Due diligence pack
Security & privacy package for your review team
Everything your CISO, privacy officer, or procurement team usually asks for — in one place. We share readiness and safeguards honestly. We do not claim SOC 2 or ISO certificates we do not hold.
What you can expect from a pilot
- You remain controller/custodian of employee personal information.
- No password capture from simulations; dry-run before live send.
- Canada-oriented data residency design; subprocessors listed publicly.
- DPA addendum attaches to your order form (≤72h breach notice target).
- Sample-data demo anytime; Workspace connect only under agreement.
For your security & privacy review
- Security overviewHow we protect employees and tenant data — plain language.
- Privacy PolicyRoles, collection, retention, rights, Canadian privacy framing.
- Terms & pilot termsWebsite, demo, and paid pilot commercial terms.
- SubprocessorsInfrastructure providers + how we notify material changes.
- Customer security FAQShort answers to common RFP and security review questions.
Need a filled questionnaire?
Send your SIG / CAIQ / custom spreadsheet to security@phishguard.ca. We map answers to this package and our control trackers.
Start a conversation