About DiagnoPhish

The DiagnoPhish service is operated by Navixia SA, a Swiss Limited Company specialised in information security. The service is designed to test and educate IT users to security risks and their consequences. DiagnoPhish is entirely web-based. It will send users awareness campaigns, such as phishing simulations, security quizzes or awareness videos. The service is not meant to commit fraud or gather real phishing data.

DiagnoPhish can be used as a self-service tool or, at your request and for a small fee, Navixia can provide a fully managed awareness service adapted to your requirements.

To use DiagnoPhish, you first have to accept its License and Service Terms. You are reading a simplified, summarised version in plain English. There is a link to the full authentic version at the bottom of this page and on the DiagnoPhish website.

Grant of License and intellectual property

Provided you accept the present terms, we grant you a personal DiagnoPhish license which you cannot transfer or resell.

Since we spent a lot of time, effort and knowledge developing DiagnoPhish, it is very important to us that you should only use the service to train employees within your own email domain and for a non-commercial use. Also, you should not copy, reuse, forward, or resell our contents or our interface to third parties, or create derivative content based on our contents.

First time visitors, Test Account, Validation and authorisation

Your first step is to register online and provide the information requested. We will verify your identity and check that your email address matches that of your organisation. Only professional email addresses can be used. Employees subsequently included in an awareness campaign must have an email address that matches the domain used for the registration.

Outlook Plugin

DiagnoPhish provides a free Outlook plugin which you can download and install on your users' workstations. It is available as is. The plugin enables users to report any suspected phishing to an e-mail address in your domain and to report phishing simulations back to DiagnoPhish. The plugin is free of charge for all active users who take part in an awareness campaign within 3 months of being registered on DiagnoPhish, and after that in at least one campaign per year. Otherwise, the plugin is deactivated automatically. We notify you when new updates are available, but you have to perform these updates yourself. In case you have not updated your users' plugins for a long time, and they become too old to talk to DiagnoPhish, we will disable them. We do not provide support for the plugin, but we have prepared a detailed documentation to assist you.

Prices

You can purchase credits on the DiagnoPhish website via your account. We charge 1 credit to send one pseudo-phishing email, 2 credits to send one quiz, 3 credits to send one video. The more credits you buy, the cheaper they get. A pricing simulator is available on the website. Prices are indicated in Swiss Francs, excluding VAT.

Validity of Credits and Accounts

• Credits are valid for 24 months after the purchase date. Unused credits will not be refunded.
• We will cancel your account if it has not been used for 24 months, or if it has breached the license terms. If cancelled, the account and all related data will be fully erased.

Data processing

Your data is stored in Switzerland, on a highly secure server - and it stays there. It is kept on your personal platform for your exclusive use only. We take every possible precaution to ensure that your data is secure. You, on the other hand, are responsible to keep your credentials confidential.

DiagnoPhish is GDPR-compliant and you will find all details about this in the full version of these T&C.

Customer warranties

You confirm that you are more than 16 years old and that you got the necessary authorisation and consent from your company to operate DiagnoPhish.

Inappropriate use

In case our platform is used in a way we consider inappropriate, or if we receive any complaint regarding a phishing test, we reserve the right to disclose the identity of the respective customer to the complainant and to block the incriminated account.

The full version of the T&C is here.