Privacy notice
Who we are
Staging provides security awareness training to organizations. For training records we act as a processor on behalf of each organization, which is the controller.
What we collect
Names, work email addresses, group membership, training progress, scores, certificates, sign-in events and messages people report as suspicious.
Why we use it
To deliver and track training, send reminders, produce certificates and evidence, and keep the service secure. We do not sell data or use it for advertising.
Where it is stored
In the hosting region agreed with each organization. Each organization’s data is kept separate from every other organization’s.
How long we keep it
While the organization uses the service, then for the grace period after it leaves, after which it is deleted. Audit records are kept as the law requires.
Your rights
You can ask your organization to access, correct or delete your data. We help organizations answer these requests.
Contact
Questions about privacy go to your organization’s administrator, or to us through the contact details on this website.