Part 11 compliant LMS and training records software: five systems read against the training record
Published , reviewed
Verdict
- Best overall
- Veeva TrainingTraining tasks can be triggered by quality events such as an approved document change. What the signature shows, the signature's link to its record, the two signing components and the audit trail are verified on the vendor's own pages: eight of ten rows, the most in this lineup.
- Best for a small lab
- Qualio Training ManagementTraining sits inside a simple cloud eQMS, assignments update when a controlled record changes, and trainees sign with their email and password. Validation documentation for customers, copies for inspection and how long the trail is kept are verified on the vendor's own pages (six of ten rows).
- Best for a manufacturer
- MasterControl TrainingTraining is triggered automatically when a controlled quality document is revised, and training records connect to document control and change control. What the signature shows and the two signing components are verified on the vendor's own pages.
Fig. 01A training record is the evidence that the person who ran a procedure was qualified to run it. It answers to a predicate rule like any batch or test record, and once it lives in software, Part 11 asks of its signatures, audit trail and copies what it asks of every other record.
We read what five training systems publish about the Part 11 rows that matter for training, on their own pages. The SOPs these records point at are compared in SOP management software. Still on paper? Start with the training record template, which carries the version and a signature block for trainee and trainer.
Why a training record is a regulated record
The rules that govern people in a regulated lab say the same thing in their own words: the person doing the work is qualified for it, and you can show it. Part 11 then adds a duty of its own for anyone who works in an electronic record system. Read together, they make the training record a record like any other.
Scroll sideways for all columns
| Rule | Who it binds | What it says | The record it leaves |
|---|---|---|---|
| 21 CFR 211.25(a) | Drug manufacturing (CGMP) | Training “in the particular operations that the employee performs” and in the “written procedures required by these regulations”, “conducted by qualified individuals on a continuing basis”. | Per person: each procedure that touches the job, at the version trained on, and who trained them. |
| 21 CFR 58.29(b) | Nonclinical lab studies (GLP) | “Each testing facility shall maintain a current summary of training and experience and job description for each individual engaged in or supervising the conduct of a nonclinical laboratory study.” | A current training summary and job description per person. The one rule here that names the record itself. |
| ISO 13485 Clause 6.2 (QMSR) | Device makers (21 CFR 820) | FDA's preamble: anyone doing work that impacts quality “should be competent on the basis of appropriate education, training, skills, and expertise”, and “All education, training, skills, and experience of employees need to be carefully recorded.” | Competence per person, contractors and consultants included, as FDA's own examples name them. |
| 21 CFR 11.10(i) | Anyone using e-records (Part 11) | “Determination that persons who develop, maintain, or use electronic record/electronic signature systems have the education, training, and experience to perform their assigned tasks.” | Training on each regulated system, the training system included, for users and administrators. |
| EU GMP Annex 11 § 2 | EU GMP computerised systems | “All personnel should have appropriate qualifications, level of access and defined responsibilities to carry out their assigned duties.” | Qualification read beside the person's access level in the system. |
Quoted from the eCFR, the QMSR final rule (89 FR 7504) and EU GMP Annex 11, read 2026-10-22. ISO 13485 itself is a paid standard; the Clause 6.2 line is FDA's own summary of it.
Three things run through every row. The record names a person, not a team. It names what they were trained on, and for a procedure that means a version, because the SOP changes under them. And it shows they were qualified before they did the work, which is the date an inspector compares against the batch or test record.
Common misreading
“Part 11 requires training records.” Not quite. The duty to train people for their jobs comes from the predicate rules in the table. § 11.10(i) adds training on the electronic systems themselves. Part 11 governs the training record once it is electronic: its signatures, its audit trail, its copies.
Takeaway
List the rules your lab works under and write each one's training duty into your training SOP before you look at software. A GLP lab needs a current summary per person on demand; a drug or device site needs training tied to each procedure's version. That list is your requirement set for the system.
The read-and-understood signature
Most training completions in a lab are a signature: the trainee states that they read and understood a procedure version. Where your procedures make that sign-off an electronic signature meant to equal a handwritten one, the Part 11 signature sections apply to it in full.
