Privacy Policy

This policy explains how Encrisoft Technologies Ltd handles personal information when people visit our website, contact us, or use Encrisoft services.

Encrisoft provides continuous security training, phishing simulations, automated follow-up, human-risk insights, reporting, and learner records for organisations.

We may receive contact details, account and organisation information, support requests, newsletter preferences, and information submitted through sales or waitlist forms.

When organisations use the platform, records may include assigned training, completion, assessment, simulation interactions, certificates, administrative actions, and related learner identifiers.

Our site may process device, browser, page-view, consent, and interaction information. The Google tag loads with analytics storage denied by default; page-view measurement and analytics storage are enabled only after analytics consent. Zoho SalesIQ loads only when chat-support consent is granted. A necessary consent record stores the choices made in the cookie banner.

Encrisoft AI can help authorised users create phishing-simulation content. The service processes the instructions and contextual details a user supplies for that request and returns generated content for the user to review and customise before launch. Users should avoid including unnecessary personal or sensitive information in those instructions.

Encrisoft AI does not replace the training library or make employment decisions. Risk scoring and other platform records are separate capabilities and are not described here as AI-generated decisions. Customers remain responsible for their simulation campaigns and for reviewing generated content before use.

Model-provider involvement, provider retention, model-training use, processing locations and any applicable transfer arrangements depend on the selected service configuration and provider agreements. Those details require Privacy and Legal confirmation and should be confirmed during procurement.

See the Responsible AI Policy for more detail.

Information is used to provide and secure services, administer accounts, respond to requests, deliver authorised training and simulations, maintain records, improve product experience, communicate service information, and meet legal obligations. Where applicable, processing relies on contract, legitimate interests, consent, or legal obligation.

Encrisoft may use providers for hosting, communications, analytics, chat support, content management, and business operations. Where information is transferred internationally, appropriate contractual or other lawful safeguards are used where required.

Information is retained only as long as necessary for the purpose collected, contractual commitments, security, dispute handling, and applicable legal or operational requirements. Exact periods vary by record type and customer configuration.

Encrisoft applies technical and organisational measures intended to protect information. No internet service can guarantee absolute security, and customers remain responsible for appropriate account administration and authorised use.

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to, or receive copies of personal information, and to withdraw consent. Requests can be made through our contact page. Organisation-managed account requests may need to be directed to the relevant employer or administrator.

Encrisoft services are intended for organisations and are not directed to children acting independently as consumers.

We may update this policy as services and legal requirements change. The current version will be published here. Questions or privacy requests can be submitted through the Encrisoft contact page.