POSH Training LMS in India: Certification Guide (2026)

Why a Certificate Alone No Longer Proves POSH Compliance

For a decade after the Act came into force, the certificate was the compliance artefact. An auditor or District Officer asked whether training had happened; a folder of signed attendance sheets and PDF certificates answered the question. Three changes between 2024 and 2026 broke that model.

First, the SHe-Box portal — relaunched in August 2024 and now carrying over 1,61,000 registered workplaces — turned POSH into a cross-referenced digital record. Second, the Companies (Accounts) Second Amendment Rules, 2025 put POSH disclosure into the Board Report, where a false or unsupported statement creates corporate-law exposure. Third, the Supreme Court's continuing directions following Aureliano Fernandes (orders of December 3, 2024, August 12, 2025, and January 6, 2026) pushed District Officers from passive filing to active inspection. The question changed from "did training happen?" to "show me the evidence behind each certificate."

What reviewers ask now — and what each era's records can answer

"A signed attendance sheet proves a room was occupied. An assessment record proves that a person understood. Only one of those survives cross-examination." — The shorthand used by POSH counsel when explaining evidence standards to HR teams

Where weak certificates actually fail

The failure rarely shows up on filing day. It shows up when a real complaint is in inquiry, and the respondent's counsel asks whether the respondent was ever effectively made aware of the policy, or when an IC's own findings are challenged because the members cannot evidence capacity-building. Improperly supported committees have had inquiries set aside on exactly these procedural grounds, which converts a training shortfall into the collapse of the redressal process itself, with the employer re-exposed on the underlying complaint.

None of this requires heroic technology. It requires the training and certification workflow to live inside a system that records evidence as a by-product of normal operation. How the structural shift from completion-counting to evidence-grade compliance is playing out across regulated training generally is covered in our compliance training LMS analysis. The next section maps the POSH-specific version of that workflow, stage by stage.

The POSH Certification Lifecycle: Six Stages an LMS Has to Run

Strip away vendor language, and a defensible POSH programme is one repeating loop with six stages. Each stage produces a specific piece of evidence; the certificate at the centre is only as strong as the weakest stage around it. Use this as the mental model for everything that follows — the feature checklist in Section 4 and the vendor questions in Section 7 both map back to these stages.

Notice what is absent from the loop: anything manual. Spreadsheets, email chasing, and folder archaeology are precisely the failure points the lifecycle is designed to remove. If you are still deciding whether this workflow belongs on a dedicated platform or your existing corporate system, our primer on what a corporate LMS does sets the baseline. The next section converts the six stages into the ten capabilities to demand from any platform that claims to run them.

10 LMS Capabilities That Make a POSH Certificate Defensible

Generic LMS feature lists won't get you there — most platforms can host a video and email a PDF. These ten capabilities are the ones that decide whether the certificates your platform issues survive the questions in Section 2. Score every shortlisted vendor against them.

1. Scenario-based assessment engine with randomised banks

   A static five-question quiz that every employee shares answers to within a week proves nothing. Look for a question bank of 30+ scenario items per track, randomised per attempt, testing judgement: is this conduct within Section 2(n)? What must a manager do with a verbal disclosure? What does non-retaliation actually prohibit?

2. Configurable pass marks, attempts, and remediation

   A defined pass mark (80% is the common norm), a capped number of attempts, and mandatory remediation content between failed attempts. The configuration itself is evidence — it shows the certificate had a bar to clear.

3. Certificates with unique IDs and third-party verification

   Every certificate should carry a unique identifier that resolves — via QR code or a verification URL — to the issuing record. This is what lets a client auditor, a District Officer, or your own counsel confirm a certificate is genuine without an email chain.

4. Content-version stamping

   POSH content changed materially after the SHe-Box relaunch, the 2025 Companies Act amendment, and successive Supreme Court orders. A certificate must state which version of the content it certifies, so "trained" always means "trained on the current law."

5. Validity windows with automatic expiry

   Certificates need an end date. The platform should mark certificates lapsed at the end of the validity window (12 months as standard practice), surface lapses on the dashboard, and exclude lapsed learners from the "trained" count — because a 2022 certificate offered as 2026 compliance hurts more than it helps.

6. Recertification automation with escalation

   Refresher assignment should fire automatically ahead of expiry, with nudges escalating from learner to manager to HR at configured intervals. The annual cycle is where manual programmes die; automation is what makes "regular intervals" sustainable at scale.

7. Multi-language parity — assessments included

   Many platforms localise the video and leave the assessment in English, which quietly invalidates comprehension evidence for the learners who most need the localisation. Both content and assessment must exist in Hindi and the regional languages your workforce actually uses.

8. Role-based certification tracks

   Employee, people-manager, and IC member tracks with distinct content, distinct assessments, and distinct certificates (Section 5 details the differences). One module certified in three ways is the single most common structural weakness in POSH deployments.

9. Extended-workforce coverage without HRIS records

   The Act's reach extends beyond payroll. The platform needs a clean path to enrol and certify contractors, interns, apprentices, security, housekeeping, and vendor staff — bulk upload, approval-based self-registration, or a vendor-admin portal — with their certificates living in the same audit trail as employees'.

