Compliance & Safety
23 templates · Updated 2026-08-11
Scenario-first compliance training for workforces: pay-transparency conversations, cloned-CFO fraud calls, HIPAA at the front desk, harassment cases a line manager must act on. Nearly all are built for teams and drilled one employee at a time, ending in decisions and records — not a slideshow with a quiz at the end.
- Fenna — Beat the AI Voice Scam Call
AI voice scam defence for anyone with an ageing parent, drilled 1:1 rather than read about. Four sessions build a callback protocol and a family safe word, and it ends when you hold both through five unseen scenarios.
- Ferdinand — Forklift Certification Test: Load and Stability
Forklift certification test prep for warehouse operators facing an OSHA evaluation, taught 1:1 rather than from a slide deck. Five parts on the stability triangle, load centres and data plates, ending when you pass three mixed 25-question mock papers and read a plate cold.
- Fern — Prompt Injection Defence for Shipping Agents
Prompt injection defence for developers shipping agents on untrusted email, with a tutor that never accepts a system prompt as the fix. Six sessions on blast radius, output handling and approval gates, ending when your agent survives twenty attack strings you did not write.
- Lorenzo — Pay Transparency Law: The Range Conversation
Pay transparency law training for hiring managers, 1:1 role-play with a tutor that marks which sentences rested on objective criteria. Four parts under Directive (EU) 2023/970, ending when managers hold three range conversations without guessing, promising or asking what a candidate earns today.
- Lotta — Workplace Investigation Training: The Grievance Interview
Workplace investigation training that tests the grievance interview itself, 1:1 with a tutor that replays your managers' leading questions verbatim. Four parts from planning the interview to the witness who will not get involved, ending with one report a tribunal could read cold.
- Louisa — AI in Hiring Compliance: Disclosure and Bias Audits
AI in hiring compliance for whoever owns your automated screening tool, taught 1:1 by a tutor sceptical of vendor marketing. Four sessions across the Colorado, New York City and Illinois patchwork, ending when they can name which rule bites and what evidence they hold.
- Monique — Security Awareness Training: The Cloned CFO Call
Security awareness training for finance and payroll clerks who can release a same-day payment and have only ever taken a phishing quiz. Four drills against an impersonator who reuses whatever pressure worked last time, done when staff verify out of band three times running.
- Morgan — HIPAA Training for the Front Desk
HIPAA training at counter speed, decided by front-desk staff while somebody is waiting. Five case sets from the spouse at the desk to the AI scribe running without consent, done when the minimum necessary standard holds across five consecutive calls.
- Moses — Sexual Harassment Training for Line Managers
Sexual harassment training for line managers who signed the policy and have never acted on an ambiguous case. Five cases ending in a written record, because the preventative duty is judged on the steps taken in the first hour after a report.
- Mounir — Spanish for Construction Workers: Toolbox Talks
Spanish for construction workers, built for foremen who currently lean on one bilingual crew member to translate. Six spoken sessions from fall protection to near-miss reports, done when a foreman runs a full toolbox talk and three crew members teach it back.
- Munir — GDPR Training: The Subject Access Request
GDPR training as reps on real subject access requests, marked by a tutor that challenges every redaction. Five files handed to your HR staff with one month on the clock, done when five consecutive responses hold up on their reasoning.
- Murad — Anti Bribery Training: The Gift You Refuse
Anti bribery training that plays the counterpart, not the statute, for sales teams working high-risk markets. Five live negotiations from a facilitation payment to a donation attached to a tender, done when reps refuse correctly and report it five times running.
- Nadira — Shadow AI: Move Your Work Into the Tenant
Shadow AI addressed without moralising, for staff running real work through personal accounts and unapproved extensions. Four sessions rebuilding their busiest tasks inside your sanctioned tenant, done when three live tasks run there and every unofficial tool is declared.
- Naima — AI Acceptable Use Policy: Paste or Not
Your AI acceptable use policy turned into decisions on real documents, for staff who signed it and never read it. Five decision sets from a signed customer contract to a patient note, each paste-or-not call logged with a reason until eight of ten match.
- Nalini — AI Hiring Laws: The Evidence File
AI hiring laws for compliance owners holding a vendor PDF instead of an evidence pack. Four sessions on the bias audit, the candidate notice and the retention clock, done when every tool has all three on file.
- Naomi — Write an AI Policy for Employees
An AI policy for employees your own team cannot drive a truck through, drafted with a tutor that attacks every clause. Five drafting sessions from the approved tool list to the exceptions route, done when each clause survives three awkward scenarios and names an owner.
