Answers for security, compliance, and operations teams.

What does the platform do?

The platform combines AI-assisted training creation, phishing, chat, and voice simulations, quizzes, risk scoring, compliance mapping, and export-ready reporting in one controlled environment.

General

Is this a real-email or real-chat integration by default?

No. The platform is designed around internal training environments unless an organization deliberately enables a separate integration path later.

General

Can training be generated with AI and then reviewed manually?

Yes. AI-generated modules are created as draft content so administrators can review lessons, pages, flashcards, and mappings before publication.

Training

How are phishing simulations delivered safely?

Simulations are delivered into an internal training mailbox with signed interaction routes, sanitized content handling, and auditable event tracking.

Phishing Simulations

What chat styles can be simulated?

The platform supports controlled Microsoft Teams, Slack-style, WhatsApp-style, Telegram-style, Discord-style, and internal company chat training experiences.

Chat Simulations

Does the platform place real phone calls?

No. The current platform delivers safe recorded voice-message simulations inside the application rather than placing real phone calls.

Voice Simulations

Does the platform guarantee compliance certification?

No. The platform supports compliance programs with framework selection, mapping, evidence, and coverage reporting, but it does not guarantee audit outcomes or certification decisions.

Compliance

Does the platform store real passwords entered during a simulation?

No. Sensitive-input redaction is designed to prevent raw secret-like values from being stored in chat, voice, and similar controlled training workflows.

Employee Privacy

What reports can be exported?

Organizations can prepare reporting around training completion, quizzes, compliance coverage, phishing results, chat results, voice results, certificates, and risk trends.

Reports

How are AI provider credentials protected?

Sensitive AI provider settings are encrypted and are not exposed back in full through the user interface.

Security

Can administrators search the help center and FAQs?

Yes. The public FAQ and help center support search and category filtering so teams can quickly find operational guidance.

Technical Support

Which teams usually manage the platform?

Most organizations use a mix of security, compliance, IT, awareness, and people operations stakeholders, with role-based access separating administrative and employee workflows.

General

Can training be assigned by role or department?

Yes. Training can be assigned to individual employees, departments, job roles, or broader organization groups depending on the workflow.

Training

Do employees resume from where they left off?

Yes. Learning progress is tracked so employees can resume the next incomplete lesson page instead of restarting the module.

Training

Can employees report a suspicious simulated email?

Yes. Employees can report, delete, reply to, or interact with simulated messages, and each action is recorded for training feedback and analytics.

Phishing Simulations

Do simulated attachments contain malware?

No. Attachments are harmless training artifacts and are intentionally designed not to contain live malware or executable payloads.

Phishing Simulations

Can chat scenarios branch based on employee responses?

Yes. Scenarios can branch according to the employee response path so the learning outcome reflects the decisions made during the conversation.

Chat Simulations

Are suspicious links in chat safe?

Yes. Chat links stay inside the controlled training environment and do not forward employees to unsafe external destinations.

Chat Simulations

Are employee voice recordings mandatory?

No. Organizations can offer optional recording workflows, but employees can still respond with text or structured choices.

Voice Simulations

How are voice files protected?

Voice assets are intended for private storage, signed access, redaction-aware transcription workflows, and retention management.

Voice Simulations

Which frameworks can be mapped?

The seeded framework library includes examples such as ISO 27001, SOC 2, HIPAA, PCI DSS, GDPR, NIST CSF, CIS Controls, OWASP, CMMC, and custom company policies.

Compliance

Can one organization select multiple frameworks?

Yes. Organizations can select multiple active frameworks and automatically pull their active controls into the organization-scoped compliance selection set.

Compliance

Can organizations hide detailed risk-scoring thresholds from employees?

Yes. Employee-facing risk views can show general guidance without exposing detailed anti-abuse scoring logic when the organization disables that visibility.

Employee Privacy

Are export downloads public?

No. Exports are intended for private storage and accessed through signed temporary download links.

Reports

Can audit evidence packages include simulation outcomes?

Yes. Audit evidence packaging is designed to include selected frameworks, mappings, training records, simulation summaries, risk snapshots, and export manifests.

Reports

Is tenant isolation enforced?

Yes. Organization scoping is treated as a core application rule across dashboards, records, simulations, exports, and AI-assisted workflows.

Security

Are simulation interaction URLs protected?

Yes. Sensitive simulation actions are designed around signed URLs, validation, throttling, and access checks.

Security

Is there a health-check endpoint for deployments?

Yes. The platform includes a health-check route and operational readiness patterns for queues, scheduler activity, storage, and AI provider monitoring.

Technical Support