10. One-export evidence packs

    The Annual Return inputs, the SHe-Box field set, and the Board Report numbers should each be a single export from the same data, per location and IC. If producing them requires joining spreadsheets, the platform has outsourced its hardest job back to you.

Where these capabilities live architecturally — classic LMS, LXP, or a combined skills platform — changes by vendor; our LMS vs LXP vs skills platform comparison maps the categories. Next: the three certification tracks, and why collapsing them into one is the mistake that voids inquiries.

Employee, Manager, IC: The Three Certification Tracks and Why They Cannot Be One

The Act assigns different duties to different people, so a single certificate covering everyone certifies the wrong thing for two of the three audiences. Employees need to recognise harassment and know how to report. Managers additionally carry receiving-end duties: handling a disclosure correctly, preserving confidentiality, preventing retaliation, and not launching a parallel investigation. IC members carry quasi-judicial responsibilities that neither of the other tracks touches.

This three-track structure is the practical heart of the matter — and configuring it cleanly is what separates serious POSH training LMS India deployments from generic course hosting. Here is how the tracks differ across the dimensions that matter when you configure the platform.

The asymmetry worth understanding

The three tracks do not carry equal risk. If an employee's refresher lapses, the coverage percentage dips. If the IC's capacity-building cannot be evidenced, the committee's findings in a live inquiry are open to procedural challenge — and inquiries have been set aside on exactly that ground, putting the employer back at the start with the underlying complaint unresolved and exposure compounded. The smallest population in your training plan carries the largest consequence, which is why the IC track deserves its own configuration review rather than being inherited from employee defaults.

POSH is also rarely the only mandated programme an organisation runs; the same three-track logic (everyone/supervisors/specialist roles) recurs across most statutory training. Our overview of the types of compliance training for employees shows where POSH sits in the wider obligation map. Next: how Skills Caravan implements all of the above, shown honestly enough that you can rule it out if it is not your fit.

How Skills Caravan Runs POSH Training and Certification

Full transparency: Skills Caravan is our platform, so read this section as the implementation reference for everything covered so far — and as a fit-check you can use to rule us out as easily as in. The six capabilities below map one-to-one onto the lifecycle stages from Section 3 and the checklist from Section 4.

The certification dashboard a compliance head sees

A representative layout of the live view — example figures, not a data feed.

The design intent of the dashboard is to answer the three questions leadership actually asks: are we covered, is the IC defensible, and is the next filing ready?

Where Skills Caravan fits — and where it doesn't

If you are a single-office team under ~30 people needing one annual session, a specialist micro-provider or a good external trainer with disciplined records is the cheaper rational choice. If you are a global MNC standardising on one worldwide ethics suite, extending that suite usually beats adding a regional platform. Everyone in between is the profile Skills Caravan was built for — the broader platform context is on our learning experience platform overview, and a working session (sample certificate, live assessment, Annual Return export on screen) is a 30-minute demo away.

The 7 Questions That Separate a Certification Engine From a Certificate Template

Every demo will show you a course playing and a certificate downloading. The seven questions below are designed to be asked live, with the answer shown on screen — because the difference between platforms is invisible until you force the evidence layer into view. When you sit down to score POSH training LMS India vendors at the final-round stage, document the answers; they become your configuration spec after signing.

"Ask every vendor the same seven questions, in the same order, with answers demonstrated — not described. The shortlist resolves itself."

Reading the answers

Three response patterns should slow any deal: demonstrations deferred to follow-up emails (the feature is roadmap, not product), workarounds narrated instead of workflows shown (the gap becomes your team's job), and reporting answered with services instead of software (the cost is hiding in renewal). A vendor that handles all seven questions on screen, in one sitting, is rare — and worth shortlisting even if the licence costs more, because the alternative costs surface every 31 January.

If you are building the wider shortlist before this final-round scoring, our market overview of the top learning management systems in India maps the field. Next: the 30-day plan that takes a signed contract to a live, audit-ready certification cycle.

The 30-Day Rollout: Contract to Live Certification Cycle

Certification programmes fail in implementation more often than in selection. The sequence below front-loads the two decisions that are expensive to change later — the assessment configuration and the HRIS mapping — and uses the pilot to calibrate rather than to discover. For a mid-sized organisation, each step lands inside a working week.

The six numbers that tell you it's working

After launch, resist dashboard sprawl. These six metrics describe the health of a certification programme completely — review them monthly, and let everything else be drill-down.

The joiner metric deserves special attention because it compounds: an organisation with 20% annual attrition replaces a fifth of its certified population every year, and the joiner flow is the only thing standing between launch-day coverage and quiet decay. Wiring certification into the induction sequence — alongside the rest of the employee onboarding workflow — is what keeps the headline number honest. The final two sections cover the mistakes that undo all of the above, and the questions buyers ask most.

5 Certification Mistakes That Quietly Void the Whole Effort

These five patterns show up repeatedly in programmes that looked compliant right up until they were tested. Each converts a real investment into paper compliance — and each is a configuration decision, fixable in an afternoon if caught early.

Frequently Asked Questions