Terms of Service

These terms govern access to Encrisoft websites and services. An order form or written agreement may include additional terms and will control where it expressly conflicts with these terms.

Encrisoft provides organisational security training, phishing simulations, automated follow-up, human-risk insights, reporting, certificates, and associated administration features. Features may change as the service develops.

Users must have authority to accept these terms for themselves or their organisation. Account credentials must be kept secure, and suspected unauthorised access should be reported promptly.

Administrators may configure users, training, simulations, records, and access. Organisations are responsible for administrator instructions and for informing authorised users how workplace data is handled.

The service must not be used unlawfully, to harm or harass others, commit fraud, steal credentials, impersonate people without authority, distribute malicious content, interfere with systems, conduct unlawful monitoring, or carry out phishing or social-engineering activity outside an appropriately authorised security-awareness programme.

Customers must ensure they are authorised to run campaigns, select appropriate recipients and content, comply with employment and communications requirements, and use results responsibly. Encrisoft does not provide legal advice about a customer’s programme.

Encrisoft AI can assist with creating phishing-simulation content. Generated output may vary, be incomplete or be inaccurate and is not professional advice. Customers must review and customise generated content as appropriate before launching a simulation; Encrisoft AI does not launch campaigns or make employment decisions on a customer’s behalf.

Harmful, unlawful, discriminatory, abusive or unauthorised AI use is prohibited and may result in suspension. Availability may depend on plan limits and AI Credits. Responsibilities are shared according to the service, customer instructions and applicable law.

Customers retain responsibility for content and data they submit and grant Encrisoft the rights reasonably necessary to provide, secure, and support the service.

Encrisoft and its licensors retain rights in the service, software, branding, documentation, and platform content except for rights expressly granted in an applicable agreement.

Fees and billing periods are described at purchase or in an order form. Trials and promotions may be time-limited and subject to the terms presented on the Pricing page or during purchase. API-configured campaign availability may change or expire.

Encrisoft works to provide a reliable service but does not promise uninterrupted availability unless an applicable agreement says otherwise. Third-party services remain subject to their providers’ terms.

Where parties exchange confidential information, each should protect it with reasonable care and use it only for the agreed purpose, subject to applicable agreements and law.

Access may be suspended or terminated for material breach, security risk, unlawful use, non-payment where applicable, or as set out in an order form. Relevant data handling obligations continue after termination where required.

Any disclaimers, liability limits, or indemnities must be read with the applicable order form and mandatory law. Nothing in these terms excludes liability that cannot legally be excluded.

The governing law and jurisdiction are specified in the applicable order form or separately agreed contract. A default jurisdiction has not yet been approved for publication.

We may update the service or these terms, with material changes communicated as appropriate. Questions can be submitted through the Encrisoft contact page.