SCORM vs hosted delivery for compliance training

This looks like an IT question and gets handed to IT. It is not. It is a records question, and the people who should decide it are the ones who will have to produce a completion history for a named worker four years from now.

What each thing is

SCORM is a packaging and communication standard from Advanced Distributed Learning. You receive a zip file, you upload it to your learning management system, and when a learner runs it the course talks back to the LMS: started, score, time spent, completed, passed. Two versions matter. SCORM 1.2 is the most widely supported and is what most content vendors still ship. SCORM 2004 adds sequencing and finer-grained status reporting, most of which compliance content never uses (SCORM versions).

Hosted delivery means the vendor runs the course on their own platform. You get logins, or a single sign-on link, and a reporting dashboard. Nothing lands in your LMS unless you export it.

There is a third option people forget: SCORM dispatch, where the vendor gives you a small SCORM wrapper that launches content still hosted and updated by them. You get LMS records; they keep control of the content. It is a genuine middle path and worth asking for by name.

Choose SCORM when

Your compliance records must live in your systems. This is the main reason and usually decisive. Records in your LMS sit next to your HR data, follow your retention policy, get backed up with everything else, and do not disappear when a contract ends.

You already run an LMS and people use it. Adding a second place for staff to log in reduces completion. Every extra login is a reason not to finish.

You need one report across everything. If mandatory training comes from four vendors and lives in four dashboards, nobody has a picture of who is current. SCORM into one LMS solves that.

You need to control the version people see. With a SCORM package in your LMS, the content is frozen until you replace it. That is a burden (you have to apply updates) and a benefit (you can prove exactly what a person saw on a given date). For audit purposes, the benefit usually wins.

Choose hosted delivery when

You do not have an LMS, or yours is bad. Do not buy an LMS just to run three compliance courses. Hosted delivery for a small organisation is faster, cheaper and better supported.

The content changes often and you will not keep up. Legislation moves. A hosted course is current the moment the vendor updates it. A SCORM package is current when someone at your end re-uploads it, which in practice means it is often a year behind.

You need to train people outside your organisation. Contractors, franchisees, volunteers, suppliers. Getting external users into a corporate LMS is usually more painful than it is worth.

You want the vendor to chase completions. Reminder emails, escalation, reporting to managers. Some hosted platforms do this well and it is real administrative work you no longer do.

The questions that actually decide it

Ask these before you look at any demo.

Which SCORM version, and has it been tested on our LMS? "SCORM compliant" is a claim, not a test result. Ask for a test package and run it in your own environment, including on the browsers and devices your workforce actually has. Completion tracking failing silently on mobile is a common and expensive discovery.

What exactly gets recorded? For compliance you want completion status, date and time, score, and ideally the content version. If the package only reports "completed" with no score and no version, your audit trail is thinner than you think.

How do updates reach us? With SCORM, who tells you a new version exists, how often, and does the licence include re-issued packages? With hosting, do learners get moved to a new version mid-cycle, and how is the old version recorded?

Where is the data, and who can see it? Hosted delivery means learner data on someone else's infrastructure. If that infrastructure is offshore, the Australian Privacy Principles are worth a proper look, particularly around disclosure and security of personal information. Names, employment details and, in some content, disclosures made during a scenario. Treat it as personal information because it is.

What happens at the end? Agree the export format, the fields included and the access period after termination, in writing, before you sign. This is the clause people skip and regret.

A note on xAPI and cmi5

xAPI records learning experiences anywhere and sends them to a learning record store rather than an LMS. cmi5 is a companion specification that brings xAPI data into a traditional LMS launch model. Both are technically better than SCORM.

Neither is necessary for compliance training. Compliance reporting needs "this named person completed this version on this date and scored this". SCORM 1.2 does that. If someone is selling you xAPI for a mandatory annual code of conduct module, ask what question it answers that SCORM cannot.

The practical answer for most organisations

If you have a working LMS, take SCORM 1.2 packages and insist on version numbering and a written update cadence. If you do not, take hosted delivery and negotiate the data export clause hard.

If you are unsure which you can support, tell us your LMS and workforce size when you enquire about off-the-shelf courses and we will tell you which delivery method to take, including when the answer is hosted.

Common questions

What is SCORM?

SCORM (Sharable Content Object Reference Model) is an interoperability standard developed by Advanced Distributed Learning that defines how e-learning content communicates with a learning management system. SCORM 1.2 and SCORM 2004 are the two versions in common use.

Should we use SCORM 1.2 or SCORM 2004?

SCORM 1.2 is the most widely supported version and is fine for compliance training, where you usually only need completion, score and time. SCORM 2004 adds sequencing and more detailed status reporting, which most compliance courses do not use.

What is the difference between SCORM and xAPI?

SCORM only tracks activity inside an LMS. xAPI records learning experiences anywhere and sends them to a learning record store. cmi5 is a companion specification that brings xAPI-style data into a traditional LMS launch model.

Which is better for audit evidence?

SCORM in your own LMS, if your LMS keeps proper records. The records sit in a system you control and survive the end of a vendor relationship. Hosted delivery is only as durable as your contract and the vendor's export options.

What happens to hosted training records if we change vendors?

That depends entirely on your contract. Agree an export format and a post-termination access period before you sign, or you will be renewing a licence purely to keep reading your own history.