Third Party Logo Legalities for Mock Phishing Campaigns

Just wondering on everyone's thoughts on legalities of using third party logos in our internal mock phishing campaigns. Legal is saying no, but Proofpoint is saying this shouldn't be an issue and we shouldn't be under risk of indemnification from these companies since after a user fails the mock phishing campaign they are immediately notified this was a mock phishing campaign by the security team.

campaign campaigns companies cybersecurity internal issue legal logo party phishing phishing campaign proofpoint risk third thoughts under