For organisations
Mandatory training your auditor can actually check.
Assign required courses and policies to your people, watch what is outstanding, and issue certificates anyone can verify without an account. Your staff sign in with the credentials they already have.
What is built today
Every item below was verified against the database schema, the row-level security policies and the deployed authorisation checks — not against a feature list.
Single sign-on
OpenID Connect with Microsoft Entra ID, verified per tenant against that tenant’s own signing keys, with the issuer, audience, nonce and tenant id all re-checked after verification. People who have left are refused at sign-in.
Pass marks, where you want them
Set a minimum score on a mandatory assignment and finishing the lessons is no longer enough — the learner has to clear the mark. Off by default, and per assignment, so the same course can be advisory for one team and evidence-bearing for another.
Recurring requirements
Assign a course or a policy as mandatory with a due date and a repeat interval. Cycles roll forward on their own, and only for people who are still employed and still in scope.
Policy acknowledgement
Publish versioned policies and capture who acknowledged which version. The acknowledgement is stored append-only, so the record cannot be edited after the fact.
Completion the learner cannot write
Completion is stamped by the server, not sent by the browser. A member cannot forge one, backdate one, move one onto another lesson, or delete one. This is enforced in the database itself, and each of those attacks is re-run against the live schema to confirm it still fails.
Compliance view
Completion rate for the organisation and a per-person list of what is outstanding. Managers see their own people; the boundary is enforced by row-level security rather than by the page.
Verifiable certificates
Each certificate carries a public link that opens for anyone — a recruiter, an auditor — with no account and nothing to ask us for. An address with no certificate behind it simply does not resolve.
What is not built yet
You would find these in an evaluation anyway. Finding them here first is cheaper for both of us.
- SCIM provisioning. Accounts are created on first sign-in, not pushed from your directory. Removing someone from the directory does not yet deprovision them here.
- Automated reminders. Deadlines are tracked and shown. Nothing emails a chaser or escalates to a manager.
- Department and group targeting. Assignment is per person or organisation-wide. There is no group, site or cost-centre audience yet.
- Private course libraries. The catalogue is shared. A course authored for one organisation is not isolated from the others.
- Automatic pass/fail records. A pass mark can be enforced per assignment, but scores are read from quiz attempts rather than written to a dedicated assessment ledger with attempt history.
- SOC 2 / ISO 27001 / WCAG 2.2. None of these are certified or independently assessed. Accessibility is tested in the build against WCAG 2.1 A and AA.
Start with one requirement
A pilot is usually one mandatory course and one policy, for one team, for one cycle. That is enough to see whether the record it produces is the record you need.