The signed record shows the printed name, the date and time, and the meaning § 11.50(a). Part 11 gives review, approval, responsibility and authorship as examples (“such as”), so “Read and understood” is a meaning in its own right. On-the-job training usually carries two signatures, each with its own meaning: the trainee's, and the trainer's that the task was done correctly in front of them. The name, time and meaning appear on screen and on any printout § 11.50(b). Check a printed completion against the signature manifestation check.
Example training completion (illustrative values)
- Trainee
- Microbiology technician, user ID mb-tech-07
- Curriculum
- Role: microbiology technician
- Item
- SOP-MB-022 Environmental monitoring sampling, v6.0
- Meaning
- Read and understood
- Signed
- 2026-11-03 08:17 UTC
- Effective
- 2026-11-05
Its audit trail
Scroll sideways for all columns
| When (UTC) | Who | What happened |
|---|---|---|
| 2026-10-30 16:02 | QA document controller | SOP-MB-022 v6.0 approved; effective date set to 2026-11-05 |
| 2026-10-30 16:02 | Training rule (system) | SOP-MB-022 v6.0 assigned to role microbiology technician, due 2026-11-04 |
| 2026-10-30 16:02 | Training rule (system) | v5.1 completion kept on record, marked superseded |
| 2026-11-03 08:15 | mb-tech-07 | Opened SOP-MB-022 v6.0 |
| 2026-11-03 08:17 | mb-tech-07 | Signed v6.0, Read and understood (user ID and password) |
| 2026-11-03 08:31 | mb-tech-07 | Signed SOP-MB-023 v2.0, Read and understood (password, same session) |
Trainees often clear several items in one sitting, and Part 11 has a rule for that. Each signing uses two distinct components, such as a user ID and a password § 11.200(a)(1). In one continuous session, the first signing uses all of them and later ones at least one component “only executable by, and designed to be used only by, the individual” § 11.200(a)(1)(i). That is the last line of the trail above. Outside a continuous session, every signing uses every component.
Inspection risk
One sign-off for a whole classroom session, entered by the trainer for every trainee. An electronic signature is unique to one person and never reused by or reassigned to anyone else § 11.100(a), so the record shows one person signing in place of many.
When an SOP version changes
A training system earns its keep on the day an SOP is revised. Five things have to happen, in this order, and each one leaves a line in the record.
- 01
The new version is approved with an effective date
The days between approval and the effective date are the training window. Write its length into your document control SOP; the SOP template carries an effective-date field in its header for that reason.
- 02
The change decides who retrains
No rule we read says every revision needs retraining. § 211.25(a) asks for training “on a continuing basis and with sufficient frequency”. Your training procedure sets which changes retrain (a changed step does; a corrected typo may not), and the call is recorded on the change itself, which is the work of change control software.
- 03
Each curriculum points at the new version
Every role whose matrix holds the SOP gets an assignment for the new version. In a system that reads SOP versions this happens on approval; when the SOPs live in another system, someone does it by hand, and that hand-off is where most training gaps start.
- 04
The old completion stays on the record
The completion for the old version is history, not an error to clean up: “Record changes shall not obscure previously recorded information” § 11.10(e). The person's current status reads open for the new version until they sign it.
- 05
Open items are checked on the effective date
On the effective date, the list of open assignments is what QA reads. A person with an open item does not run the procedure at the new version until the item is signed.
Inspection risk
An analyst signs a test record that cites SOP v6.0, and their v6.0 completion is dated two days later. The training record and the work record disagree, and both are signed.
Takeaway
The link from SOP version to curriculum is the feature to test first in a demo. If your SOPs live in another system, compare that system in the SOP management software compare and ask both vendors how a new version reaches the training system, and who checks that it did.
What an inspector asks to see
An inspector rarely opens the LMS to admire it. The training record comes up when work is questioned: a failed test, a deviation, a study audit. These are requests to be ready for, built from the rules above; they are our reading of the rules, not quotes from an FDA inspection. Pick one to see the record that answers it and the vendor rows to read.
