Enrollment Notification
Enrollment Notification will let any member of your workspace know when they have been enrolled into a course with a message directly to them in your Slack workspace. You can install Enrollment Notification into multiple workspaces to ensure that members receive notifications of their course enrollments.
Permissions
Enrollment Notification will be able to view:
Enrollment Notification will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Phishingbox
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Depending on the country in which you reside, you may have the following data protection rights:
- To access; correct; update; port; delete; restrict; or object to our processing of your Personal Information.
- You can manage your individual account and profile settings within the dashboard provided through the PhishingBox platform, or you may contact us directly by emailing us at privacy@phishingbox.com. You can also manage information about your Targets within the dashboard provided through the PhishingBox platform to assist you with responding to requests to access, correct, update, port or delete information that you receive from your Targets. Note, if any of your Targets wish to exercise any of these rights, they should contact you directly, or contact us as described in the Privacy for Targets section below. You can also contact us at any time to update your own marketing preferences (see Section 5. General Information, C. Your Choices and Opt-Outs at https://www.phishingbox.com/privacy-policy). PhishingBox takes reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete, and up to date.
- The right to complain to a data protection authority about the collection and use of Personal Information. For more information, please Target your local data protection authority. Target details for data protection authorities in the EEA and UK are available here and Switzerland are available here.
- Similarly, if Personal Information is collected or processed on the basis of consent, the data subject can withdraw their consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent. If you receive these requests from Targets, you can segment your lists within the PhishingBox platform to ensure that you only contact Targets who have not opted out.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection law. We may ask you to verify your identity in order to help us respond efficiently to your request. If we receive a request from one of your Targets, we will either direct the Target to reach out to you, or, if appropriate, we may respond directly to their request.
Data archiving and removal policy
For active accounts, we will retain all data within our system unless such data is deleted by Customer. For data that is deleted by Customer, such data may remain on backup or archivable media for some time. For inactive accounts, data may be removed after a period of inactivity.
Data storage policy
Data storage concepts are handled through several different policies as part of our information security program. The Information Classification Policy states that “All non-public information will be stored in a company-controlled facility or a company-approved storage facility. Within the company, non-public information will be secured when not in use. This includes information that is pending destruction.” Backups of data are addressed within our Business Continuity Plan. Principles of handing such data are addressed within Data Protection policy
Data center location(s)
United States, Germany
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
If an existing customer wishes to have his data purged, we will be able to do so on their request.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack App Directory, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2021-09-20
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Onelogin, PingOne, Azure
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
no
Contact for security issues
support@phishingbox.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no