Solutions · By capability

Train your team on the real screens, with none of the real data

A training copy of your organization — your request types, templates, letters and settings, holding only fictional cases — where new coordinators and analysts practise until the work is second nature. Guided tours on the real screens, training paths with due dates, and breach tabletop exercises with an exercise clock, all in your own tenant, with nothing ever sent.

Start Free Trial Request a Demo

Access and privacy offices turn over, and the work does not wait. A new coordinator learns the statute, the request types, the letters and the exemptions on live files — with a real requestor's personal information on the screen and a statutory clock running — usually by shadowing whoever has been there longest. When that person leaves, much of what they knew leaves with them. And the breach plan in the binder is rehearsed, if at all, around a meeting-room table rather than in the system the team would actually use.

Train mode gives every AccessPoint organization a training copy of itself. It carries your real configuration — request types, statuses, templates, letters, languages and settings, copied from your live setup every week by default — and holds only fictional training cases, with invented people, organizations and records. People work in it with their real role, on the real screens, under a band that always says they are training. Letters are simulated; nothing is sent, delivered, paid for or published.

Around it sits the rest of a training program: Get started on My Day and Guide me tours that highlight the real control on the real screen; training cases whose guides tick themselves as the work is done; training paths a lead assigns with due dates; team exercises with roles, injects, debriefs and an exercise clock that can run a breach notification deadline forward; finished DPIA examples to read; and readiness reports that show totals, never a figure about one person.

Sound familiar?

Three moments every access and privacy office recognizes — whether the team is two people or twenty.

The first real request is the training

A new analyst's first file is a live one: a real requestor, real records, a real deadline. The letter goes out on the wrong template, the exemption is cited from memory, and the senior coordinator spends the week checking work instead of doing it.

The test site nobody maintains

There is a training environment, technically — versions behind, with request types nobody uses any more and someone's half-finished test cases. New staff learn from screenshots in a slide deck instead.

The breach plan nobody has rehearsed

The notification deadline is written into the policy. Nobody on the team has ever worked a breach against it in the system, so the first run-through is the real one — late on a Friday, with the clock already running.

What to look for in a training environment for access and privacy teams

Whatever you buy — including if it isn't AccessPoint — these are the capabilities that separate a demo site from training that actually shortens the time to a confident first file.

Your configuration, none of your data Practice should use the request types, templates, letters and exemptions people will really use — refreshed from the live setup — and never real cases, requestors or documents.
Nothing can leave A practice letter must never reach a real person. Look for simulated sending and a hard stop on delivery, payment, publication and connections to real repositories.
Learning on the real screens Guidance that highlights the actual control in the actual product beats a slide deck that is out of date by the next release.
Scenarios with real deadlines Realistic cases built for your legislation — including breaches whose notification clock is already running — and a way to move time forward during a drill.
Assignable, proportionate tracking Leads should be able to assign a path with a due date and see whether it is done — without recording scores, timings or clicks about individual people.
Team drills, not only solo practice A tabletop exercise works when everyone plays their role on one shared case, the lead releases developments as the scenario unfolds, and each person debriefs.

How AccessPoint trains your team

Practice, guidance and team drills in one place — these are the load-bearing pieces.

A training copy of your organization

Your configuration, copied in weekly by default — or monthly, or on demand — holding only fictional cases numbered TR-. Train mode belongs to one browser tab, says so in a band across the top and in the page title, and returns to your real work after 30 minutes without activity.

Get started and Guide me

Get started on My Day lists the first tasks for each person's kind of work and ticks them off as they do the real thing. Guide me highlights the real control on the real screen in at most four short steps — from a record's name into the redaction viewer, all the way to the exemption.

Training cases with a guide

Fictional requests, assessments, breaches, complaints and risks from your packs, each with a guide whose steps tick themselves as the work is done, and a Training library of fictional records to add, review and redact. Uploading your own files is off by default.

Training paths with due dates

Packs provide paths for a new coordinator, analyst, privacy officer, administrator, custodian and breach team member. Leads copy them or build their own, assign them with a due date and a note, and follow a team progress table with CSV export.

Team exercises with an exercise clock

Run a breach tabletop on one shared training case: assign participants to roles, release injects as the scenario unfolds, move the exercise clock forward by hours or to the next deadline, and collect each person's debrief.

Readiness you can report

Training readiness and Exercise activity show completion, overdue assignments, how many people practised, the exercises held and when each scenario was last drilled — totals only, never a figure about one person — plus the median days from first sign-in to first real case.

See it in AccessPoint

Real screens from the product, running in a Microsoft 365 tenant. Click any one to enlarge.

The Training hub with the Train mode card, training cases, team exercises and training paths Click to enlarge
The Training hub. Open train mode, start a training case, follow your own training and lead your team's.
AccessPoint in train mode with the training band and a Guide me tour on My Day Click to enlarge
Train mode. A training copy of your own configuration — nothing is sent — with Guide me tours on the real screens.
The Training cases gallery with scenarios for requests, assessments, audits, incidents and complaints Click to enlarge
Training cases. Fictional cases for every register, each with its own guide.

