I think the current functionality of the reporting is not enough - not so informative, not be able to scheduled. One of partners that are about to start SaaS with SMC is trying to extract data from the SMC database directly. But the schema of the DB is not open to public.
If the reporting interface like Sophos Enterprise Console is provided, user can easily　create his own report as he like.