Reports & compliance
Turn programme activity into evidence. Dashboards show you where human risk sits right now; the report catalogue exports the detail your leadership and auditors ask for — branded with your org logo.
Dashboards
The Dashboard and Risk views summarise your programme live: emails sent, open/click/report rates, training completion, and the average risk score per person and department. Use them to spot trends; use reports to hand over proof.
The report catalogue
Open Reports to browse the catalogue. Each report is a focused list you can export:
| Report | Shows |
|---|---|
| All enrolled | Everyone enrolled in a simulation campaign |
| Caught users | People who fell for a simulation |
| Repeat caught | People caught more than once |
| Threat reporters | People who reported a simulated attack |
| Failed to report | People who opened but didn't report |
| Entered credentials | People who submitted credentials |
| Opened attachments | People who opened a tracked attachment |
| Training — all enrolled | Everyone assigned training |
| Incomplete training | People with unfinished courses |
Export formats
Every report downloads as CSV, JSON, PDF, or HTML:
- Open a report and choose Download.
- Pick the format. PDF and HTML render an executive-grade, self-contained document; CSV and JSON are for spreadsheets and pipelines.
- Or choose Email to have the report sent to your inbox.
Two roll-ups cover everything at once:
- CSV bundle — a single
.zipof every report's CSV. - Executive PDF — a combined summary PDF across all sections, ideal for a board pack.
PDF and HTML exports carry your org logo in the header automatically. See Branding.
Compliance mapping
- Training targeting — training modules can be tagged with a country and a regulation. Legal and data-protection courses must name at least one country, so you can prove the right people took the right course for the laws that apply to them.
- Policy attestation — versioned e-signatures give you audit-ready evidence for controls like ISO 27001 (A.5.1) and SOC 2 (CC2.2). See Policies & attestation.
Legal document templates
The platform ships downloadable legal templates you can share with customers and auditors:
- Data Processing Agreement (DPA)
- Terms of Service
- Privacy Policy
Each downloads as a PDF from the legal documents area (GET /api/v1/legal/documents/{doc_key}/download, where doc_key is dpa, terms, or privacy).
These are starting points. The templates are drafts to accelerate your own review — have your legal counsel adapt them before you rely on them.
Next: Roles & access (RBAC).