This article should be your starting point if you use Google Workspace. Several things must be done to allow our simulated phishing emails reach your employees' inboxes (also known as whitelisting or allowlisting). In addition, this will enable your employees to access the learning pages they are supposed to see if they do click on one of these emails.
Following these instructions ensures that the our simulated phishings emails - and only those - can bypass your email filters.
What to know before you start
We recommend starting work on this early. You might have to involve your IT department in the process and technical issues can come up.
There are 2 separate paths you can follow. We recommend the first, using Direct Message Injection (DMI) since this is considerably easier to set up and more flexible. If DMI does not work for you, traditional whitelisting is possible as well. Note that this type of whitelisting cannot be finalized until the phishing templates have been picked.
Step-by-step instructions
You can follow either set of instructions:
Google Workspace DMI instructions Recommended
Google Workspace classic whitelisting