Custom Compliance eLearning Built Around Your Policies
For L&D, HR and compliance teams that need training employees finish, understand and can prove they completed.
IKHYA builds custom compliance eLearning around your own policies and the rules that apply to your organization. We turn them into scenario-based courses, microlearning and SCORM or xAPI packages that report completions and scores to your LMS, in 40+ languages and accessible to WCAG 2.1 AA and Section 508 when you need it.
Get a Free Quotation
Scoped proposal delivered within 48 hours
- Since 2010Delivering eLearning
- 500+Projects
- 40+Countries with clients
- 120+Specialists
Why teams choose IKHYA for compliance eLearning
Built around your policies, not a generic script
Your code of conduct, your escalation path and your local rules become the course. Learners practice the decisions they actually face, in your terms.
Scenarios and microlearning, not slide reading
We design branching, scenario-based training and short microlearning modules, so a course is something people work through rather than click past. Read more on compliance training best practices.
Records your LMS can report on
We publish as SCORM 1.2, SCORM 2004, xAPI or HTML5 and test that completions and scores report correctly in your LMS.
One course, many markets and abilities
We translate and localize into 40+ languages (human or AI voiceover) and build accessible eLearning to WCAG 2.1 AA and Section 508.
Not sure which option is right for you?
Tell us the topic, audience and LMS and we will say honestly whether custom makes sense.
What do the rules actually say about compliance training?
The rules summarized below say that staff must be trained, and some say when. None of them sets a course length or a required format. That leaves you room to design training that works, as long as it fits the rule and leaves a record.
The table below summarizes what each regulator or guidance document says about training. It is general information, not legal advice: your legal or compliance team decides which rules apply to you.
| Rule or guidance | What it says about training | What it means for the course |
|---|---|---|
| HIPAA Privacy Rule, 45 CFR 164.530(b) US | A covered entity must train all members of its workforce on its privacy policies and procedures, as necessary and appropriate for their functions. New workforce members are trained within a reasonable period after joining, and staff affected by a material change are trained after the change. The entity must document that training was provided. | Role-based content, an onboarding path, a short update path for policy changes, and completion records. Common in healthcare compliance training. |
| OSHA Hazard Communication, 29 CFR 1910.1200(h) US | Employers must give employees effective information and training on hazardous chemicals in their work area at the time of their initial assignment, and whenever a new chemical hazard is introduced. | Safety compliance training needs a trigger (new job, new hazard), not only a yearly date. |
| OSHA Respiratory Protection, 29 CFR 1910.134(k) US | Training must be comprehensive, understandable and recur annually, and more often if necessary. | "Understandable" points to plain language, translations where learners need them, and checks that the learner followed it. |
| Bank AML programs, 31 CFR 1020.210 US | A bank's anti-money laundering program must include training for appropriate personnel. | Training is one of the required parts of the program, so it needs to be targeted to the people who handle the risk. |
| GDPR, Article 39(1)(b) EU | The data protection officer's tasks include monitoring compliance, including awareness-raising and training of staff involved in processing operations. | Data privacy training should reach the people who actually process personal data. |
| US Department of Justice, Evaluation of Corporate Compliance Programs (updated September 2024) | Prosecutors ask whether training is risk-based, in a form and language suited to the audience, tailored to employees' needs, whether employees can ask questions, and how the company measures whether training worked. | Targeted content, the right languages, a way to ask questions, and measurement beyond "completed". |
OSHA training intervals differ by standard: hazard communication training is tied to new assignments and new hazards, while respiratory protection requires annual retraining. Check the standards that apply to your work. HIPAA requires training and records but, in the text above, does not set a fixed interval. The US Sentencing Guidelines also tell courts to look at whether an organization communicates its standards "by conducting effective training programs" (§8B2.1(b)(4)), which is why effectiveness matters as much as attendance.
What can IKHYA build for you?
We build compliance and ethics training for employees, managers and specialist roles. Topics we have built include:
HR and workplace conduct: harassment prevention, code of conduct, whistleblowing, ethics and compliance training for managers.
Data privacy and information security awareness.
Anti-money laundering, financial crime and other regulatory compliance training for financial services.
Workplace and safety compliance training, including OSHA-related topics.
Healthcare privacy and compliance training.
Which format fits depends on the audience and the rule behind the training.
| Format | Good for | Notes |
|---|---|---|
| Scenario-based and branching courses | Decisions with consequences: escalation, conflicts of interest, reporting concerns | Built from your own policy and workplace |
| Microlearning | Annual refreshers, policy updates, deskless and mobile audiences | Short, one concept at a time |
| Software simulations | Teaching staff to follow a compliant process in your ERP, CRM or HRIS | Show-me, try-me and test-me modes |
| PowerPoint or instructor-led to eLearning | Turning an existing deck or classroom session into an online course | Keeps what already works |
| Course redesign and legacy conversion | Old Flash or older SCORM courses that still need to run | Rebuilt as HTML5 or in Rise |
| Interactive and animated video, gamified learning | Topics learners find dry | Used where it helps, not for decoration |
We build in Articulate Storyline 360, Articulate Rise 360, Adobe Captivate, Lectora, iSpring Suite, dominKnow ONE and Elucidat, and we recommend the tool that fits your content and LMS. If your team will update the course later, we can build in the tool they already use. For a closer look at one option, see Articulate Rise for compliance training.
How do you make compliance eLearning that works, and prove it?
Passing a quiz proves a learner could answer it. It does not prove behavior changed. The DOJ guidance above asks the same question: how do you know the training made a difference?
We design with five habits. For the full list, see our guide to compliance training best practices.
- 01
Start from the risk, not the policy document.
Find the few decisions where people go wrong, and build the scenarios there.
