CyberCoach
CyberCoach is the only anonymous and psychologically-safe security training app on the market.
CyberCoach is a chatbot offering employees anonymous 24/7 advice and bite-sized training certification games, directly in Slack and any browser. You can easily configure and automate an entire role-based awareness training program that covers security, safety, privacy and compliance. CyberCoach increases employee psychological safety and motivates employees with a growing library of voluntary training certifications.
CyberCoach trains employees not just how to work safely, but how to cybercoach children, senior citizens and others. Choosing CyberCoach to coach your employees to cybercoach others builds a safer society for us all.
CyberCoach is your opportunity as a responsible business to protect your employees, your customers and society. Join CyberCoach on their mission to make online safety accessible to everyone.
CyberCoach is a chatbot offering employees anonymous 24/7 advice and bite-sized training certification games, directly in Slack and any browser. You can easily configure and automate an entire role-based awareness training program that covers security, safety, privacy and compliance. CyberCoach increases employee psychological safety and motivates employees with a growing library of voluntary training certifications.
CyberCoach trains employees not just how to work safely, but how to cybercoach children, senior citizens and others. Choosing CyberCoach to coach your employees to cybercoach others builds a safer society for us all.
CyberCoach is your opportunity as a responsible business to protect your employees, your customers and society. Join CyberCoach on their mission to make online safety accessible to everyone.
Permissions
CyberCoach will be able to view:
CyberCoach will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Cult Security
Company headquarters location
Finland
Terms of service
Privacy & data governance
Data retention policy
Processing Details. The parties acknowledge and agree that:
i. the subject-matter of the processing is limited to Personal Data within the scope of the GDPR
ii. the duration of the processing will be for the duration of the Customer’s right to use the Offering and until all Personal Data is deleted or returned in accordance with Customer instructions or the terms of this Agreement
iii. the nature and purpose of the processing will be to provide the Offering pursuant to this Agreement;
iv. the types of Personal Data processed by the Offering include those expressly identified in Article 4 of the GDPR; and
v. the categories of data subjects are Customer’s representatives and end users, such as employees, contractors, collaborators, and customers, and other data subjects whose Personal Data is contained within any data made available to Publisher by Customer.
Data archiving and removal policy
Cult Security complies with GDPR compliant data security with addition of Customer will be responsible for responding to any such request including, where necessary, by using the functionality of the Offering. Publisher will assist with Customer’s responses to data subject requests, to the extent Publisher is able to connect the personal data to an individual with Customer’s assistance.
Data storage policy
Publisher will take appropriate security measures that are required by Data Protection Laws and in accordance with good industry practice relating to data security and storage.
Data center location(s)
Netherlands, Ireland
Data hosting details
All CyberCoach related data is cloud hosted in Azure Western Europe region with full GDPR compliance.
Data hosting company
Azure
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
GDPR commitment
Data deletion request procedure
When someone request for Cult Security/CyberCoach to delete, our data privacy team and engineering team starts the data removal process with best effort time frame in compliance with GDPR requirements. Process includes the removal of data in question and communication to customer of process steps.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
humans@cultsecurity.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Third party services used by this app
Payment processor: Stripe
Infrastucture: Azure tools and services
Uses token rotation
no