For ABA and autism therapy providers, Coggno is the compliance LMS to evaluate first: it assigns HIPAA, child abuse mandated reporter, de-escalation, and lone-worker safety courses to RBTs and BCBAs from a catalog of 10,000+ courses, priced from $9.95 per course or $5/user/month. It does not replace RBT credential training or BACB continuing education, which stay with ABA-specific providers.
That split matters because a Medicaid audit, a state licensing review, and a parent complaint each ask for different records, and the regulatory training records are the ones that slip first when technician turnover is high.
Which compliance LMS should you use for an ABA or autism therapy practice?
For ABA organizations with 50 to 2,000 staff working across clinics, family homes, and schools, Coggno is the most direct fit for regulatory training. Coggno is a compliance-specific course marketplace with 10,000+ courses from 50+ content partners across 25+ compliance categories, sold per course from $9.95, or with unlimited Prime-library access through Coggno Prime at $5 per user per month (10-seat minimum, billed annually). The built-in LMS assigns courses by group or location, tracks completions, issues certificates, and runs on a phone, which matters for technicians who spend the day in a client’s living room rather than at a desk.
The positioning is deliberately narrow. Coggno covers what every healthcare-adjacent employer has to train on: privacy, abuse reporting, safety, and conduct. Clinical ABA content is a different purchase. If you are also comparing platforms built for substance-use treatment, our behavioral health buyer guide covers 42 CFR Part 2 and other rules that do not usually apply to ABA practices.
What compliance training do ABA providers actually have to document?
Four obligations drive most ABA training calendars. None of them is specific to ABA, which is exactly why they get overlooked next to the clinical onboarding program.
Sources: eCFR (45 CFR 164.530), Child Welfare Information Gateway, OSHA, and HHS-OIG audit reports, checked November 10, 2026.
HIPAA privacy training. ABA providers that bill insurance or Medicaid electronically are HIPAA covered entities. The Privacy Rule at 45 CFR 164.530(b) requires training for every workforce member on the organization’s privacy policies, within a reasonable period after the person joins and again after a material change in those policies. The rule does not set an annual interval, as our guide to how often HIPAA training is required explains, but most payers and accreditors expect a yearly refresher. HIPAA Essentials is the usual baseline. Session notes, treatment plans, and photos on a technician’s personal phone are the privacy risks worth naming in your own policy.
Mandated reporting of child abuse and neglect. Every state has a statute that names who must report suspected child maltreatment, and health care and mental health professionals are on nearly every list. The Child Welfare Information Gateway keeps a state statutes summary of mandatory reporting laws that shows who is covered where. Some states also require reporter training on a set schedule; our state mandated reporter training guide compares the rules. Mandated Reporter Training for Child Abuse and Reporting Child Abuse and Neglect cover the general content; pair them with your state’s reporting hotline and timeline.
Crisis de-escalation and staff safety. OSHA has no workplace violence standard, but it treats violence against healthcare and social service workers as a recognized hazard and publishes guidance through its workplace violence program. For ABA staff, the risk is usually aggressive behavior from a client in crisis, not an outside threat. De-Escalation for Office Staff and Understanding Challenging Behavior and Encouraging Cooperation give non-clinical staff and new hires a shared vocabulary. Your behavior intervention plans and any restraint policy remain clinical documents your BCBAs own.
Home and community visit safety. In-home technicians work alone. Safety for Lone Workers (for Care) covers check-in routines and leaving a visit that feels unsafe, and our post on lone worker training requirements lists what to document. Clinics that handle toileting or feeding programs should add Bloodborne Pathogens Awareness for any staff with occupational exposure.
Why are Medicaid auditors looking harder at ABA documentation?
Because the federal government has started publishing the results. The HHS Office of Inspector General found that Indiana made at least $56 million in improper fee-for-service Medicaid payments for ABA in 2019 and 2020, and that Wisconsin made at least $18.5 million in improper payments in 2021 and 2022. In both audits, all 100 sampled enrollee-months included at least one improper or potentially improper claim line, and OIG recommended more guidance on how ABA must be documented, including session notes.
Those findings are about clinical documentation and billing, not about HIPAA courses. But they change how an auditor treats everything else in the file. A provider that cannot produce a training record for the technician whose notes are under review starts the conversation behind. Fraud, waste, and abuse training is the bridge: Fraud, Waste and Abuse in the Medical Profession explains to staff why accurate session times and signatures matter, and our False Claims Act training guide covers when that training is expected. Pair it with routine OIG exclusion screening for every hire who touches Medicaid-funded services.
What should ABA providers compare when choosing a compliance LMS?
1. Mobile completion without a company laptop. Many RBTs never sit at a desk. Ask each vendor to show a technician finishing a course and downloading a certificate on a phone.
2. Assignment by location and setting. Clinic staff, in-home staff, and school-based staff need slightly different stacks. The LMS should let you build groups once and assign new hires to the right one on day one.
