Security awareness training and phishing simulation platform with AIDA AI agents for personalized training and templates.

Abnormal AI AI features, pricing and GDPR (October 2026)
Email security with behavioral AI that detects phishing, fraud emails and account takeovers from deviations in normal behavior.
Pricing: Contact for pricing
No prices on the website, pricing by quote (as of September 2026).
What is Abnormal AI?
Abnormal AI protects Microsoft 365 and Google Workspace mailboxes against phishing, invoice fraud and account takeovers. Its behavioral AI learns how people normally communicate and flags messages and logins that do not fit.
The platform covers email security, identity security with account takeover protection and a newer area for securing AI use. It connects through APIs to Microsoft 365, Google Workspace, Okta, AWS and Azure. Abnormal AI, Inc. states it serves around 5,000 organizations, including 30 percent of the Fortune 500.
Abnormal AI AI features and use cases
- Stops socially engineered emailsThe behavioral engine compares each message with the usual communication patterns of sender and recipient. Invoice fraud and phishing without malicious links are caught because the behavior does not fit, which reduces work for the security team.
- Detects compromised accountsAbnormal watches sign-ins and mailbox activity for signs of account takeover. The team learns early when an attacker uses a real employee account.
- Analyzes security data on requestThe AI Data Analyst answers questions about detected threats and trends. Security leads get figures for reports without building queries.
What sets Abnormal AI apart
- Connects by API to Microsoft 365 and Google Workspace instead of rerouting mail flow through a gateway.
- Customers can choose a US or EU (Ireland) subscription location; Azure OpenAI processing runs in France or Sweden for the EU.
Where Abnormal AI is strongest
Abnormal is a US company; the vendor states it is used by 30 percent of the Fortune 500, including CVS Health, PepsiCo and Marriott.
Questions to ask before you buy Abnormal AI
Pricing is by quote. Choose the EU subscription location if your data must stay in Europe and check the subprocessor list, which includes Azure OpenAI. The data protection addendum is signed with the master agreement.
Using Abnormal AI in the EU: GDPR and AI Act
- Data locationMultiple regions, EU region available (according to the vendor). Hosting regions: United States, EU.
- Data processing agreementOn request. Subprocessor list (opens in a new tab).
- EU AI ActCheck whether the AI prepares decisions about people. If not, the high-risk rules usually do not apply. The high-risk obligations apply from December 2, 2027 (Digital Omnibus).
Abnormal AI reviews
No reviews yet. Be the first to share how your team uses it.
Every review shows its verification level. We read each one before it goes live. How we check reviews
Questions about Abnormal AI
Can Abnormal keep data in the EU?
Yes. The subprocessor list names AWS in the United States and Ireland, and customers select their subscription location. Azure OpenAI services run in the US or in France and Sweden.
Which email systems does Abnormal support?
The website names Microsoft 365 and Google Workspace. Further integrations include Okta, AWS and Azure.
Which certifications does Abnormal hold?
The trust page lists SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, FedRAMP Moderate, CSA STAR and Cyber Essentials Plus.
Abnormal AI update historyno updates yet
No changes recorded for Abnormal AI yet.
Changes the vendor made and confirmed user reports, each checked against the vendor's own pages. We review every tool monthly.
Alternatives to Abnormal AI
Tools in the same category (Email security) with the most overlapping markets.
Security platform with self-learning AI that spots anomalies across network, email and cloud and responds automatically.
Security awareness and human risk platform from Helsinki with AI-generated phishing simulations and AI triage of reported emails.
Email security and backup for Microsoft 365 from Hanover with the AI Cyber Assistant for reported emails, misdirected mail and Teams links.



