withdraw consent to further processing.

Please understand that these rights are subject to exemptions and limitations. For example, we may require documentation to support certain corrections to your information, and we generally cannot restrict or delete personal information in those situations where our retention is required for our internal business purposes or to comply with law.

To exercise your rights, please visit Your Privacy Choices. You can also contact the Ping Identity Privacy Office at privacy@pingidentity.com. We may need to verify your identity before processing your request. In some cases, we may request additional information to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify you. If permitted under applicable law, authorized agents may also initiate a request on your behalf; authorized agents will be required to provide proof of their authorization, and we may also require you to directly verify your identity and the authority of the authorized agent.

We will not retaliate against you for exercising your privacy rights.

California Disclosures

California residents also have the rights to opt-out of the sale of their personal information or sharing of their personal information for cross-contextual behavior advertising, and to limit the secondary use and disclosure of sensitive personal information.

Ping Identity does not “sell” or “share” candidate personal information (as such terms are defined by the California Consumer Privacy Act (CCPA)) and does not use or disclose your sensitive personal information for purposes subject to the right to limit under the CCPA.

Where required by applicable law, Ping Identity will provide additional disclosures regarding the use of automated decision-making technologies and any related rights.

8. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling to make hiring decisions that produce legal or similarly significant effects without appropriate human involvement and safeguards.

Certain recruiting tools may provide analytics, recommendations, summaries, or other decision-support functionality to assist recruiters or hiring managers. These tools are used to support, and not replace, human judgment.

9. Financial Incentives

Ping Identity does not offer financial incentives in exchange for candidate personal information.

10. Information Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, improper use, alteration, destruction or accidental loss. Our service providers and data processors are contractually required to implement appropriate security controls.

We also maintain procedures to respond to data security incidents and will provide notice as required by law.

11. Data Retention

We retain applicant data for as long as reasonably necessary for recruiting, legal, compliance, and operational purposes. Retention periods may vary depending on the type of information, the nature of the relationship, legal obligations, litigation holds, and applicable record retention requirements. Certain systems may also maintain backup or disaster recovery copies for limited periods consistent with business continuity and security practices.

If you become employed by Ping Identity, your recruiting records will become part of your personnel file and will be governed by our Global HR Privacy Notice.

12. International Transfers

Ping Identity is headquartered in the United States. Your personal data may be transferred to, stored at or processed in a location outside the country or state of your employment which may not have equivalent privacy or data protection laws. However, regardless of where your personal data is transferred, we will protect it in accordance with our Global Privacy Statement, this Privacy Notice and applicable law. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect personal information. Please contact the Privacy Office if you would like more information about cross-border transfers or to obtain a copy of any applicable Standard Contractual Clauses.

13. Questions or Complaints

We welcome questions and concerns. You may contact the Ping Identity Privacy Office via email to privacy@pingidentity.com.

If you believe that we have processed your personal information in ways that are not consistent with this Privacy Notice or in violation of law, you may file a complaint with Human Resources, the Privacy Office or the Legal Department. Depending on your country of residence, you may also file a complaint with our company data protection officer (DPO). In some countries, you may also file a complaint directly with the supervisory authority.