My company requires us to "report" their phishing tests.. I'd be likely to just ignore this if we used SendGrid or whatever it would be.. which would be a "fail" regardless.