Privacy policy

What we collect

• Your name and work email address, given when the account is created.
• Course assignments, progress, attempts and completion dates.
• Certificates issued to you and their checkable identifiers.
• Sign-in events and administrative actions, kept in an audit trail.
• If your organisation runs phishing simulations, whether a simulated message was opened, clicked, or reported.

Why we hold it

To run the training your organisation has assigned you, to show it can evidence that training, and to keep the platform secure. We do not sell personal data, and we do not use it to advertise to you.

Training and data policy

Content you enter is used to deliver and mark your training. It is not used to train general-purpose machine learning models. Where a course uses automated marking, the result is reviewable by a person at your organisation.

Who can see it

Your organisation's administrators and, where courses are marked by a person, the marker assigned to your work. Data belonging to one organisation is kept separate from every other organisation on the platform. Our staff access it only where needed to support or secure the service.

Phishing simulations

Where these are run, results exist to shape training, not to single anyone out. Interactions are recorded against your account so your organisation can see where support is needed.

How long we keep it

Completion records and certificates are kept for as long as your organisation's account is active, because they are what a certificate check reads. Audit entries are kept to a fixed retention period set by your organisation. Deactivating an account does not by itself erase its training history.

Your rights

You can ask for a copy of the personal data held about you, ask for corrections, or ask for erasure where the law provides for it. Start with your organisation's administrator, who controls the account, or write to us directly using the address below.

Changes to this policy

If we change what we collect or why, we will say so before the change takes effect.

The wider agreement covering your use of Atlas is in the terms of service.