Government

Government training on infrastructure you control

Install LMS Advisor on your own servers, connect your agency’s identity provider, and apply your records schedule to training data, logs and exam evidence.

At a glance

  • Self-hosted deployment
  • Agency identity
  • Retention by data type
  • Audit log of admin actions
  • Partner organizations

Agency training officers work under rules most vendors never think about. Data may have to stay in a particular data center or jurisdiction. Every new system goes through an authorization process. The records schedule says how long a completion must be kept, and privacy rules say how long a webcam image may be kept. The annual ethics and information security courses still have to reach every employee, contractor and seasonal worker before the deadline.

LMS Advisor is self-hostable on ordinary PHP and MySQL infrastructure, so it can run where your policy requires. Identity comes from your SAML provider. Retention periods are set per type of data, and admin actions land in an audit log. The AI features can be switched off entirely if your review has not cleared them.

The challenge

What public sector training has to satisfy

Hosting location is set by policy

Training records hold names, job titles and sometimes exam images. Policy may require them to stay on agency-controlled or specifically approved infrastructure.

Annual training with a hard deadline

Ethics, information security and records courses must reach people across headquarters, field offices and shift operations, and the completion report goes up the chain.

Retention cuts both ways

Completions must be kept for as long as the schedule says, while sensitive data such as proctoring images should go as soon as it is no longer needed. Doing either by hand is unreliable.

Contractors and partner agencies

Contract staff, county partners and volunteers need specific courses without being given the run of the agency’s system.

How LMS Advisor helps

Deployed and governed on your terms

Run the platform where your authorization says it can run, let your identity provider decide who gets in, and set retention and AI policy in admin settings rather than in a memo.

Self-hosted deployment

Install on agency servers or an approved cloud. The platform needs PHP and MySQL and includes in-app migrations, backups and a system health check.

Agency identity

SAML 2.0 SSO and SCIM 2.0 provisioning connect to your identity provider, with two-factor authentication or passkeys for accounts outside it.

Retention by data type

Set separate periods for audit logs, session history, analytics, AI chats, proctoring snapshots and exam audio. A scheduled job purges whatever has aged out.

Audit log of admin actions

Role changes, SSO configuration, manual completions and exam resets are recorded with the account that made them.

Partner organizations

Give a county office or contractor its own organization with a manager who can add learners and see reports for that group only.

AI you can switch off

Turn AI off platform-wide, or enable only the features your review approved. When it is on, every call is logged.

In depth

Getting through review and into production

Hosting and your authorization package

Because LMS Advisor is plain PHP and MySQL, it runs on the kind of server stack your team already hardens and patches, in an agency data center or a government cloud region you have approved. You control the database, file storage, backups and network rules. External services are optional, and each one is a setting you can leave off: AI providers, the code execution service (which can itself be self-hosted), SMS, and video conferencing. That makes the system boundary easier to describe in your security documentation, because you decide what crosses it.

Identity and roles

Point SAML SSO at your agency identity provider and let SCIM create and deactivate accounts. Roles control who can author courses, grade exams and run reports. Branches scope managers to a bureau, region or office, so a regional training coordinator sees their region and nothing else. Accounts outside SSO, such as a contractor, can be required to use two-factor authentication or a passkey. When someone transfers between offices, moving them to a new branch changes what their manager can see without touching their training history.

Records and privacy settings

Retention is configured per category. A common pattern is to keep audit logs for a long period, keep session history and analytics shorter, and keep proctoring snapshots and exam audio only as long as a result could be appealed. Inactive learner accounts can be anonymized after a set period while completion records stay intact for reporting. A privacy request queue handles access and deletion requests, and you can publish your own privacy notice and accessibility statement from the Legal Pages editor.

Accessibility

The learner interface includes groundwork such as skip links and visible keyboard focus. We do not claim a verified WCAG or Section 508 conformance level. If your procurement requires one, plan your own accessibility testing during evaluation and share the findings with us.

Mandatory training at scale

Assign the annual courses to each organization with a due date and a mandatory flag. Automation reminds people who have not started and those whose deadline is close. Supervisors use the team view to see who in their unit is outstanding, and the enrollment report exports for the front office.

Workflow

The path to an agency rollout

Security and privacy review

Your IT and privacy staff review data flows, decide which external services stay off and approve the hosting location.

Install and harden

Deploy on approved infrastructure, apply your baseline configuration, and use the built-in backups and health checks.

Connect identity

Configure SAML SSO and SCIM, then map bureaus and offices to branches and groups.

Assign and deliver

Assign mandatory courses with due dates, run role exams and issue certificates as people pass.

Retain and report

Apply retention periods, review the audit log and export completion reports on your reporting cycle.

Use cases

How agencies put it to work

Annual required training

Ethics, information security awareness, privacy and records management for every employee and contractor, with reminders and a completion report by office.

Role qualification exams

Proctored exams for inspectors, investigators or field staff before they work independently, backed by courses whose certificates expire and prompt requalification.

Training partner organizations

A state agency trains county or municipal staff through separate organizations, each with its own manager and its own reports.

Public examinations

Qualification or permit exams for members of the public through the candidate portal, using one-time code access instead of account setup.

Benefits

What training officers and IT gain

  • Training data stays on infrastructure your agency approved
  • Retention follows the schedule without manual cleanup
  • Access ends when the identity provider says it should
  • Supervisors see their unit’s status without a data call
  • Exam disputes come with an evidence trail
FAQ

Questions from agency IT, records and training staff

Can LMS Advisor run entirely on agency infrastructure?
Yes. It self-hosts on a standard PHP and MySQL server that you control, and the external services it can use (AI, code execution, SMS, video meetings) are optional. The code runner can also be self-hosted.
Is it FedRAMP authorized?
No. We do not hold FedRAMP authorization or any other government certification or attestation. Self-hosting lets you run it inside a boundary you already manage and document.
Does it meet Section 508 or WCAG?
We do not claim a verified conformance level. The learner interface includes skip links and visible focus indicators, and we recommend your own accessibility testing during evaluation.
Can we turn off the AI features?
Yes. AI can be switched off for the whole platform, or you can enable only specific features. When AI is on, every call is recorded in the AI Usage log with who triggered it and what it did.
How long are proctoring images kept?
As long as you configure. Proctoring snapshots and exam audio each have their own retention period, and a scheduled job deletes both the database records and the files once they pass it.
Can contractors use it without agency accounts?
Yes. Create local accounts protected by two-factor authentication, or place contractors in their own organization with a manager who can add learners and see only that group’s reports.
How is pricing handled for procurement?
Pricing is quote-based and depends on cloud or self-hosted deployment, learner numbers and the modules you need. We can provide a written quote for your procurement file.
Get in touch

Start with your hosting and records rules

Tell us where the system must run, which identity provider you use and what your records schedule says about training data. We will take your IT and training staff through deployment and retention settings before anything else.

  • Personalized demo
  • Deployment and security answers
  • Reply within one business day

Request a tailored demo