How We Protect Your Data

Name, work email, department, role, manager, location and preferred language (Arabic or English), synced from your directory to create accounts, target simulations, assign training and group results.

Whether a simulated email was opened, a link clicked, a QR code scanned, data entered or the email reported, plus timestamp, device type and browser. Generated by Whitebait, Graybait and Blackbait, with templates from Dolus AI Studio. Mail logs are deleted after 12 weeks.

Training assignments, completions and quiz scores from Codex, policy acknowledgements with timestamps, and reports of suspicious messages made through the report button or the Teams App.

Risk scores, grades and trends calculated by Odin, behavioral indicators such as which types of lure an employee tends to fall for, and security signals only from the integrations you enable. Used solely to deliver the service to you.

AI agents in Odin choose simulations, assign training and recommend or take follow-up actions. Every action is logged and visible to your administrators. You set the mode: off, supervised with approval, or unsupervised. Higher-stakes actions always need approval.

Administrator activity is recorded in an audit log. Server logs are kept for 12 weeks to 12 months for technical and security purposes. Enterprise single sign-on means Fraus never stores employee passwords.