Privacy & security
Phished keeps your data safe: learn how we do that
Prevention
Security education & awareness training for internal staff members
Automated vulnerability scanning and private bug bounty program
Compliance
Phished is ISO27001 certified
Cloud Infrastructure Security
Network, perimeter and DNS protection by Cloudflare
Customer Data Protection
Encryption in-transit (TLS 1.2, TLS 1.3) and at-rest (AES-256)
Logical tenant separation
Disaster Recovery & Data Backup
Identity & Access Control
Things you'll love
Download our security statement
Read our privacy policy
Read our cookie policy
Download our ISO 27001 certificate
Here is some key information on how we securely store your data.
1. What we're storing
We store only necessary information, as collected by you.
2. How we're storing it
We encrypt your data both at rest and in transit, and our site and storage processes are designed for security (you can learn more on
how we store your data further down this page).
3. Who can access it
We have extensive internal access controls and regulations for the usecure team, who only have access to data under limited conditions.
You are able to restrict admin access to sensitive materials.
4. Our core standards
Our core compliance with the act means that:
We have full awareness of where any of your data is being held & when outside of the EU, ensuring appropriate compliance is in place.
We ensure that only those who require access to your data are able to & we have the highest level of protection against unauthorised access.
We ensure you have the right to view, amend, export or delete any information that we hold on your behalf, including anything held by 3rd party services.
We ensure that consent is given during the sign up process for all that use usecure and allowing you to withdraw at anytime.
What compliance certifications does Phished have?
How does Phished treat user privacy?
How is platform access and authentication secured?
Does Phished perform audits or third party security reviews?
Where is user data stored?
How is the user data processed?
