HIPAA requires ongoing security-awareness training for your workforce. The Training area does two things: delivers built-in annual HIPAA training to your employees by email, and tracks any training completed elsewhere.
Assign the built-in HIPAA Security Awareness and HIPAA Privacy Essentials courses to your employees — no platform accounts needed:
name, email, department columns, or add people one at a time. Re-uploading updates by email address; it never duplicates. **New hires are enrolled automatically**: anyone you add or import is immediately assigned every built-in course they're due for and emailed their invites — no separate assign step. (HR-system integrations get the same behavior by passing auto_assign: true on the API upsert.)Completions are valid for 12 months, and annual renewal is automatic: 30 days before a pass lapses (or as soon as it has lapsed), the employee is re-assigned the course and emailed a fresh invite, due on their renewal date. To exclude someone from a course's annual loop, revoke their auto-created renewal assignment — they'll stay excluded until they next pass it. After a pass lapses without renewal the record shows Expired and the person counts as due for annual retraining. Certificates state the score, the exact content version passed, and the valid-through date.
Assignments & Reporting shows every assignment with its live status — Invited, In progress, Passed, Expired, Overdue, Revoked, or Invite failed (the email bounced; fix the address on the roster and resend). Per-row actions: Resend invite (issues a fresh link), Re-assign (a new assignment for a retake — history is preserved), Revoke, and Certificate.
The Organization Transcript combines delivered-training assignments and manually logged records into one auditor-ready view with CSV export. Completed employees can never be hard-deleted from the roster — deactivate them instead, so completion history survives for audits.
Delivered training feeds your compliance score (the Training dimension counts your whole workforce — platform members and roster employees) and appears as live status on the workforce-training questions inside assessments.
For training completed outside the platform, the sections below track courses and completions manually.
A course has a title, a type (HIPAA Basics, Security Awareness, Privacy Rule, Breach Response, Phishing Prevention, or Other), and an optional renewal interval in days. Mark a course required for all team members so it shows up for everyone in the compliance matrix.
Record a completion by picking the employee, the course, and the completion date (today or earlier), with an optional score and notes. Completions are logged by an admin — there is no self-reporting — and each record keeps who recorded it.
The compliance matrix shows every team member against every course at a glance:
Renewal due-dates are computed from the completion date plus the course's renewal interval, and upcoming renewals also appear on the compliance calendar.
Admins manage the employee roster, assign and revoke delivered training, create courses, and log completions. Everyone can view the matrix, records, and certificates. Auditors are read-only but can open the organization transcript and export it as evidence.