Hoxhunt is a security awareness platform developed by Hoxhunt Oy, a Finnish company. It offers adaptive phishing training, which sends simulated phishing messages by email, SMS, phone and Microsoft Teams, together with security awareness training and automated handling of reported email incidents. The platform is delivered as a cloud service and is aimed at organisations that want to measure how employees respond to social-engineering attempts.
Hoxhunt Oy is named as the controller in the privacy policy, with an address in Helsinki, and the group also has entities in Germany, the United Kingdom, the United States and Singapore. The subprocessor list names Google Cloud and MongoDB, which process data by default in the European Economic Area, with the United States as an option. Other group entities may process data depending on the customer's location and chosen services. No separate EU data-residency product is described, so the processing location of a given environment should be confirmed in the contract. For a European organisation, the Finnish seat and the default EEA processing are the main points.