Do you collect sensitive information?

Yes, we do but to the extent of the customer’s requirement. The minimum requirement for a phishing assessment is the official email ids of the users. However, we do not require sharing any other information about the user or the organization.