Svenska Book a walkthrough

Solutions · Training

Train everyone.
Prove they understood.

Invite the whole company at no extra cost. Each person takes a short lesson and test in the app or the browser – on phone, tablet or computer – and every pass counts as evidence on your Controls.

The whole companyApp and browserNIS2 · DORA · ISO 27001
Book a walkthroughSee how it runs ↓
Product example

What changes

Everyone trained. Every pass on record.

The whole company, at no extra cost

Invite every employee – from management to the warehouse floor. No licence per person for training, so nobody is left out to save money.

In the app or the browser

On phone, tablet or computer. One question at a time and a few minutes per lesson – easy to finish between two meetings.

Proof where the auditor looks

Every pass counts on the right Control. Awareness and competence are shown apart, per person and per requirement.

Why now

The rules ask for competence, not read receipts.

NIS2 asks management to train, and every organisation to give its staff basic cyber hygiene and training. DORA makes security awareness compulsory for all employees and senior management. ISO 27001 separates awareness from competence and asks whether the training worked. A read receipt shows none of it.

Source: NIS2 (Directive (EU) 2022/2555) articles 20 and 21(2)(g), DORA (Regulation (EU) 2022/2554) article 13(6) and ISO/IEC 27001:2022 clauses 7.2 and 7.3.

How it is usually solved

  • A read receiptShows that someone opened the file, not that they understood it.
  • A separate e-learning toolPriced per person, so not everyone gets it – and cut off from your policies and Controls.
  • Tests written by handTake days to write and go stale when the policy changes.

What good looks like

  • Everyone is invited – at no extra cost.
  • A pass counts as evidence on the right Control.
  • Awareness and competence are shown apart.

Try it

Take a test on an example policy.

Answer three questions on the phone. Each one is built from a paragraph in the policy – and the result lands on the Control as evidence. Pass mark 80 %.

Training · Information security policyExample
Question 1 of 3Must be correctYou clicked a link in an email and now suspect it was phishing. What do you do?

Product example

How it runs in Paragraf

From a policy to proof of understanding.

Step 1 of 5

Luis turns the material into a lesson.

Publish the policy in a Document Hub. Luis reads it and proposes the key points – what each means in practice, with an example and a quote – and the questions that test each one.

Training · Information security policy

  • Key points6
  • Questions14
  • QuotesAll found in the document
  • StatusDraft · you approve
Product example

People who understand the rules – and can show it.

Not a signature under a PDF, but a lesson, a test and proof that counts where the auditor looks.

How Luis helps

  • Answers questions about the lesson – in plain words, with the paragraph the answer comes from.
  • Explains it for the role – what a key point means for sales, HR or IT, with an example.
  • Flags what needs updating – when a policy or a rule changes, you see which lessons and questions are affected.

Lessons, tests and proof work just as well without Luis. He makes them faster to build and easier to understand – and he never scores a test or sees anyone’s answers.

A woman in a camel coat with her phone in her hand, looking up.

LuisIn the lesson

Anna · SalesWhat does key point 3 mean for me?

Customer data stays in the CRM. Never forward it to a private email, not even to work from home.
Information security policy · 4.2

Before you decide

The questions that usually hold teams back.

Changing how work is followed up is a real decision. Here is how we make it a safe one.

Does every employee need a licence?

No. You can invite the whole company to training at no extra cost. Each person uses the app or the browser, on the device they already have.

Where do we start?

With one situation, not the whole organisation. We go through your systems and requirements together, set up the first flow with you, and then your teams build further on their own.

Do we have to change how we work?

No. Start from the contracts, templates and policies you already have. Paragraf takes over the follow-up – who does what, by when, and what proves it.

What happens to our data?

It stays yours. Everything follows your permissions, sensitive data is masked on the server and every change is logged. Ask us where data is stored and how export works – we answer in writing before you decide.

What if it isn't right for us?

Start with a limited first scope and clear acceptance criteria, agreed up front. You evaluate on your own data before you expand.

For the buying group

Everyone in the decision gets an answer.

A decision like this involves many people. This is what each of them can say when they bring it to the others.

  • HR“Training and certificates are tracked per person, with validity – not in a spreadsheet.”
  • Finance“Everyone gets trained, without a licence per employee.”
  • Employees“A few minutes on my phone – not an hour-long course.”
  • Compliance“I can show evidence to the auditor or supervisor whenever they ask.”
  • CISO“It follows our permissions and gives one log for people, systems and AI.”
  • CEO“Management can see that we are in control – without asking around.”
  • General Counsel“Our legal risk goes down, and I can show it.”

Related

Your own processesLuisContracts · Compliance · Processes · FormsThe foundation

Next step

Fewer systems.
More control.

Book a walkthrough of your systems and requirements. We show you the thread from requirement to proof – with your own requirements.

Book a walkthrough Template: your system map on one page →