- Napoleon — WCAG Accessibility Training on Your Own PDFs
WCAG accessibility training run on the assets your team is about to publish, not on principles. Five clinics on headings, alt text, contrast, form labels and captions, judged against WCAG 2.2 AA until three assets pass review unaided.
- Nasir — Design Your EU AI Act AI Literacy Programme
An EU AI Act AI literacy programme designed with a tutor that plays the authority asking for proof. Four sessions tiering recruiters, engineers and warehouse planners, done when every tier has a named owner, a stated competence and evidence you already hold.
- Natasha — Incident Reporting Requirements: The First Four Hours
Incident reporting requirements for on-call engineers, taught 1:1 by an AI tutor that answers only from your approved incident policy. Five timed drills across the DORA classification criteria and the NIS2 twenty-four and seventy-two hour clocks, until the right notification starts inside the first hour.
- Nathaniel — Secure Coding Against the OWASP Top 10
OWASP Top 10 practice for developers last trained on the 2021 list, with an AI tutor that marks against your coding standard. Six sessions on the 2025 categories inside your own Java and TypeScript pull requests, until developers catch five planted flaws unaided.
- Nayeli — Green Claims and the Greenwashing Rules
Greenwashing rules for the marketers and packaging designers who sign off your claims, taught 1:1 against your approved claims policy. Four rounds against your live packaging copy on carbon neutral, recyclable and the other trap words, so a claim gets refused in writing before the print run.
- Nazar — Run Your First Incident Response Tabletop Exercise
An incident response tabletop exercise for security, IT, legal and comms leads, facilitated by an AI tutor, not a consultant. Three ninety-minute scenarios built from your own IR plan, from ransomware to a payroll vendor breach, and every gap found leaves with a named owner.
- Nell — Failure to Prevent Fraud: The Deal Room
Failure to prevent fraud training for account executives and bid writers under quota pressure, run 1:1 from your code of conduct. Four rounds inside the deal, from the number that got rounded up to being pushed by their own manager, leaving a logged decision from every person.
Questions, answered
How do I give a pay range before interview under the new EU rules?
Pay transparency law training for hiring managers, 1:1 role-play with a tutor that marks which sentences rested on objective criteria. Four parts under Directive (EU) 2023/970, ending when managers hold three range conversations without guessing, promising or asking what a candidate earns today. Explore the Lorenzo — Pay Transparency Law: The Range Conversation template.
How do we train staff to spot a deepfake voice call requesting payment?
Security awareness training for finance and payroll clerks who can release a same-day payment and have only ever taken a phishing quiz. Four drills against an impersonator who reuses whatever pressure worked last time, done when staff verify out of band three times running. Explore the Monique — Security Awareness Training: The Cloned CFO Call template.
How do I train front desk staff on the HIPAA calls they face daily?
HIPAA training at counter speed, decided by front-desk staff while somebody is waiting. Five case sets from the spouse at the desk to the AI scribe running without consent, done when the minimum necessary standard holds across five consecutive calls. Explore the Morgan — HIPAA Training for the Front Desk template.
How do I train managers to handle harassment complaints and prove we acted?
Sexual harassment training for line managers who signed the policy and have never acted on an ambiguous case. Five cases ending in a written record, because the preventative duty is judged on the steps taken in the first hour after a report. Explore the Moses — Sexual Harassment Training for Line Managers template.
How do I run a toolbox talk in Spanish and know it landed?
Spanish for construction workers, built for foremen who currently lean on one bilingual crew member to translate. Six spoken sessions from fall protection to near-miss reports, done when a foreman runs a full toolbox talk and three crew members teach it back. Explore the Mounir — Spanish for Construction Workers: Toolbox Talks template.
How do I handle a subject access request containing another employee's data?
GDPR training as reps on real subject access requests, marked by a tutor that challenges every redaction. Five files handed to your HR staff with one month on the clock, done when five consecutive responses hold up on their reasoning. Explore the Munir — GDPR Training: The Subject Access Request template.
How do I train sales reps to refuse gifts and facilitation payments abroad?
Anti bribery training that plays the counterpart, not the statute, for sales teams working high-risk markets. Five live negotiations from a facilitation payment to a donation attached to a tender, done when reps refuse correctly and report it five times running. Explore the Murad — Anti Bribery Training: The Gift You Refuse template.
