
We know it's important.
We understand you put a lot of trust in your vendors. At PhishingBox, we are serious about security. Our business is built on security. As such, we have implemented security and privacy measures to provide a safe and secure application.
To help with your vendor due diligence process, we are including a summary of security and privacy information here. If you need additional information, please contact us directly.

Security is our business.
As a trusted vendor, we understand your need to maintain a secure environment. Our information security program is an ongoing process. We have developed controls and are audited or tested on a regular basis.

SOC Audit
U.S. President Ronald Regan said, “Trust but verify." So, you do not have to take our word for it. An external, third-party audit firm conducts our SOC audit. The SOC report is an independent review from a CPA firm on the controls at a Service Organization relevant to Security, Availability, Processing Integrity, Confidentiality or Privacy. These reports are intended to meet the needs of a broad range of users needing detailed information and assurance about the controls at a service organization.

GDPR
Many of our clients are required to comply with the General Data Protection Regulations (GDPR). Our GDPR preparations have included a comprehensive review of relevant internal processes, procedures, and documentation. Additionally, we have, and continue to actively develop and implement, data protection policies, procedures, controls, and security measures for GDPR compliance.