Skip to main content

Compliance training & attestation · for healthcare teams

You don’t assign the training.
It already knows who needs what.

LaborGenie trains your workforce on the rules that apply to each person — HIPAA, OSHA, billing, cybersecurity, credentialing — and records every completion so you can prove it.

laborgenie · roster Live
92% resolved
Front desk HIPAA core Assigned
GI / endoscopy HIPAA + OSHA Assigned
Billing / AR HIPAA + RCM Assigned
Neurology HIPAA clinical Assigned
Psychiatry HIPAA — Covered Entity Assigned
Roster · 8 roles · curriculum v1.4 Re-resolves on role change

Product preview — illustrative, from the platform's actual role/track model

68% of US employees had no AI training in the past year 2026 AI-upskilling reporting
6 years attestation retention, matched to 45 CFR §164.530(j)(2) HIPAA Privacy Rule
0 edits possible after a record is signed — not by your admins, not by us append-only by design — including for the service role

What it keeps track of, so you don’t.

Compliance drifts quietly — a hire, a role change, a new curriculum version. Each one silently changes who owes what.

New hires Added to the roster, resolved to a role, assigned on the same pass.
Role changes Move someone from front desk to billing and their obligations change with them.
Content versions When a curriculum version moves, in-flight assignments are re-pinned rather than silently drifting.
The training record Every completion chained to the one before it, snapshotting the exact content it covered.
Credential expirations DEA registrations, state licenses, board certifications — tracked alongside training. 90, 60, and 30-day alerts before anything lapses.

Every completion signs itself into the record.

Who finished it, when, and the exact version of the content they saw — chained to the record before it, so it still proves something a year later.

  • Append-only at the database level — UPDATE and DELETE raise, including for the service role
  • Each record embeds the previous record's hash, so deletion is as detectable as modification
  • Evidence pack plus a standalone verifier
  • Retained six years per 45 CFR §164.530
#1418 M. Okafor · front desk a7f3…9c1
#1419 D. Reyes · billing 3b8e…4d0
#1420 S. Halvorsen · psychiatry c02a…77f

Product preview — illustrative attestation rows, not a real tenant's records.

How it works

Seven stages. One record.

Roster in, resolved assignments out, a signed record at the end. Below is a simulated workforce: click any part of the brain, or any stage under it, to see what LaborGenie does there. Every stage is live in the product today.

Product preview — a simulated workforce, drawn from the platform's actual role/track model. No customer data.

Esc returns to the whole brain · ← → step through the stages · the stage pauses when it scrolls out of view

Training records and credential records — in the same system.

Every person's profile carries two clearly separated records: the training they've completed on the platform, and the external credentials they hold. The separation is deliberate — a self-reported license and a platform-verified training completion are different things, and LaborGenie doesn't blend them.

  • Tracks external credentials — state licenses, DEA registrations, board certifications, CAQH — alongside the platform training record
  • 90, 60, and 30-day expiry alerts to the individual and the admin, plus a monthly digest
  • Document copies stored behind a login-gated route — attached to the person, not to a separate system
  • Kept strictly separate from the attestation chain — a self-reported license is never laundered into a platform-signed record

External credentials are recorded as claims with evidence — never presented as platform-verified, never entering the signed attestation chain.

It becomes your training, not a textbook’s.

Name your Security Official, your incident line, your approved systems once. Every track your staff takes uses them by name — and the exact values are frozen into the attestation at signing.

  • Your details, asked once. Who approves a BAA before a vendor touches PHI. Where staff report a sharps injury. Your compliance hotline. The training names them, so a learner is never told to “contact your administrator.”
  • Your details and your content are kept apart. Billing address and legal name describe the organization and never appear inside a module — so editing them moves no content hash. The values that do appear are versioned like everything else.
  • Training that doesn't exist yet gets built. Ask for a track your team actually needs — it lands in the same role-assignment model, the same quiz gates, the same attestation record. Not a separate system, and not a PDF you have to chase.
  • Compliance and upskilling on one record. The training you owe a regulator and the training that makes someone better at the job produce the same verifiable attestation, on the same roster.
organization profile · step 1 of 5 Your details
The module as written Report the exposure to {{SAFETY_OFFICER}} and call {{OCC_HEALTH}} the same day.
What your staff actually reads Report the exposure to your named Safety Officer and call your occupational-health contact the same day.
Substituted at read time Frozen verbatim into the attestation

Product preview — illustrative, from the platform’s actual organization-profile model.

Studio

Your own policies become your own training video.

Upload the procedures your organization already runs on. Genie drafts a storyboard from them — and from nothing else — and Studio renders it as a narrated video carrying your logo, your colours and your organization's name. The AI that drafts it cannot publish it.

