Legal notice & website terms of use

Last updated: 6 September 2026

This page identifies who publishes afriphish.com and its sub-domains, and sets the terms on which you may use the website and the free tools it hosts. Use of the AfriPhish platform by customer organisations is governed by the terms of service, which prevail over this page for platform use.

Publisher

AfriPhish is a product of:

SilverLock SARL Société à responsabilité limitée (SARL), registered in Morocco

Océan, 10040 Rabat, Morocco

Trade register: RC Rabat 172273

ICE: 003372173000088

Publication director: the legal representative of SilverLock SARL. Contact: sales@afriphish.com (commercial) · privacy@afriphish.com (data protection and legal).

Hosting

The website and the AfriPhish platform are hosted by Google Cloud (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), on Google Cloud infrastructure in the region europe-west1 (St. Ghislain, Belgium). Identity services for the platform are provided by Clerk, Inc. (United States).

Acceptable use of the website

You may browse this site and use its free tools for lawful purposes only. In particular, you must not:

• use the Human Risk Maturity Assessment, the domain spoofing checker or any other tool to probe, disrupt or overload the service, or to check domains you have no legitimate interest in;
• attempt to access data belonging to another person or organisation;
• use content from this site to build or improve phishing attacks against any party — our simulation content exists to defend organisations, and simulated phishing must only ever be run against your own organisation with proper authorisation;
• scrape, resell or republish site content without written permission.

Simulated phishing — a note on authorisation

Phishing simulation is lawful when an organisation tests its own people under an agreement with us. AfriPhish does not provide services for attacking third parties, and we cooperate with authorities in cases of misuse.

Intellectual property

The AfriPhish name, logo, site design, course content, simulation scenarios and reports are the property of SilverLock SARL or its licensors and are protected by Moroccan and international intellectual-property law. Regulation names (POPIA, NDPA and others) and framework names (ISO 27001, NIST CSF, SOC 2, PCI DSS) belong to their respective owners; references to them describe compatibility and coverage, not affiliation or endorsement.

Content and liability

Content on this site — including blog articles about publicly reported security incidents and summaries of regulations — is provided for general information only. It is not legal advice, and despite our care it may contain inaccuracies or become outdated. Incident write-ups are based on public reporting, cited in each article; if you believe something is inaccurate, contact us and we will review it promptly. To the maximum extent permitted by law, SilverLock SARL accepts no liability for decisions taken on the basis of this site's content, nor for temporary unavailability of the site or its tools.

Links

This site may link to third-party sites. We do not control them and are not responsible for their content or their privacy practices.

Personal data and cookies

How we handle personal data is described in our privacy notice; the cookies we set, and how to refuse the optional ones, in our cookie policy.

Governing law

This page and your use of the website are governed by the laws of the Kingdom of Morocco. Any dispute that cannot be settled amicably falls under the jurisdiction of the courts of Rabat.

Changes

We may update this page as the site evolves; the current version is always at this address.