Requests to be ready for, one at a time
“Show me this analyst's training on the SOP version in force on the day of this test.”
- What answers it
- The completion for that exact version, signed before the test date, with the version's effective date beside it.
- What the rule says
- Training in the “written procedures required by these regulations” § 211.25(a); the signed record shows the printed name, the date and time, and the meaning § 11.50(a), and the signature cannot be moved to another record § 11.70.
Scroll sideways for all rows
| Vendor | Signature shows name, date and time, and meaning§ 11.50 | Signature linked to its record so it cannot be moved§ 11.70 |
|---|---|---|
| MasterControl Training | verified | stated |
| Veeva Training | verified | verified |
| ULTRUS ComplianceWire | stated | stated |
| Qualio Training Management | stated | stated |
| eLeaP LMS | stated | stated |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Rehearse the first request before any inspection: pick a recent deviation, pull the people on it, and print their completions for the SOP versions in force that day. If that takes more than a few minutes, the gap is in the system, the procedure or both. The audit trail guide covers what the trail behind those completions has to hold.
Requirement by requirement
Ten rows in training-record order: the sign-off and its link to the record first, then who may sign, the trail and how long it is kept, copies for inspection, validation documents, open-system controls and Annex 11.
Scroll sideways for all vendors
| Requirement | MasterControl Training | Veeva Training | ULTRUS ComplianceWire | Qualio Training Management | eLeaP LMS |
|---|---|---|---|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | verified | verified | stated | stated | stated |
| Signature linked to its record so it cannot be moved§ 11.70 | stated | verified | stated | stated | stated |
| Two distinct components to sign§ 11.200(a) | verified | verified | stated | verified | stated |
| Access and authority checks by role§ 11.10(d), (g) | verified | verified | stated | verified | stated |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | verified | verified | stated | verified | stated |
| Audit trail kept as long as the record§ 11.10(e) | stated | verified | stated | verified | stated |
| Accurate, complete copies for inspection§ 11.10(b) | verified | verified | stated | verified | stated |
| Validation documentation to support the customer's own validation§ 11.10(a) | verified | verified | stated | verified | verified |
| Open-system controls: encryption, digital signatures§ 11.30 | not stated | stated | not stated | not stated | not stated |
| EU Annex 11 statementEU GMP Annex 11 | not stated | not stated | stated | stated | not stated |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Veeva Training publishes the most of what a training buyer needs: eight of the ten rows verified on its own pages. ULTRUS ComplianceWire and eLeaP LMS describe fewer than half of these controls on the pages we read, so their claimed rows read stated. That is a gap in the public evidence, not proof of a gap in the product. Ask for a printed completion record in the demo and read it against § 11.50.
The open-system row turns on who controls access to the system, not on training: a closed system is one where access is controlled by the people responsible for the records § 11.3(b)(4). For a hosted LMS, run the open vs closed system check and read Part 11 for cloud and SaaS systems. On the Annex 11 row, ULTRUS ComplianceWire and Qualio Training Management name it.
LMS module or stand-alone LMS?
The lineup splits by where training lives. MasterControl Training and Qualio Training Management are training modules of quality suites. Veeva Training runs on the Veeva Vault platform, often beside Veeva's quality applications. ULTRUS ComplianceWire and eLeaP LMS are learning management systems first; eLeaP adds an integrated QMS.
The question that decides it is where your SOP versions live. When documents and training share a system, a new version can reach the curriculum on approval. When they do not, the LMS has to learn about the new version from outside, and that hand-off needs its own validation and its own check. A small lab with one quality system usually wants training inside it; a full eQMS compare reads those suites on every row.
Scale pulls the other way. ULTRUS ComplianceWire is described for larger organizations qualifying employees, contractors and suppliers across sites. Device makers now read training through ISO 13485 competence under the QMSR, and FDA's preamble names contractors and consultants among the people it reaches. What changed for them is in FDA QMSR for small device makers.
