Trust Center

How PhishFoil approaches security, privacy and responsible simulation.

PhishFoil exists to make organisations safer, so we hold our own platform to the same standard we ask of our customers.

Simulations that never collect real credentials

PhishFoil simulations record that a person clicked a simulated link, not anything they type. Simulated landing pages are designed so that real passwords are never captured or stored.

Your data

• Customer data is used only to deliver the service you've asked for.
• Each customer's data is kept separate from other customers'.
• Access inside PhishFoil is limited by role, so people see only what they need.

Requesting security documentation

If your procurement or security team needs details of our controls, hosting or data processing, email sales@thephishfoil.com with the subject "Security documentation" and we'll respond.

Reporting a vulnerability

If you believe you've found a security issue in PhishFoil, please email sales@thephishfoil.com with the subject "Security report". Include steps to reproduce, and please give us a reasonable chance to fix the issue before sharing it publicly. We appreciate responsible disclosure.