Staff finish training from a link. The auditor gets the register.
Training landed on you with the audit. Assign a SOC 2, ISO 27001, GDPR, or HIPAA deck and get back to work. Staff and contractors finish from one link, with no seat, and you download the register in Vanta's format or hand the auditor the evidence bundle.
Four starter decks
Start with the framework your team uses.
Security awareness training
Covers phishing, credentials, device security, and business continuity.
ISMS awareness
Covers information handling, access controls, device security, and incident reporting.
Staff data-protection training
Covers personal data, access requests, consent, retention, and breach reporting.
Workforce security awareness
Covers patient data, secure access, incident reporting, and workforce responsibilities.
How it works
From deck to completion register.
Pick a deck
Choose SOC 2, ISO 27001, GDPR, or HIPAA. Fill in your company name, your DPO, and policy links. Review the deck before publishing.
Invite everyone
Paste your roster. Staff and contractors open your branded portal with a magic link or Google sign-in. Participants do not need paid seats.
Export the evidence
The register updates as people finish. Download it as CSV for Vanta or as a branded PDF.
Inside the participant portal
One link to the course and its next step.
Participants open your branded portal with a magic link. The portal runs in five languages and shows the courses or checklists assigned to them; built-in deck content is in English.
Take the course, pass the quiz, sign off.
Participants work through the slides, meet the video watch threshold, pass the quiz, and sign the attestation to receive their certificate.
How a course runs
Assigned courses and progress appear on one page.
Maria watches the retention video, then works through the written guidance before the knowledge check.
Participants must pass the quiz to complete the course. Their answers are recorded.
A named certificate, stamped with the exact deck version they completed.
Change a setting and submit the screenshot.
Participants follow steps for macOS, Windows, or Linux, then attach a dated screenshot and device name. Your team accepts the evidence or asks for another capture.
How a checklist runs
Participants choose macOS, Windows, or Linux and see the steps for their operating system.
Attach a screenshot, its capture date, and the device name before confirming the checkpoint.
Assign the course. Track it through completion.
Framework decks built in
SOC 2, ISO 27001, GDPR and HIPAA, written in English and ready to edit and assign.
Portal in five languages
Participants get the portal, emails and sign-off flow in English, German, French, Spanish or Polish. Built-in decks are in English; edit or translate the slides before you assign them.
No seats for participants
Magic link or Google sign-in on a portal branded as your company. Contractors included.
Video progress checks
Participants must reach the video’s watch threshold. Skipping to the end does not count.
Attestation before completion
Participants sign before completing a course. Both events are dated in the record.
Annual recertification
Participants are invited to renew their training each year, with a grace period before it lapses.
PDF certificates
Each certificate names the participant and the deck version they completed, with your branding.
Completion dashboard
See who is due, overdue, or finished. People needing attention appear first.
Completion records
A register you can upload to Vanta.
Export the completion register as a CSV with Vanta’s seven column headers or as a branded PDF. Each completed record preserves the participant’s details, signed attestation, completion date, and deck version. You can retrieve the record for the training they took that year.
- The seven Vanta columns, verbatim
- Append-only completion records
- Deck version stamped on every row
Evidence access and retention
Keep the access log. Set an expiry for the files.
Review each screenshot and accept it or reject it with a note. Every time someone opens evidence or downloads a bundle, the log records who and when. Set a retention period for each program; the default is 395 days. Evidence files are deleted after that period while the access log remains.
Claude · ChatGPT · Gemini
Set up training from your AI assistant.
Run training from your AI assistant
Connect Claude, ChatGPT, or Gemini to create a program, add a deck, write a quiz, invite participants, and check completion status.
What you can ask
Included in every seat. No per-learner fees.
Your Kit subscription includes the decks, participant portal, and evidence exports. Invite staff and contractors without buying seats for them.
Completion records that stay as they were signed.
Completed records cannot be edited or deleted. Participant details are encrypted at rest and hosted in the EU.
Read our trust pageBefore you invite the team.
We already run training in our HR tool. Why move it?
Compare the records you need. You get a CSV in Vanta’s bulk-upload format, with a signed attestation and deck version behind each completion. If your current tool already provides the evidence you need, you may not need to move.
Do contractors need accounts?
No. Participants aren't users and don't take a seat. They get a magic link or sign in with Google, on a portal branded as your company.
Which frameworks are covered?
SOC 2, ISO 27001, GDPR, and HIPAA decks are built in. The decks are written in English. Fill in your company name, DPO contact, and policy links, then edit, add, or translate slides and quiz questions before you assign it.
How does the Vanta export work?
Download the register as a CSV and upload it to Vanta. It uses Vanta’s seven column headers in the required order. You can also export a branded PDF.
What about annual retraining?
Mark a program annual. Each person is re-enrolled when their completion turns a year old, with a grace period before anyone lapses.
What does Kit record about video completion?
Video watch progress is recorded, and participants must reach the watch threshold, pass the quiz, and sign the attestation before completing the course. Skipping to the end does not count as watching. These records show activity; they cannot prove attention.
Where is the data hosted?
On EU infrastructure. Participant details in the evidence trail are encrypted at rest.
Can an AI assistant set this up for me?
Yes. Connect Claude, ChatGPT, or Gemini to create programs, add decks, write quizzes, invite people, and check who has finished.
Assign your first training program.
Pick a deck, invite the team, export the register. Free for 30 days, card required, cancel anytime.
Free for 30 days · card required · cancel anytime
Get started free