Takeaway
Write down your SOP system, your roles and your outside trainees before the first demo. A vendor that cannot show a new SOP version arriving in a curriculum, live, on your own example, has not answered the question that matters.
Vendor by vendor
Each card shows the six rows a training buyer reads first: what the signature shows, the components to sign, the trail, how long it is kept, copies for inspection, and validation documents.
MasterControl Training
LMS- What it is
- The training module of the MasterControl quality suite, which assigns and tracks training tasks and grades online exams. Training is triggered automatically when a controlled quality document is revised.
- Who it fits
- Manufacturers that want training records connected to document control and change control.
| Requirement | Status |
|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | verified |
| Two distinct components to sign§ 11.200(a) | verified |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | verified |
| Audit trail kept as long as the record§ 11.10(e) | stated |
| Accurate, complete copies for inspection§ 11.10(b) | verified |
| Validation documentation to support the customer's own validation§ 11.10(a) | verified |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Check with the vendor
Some rows above are stated or not stated on MasterControl's own pages. Ask MasterControl for its validation documentation and test the control in your own validation before you rely on it.
MasterControl's own Part 11 pageread 2026-10-22
Veeva Training
LMS- What it is
- A learning management system on the Veeva Vault platform for curricula, training assignments and role-based qualification. Training tasks can be triggered by quality events such as an approved document change or a CAPA.
- Who it fits
- Life-science companies, often already on Veeva quality applications, managing role-based GxP training.
| Requirement | Status |
|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | verified |
| Two distinct components to sign§ 11.200(a) | verified |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | verified |
| Audit trail kept as long as the record§ 11.10(e) | verifiedVault platform help: document and object audit history have no retention limit. |
| Accurate, complete copies for inspection§ 11.10(b) | verified |
| Validation documentation to support the customer's own validation§ 11.10(a) | verified |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Veeva Systems' own Part 11 pageread 2026-10-22
ULTRUS ComplianceWire
LMS- What it is
- A learning management system for GxP training and workforce qualification in life sciences. UL Solutions describes it as a validated platform built to support FDA 21 CFR Part 11 and EU Annex 11.
- Who it fits
- Larger regulated organizations qualifying employees, contractors and suppliers across sites.
| Requirement | Status |
|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | stated |
| Two distinct components to sign§ 11.200(a) | stated |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | stated |
| Audit trail kept as long as the record§ 11.10(e) | stated |
| Accurate, complete copies for inspection§ 11.10(b) | stated |
| Validation documentation to support the customer's own validation§ 11.10(a) | stated |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Check with the vendor
Some rows above are stated or not stated on UL Solutions' own pages. Ask UL Solutions for its validation documentation and test the control in your own validation before you rely on it.
UL Solutions' own Part 11 pageread 2026-10-22
Qualio Training Management
LMSeQMS- What it is
- The training module of the Qualio cloud eQMS, which assigns training by role and updates assignments when a controlled record changes. Trainees sign off with their email and Qualio password as their electronic signature.
- Who it fits
- Startups and small life-science companies that want training inside a simple eQMS.
| Requirement | Status |
|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | stated |
| Two distinct components to sign§ 11.200(a) | verified |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | verified |
| Audit trail kept as long as the record§ 11.10(e) | verified |
| Accurate, complete copies for inspection§ 11.10(b) | verified |
| Validation documentation to support the customer's own validation§ 11.10(a) | verified |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Check with the vendor
Some rows above are stated or not stated on Qualio's own pages. Ask Qualio for its validation documentation and test the control in your own validation before you rely on it.
Qualio's own Part 11 pageread 2026-10-22
eLeaP LMS
LMS- What it is
- A learning management system for regulated industries with an integrated QMS, where one change can trigger the related training. eLeaP says its LMS ships with pre-written validation documentation.
