What the API of a security awareness platform solves, which data flows out to your BI or SIEM, and how to authorize an integration without opening too much.