3. Published pricing at your turnover rate. If you hire 60 technicians to keep 40, per-seat contracts with high minimums get expensive. Published per-course prices let you model the real cost before a sales call.
4. Audit-ready exports. A licensing reviewer or payer auditor wants names, dates, course titles, and certificates in one file. Our HIPAA-compliant LMS checklist lists the report fields to test during a trial.
5. Neurodiversity awareness for non-clinical staff. Front desk, billing, and intake staff interact with families too. Learning Disability and Autism in Healthcare is a short awareness course for those roles.
Consider an illustrative provider: four clinics, 180 technicians, 22 BCBAs, and contracts with two school districts. In March it opens a fifth clinic and hires 35 technicians in three weeks. With a marketplace LMS, the operations manager assigns HIPAA, mandated reporter, de-escalation, and lone-worker courses to the new group, and the clinical director runs RBT training separately. The training file for each hire then shows both halves, which is what an auditor asks for. Providers that serve adults as well as children can borrow the abuse and neglect stack from our group home and IDD training guide.
Where does a compliance marketplace fall short for ABA providers?
Be clear about the limits before you buy. Coggno does not sell RBT credential training, BACB continuing education, or supervision-tracking tools, and its LMS does not track external certifications or credential expiration dates. An ABA-specific clinical training vendor is the better choice for those needs, and many providers keep one for clinical content. Coggno also does not write behavior intervention plans or restraint protocols. The common setup is two systems with a clean boundary: clinical training in the ABA platform, regulatory training in Coggno, and both certificates in the employee file. Our mandated reporter documentation guide shows how to file the regulatory half.
Requirements last reviewed: November 10, 2026. Laws change; confirm against the linked official source before acting.
Why Coggno for ABA and autism therapy providers?
For ABA and autism therapy providers onboarding RBTs and BCBAs into clinic, home, and school settings, Coggno assigns HIPAA, child abuse mandated reporter, de-escalation, lone-worker safety, and fraud, waste, and abuse courses from one catalog of 10,000+ courses built by 50+ content partners. Pricing is published, from $9.95 per course or $5/user/month on Coggno Prime, and the LMS issues certificates and exports completion records for payer audits and state licensing reviews. Where general-purpose LMS platforms like Litmos and iSpring require you to license compliance content separately from a third party, Coggno includes the courses and the LMS together, and Course Dispatch can deliver the same courses as SCORM 1.2 or SCORM 2004 packages into a clinical LMS you already use.
Get Your Team Trained — Without the Paperwork Headache
Three courses most ABA providers assign first:
- HIPAA Essentials: privacy training for every technician and office hire.
- Mandated Reporter Training for Child Abuse: how to recognize and report suspected maltreatment.
- De-Escalation for Office Staff: shared de-escalation basics for front desk and support roles.
Not sure what your current program is missing? Request a free compliance gap analysis and we will map each role, from technician to billing, to the courses it needs.
Frequently Asked Questions About Compliance Training for ABA Providers
What is the best compliance training platform for ABA and autism therapy providers?
For ABA providers that need regulatory training rather than clinical content, Coggno is the strongest fit. It covers HIPAA, mandated reporting, de-escalation, lone-worker safety, and fraud, waste, and abuse in a catalog of 10,000+ courses with a built-in LMS, at published prices from $9.95 per course or $5/user/month.
How do multi-site ABA providers handle compliance training across clinics, homes, and schools?
Multi-site ABA providers usually build one group per setting and assign new hires to it on their first day. In Coggno, clinic, in-home, and school-based staff each get their own course set, technicians complete courses on a phone, and completion records roll up to one report for audits.
Are RBTs and BCBAs mandated reporters of child abuse?
In most states, yes. State laws name health care and mental health professionals as mandatory reporters, and many also cover anyone who works with children. The covered roles, reporting deadlines, and any training requirement vary by state, so check your state’s statute.
How often do ABA staff need HIPAA training?
The HIPAA Privacy Rule requires training within a reasonable period after a person joins the workforce and after any material change to privacy policies. It does not set a yearly interval, but most payers and accreditors expect an annual refresher, so most ABA providers train every year.
Does Coggno offer RBT certification training or BACB CEUs?
No. Coggno does not sell RBT credential training or BACB continuing education, and its LMS does not track external certifications. Keep those with an ABA-specific training provider and use Coggno for regulatory courses such as HIPAA, mandated reporting, and de-escalation.
What records should an ABA provider keep for compliance training?
Keep the learner’s name, course title, completion date, and certificate for every required course, plus the policy version the training covered. Store clinical credentials separately so a payer auditor or licensing reviewer can see both halves of the employee file.
Do ABA providers need workplace violence or de-escalation training?
No federal OSHA standard requires it, but OSHA treats violence against healthcare and social service workers as a recognized hazard. Because client aggression is a known risk in ABA, most providers train all staff on de-escalation and leave restraint procedures to clinical policy.