Audit-ready evidence, signed and exportable.
When an auditor asks “prove this person was trained,” a screenshot won’t do. Compliance turns completion history into a signed evidence packet with learner timelines, dispatch context, scores, timestamps, and GDPR-ready privacy workflows that can be reviewed outside the LMS.
Why a completion checkbox isn't evidence.
A “complete” flag in an LMS can be edited, lost in a migration, or disputed. Compliance evidence is different: a packet records exactly what happened, when, and includes a signature so the export can be checked against the generated payload.
Everything an auditor asks for, in one export.
Completion evidence exports
Per-learner, per-course completion records with timestamps, scores, and the originating dispatch — ready to file.
Learning event timeline
The full sequence of a learner’s activity — launches, progress, completion — reconstructed from xAPI statements.
Signed evidence packet
Each export includes an HMAC-SHA256 signature over the packet payload so tampering with the generated file is detectable.
Compliance-friendly formats
JSON packets and CSV rows are structured for customer audit reviews instead of raw database dumps.
Audit logs
Operator and tenant actions and security events are logged, so the chain of custody around the evidence is itself auditable.
Tenant isolation
Evidence is scoped and isolated per workspace — one customer’s records are never visible to another.
Provable, not just stored.
Every evidence export packages completion records, dispatch context, and learner timelines with a signature over the payload. Export sessions, packages, dispatches, or webhook history on demand; audit events capture who touched what.
- HMAC-SHA256 signed evidence packets
- Session / package / dispatch / webhook exports
- Audit events for operator & tenant actions
- CSV exports use shared formula-injection protection
GET /v1/reports/evidence ?course=OSHA-30&from=2026-01-01 ← 200 · signed packet { "records": 312, "signature": { "alg": "HMAC-SHA256", "value": "a3f9…c21b" } }See the LRS it’s built on →
Where the evidence comes from.
Hand auditors proof, not promises.
Get a sandbox key and export your first signed evidence packet.