PRODUCT

Security Awareness Training

Assign compliance-mapped security training to your whole team, track completion automatically, and produce clean audit evidence — no separate SAT tool or per-seat subscription required.

IconIcon

Book a Demo

Book a Demo

Built for startups, not enterprises

Training that runs itself — and holds up under audit

Automated, compliance-mapped, and fully tracked. Security awareness training as it should be — especially for teams running compliance for the first time without a dedicated security hire.

Automated assignment

Security awareness training assigned the day someone joins — without manual setup

Most startups assign security training manually, which means it gets done when someone remembers. ComplyJet assigns training automatically when a new hire is added to your HR system - with reminders until they complete it, and a renewal assigned 12 months later.

  • Training assigned automatically on day one from your HR integration
  • Annual renewal assignments sent without any manual scheduling
  • Completion tracked per person - not just "sent to the team"
Compliance-mapped content

Security awareness training courses that satisfy what your framework requires

Not all security training counts for compliance. Your auditor will ask whether your training covered the topics your framework requires - data handling, phishing awareness, incident reporting, and more. ComplyJet's training library is mapped to SOC 2, ISO 27001, HIPAA, and PCI DSS, so completion evidence holds up under audit scrutiny.

  • Courses mapped to specific framework requirements
  • Content covers phishing, data handling, incident response, and more
  • Mapped to the exact controls your auditor will test
Audit-ready evidence

Prove every employee completed security awareness training — on demand

Your auditor will ask for training completion records by name, date, and course. ComplyJet keeps this record automatically - no spreadsheet to maintain, no export to prepare. Pull a completion report any time and share it directly with your auditor.

  • Per-employee completion records with course, date, and version
  • Full team overview - who's current, who's overdue
  • Export in the exact format your auditor expects
Key capabilities

Everything you need, nothing you don't

Built for startups running their first compliance program - not a training vendor bolt-on.

Automated training assignment
Training assigned automatically at onboarding and annually at renewal - triggered from your HR system, no manual scheduling.
Compliance-mapped course library
Courses covering phishing, data handling, password security, incident reporting, and more - each mapped to the frameworks that require them.
Per-employee completion tracking
Every completion logged by name, course, date, and version. Full team overview always available.
Automated reminders
Non-completers chased automatically until they finish - no manual follow-up required from your team.
Annual renewal management
Annual re-training scheduled and tracked automatically - the most commonly missed compliance deadline at growing startups.
Custom training modules
Add your own training content alongside the built-in library - company-specific security procedures, acceptable use, and more.
Manager visibility
Managers can see their team's completion status - useful for engineering leads who own compliance for their group.
Audit-ready evidence export
Export a complete training completion record - every employee, every course, every date - in the format your auditor expects.
Framework requirements

Why your auditor requires it

These controls are non-negotiable for compliance.

SOC 2
Trust Services Criteria
CC1.4
Demonstrates a commitment to attract, develop, and retain competent individuals — security awareness training is a formal evidence requirement.
CC2.2
Communicates internally the expectations regarding security behavior and acceptable use.
ISO 27001
Annex A Controls
A.6.3
Employees and contractors shall receive appropriate awareness education and training, and regular updates in organizational policies and procedures, relevant to their job function.
HIPAA
Security Rule
§164.308(a)(5)(i)
Security awareness and training: Implement a security awareness and training program for all workforce members.
§164.308(a)(5)(ii)(A)
Security reminders: Periodic security updates for all personnel.
Priced for startups, not enterprises

Included in your plan — not a bolt-on

Flat price per company. No per-seat fees.

Single framework
$5,000/year
SOC 2, ISO 27001, HIPAA, or any single framework. Flat price, no per-seat charges.
Two frameworks
$8,000/year
Run two frameworks simultaneously. Same flat price from 5 to 50 employees.

Price stays the same as you grow from 5 to 50 employees.

See full pricing details →

See training assignment working live
We'll walk you through how training gets assigned from your HR system, how completions are tracked, and what your auditor sees when they ask for evidence — built for teams doing this for the first time. No commitment required.
Book a Demo →
Full platform

Training works best when connected to the rest of your compliance program.

Every feature below is included in your ComplyJet plan — no bolt-ons, no extra modules to configure.

Employee Compliance
Track background checks, training completion, and policy acknowledgements in one place.
Learn more →
Policy Management
AI-drafted policies distributed and acknowledged by your team, all tied to active controls.
Learn more →
Access Reviews
Schedule, run, and document access reviews across your identity systems — automatically.
Learn more →
Compliance Automation
Connect your stack, automate evidence, and monitor controls 24/7 — your entire compliance program on autopilot.
Learn more →
Audit Management
Give auditors a pre-populated workspace. Fewer requests, faster close, no last-minute scramble.
Learn more →
Risk Management
Track threats, map them to controls, and keep your risk register audit-ready at all times.
Learn more →
FAQ

Common questions

What security awareness training courses are available?

ComplyJet's library includes courses on phishing awareness, data handling and classification, password and authentication security, incident reporting, acceptable use, and more. All courses are mapped to the compliance frameworks that require them. Most startups start with the SOC 2 track — the fastest path to satisfying your auditor and unblocking enterprise deals.

How long does security awareness training take?

Most courses are 15-30 minutes. They're designed to be completed in one sitting - short enough that employees don't defer them, long enough to satisfy your framework's training requirements.

Can I use our existing training provider?

Yes. If your team already completes training through a third-party provider, ComplyJet can track completion status and store evidence - even if the training itself happens outside the platform.

How does ComplyJet prove training was completed?

Each completion is logged with the employee's name, the course name and version, and the completion date and time. This record is available as an export in the format your auditor requires - typically a spreadsheet or PDF with every person listed.

What happens if someone doesn't complete their training?

ComplyJet sends automated reminders on a configurable schedule. If someone is still incomplete as your audit approaches, they'll be flagged clearly in the compliance dashboard so you can follow up directly. Most ComplyJet customers are startups where a founder, CTO, or engineering lead owns compliance alongside their main job — the automated chasing means you're not adding another thing to your list.

How is ComplyJet different from Vanta or Drata?

Vanta handles security awareness training through a third-party integration (typically KnowBe4 or similar). Drata does the same. ComplyJet includes its own training module — no additional tool or subscription required. For a 15-person startup, avoiding a separate SAT tool bill while still satisfying your auditor is a real saving. It's part of the same flat fee, not an integration you pay extra to activate.