  • Drafted from your documents, not a stock script. Your procedures are the source. The first rule Genie is given is that your documents are data, never instructions; the second is to invent nothing — no citation, regulation number, deadline or penalty that isn't in your material.
  • Shown in full before anything is accepted. Every drafted segment renders whole, and Genie's own notes render above the segments. That is where a gap in your sources, an unsupported claim or an attempted injection gets reported — before an author accepts a word of it.
  • Structurally unable to publish. The generator reads your documents, returns a draft and stops. It has no path to the stored storyboard, and a test in the platform's own suite bans every write verb from that file. A gate that says “the UI asks first” is one refactor from being skipped. This one cannot be.
  • Yours, and gated. The rendered video carries your branding, and it stays login-gated and streamed, never a public file — the same handling as every module video on the platform.
laborgenie · studio · draft Genie · drafting
Your source documents sharps-injury-reporting-sop.md exposure-control-plan.md
Genie’s notes — shown above the draft Both documents cover the same-day reporting step. Neither gives an occupational-health number, so the draft says “occupational health” and leaves the number to you. No penalty figures appear in the material, so none were written.
Drafted segment · shown in full Report the exposure the same day. Report any sharps injury or exposure to the Safety Officer named in your exposure-control plan, then contact occupational health the same day. Don’t wait for the end of the shift.
Nothing is saved until an author adds it The generator has no write path

Product preview — illustrative. The authoring flow only; no rendered video is depicted.

Seven tracks. 55 modules.

Two shelves: the training regulations require, and the training that makes someone better at the job. Five compliance tracks, two vocational tracks — 55 modules in total — all producing the same verifiable attestation. And if what you need isn't here, you can request it.

