When an auditor asks to see your training records, they’re rarely asking for a list of names. They want to know that the right people did the right training at the right time, that the training meant something, and that the record hasn’t been tidied up after the fact. Whether it’s an internal audit, a client review or an external certification audit, the same qualities make a record easy to defend. This guide is general: requirements differ between industries and jurisdictions, so check the ones that apply to you and get advice if you’re unsure.
What makes a training record trustworthy
It’s complete
A useful record answers the basic questions without anyone filling in gaps from memory:
- Who: a uniquely identified person, not just a first name.
- What: the course, ideally with its code.
- When: enrolment and completion dates.
- Result: passed, completed or not yet.
- Validity: a “valid until” date where the training must be refreshed.
- Evidence: a certificate, an assessment result, or both.
It can’t be quietly changed
Integrity matters more than presentation. If a completion date can be edited without a trace, the record proves very little. Records that are fixed once created are far easier to defend, especially when corrections are made by adding something new, such as a replacement certificate or a revocation with a reason, rather than by overwriting what was there.
The dates tell a consistent story
Completion dates should fall inside the required window. Expiry dates should follow from completion dates, not be typed in separately. And the history should show every cycle: if someone has completed an annual refresher three times, there should be three records, not one date that keeps moving.
It shows understanding, not just attendance
For many kinds of training, “opened the course” isn’t enough. Evidence of assessment, such as the pass mark, the score achieved and the number of attempts, shows the training did its job. Time spent can support that too, as long as it’s measured honestly.
Changes are traceable
Who enrolled this person? Who issued, replaced or revoked that certificate? Did an administrator act on someone’s behalf? A log of administrative actions answers these questions before they’re asked.
Common gaps that cause trouble
These tend to surface when records are pulled together in a hurry:
- Missing people. New starters, contractors or people who changed roles never got the training assigned.
- Expired training nobody noticed. The record exists, but it lapsed months ago.
- Overwritten history. Only the latest completion is kept, so you can’t show someone was current last year.
- No assessment evidence. The course was marked complete, but nothing shows what was checked.
- Certificates that can’t be traced. A PDF made from an editable template is easy to alter and hard to verify.
- Records that left with the person. Former staff were deleted, and their training history went with them.
- Unexplained edits. Dates or results were changed, and nobody can say who changed them or why.
- Scattered sources. Some records in the LMS, some in spreadsheets, some on paper, and none reconciled.
A pre-audit checklist
Work through this a few weeks before the audit, not the night before:
- Confirm the scope: which sites, roles, courses and time period the audit covers.
- List the requirements that apply (legislation, standards, contracts, licence conditions and your own policies) and map each to a course.
- Reconcile your training system against your current staff list, so everyone who should have a record does.
- Run a completion report for each required course and list anyone outstanding, overdue or lapsed.
- Follow up the gaps now, and note an explanation for any you can’t close, such as a new starter still inside their deadline.
- Check that certificates show a “valid until” date wherever the training must be refreshed.
- Spot-check a sample of people from requirement to certificate, including their assessment result.
- Confirm that records for people who have left are still there.
- Review the log of administrative changes for anything you’ll need to explain.
- Export the reports you’ll present, and keep a dated copy of exactly what you gave the auditor.
Reports to prepare
| Report | What it answers | Tip |
|---|---|---|
| Completion by course | Who has finished each required course, and who hasn’t | Filter to the audit’s scope |
| Certificates and validity | Who is current and whose training has lapsed | Include issue and expiry dates |
| Assessment results | What was tested and how people performed | Show pass marks and attempts |
| Staff reconciliation | Whether everyone who needs training is in the system | Compare against your HR list |
| Activity log | Who enrolled, changed or acted on behalf of whom | Cover the whole audit period |
Keep the exports consistent: the same filters, the same date format, and a note of when you ran them.
Certificate verification
A certificate is only as good as the ability to check it. If a client, a site manager or an auditor can confirm that a certificate is genuine, you spend less time answering questions about it. Good certificates carry a unique serial number and a way to check it with the issuer, and they make clear how long the training is valid.
It’s also worth being clear about what a certificate is. A certificate of completion records that someone finished your course. It’s only an accredited qualification if the issuing organisation is authorised to issue one, such as a Registered Training Organisation.
How Acadenix supports an audit
Acadenix is built so records stand up on their own (see certificates and compliance):
- Completions are final. Nobody can reset a completed course. Recertifying is a new enrolment, and earlier completions and certificates stay on record.
- Issued certificates never change. Replacing one issues a new certificate and the old one shows as Superseded; revoking one needs a reason. Every certificate has a status: Valid, Lapsed, Superseded or Revoked.
- Serial numbers and public verification. Anyone can check a certificate by its serial number on the issuing organisation’s verification page, which each organisation can switch off.
- Assessment evidence. Tests have pass marks, attempt limits and time limits, and passing can be the condition for completing the course. Results show each attempt’s score, time spent and outcome. Resetting a failed result keeps the earlier attempts, and a pass can’t be reset.
- Honest time. Time in course only counts while the content is on screen, and it can be printed on certificates and shown in reports.
- Records that stay. People who leave are archived, and an account can only be deleted when nothing refers to it, such as a duplicate. A published course can’t be deleted, and hiding a retired one keeps its completions and certificates.
- Reports and an activity log. Reports cover courses, SCORM, certificates, test questions, users and activity, with saved filters and CSV export on Silver and Gold. The activity log records administrative actions, and anything done while an administrator was impersonating someone reads “person · impersonated by administrator”.
If you’re also setting up recurring training, see automating compliance training and recertification. For how the records themselves are protected, see Security.
Key takeaways
- Auditors want records that are complete, fixed once created, consistently dated and backed by evidence of assessment.
- Keep every recertification as a new record, never an overwrite of the last one.
- Reconcile your training records against your staff list before the audit, not during it.
- Make certificates verifiable, and be clear they aren’t accredited qualifications unless you’re authorised to issue them.
- Check the requirements that apply to your industry; this guide is a starting point, not legal advice.
Want to see how your training records would look in Acadenix? Talk to us about your audit needs, and we’ll show you the reports and certificates with your own courses.
