Secure Practice is a Norwegian provider of security awareness and cyber learning, headquartered in Trondheim. Its offering includes simulated phishing, gamified e-learning, MailRisk for email risk, human risk metrics and PrepJam. The services aim to make staff more resilient against social engineering and cybercrime. According to the vendor's trust page, its cloud servers are located in the EU and EEA, in Norway.
Secure Practice AS is based in Trondheim, Norway. Norway is an EEA member, so the GDPR applies to the company. The trust page states that a data protection impact assessment was carried out with input from the Norwegian data protection authority and is available on request, and that the standard data processing agreement applies joint controllership to individual-level profiling data. For a European organisation, this means an EEA-based supplier with hosting in Norway, as the vendor states. The product is not presented as open-source software.