HIPAA — Business Associate coreBA coreSix core modules plus three role add-ons — technical, customer-facing, front desk & clinical.Available10 modules · certification · renews annually · curriculum v1.4
What’s in it · 6 core · 3 add-ons · final
  1. CoreHIPAA Foundations + Why This Training Exists15 min
  2. CorePHI Handling: Recognize, Use, Share, Store15 min
  3. CoreAccess, Passwords, MFA, Workstation Security15 min
  4. CoreRecognizing and Reporting Incidents; Breach Response15 min
  5. CoreSocial Engineering, Phishing, and Physical Security15 min
  6. CoreSanctions, Your Obligations, Attestation15 min
  7. Add-onRole Add-On A — Technical Staff: Building and Running Systems That Touch PHI45 min
  8. Add-onRole Add-On B — Customer-Facing Staff: Disclosures, Minimum Necessary, and the Voice on the Line30 min
  9. Add-onRole Add-On C — Front-Desk & Clinical Staff: The Desk, the Hallway, and the Chart30 min
  10. FinalHIPAA Core Curriculum — Final Assessment + Attestation of Completion30 min
HIPAA — Covered EntityPatient rights · breach notification · covered-entity obligations.Available6 modules · certification · renews annually · curriculum v1.0
What’s in it · 5 core · final
  1. CoreYou Are a Covered Entity — What That Actually Means20 min
  2. CorePatient Rights and the Rules for Using PHI25 min
  3. CoreWhen Something Goes Wrong: Incidents, Breaches, and Who You Must Tell25 min
  4. CoreAccess, Credentials, and the Shared Workstation25 min
  5. CorePeople at the Door and Voices on the Phone25 min
  6. FinalFinal Assessment and Workforce Attestation — HIPAA for Covered Entities30 min
Cybersecurity Essentialsincludes AI-era social engineeringAccounts & authentication · phishing, BEC & AI-generated attacks · devices · ransomware.Available5 modules · certification · renews annually · curriculum v1.0
What’s in it · 4 core · final
  1. CoreAccounts and Authentication15 min
  2. CorePhishing, BEC, and AI-Era Social Engineering15 min
  3. CoreDevices, Updates, and Safe Computing15 min
  4. CoreIncidents and Ransomware15 min
  5. FinalCybersecurity Essentials — Final Assessment and Attestation20 min
OSHA ClinicalBloodborne pathogens · sharps · PPE & respiratory · hazard communication · emergency action & workplace violence.Available6 modules · certification · renews annually · curriculum v1.1
What’s in it · 5 core · final
  1. CoreBloodborne Pathogens: Exposure, Precautions, and the Exposure Control Plan25 min
  2. CoreSharps Safety and What To Do in the First Ten Minutes After an Exposure20 min
  3. CoreHazard Communication: The Chemicals You Already Work With20 min
  4. CorePPE, Respirators, and Airborne Disease: Why a Mask Is Not a Respirator20 min
  5. CoreEmergencies, Workplace Violence, and the Rights You Actually Have20 min
  6. FinalOSHA Clinical Safety — Final Assessment and Attestation25 min
RCM ComplianceFalse Claims Act · fraud, waste & abuse · Medicare notices.Available3 modules · certification · renews annually · curriculum v1.1
What’s in it · 2 core · final
  1. CoreFalse Claims Act and Fraud, Waste & Abuse Essentials20 min
  2. CoreMedicare Financial Notices and Balance Billing20 min
  3. FinalRevenue Cycle Compliance — Final Assessment and Attestation25 min
Credentialing16 modules — CAQH, primary-source verification, PECOS, payers, state add-ons.Available18 modules · training · one-time · curriculum v1.9Tennessee state add-on still in development — not yet part of the track
What’s in it · 16 core · 1 add-on · final
  1. CoreWhat Credentialing Is — and Why It Gates Every Dollar20 min
  2. CoreProvider Data Fundamentals: NPI, CAQH, Licenses, DEA, Board Certification30 min
  3. CoreThe Centralized Provider Profile25 min
  4. CorePrimary Source Verification and the NCQA Standards Behind It30 min
  5. CoreSanctions, Exclusions, and Continuous Monitoring20 min
  6. CorePayer Enrollment Lifecycle: Commercial, Medicare, and Medicaid30 min
  7. CoreMedicare: PECOS, the 855 Family, and Revalidation30 min
  8. CoreMedicaid: Fifty Programs, One Federal Floor30 min
  9. CoreCommercial Payers: How the Big Carriers Actually Behave25 min
  10. CoreMilitary and Veteran Programs20 min
  11. CoreWorkers' Compensation and Auto Injury20 min
  12. CoreDelegated Credentialing Basics20 min
  13. CoreExpirables and Revalidation: Nothing Is Ever Done20 min
  14. CoreWorking a Credentialing File: Organization, Cadence, Escalation30 min
  15. CoreEthics and Data Handling: You Hold People's Identities20 min
  16. CoreNegotiating Payer Agreements: Rates, Terms, and the Clauses That Cost Money Quietly30 min
  17. Add-onFlorida: Licensure, Medicaid, and the Credentialing Clock25 min
  18. FinalCredentialing Fundamentals — Final Assessment and Attestation60 min
RCM OperationsScheduling through claim submission, rejections, AR and denials.Available7 modules · training · one-time · curriculum v1.1
What’s in it · 6 core · final
  1. CoreThe Revenue Cycle End to End: How a Visit Becomes Money25 min
  2. CorePatient Access: Eligibility, Benefits, and Prior Authorization25 min
  3. CoreCoding Fundamentals for Billers: Enough to Work, Not Enough to Code25 min
  4. CoreThe Claim: Submission, Clearinghouses, and Why Rejection Is Not Denial25 min
  5. CoreRemittance, Posting, and Denials: Reading What the Payer Decided30 min
  6. CoreAR, Patient Balances, and Working the Queue Like a Professional30 min
  7. FinalRevenue Cycle Operations — Final Assessment and Attestation30 min

Module titles and counts are read from the platform’s compiled curriculum (synced 2026-09-08), not typed here. Module content and video stay inside the product, behind a login.

AI training

Available today: AI-era social engineering — spotting AI-generated phishing by behavior rather than grammar, QR phishing, and payroll-diversion fraud. It ships inside Cybersecurity Essentials.

On the roadmap: AI safety in healthcare, and broader AI-usage training for the rest of the business. Neither is a catalog track today — tell us what your team needs and it goes in the queue.

Need something that isn’t here?

Request a track for your staff. We build it into the same assignment model and the same attestation record as everything above — it isn’t a separate system or a PDF you have to chase.

Request a track

Compared fairly

If you’re comparing, compare the record.

Two competitors with different shapes, and the status quo most small clinics actually run on. Each comparison says what the alternative does well before it says anything else.

Against MedTrainer They sell the bundle: learning, credentialing operations and policy management as one purchase, with a large accredited library. We don't out-bundle it. We change what the completion record is. Read the comparison →
Against Traliant They sell the library: cinematic, whole-workforce compliance video for HR. Ours isn't cinema, and we say so. It names your officers, drafts from your procedures, and signs into a record. Read the comparison →
Against a sign-in sheet The most common alternative in a small clinic. A signature says someone was in the room. An attestation says exactly what they read, and proves it to someone who trusts neither of us. What an auditor asks for →

Give it your roster.

See what it resolves, and what the record looks like afterwards.