Years in Business
Projects Delivered
Client Relationships
Countries Served
Toyoda Gosei required a structured approach to cybersecurity awareness that would provide better visibility into how employees respond to unexpected email links. As phishing emails remain a concern for organizations, practical awareness exercises can help identify gaps in employee awareness and guide future security training initiatives.
Nextwebi worked with Toyoda Gosei to implement a controlled phishing simulation email campaign using Microsoft Power Platform technologies. The solution connected automated email distribution with a dedicated landing page and a centralized click-tracking mechanism, allowing the organization to record employee interactions and review campaign activity through structured reports.
The implementation focused on automating repetitive campaign activities while maintaining clear records of recipients, clicked URLs and timestamps. The resulting workflow also established a reusable foundation for conducting future cybersecurity awareness campaigns.
The project involved developing a cybersecurity awareness email campaign with automated click tracking using Microsoft Power Pages, Microsoft Dataverse, Power Automate and Outlook email. The campaign was designed to send emails to a predefined list of employees with a link to a dedicated Power Pages site. When a recipient clicked the link, a tracking workflow recorded the associated recipient information, the clicked URL and the exact click timestamp in Microsoft Dataverse.
The solution maintained campaign recipients and click activity in separate Dataverse tables, making it easier to organize the collected information and review campaign interactions. An Excel export option also allowed the team to download the recorded data for analysis, filtering and reporting. Nextwebi implemented and delivered the campaign for Toyoda Gosei, which was run in September 2026.
· Automate the distribution of cybersecurity awareness campaign emails.
· Record employee interactions with campaign links at an individual recipient level.
· Capture click timestamps and URLs for subsequent review.
· Maintain recipient and click information in structured Dataverse tables.
· Simplify reporting through Excel data exports.
· Establish a reusable workflow for future phishing simulation exercises.
Managing cybersecurity awareness campaigns through manual email distribution and spreadsheets can require considerable effort, particularly when campaign organizers need to maintain recipient lists and track individual interactions. Manual processes can also introduce inconsistencies when collecting and consolidating campaign data.
Toyoda Gosei needed a more structured method for distributing simulation emails and recording employee responses without depending on manual click counting or spreadsheet-based tracking.
The organization needed to identify which recipients clicked a campaign link and determine the exact time of each interaction. Without a consistent tracking mechanism, collecting these details and associating them with individual recipients could become difficult.
Recipient details and click records needed to be maintained in an organized format so the team could review campaign activity and retrieve relevant information for reporting. A centralized data structure was required to connect each recorded interaction with the corresponding campaign and recipient.
The campaign needed to provide information that could be reviewed and shared without requiring every stakeholder to access the underlying data platform. Toyoda Gosei also required a repeatable implementation that could support subsequent campaigns with changes to the recipient list and campaign details rather than requiring the workflow to be rebuilt.
These requirements established the need for an automated solution that combined campaign distribution, click tracking, structured data storage and straightforward reporting.
Nextwebi's scope covered the development of the campaign landing site, the design of the underlying data structure and the implementation of automated workflows for email distribution and click tracking.
Nextwebi configured a private Microsoft Power Pages site named Email Campaign to act as the destination for links included in the campaign emails. The site served as the entry point for the click-tracking process. When an employee accessed the campaign link, the site initiated the tracking workflow so the interaction could be processed and recorded in the backend system.
The landing site was intentionally kept simple because its primary purpose was to support the tracking mechanism rather than provide a complex portal experience.
The solution used Microsoft Dataverse to maintain campaign recipient information and click activity in separate tables.
CampaignRecipients table: This table stored the information required to distribute the campaign and identify individual recipients. Its fields included recipient details, the campaign name, a unique recipient ID and the target URL. The unique ID provided the reference required to associate a recorded click with the appropriate recipient.
CampaignClicks table: This table stored click events generated when recipients accessed the campaign links. The recorded information included the recipient's name, the clicked URL and the ClickedAt timestamp, alongside the standard Created On timestamp. Separating recipient information from click records created a structured foundation for reviewing campaign interactions and preparing reports.
Nextwebi developed a Power Automate flow named Send campaign flow to distribute emails to the predefined recipient list. The flow used a manual trigger so the campaign team could control when the email distribution process started. After initiation, it retrieved the recipient records from the CampaignRecipients table using the List rows action.
An Apply to each step processed the recipient records individually, while the Outlook Send an email (V2) action delivered the campaign email containing the corresponding link. This workflow replaced the need to send each campaign email manually and provided a repeatable method for distributing messages to the selected recipients.
