Tailscale PAM Terms
Last Updated: August 25, 2026
These PAM Terms govern access to and use of the Tailscale privileged access management services as further described in our Documentation (“PAM”). By using PAM, you agree to be bound to these PAM Terms. In the event of a conflict between Tailscale’s Terms of Service or Main Service Agreement (as applicable to you) (the “Agreement”) and these PAM Terms, these PAM Terms shall supersede and control.
All capitalized but undefined terms in these PAM Terms have the meanings ascribed to them in the Agreement.
1. Fees & Usage Limits
Fees for PAM, usage limits, and usage based components are described in the applicable Order Form, pricing page, rate card, or other Documentation.
2. PAM Data
PAM enables you to control, facilitate, monitor, and audit access by Permitted Users and End Users to servers, databases, applications, infrastructure, and other resources that you make accessible through PAM.
PAM may collect, host, store, access, or otherwise process information regarding PAM sessions and access activity, including connection metadata, audit logs, commands executed, database queries, API requests, session events, access decisions, and other activity associated with the use of protected resources. (“PAM Activity Data”).
If enabled by you, PAM may also collect and store user session artifacts, including screen and session recordings, transcripts, terminal output, web application activity, and related audit records (“Session Recordings”). You are responsible for determining whether and how to enable monitoring and Session Recordings and for providing any notices and obtaining any consents or other authorizations required by applicable law in connection with monitoring or recording Permitted Users or End Users.
PAM Activity Data and Session Recordings are “PAM Data”.
3. PAM Metrics
PAM collects and generates metrics and analytics regarding use and operation of PAM, including connection counts, authentication events, resource access patterns, session duration, feature utilization, performance data, and security events (“PAM Metrics”).
4. Access Policies and Customer Resources
You are solely responsible for establishing, reviewing, testing, and maintaining your access policies, for determining the access and privileges provided to each Permitted User and End User, and for ensuring that only authorized persons are permitted to access resources through PAM. You acknowledge that incorrect or incomplete configuration of access policies, identity providers, resources, credentials, connectors, or other components may result in unauthorized access to, or an inability to access, your systems or resources.
PAM does not replace your responsibility to maintain appropriate access controls, security measures, backups, recovery procedures, and other safeguards for your systems and resources. Tailscale does not guarantee that unauthorized access, misuse, credential compromise, or other security incidents will be prevented.
5. Credentials and Authentication
PAM may integrate with identity providers and other authentication services and may store certificates, tokens, credentials, or other authentication mechanisms to facilitate access to resources.
You are responsible for configuring and securing your identity providers, accounts, credentials, authentication methods, secrets managers, and resources used with PAM. You will not use PAM to provide any person with access to a resource unless you are authorized to provide that access.
6. AI Insights
PAM may include optional features that use artificial intelligence or machine learning to analyze your PAM Activity Data and Session Recordings and generate summaries, classifications, risk scores, alerts, recommendations, or other information regarding PAM sessions (“AI Insights”). AI Insights are PAM Data.
To provide AI Insights, Tailscale may use artificial intelligence or machine learning models hosted or made available by Amazon Web Services (“AWS”) or other subprocessors identified in accordance with our DPA. By enabling or using AI Insights features, you instruct Tailscale to process PAM Activity Data and Session Recordings using such models to provide AI Insights.
AI Insights may be inaccurate, incomplete, or fail to identify relevant activity and should not be relied upon as the sole basis for security, access-control, employment, disciplinary, or other decisions that could materially affect an individual. You are responsible for evaluating AI Insights and determining whether and how to act on them.
7. Export of PAM Data
PAM may allow you to export, transmit, or make PAM Data available to third-party systems or services, including logging, security information and event management, monitoring, or storage services. Such systems and services are Third-Party Services.
If you configure PAM to send PAM Data to a Third-Party Service, you direct Tailscale to transmit the applicable PAM Data to that Third-Party Service. Your use of the Third-Party Service and its collection, use, storage, and protection of PAM Data are governed by your agreement with the applicable provider. You are solely responsible for your use of Third-Party Services with PAM.
You are responsible for exporting any PAM Data you wish to retain before expiration or termination of your access to PAM. Unless otherwise expressly agreed in writing, Tailscale has no obligation to provide access to PAM Data following expiration or termination.
8. Sensitive Data
Unless we expressly agree in writing, you will not configure or use PAM to submit, collect, record, store, or otherwise process data that contains: government-issued identifiers (e.g., social security numbers, driver’s license numbers, passport numbers); payment card data or bank account numbers; protected health information regulated by HIPAA; precise geolocation data; children’s personal data; or “sensitive personal data” or “special category personal data” as defined by applicable privacy laws.
9. Support and Service Levels
Unless expressly agreed in writing, our SLA (if and as applicable to you) does not apply to PAM.
10. Confidentiality
PAM Data constitutes your Confidential Information under the Agreement.