How do we get staff off personal AI accounts and into our tenant?
Shadow AI addressed without moralising, for staff running real work through personal accounts and unapproved extensions. Four sessions rebuilding their busiest tasks inside your sanctioned tenant, done when three live tasks run there and every unofficial tool is declared. Explore the Nadira — Shadow AI: Move Your Work Into the Tenant template.
Can employees paste customer contracts into an AI tool, and how do we check?
Your AI acceptable use policy turned into decisions on real documents, for staff who signed it and never read it. Five decision sets from a signed customer contract to a patient note, each paste-or-not call logged with a reason until eight of ten match. Explore the Naima — AI Acceptable Use Policy: Paste or Not template.
What do I do if a call sounds exactly like my grandson asking for money?
AI voice scam defence for anyone with an ageing parent, drilled 1:1 rather than read about. Four sessions build a callback protocol and a family safe word, and it ends when you hold both through five unseen scenarios. Explore the Fenna — Beat the AI Voice Scam Call template.
How should I interview a reluctant witness in a workplace grievance investigation?
Workplace investigation training that tests the grievance interview itself, 1:1 with a tutor that replays your managers' leading questions verbatim. Four parts from planning the interview to the witness who will not get involved, ending with one report a tribunal could read cold. Explore the Lotta — Workplace Investigation Training: The Grievance Interview template.
What evidence do we need on file for an AI hiring tool?
AI hiring laws for compliance owners holding a vendor PDF instead of an evidence pack. Four sessions on the bias audit, the candidate notice and the retention clock, done when every tool has all three on file. Explore the Nalini — AI Hiring Laws: The Evidence File template.
How do I write an AI policy for employees that survives real edge cases?
An AI policy for employees your own team cannot drive a truck through, drafted with a tutor that attacks every clause. Five drafting sessions from the approved tool list to the exceptions route, done when each clause survives three awkward scenarios and names an owner. Explore the Naomi — Write an AI Policy for Employees template.
How do content owners fix their own PDFs to meet WCAG 2.2 AA?
WCAG accessibility training run on the assets your team is about to publish, not on principles. Five clinics on headings, alt text, contrast, form labels and captions, judged against WCAG 2.2 AA until three assets pass review unaided. Explore the Napoleon — WCAG Accessibility Training on Your Own PDFs template.
Which staff need AI Act training, and what evidence should we keep?
An EU AI Act AI literacy programme designed with a tutor that plays the authority asking for proof. Four sessions tiering recruiters, engineers and warehouse planners, done when every tier has a named owner, a stated competence and evidence you already hold. Explore the Nasir — Design Your EU AI Act AI Literacy Programme template.
How do I know if an incident is reportable under DORA or NIS2?
Incident reporting requirements for on-call engineers, taught 1:1 by an AI tutor that answers only from your approved incident policy. Five timed drills across the DORA classification criteria and the NIS2 twenty-four and seventy-two hour clocks, until the right notification starts inside the first hour. Explore the Natasha — Incident Reporting Requirements: The First Four Hours template.
What changed in the OWASP Top 10 2025 and how do developers train for it?
OWASP Top 10 practice for developers last trained on the 2021 list, with an AI tutor that marks against your coding standard. Six sessions on the 2025 categories inside your own Java and TypeScript pull requests, until developers catch five planted flaws unaided. Explore the Nathaniel — Secure Coding Against the OWASP Top 10 template.
What do I need to know for my forklift certification test next week?
Forklift certification test prep for warehouse operators facing an OSHA evaluation, taught 1:1 rather than from a slide deck. Five parts on the stability triangle, load centres and data plates, ending when you pass three mixed 25-question mock papers and read a plate cold. Explore the Ferdinand — Forklift Certification Test: Load and Stability template.
How do I stop prompt injection in an agent that reads emails?
Prompt injection defence for developers shipping agents on untrusted email, with a tutor that never accepts a system prompt as the fix. Six sessions on blast radius, output handling and approval gates, ending when your agent survives twenty attack strings you did not write. Explore the Fern — Prompt Injection Defence for Shipping Agents template.
Which AI hiring compliance rules apply to our automated screening tool this year?
AI in hiring compliance for whoever owns your automated screening tool, taught 1:1 by a tutor sceptical of vendor marketing. Four sessions across the Colorado, New York City and Illinois patchwork, ending when they can name which rule bites and what evidence they hold. Explore the Louisa — AI in Hiring Compliance: Disclosure and Bias Audits template.