Privacy

NoticeFirst processes learning records, policy acknowledgements and phishing-simulation outcomes on behalf of the organisations that subscribe to it, and personal learning records for individual members.

Simulation results are used for awareness improvement, not discipline: employees see their own private feedback, and administrators see outcomes needed to run the programme. Provider staff do not access employee-level simulation histories in the ordinary course of operations.

Data is stored in the deployment region chosen by the organisation (default: AWS ap-southeast-1, Singapore), encrypted in transit and at rest. Retention follows each organisation's configured schedule, subject to legal holds.

Access, correction and deletion requests can be raised with your organisation's administrator or with Artan Consulting.