The structural difference

Practice that lives where the work lives

Training on case-management software often happens somewhere else: a vendor's demo site with someone else's request types, a test installation that drifts out of date, or a slide deck. AccessPoint's training copy lives in your own deployment, in your own Azure database, kept apart from your real work by the same tenant isolation that separates one organization from another. Nothing in it appears in your real lists, reports, search, exports or My Day, and nothing in your real work appears in it. One outbound guard refuses everything that would leave — portal delivery, the reading room, payment requests, repository connectors, Microsoft 365 capture and data import — and letters are generated and filed but never sent.

In your own tenant The training copy sits in your existing AccessPoint database and storage — nothing new to deploy, and your configuration as of the last copy.
Nothing crosses back Your real reports, search, exports, audit ledger and retention purge log never include a training case.
Included, and on by default Train mode, guided help and team exercises are part of every plan; an administrator decides who may enter.

From a new hire's first day to a team drill

The path for onboarding a new coordinator:

  1. An administrator reviews Settings → Training — who may enter train mode, how often your setup is copied in, guided help and team options — and adds Manage training to the role your training leads hold.
  2. A training lead assigns a path, such as the new coordinator path, with a due date; it appears on the person's My Day.
  3. The new coordinator works through Get started and practises on training cases in train mode, with Guide me on the steps a tour covers.
  4. The lead plans a team exercise — the lost-laptop breach, for example — releases its injects, moves the exercise clock, and reads the debriefs.
  5. Training readiness shows what is complete, what is overdue and which drills are due.

Go deeper

Train mode in the docs Entering train mode, training cases, the Training library and what never leaves it. Team exercises in the docs Plan, start, release injects, move the exercise clock, end and debrief. Privacy breach management The breach workflow your team rehearses in a tabletop — real risk of significant harm and notification deadlines. ATIP case management Canadian federal ATIP end to end — the work a new analyst practises on a training request. FOI request management The full request lifecycle a new coordinator learns, from intake to release. Pricing Flat annual pricing by organization size, with no per-user fees — train everyone.

Train Mode & Guided Training Questions

What is train mode in AccessPoint?
Train mode is a training copy of your own AccessPoint organization where people practise on fictional cases. It has the same configuration as your real work — request types, statuses, templates, letters, languages and settings — copied from your live setup every week by default, and it holds only training cases with invented people, organizations and records. People enter it from the Training button in one browser tab, keep their real role, and always see a band saying they are training. Nothing done there is sent, delivered, paid for or published.

Can anything done in train mode reach a real requestor or appear in our real records?
No. Letters are simulated: they are generated and filed on the training case, but never sent. Portal delivery, the reading room, payment requests, repository connectors, adding records from Microsoft 365 and data import are refused in train mode, and notifications from a training case go only to the people training on it, marked [Training] and never by Teams. Your real reports, search, exports, audit ledger and retention purge log never include training cases, and the training copy never receives your real cases, requestor details, privacy subjects, documents or audit history.

What training scenarios come with AccessPoint?
The Universal baseline pack provides, in all eleven product languages, a privacy impact assessment of an online booking service, a records unit audit, a lost-laptop breach, the same breach as a team exercise for a coordinator, a privacy officer and a senior official, a complaint about a late response, a vendor hosting risk and a program to document in the privacy inventory — plus six training paths. Request scenarios come with jurisdiction packs: the Canada federal pack has an Access to Information Act request with a third-party notice and an extension, and the Ontario MFIPPA pack a municipal request with a fee estimate and a deposit, both in English and French. The training copy also holds finished DPIA examples to read.

How do we run a privacy breach tabletop exercise in AccessPoint?
A training lead plans a team exercise from the Training hub — the scenario, the language, the date, whether to use the exercise clock, the participants and the role each plays — and each participant is invited by notice and e-mail. In train mode the lead starts it, participants join from My Day, and everyone works the same fictional breach in their role while the lead releases injects and moves the exercise clock forward so notification deadlines arrive on cue. Ending the exercise releases the clock, and each participant answers the debrief questions for the lead to read.

What does AccessPoint record about each person's training?
Only whether each item of an assigned path is done and the date — no scores, timings or clicks. Progress is kept for 90 days by default (configurable from 30 to 365), longer while an open assignment still needs it, and removed when the person leaves your organization. An administrator can limit training leads to seeing only whether a path was assigned and finished. The Training readiness and Exercise activity reports show totals only, never a figure about one person, and name an exercise's lead but never its participants or their debrief answers.

Does train mode need separate infrastructure or cost extra?
No. Train mode is part of every AccessPoint plan and is on by default. The training copy lives in your existing AccessPoint database and storage, kept apart from your real work by AccessPoint's tenant isolation, so there is nothing new to deploy; AI Assist works in train mode and counts toward your organization's monthly AI budget. If your policy requires training on separate infrastructure, you can deploy a second AccessPoint in a test Microsoft 365 tenant of your own, which needs its own licence.

Flat annual pricing, published in full. Every feature in every size — access requests, privacy impact assessments, breach response, complaints, video & audio redaction, the public portal, repository connectors, and AI Assist. No per-user or per-module fees.

  • Under 500 employees$2,990/yr
  • 500–1,999 employees$7,990/yr
  • 2,000–9,999 employees$14,990/yr
  • 10,000+ employees$29,990/yr

See full pricing Build the business case

Let Them Practise Before It Counts.

Try AccessPoint free for 30 days in your own Microsoft 365 tenant — train mode, guided tours and team exercises included.

Start Free Trial Request a Demo