A second Power Automate flow named Campaign Click Tracking handled the recording of email link interactions. The flow was called from the Power Pages site after a recipient clicked the campaign link. It initialized a variable, retrieved matching records from Dataverse and processed the results through an Apply to each step.
The workflow recorded the click details in the CampaignClicks table and returned a response to Power Pages after the request had been handled. This implementation connected the landing site with the backend tracking process, allowing click activity to be captured in a structured format instead of relying on manual recording.
The solution included an option to export recorded click data to Excel so the campaign team could work with the information outside Dataverse. The exported data could be filtered, sorted and shared for reporting purposes. It also provided a basis for preparing summaries and charts without requiring every report recipient to have direct access to the Dataverse environment.
Nextwebi tested the complete campaign journey, covering email distribution, access to the Power Pages site and the recording of click activity in Dataverse. The validation process focused on confirming that the automated workflow connected the relevant components and that the recorded data could be reviewed through the campaign tables.
The implementation connected five primary stages: recipient preparation, email distribution, link interaction, click recording and reporting.
The campaign recipient list was maintained in Microsoft Dataverse through the CampaignRecipients table. Each record contained the details required for campaign distribution, including the campaign name, unique recipient ID and target URL. This data structure provided the reference information required by the email delivery and click-tracking workflows.
The campaign team manually initiated the Send campaign flow when the emails were ready for distribution. Power Automate retrieved the recipient records from Dataverse and processed them through an Apply to each loop. Outlook then sent an email to each recipient with the corresponding campaign link. The manual trigger preserved control over campaign timing while the workflow automated the repeated email delivery tasks.
When a recipient clicked the link in the email, the browser opened the dedicated Email Campaign site hosted on Power Pages. The site acted as the connection point between the recipient's interaction and the backend tracking workflow.
The Campaign Click Tracking flow was triggered from Power Pages and processed the relevant recipient information. The workflow retrieved matching Dataverse records and recorded the click in the CampaignClicks table. Each record included the recipient's name, the clicked URL and the click timestamp, allowing the team to review the recorded interactions. The flow then returned a response to Power Pages to indicate that the request had been handled.
After the campaign ran, the team could review the recorded click activity in Dataverse and export the information to Excel. The exported records could be filtered and sorted to support campaign analysis and reporting. The data also provided a starting point for preparing summaries that could inform future cybersecurity awareness initiatives.
· Microsoft Power Pages: Campaign landing site and tracking-flow initiation.
· Microsoft Dataverse: Structured storage for campaign recipients and click records.
· Microsoft Power Automate: Automated email distribution and click tracking.
· Microsoft Outlook: Delivery of campaign emails.
· Microsoft Excel: Export, filtering and analysis of recorded click data.
The cybersecurity awareness email campaign was implemented and run for Toyoda Gosei in September 2026. The delivered solution established an automated process for email distribution and click tracking, with the recorded data available for review and reporting.
The Send campaign flow provided a repeatable way to distribute campaign emails to the selected recipients. The workflow retrieved recipient information from Dataverse and used Outlook to send the messages, reducing dependence on manual email handling.
The tracking workflow recorded recipient information, the clicked URL and the timestamp associated with each captured click. This gave the campaign team a structured record of employee interactions with the simulation links.
Microsoft Dataverse maintained recipient and click information in dedicated tables. This organization made the collected records easier to retrieve and review while keeping the information associated with the campaign workflow.
The Excel export option provided a practical way to review and share click data. The team could filter and sort records and use the exported information to prepare campaign reports without requiring every stakeholder to access Dataverse directly.
The same Power Pages site, Dataverse tables and Power Automate flows could support future awareness exercises by updating the campaign name and recipient information. This reduced the need to recreate the underlying workflow for each new campaign.
The collected click records established a basis for subsequent analysis and follow-up training. The implementation could be extended with scheduled campaign execution, Power BI dashboards and educational content for recipients who interact with simulated phishing emails.
Nextwebi delivered a Microsoft Power Platform-based cybersecurity awareness solution that connected automated email distribution with recipient-level click tracking and structured reporting for Toyoda Gosei.
By integrating Power Pages, Microsoft Dataverse and Power Automate, the project established a reusable workflow for conducting phishing simulation exercises and reviewing employee interactions. The implementation also created a foundation for future enhancements in campaign scheduling, data visualization and cybersecurity awareness training.
The project demonstrates Nextwebi's capabilities in Microsoft Power Platform development, business process automation and cybersecurity awareness solutions for enterprise environments.
Let's talk about how we can craft a user experience that not only
looks great but drives real growth for your product.!