- Who it fits
- Small and mid-sized FDA-regulated companies that want an LMS and a light QMS together.
| Requirement | Status |
|---|---|
| Signature shows name, date and time, and meaning§ 11.50 | stated |
| Two distinct components to sign§ 11.200(a) | stated |
| Secure, computer-generated, time-stamped audit trail§ 11.10(e) | stated |
| Audit trail kept as long as the record§ 11.10(e) | stated |
| Accurate, complete copies for inspection§ 11.10(b) | stated |
| Validation documentation to support the customer's own validation§ 11.10(a) | verified |
verified: read on the vendor's own documentation on 2026-10-22. stated: the vendor claims it; we did not check. not stated: nothing published.
Check with the vendor
Some rows above are stated or not stated on eLeaP's own pages. Ask eLeaP for its validation documentation and test the control in your own validation before you rely on it.
eLeaP's own Part 11 pageread 2026-10-22
How we read the vendors
Verdicts are editorial: no vendor can buy a verdict position or displace another vendor.
verified means we read the control described on the vendor's own documentation (help centre, validation pack page, compliance paper or trust page) on 2026-10-22. stated means the vendor claims it and we did not check it. not stated means the vendor publishes nothing on it.
FDA keeps no list of certified or approved Part 11 software. Compliance is a validation claim each regulated company makes for its own use of a system, so a vendor's Part 11 claim is where your validation starts, not where it ends.
Questions
Is our LMS a Part 11 system?
It is when it holds records a predicate rule requires and you keep or rely on them electronically, which is how FDA's 2003 guidance reads Part 11's scope. A GLP facility's training summaries under § 58.29(b), kept in the LMS, are the plainest case. If trainees sign completions electronically, meaning those signatures to stand for handwritten ones, the signature sections apply as well. For a borderline case, run the Part 11 applicability checker.
Does every SOP revision need retraining?
No section we read says so. § 211.25(a) asks for training in the written procedures that relate to each person's job, “on a continuing basis and with sufficient frequency”. Write the rule for which changes retrain into your training procedure, apply it on every change, and record the decision where the change is approved.
How long do we keep training records?
Part 11 sets no period; the predicate rule does, and the audit trail is kept at least as long as the record § 11.10(e). GLP says training summaries and job descriptions “may be retained along with all other testing facility employment records” for the study-record periods § 58.195(e). Where a rule names no period, set one in your procedure that outlasts the records the training supports.
Can a spreadsheet training matrix do the job?
It can show who needs which SOP. The signed completion is the hard part: a cell anyone can type in is not a signature linked to its record § 11.70. Read Excel spreadsheets under Part 11 before you rely on one, and record sign-offs on paper with the training record template until a system holds them.
Do the people who run the LMS need training records too?
Yes. § 11.10(i) covers those who “develop, maintain, or use” e-record systems, and the training system is one of them. FDA's 2003 guidance lists § 11.10(i) among the Part 11 provisions it still enforces. Put LMS administration in the administrators' own curriculum.
Is there an FDA-approved LMS?
No. FDA keeps no list of certified or approved Part 11 software. A vendor's claim is where your validation starts § 11.10(a): you test your own assignment rules, signing and reports for the way you use them.
We sell into the EU. What changes?
Annex 11 asks that personnel have “appropriate qualifications, level of access and defined responsibilities” Annex 11 § 2, so read training beside system access. The Annex 11 row in the table shows which vendors name it; the guide to EU Annex 11 covers the rest.
Sources
Regulation text from the eCFR, the Federal Register and EudraLex; guidance from FDA. Vendor sources are linked on each vendor card. General information, not regulatory advice.
- 21 CFR Part 11, Electronic Records; Electronic Signatures, eCFRread 2026-10-22
- 21 CFR 211.25, Personnel qualifications, eCFRread 2026-10-22
- 21 CFR 58.29, Personnel (GLP), eCFRread 2026-10-22
- 21 CFR 58.195, Retention of records (GLP), eCFRread 2026-10-22
- Part 11, Electronic Records; Electronic Signatures: Scope and Application (guidance, 2003), FDAread 2026-10-22
- Medical Devices; Quality System Regulation Amendments, final rule, 89 FR 7496 (2024), Federal Registerread 2026-10-22
- EudraLex Volume 4, Annex 11: Computerised Systems (2011), European Commissionread 2026-10-22