Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

CIPA Compliance reports

The CIPA Compliance reports help organizations subject to the Children's Internet Protection Act (CIPA) demonstrate the appropriate internet safety policies are in place and actively enforced. These reports help you document blocked access to harmful or inappropriate content, identify shadow IT that may expose users to risky applications, and review sanctioned applications that carry risky classifications. These reports are designed to support audits and compliance reviews in schools, libraries, and other CIPA-regulated environments.

To navigate to these reports, follow these steps:

  • Select Cloud Protection from the application drop-down.
  • Go to Reports > CIPA Compliance.
  • Choose a reports and select the desired time range from the Period drop-down.

Available Reports

Report name Description Purpose
Blocked High-Risk Apps Accessed Lists attempts to access high-risk cloud applications that were blocked by Cloud App Control policy, Advanced URL Filtering policy, or Banned Applications settings.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to verify that restrictions on high-risk applications are being enforced and review the frequency and source of blocked access attempts.
Blocked Non-Business Apps Accessed Lists attempts to access non-business cloud applications that were blocked by Cloud App Control policy, Advanced URL Filtering policy, or Banned Applications settings.

Non-business is an internal app classification that includes categories such as social media, gaming platforms, and entertainment services. 		Use this report to verify that restrictions on personal and non-work related applications are being enforced correctly and identity actors who repeatedly attempt to access them.
Shadow High-Risk Apps Lists requests to shadow applications classified as high-risk.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to identify high-risk applications in use across your organization that have not been reviewed or sanctioned by the IT team.
Shadow Non-Business Apps Lists requests to shadow applications classified as non-business.

Non-business is an internal app classification that includes categories such as social media, gaming platforms, and entertainment services. 		Use this report to identify personal or non-business app usage that have not been reviewed or sanctioned by the IT team.
Top Shadow High-Risk & Non-Business Apps Accessed Lists the most frequently accessed shadow applications that are classified as either high-risk or non-business. Use this report to obtain a consolidated view of risky and non-business shadow app activity and export the results for audit and compliance purposes.
Sanctioned High-Risk Apps Lists approved applications in use that are classified as high-risk.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to identify cases where a sanctioned application may present security concerns, and to determine whether it should be blocked.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2026 Zoho Corporation Pvt. Ltd. All rights reserved.