- 02
Use your own escalation path.
The learner practices the exact steps they would take, with the real names of your teams and systems.
- 03
Keep it short and role-based.
Give each role the content it needs. Managers and frontline staff rarely need the same course.
- 04
Write assessment questions that ask for a decision, not a recalled sentence.
- 05
Plan the evidence before you build.
Decide what the course must report: dates, scores, version, language, role.
| What an auditor may ask | What the course can supply | Format needed |
|---|---|---|
| Who was trained, and when? | Completion status and date per learner | SCORM or xAPI report in your LMS |
| Did they understand it? | Assessment scores and attempts | SCORM or xAPI with scored questions |
| Which version did they take? | Course version tied to the record | Version control agreed in the brief |
| Did it reach every language group? | Records per language version | Localized packages |
| Did behavior change? | Incident, query or audit trends before and after | Data from your own systems, linked to the course |
Kirkpatrick model. For the last row we use the Kirkpatrick model, which looks at four levels: reaction, learning, behavior and results.
xAPI. Where you want learning data beyond the LMS, xAPI records learning activity as statements stored in a Learning Record Store (LRS), and it can track learning outside an LMS.
How does a compliance eLearning project work with IKHYA?
- 01
Scope
We agree audience, topics, rules, languages, tool and LMS.
IKHYA and you - 02
Instructional design
We write the learning objectives and a storyboard that maps every screen, scenario and question to them. You approve it before the build starts.
IKHYA drafts, you review - 03
Review of content
Your SMEs and compliance team confirm that every statement of policy and law is correct.
You, with IKHYA collecting feedback - 04
Build and review
We develop the course in the agreed tool with your branding, and add voiceover and translations if needed. Two review rounds are included.
IKHYA builds, you review - 05
QA and LMS test
We test function, accessibility, language and LMS reporting in your LMS before launch.
IKHYA - 06
Handover and support
You receive the final package and the editable source files, and we fix any issues free of charge for 90 days after launch.
IKHYA
What affects the cost of custom compliance training?
We quote each project and do not publish rates. What changes the price:
What do we need from you, and what do we prepare?
You send us You
- The policy, regulation or procedure the training is based on
- The target audience, roles and their numbers
- A named SME or compliance contact for reviews
- Brand guidelines and any existing course or deck
- LMS name and version, and any standard you need
- Languages required
We prepare IKHYA
- A scoped proposal and project plan
- A storyboard for your approval
- Scenarios based on your own cases
- The built course in your chosen tool, and the package for your LMS
- Accessibility and LMS checks before delivery
Proof: compliance training that moved the numbers
Financial services
Scenario-based compliance training for 1,200 employees: average score from 61% to 82%
Client: a financial services organization with branches in 6 countries.
- Before
- Annual classroom compliance sessions, which gave different results by branch.
- What we built
- 6 SCORM modules: AML basics, KYC, sanctions screening, suspicious-activity escalation, data protection and the code of conduct
- Branching scenarios based on the client's own escalation policy
- Built in Articulate Storyline 360 in 3 languages, 75 minutes in total
- How measured
- The average of the post-training assessment in the first year against the previous year's classroom test, using the client's LMS reports.
Healthcare
Mobile-first privacy and infection-control training for 4,000 hospital staff
Client: a US regional hospital network with 5 hospitals.
- Before
- A 2-hour annual PDF and slide course that staff on shifts could not finish.
- What we built
- 8 microlearning modules of 6 to 8 minutes in Articulate Rise 360
- Patient-privacy scenarios reviewed by the network's compliance officer
- Built to WCAG 2.1 AA and as SCORM 1.2, in 7 weeks
- How measured
- LMS completion and quiz data, first cycle against the previous year.
"IKHYA built every scenario on our own escalation policy, not a generic one, and in three languages from one master. Scores went up across all our branches, the questions to HR went down, and we no longer pull staff into classrooms three times a year."
Compliance training for your industry
Financial services
AML, KYC and conduct training for regulated firms.
See our financial services eLearning →Healthcare
Privacy and clinical compliance training for shift-based staff.
See our healthcare eLearning solutions →Other industries
Manufacturing and safety, retail, energy, aviation and IT.
Browse eLearning by industry →Frequently asked questions
Compliance eLearning is online training that teaches employees the laws, regulations and internal policies that apply to their work, and records who completed it. It usually runs in an LMS using a standard such as SCORM or xAPI so completions and scores can be reported.
It depends on the rule. Some standards set an interval, such as OSHA respiratory protection, which requires annual retraining. Others, such as the HIPAA Privacy Rule, require training on joining and after material changes. Many organizations also run an annual refresher as policy.
Often, yes, but it depends on the specific rule, so check yours. The DOJ guidance does not forbid online training: it asks companies for the reason behind their choice of online or in-person and how they measure effectiveness.
Track completion, assessment scores and, over time, incidents, HR queries or audit findings. Completion shows who finished; behavior and results show whether it helped.
Yes. We convert PowerPoint and instructor-led material to eLearning, and we redesign older courses, including legacy Flash or old SCORM, into HTML5 or Rise.
Yes. We translate and localize into 40+ languages, with human or AI voiceover, so the same course can run for each country's learners.
We quote each project, because cost depends on length, interactivity, media, languages, tool, review rounds and LMS testing. Send us your brief and we will scope it.
Timing depends on the course length, how interactive it is, the number of languages and how quickly your reviewers respond. We confirm a timeline when we scope your project.
We publish as SCORM 1.2, SCORM 2004, xAPI or HTML5 and test the reporting in your LMS before handover.
Ready to build your compliance training?
Send us a brief, even a rough outline, and we will tell you what we would build and what it would take.
