KnowBe4 Security Awareness
Security awareness training and phishing simulation platform
- Data residency
- EU + US (DPF)
- DPA available
- Yes
- Pricing
- Subscription
- Art. 9 data
- Not suitable
Who this tool is for
Industries
- Companies meeting NIS2 awareness duties
- Teams training staff against phishing
- Healthcare and legal practices
- Organisations needing audit evidence of training
KnowBe4 Security Awareness is one of the largest security awareness training and phishing simulation platforms, with German-language content available. For DACH organisations it is increasingly relevant because it includes a NIS2 compliance module, supporting the awareness obligations many companies now face.
An EU data region is available and a DPA is provided, so the processor relationship can be documented and data kept in the EU when configured. The underlying residency is classified EU/US, so the EU region must be selected and a transfer-risk view applied. It fits service firms, retailers, healthcare and law practices that need to train staff against phishing and evidence their awareness programme.
Pros and cons
Strengths
- EU data region available
- DPA provided for the processor relationship
- Supports NIS2 awareness obligations
- German-language training content
- Large library of phishing simulations
Trade-offs
- Residency is EU/US, EU region must be selected
- Cross-border config needs a transfer assessment
- No free tier
- Phishing simulations process employee data
Where it sits with GDPR
Good fit for
- EU data region keeps training data in the EU
- AV-Vertrag available for processing
- Supports documented NIS2 awareness compliance
Think twice / not suitable for
- EU/US default requires choosing the EU region
- Phishing-simulation data on employees needs a lawful basis and works-council alignment
Data protection note
EU data region available; DPA provided; supports NIS2 awareness obligations.
Frequently asked questions
Is KnowBe4 GDPR compliant?
It can be: an EU data region and a DPA are available, but the EU region must be selected and US residency assessed.
Where is KnowBe4 data stored?
Residency is EU/US; an EU data region is available and must be selected for EU storage.
Does KnowBe4 help with NIS2?
Yes, it includes a NIS2 compliance module supporting awareness obligations.
Does KnowBe4 offer a DPA?
Yes, a DPA is provided for the processor relationship.
Reviews are written and reviewed by Eduardo personally. They describe what a tool does and where it sits with data protection, but they do not constitute legal advice.