Anagram has completed a SOC 2 Type II audit covering security and confidentiality, for the period December 1, 2025 to February 28, 2026, by independent auditor Dansa D'Arata Soucia LLP.
Separately, our training helps customers meet the security awareness training requirements in HIPAA, PCI DSS, SOC 2 and ISO 27001.
We store the minimum information needed to run our products and keep your business safe. Customer data is encrypted in transit and at rest. We never sell your data.
Smart Phishing writes each simulation from employee details your admins provide through directory sync or a file upload, such as role and department. This data isn't used to train AI models.
Need a DPA?
Found a security issue?
We read every report and will follow up with you. Our security.txt file lists this contact for researchers.
Anything else?
© 2026 Enigma Analytics, Inc.
All rights reserved.