Training & Competence

The Training & Competence module (/governance/aims-scope → Training tab) tracks role-based AI training courses, per-user assignments, completion evidence, and validity expiry. It implements ISO/IEC 42001:2023 Clause 7.2 and Annex A.4.6, and is available to Enterprise tier when the per-organization ISO 42001 toggle is enabled.

Course catalogue

Each course captures:

Title, provider, duration — sourced internally or from a 3rd-party LMS.
Target audience roles — who should take it (informational).
Required-for roles — who must take it (drives compliance %).
Validity period (days) — used to compute expires_at on completion.
External URL — link to the LMS or course material.

Assignments & evidence

Assignments link a course to a user with a due date and lifecycle status (assigned, in_progress, completed, expired, waived). Users can update their own assignment status; completion auto-stamps completed_at and computes expires_at from the course validity period.

Evidence (certificates, screenshots, attestations) uploads to the private training-evidence storage bucket with org-scoped folder RLS. Download links are generated on demand as signed URLs.

KPI & compliance view

The Training tab shows 5 tiles: total Courses, total Assignments, Completed, Overdue, and Compliance %. The "overdue" tile uses the isAssignmentOverdue helper (any non-terminal status past its due date).

Auditing & access

All actions write immutable entries to the org and Platform Activity Log:

TRAINING_COURSE_CREATED, _UPDATED, _DELETED
TRAINING_ASSIGNMENT_CREATED, _UPDATED, _DELETED
TRAINING_ASSIGNMENT_COMPLETED, TRAINING_EVIDENCE_UPLOADED

Read access is org-wide; admin / approver / reviewer roles can manage; users can self-service update their own assignment status. Audit insert is restricted to the caller's org.