RiskSight gathers information on the volume of sent and opened e-mails, clicked links and submitted credentials. For submitted credentials, only the e-mail addresses are stored and password data is not collected nor visible. Data is hosted in the European Union.