While administrators and managers shall be able see on a per-campaign-basis the percentage of tests which failed and trainings which were begun/finished - they must not see the individual results of each users.
The users must not be displayed in clear text, only anonymized/pseudonomized.
Access to this individual information must only be accessible either using 4-eyes-principle authentication for this information or by creating a special administrator role which may see this kind of personally identifiable information.

Can it please be considered for customers to have the ability to upload their own training documents or videos? Or modify the exiting training documents?

Customers might like to add their own training material into the Phish Threat site so it's more in line with their company. Would you please consider this or would we be reluctant to do so as we have some sort of duty to ensure the training is of sufficient quality and that covers the security topic well enough?

Currently, it appears you are only allowed to choose 1 training for a training campaign. For us, it is a requirement to assign multiple videos/training to users. For example, we would like to assign both "Intro to Phishing and Password Overview" to all users in our organization to meet policy requirements. However, it is cumbersome and confusing to users if we assign multiple campaigns. Users then get multiple emails. Please introduce the feature to assign multiple training for one campaign.

I would like to request the ability to save and continue a campaign that I'm creating. I can't always run through the steps from start to finish without interruptions (or need to gather info). In v1 there was no Save and Continue option, but the program saved the campaign automatically.

We would like to be able to let the user know that they have made a mistake by opening the attachment on the attachment campaign but we do not want them to be enrolled in training as it is too Americanised for us and we already have our own cyber security training.

Is there a way to send them the caught page with no training, or send them the caught page and add our own training.

We performed thorough testing during our trial phase of Phish Threat. Now our dashboard and reports are skewed, due to the test campaigns we ran. The ability to delete or clear data, so you can begin fresh would be great.

When testing out campaign functionality it would be useful to be able to remove the Campaign (restricted to Super Admin).

Ability to manually add "reported" phishing email by user

We should be able to remove users from running campaigns as our training campaigns could run for weeks and people can leave the organisation during the campaign.

To access Phish Threat, a user has to be granted Admin role. I would like more granual control over roles and permissions, so i can give the ownership of Phish Threat to someone without giving them access to everything else - Encryption, Endpoint Protection, Email Gateway, etc.

Add ability to add domains.

For example if I registered sophsos.com, I would like to be able to add it to my Phish Threat account and use it for a campaign.

It would be great to have a way to set up automated/scheduled reports to be emailed.

This feature would allow us to easily provide reports to our management team and compliance officers on a consistent schedule without having to tie up an administrators time pulling reports, exporting them and compiling them into email.

I would like the ability to add a group of users to a new campaign from the campaign results screen.

The idea would be to look at the employee data from one campaign and take all of the users that failed and add them to another campaign in one fell swoop. That way we can target users that failed with another campaign soon after.

It would be helpful to have the ability to edit an exisitng campain so that you can rename it, maybe add more users etc.

For some of our clients, we've built training/phish programs that run several months long. For campaigns that have been built but not yet kicked off, it would be really useful for the system to automatically add users to those campaigns (or delete them if the user has left the company), rather than us going in and manually touching every future campaign we've built for the client.

It would be great to integrate Phish Reporting with G Suite Gmail and not only Outlook.