Compliance¶
Require e-signatures on completion, set certificate expiry and automatic recertification, revoke certificates, verify them publicly, and review the audit log.
PulseLMS gives you the controls a regulated training program needs: proof that a learner attested to their completion, certificates that expire and prompt renewal, and a tamper-evident record of admin activity.
Completion e-signatures¶
For courses where a learner must formally attest that they completed the training, turn on a required e-signature.
Set it per course, in the authoring editor under Compliance & certification:
- Toggle Require signature on completion on.
With this on, finishing all lessons is not enough; the course stays incomplete until the learner types their name to sign. The typed name and the signing timestamp are stored on the enrollment and appear in the learner's transcript. This gives you a durable attestation record.
Certificate expiry and recertification¶
By default a certificate never expires. To make one time-bound, set a validity window per course.
In the same Compliance & certification panel:
- Tick Certificates expire, then set Certificate valid for (months): any whole number from 1 upwards, with no maximum. Certificates issued for that course now carry an expiry date. Leave the box unticked and they never expire.
A daily sweep then keeps everyone current:
- Expiring soon: holders of a certificate expiring within 30 days get a reminder notification.
- Automatic recertification: when a certificate expires and the source course still defines a validity window and the learner's enrollment was mandatory and completed, PulseLMS resets that enrollment so the learner must retake it, and notifies them that recertification is required.
Recertification only re-assigns mandatory work
Automatic re-assignment fires only for mandatory, completed enrollments whose course still has a validity window. It is idempotent: a reset enrollment is no longer "completed", so it will not be reset again on the next sweep.
Revoking a certificate¶
If a certificate was issued in error or must be withdrawn, an instructor or admin can revoke it. A revoked certificate immediately reads as invalid on its public verification page.
Revocations are written to the audit log with the certificate serial.
Public verification¶
Every certificate carries an unguessable serial and a public verification URL. Anyone (an employer, an auditor) can open that URL without signing in and see whether the certificate is:
- Active: genuine and current.
- Expired: past its validity window.
- Revoked: withdrawn by your organization.
The page shows the recipient name, course title, and issue date, so a third party can confirm a certificate is real.
Audit log¶
The audit log is an immutable, timestamped record of sensitive admin activity in your organization. Review it under People → Audit log (org admins only). Each entry records the actor, the action, the target, and any relevant detail.
Recorded actions include:
| Action | Recorded when |
|---|---|
| Role changes | A member's roles are assigned or revoked |
| Invites | A member is invited or added |
| Deactivate / reactivate | An account is disabled or re-enabled |
| Course and program publishes | Content is published |
| Assignments | A course or program is assigned |
| Nudges | A manager or admin nudges a member |
| Feature-flag and branding changes | Settings are updated |
| Exports and imports | Tenant content is exported or restored |
| Certificate revocations | A certificate is revoked |
| Organization creation and "view as owner" | A platform admin onboards or enters an organization |
The audit log cannot be edited
Entries are append-only; there is no way for anyone, including admins, to alter or delete a recorded event. Treat it as your system of record for who did what.