BambooHR sends all employee emails from an external domain (app.bamboohr.com), triggering external domain alerts that make employees complacent about phishing attempts.

BambooHR's email system uses an external domain that triggers security alerts, training employees to ignore legitimate warnings and creating vulnerability to phishing attacks.