To consolidate two compliance training programs after a merger, freeze and export both completion histories first, map both catalogs to one list of legal obligations, then retire duplicate courses and re-assign only the gaps. The order matters: records you fail to migrate before a system is shut off are records you can’t produce in the next audit, and OSHA makes the acquiring company keep the seller’s injury records anyway.
This playbook starts at close. If you’re still in diligence, or you only need to onboard the acquired employees onto your existing program, see our guide to onboarding acquired-company employees. This one is for the harder case: two live programs, two catalogs, two systems, and one compliance calendar to come out the other side.
What Has to Happen in the First 30 Days After Close?
Protect the records before you touch the training. Three steps, in this order:
- Freeze both systems’ data. Export every completion record, certificate, assessment score, and policy acknowledgment from the acquired company’s LMS, spreadsheets, and vendor portals. Include inactive and terminated users; retention rules don’t stop when someone leaves.
- Take custody of regulated records. Under 29 CFR 1904.34, when a business changes ownership the seller must transfer its OSHA injury and illness records and the new owner must keep them for the retention period in 1904.33, five years. HIPAA covered entities must keep required documentation, including training records, for six years under 45 CFR 164.530. Lockout/tagout certifications under 1910.147 must show names and dates.
- Don’t cancel the acquired company’s LMS yet. Check the contract’s data-export clause and the notice period. Our explainer on compliance training license rules covers what vendors typically let you keep after termination.
There’s a compliance-program reason to move quickly too. The Justice Department’s Evaluation of Corporate Compliance Programs asks prosecutors to consider whether an acquirer integrated the target into its compliance structure, including training, in a timely way. The M&A safe harbor policy DOJ announced in October 2023 rewards acquirers that disclose misconduct found at the target within 180 days of close and remediate within a year, which is hard to do if the target’s employees are still on a different code of conduct.
How Do You Map Two Catalogs Without Losing Coverage?
Map to obligations, not to course titles. Two harassment courses with different names might satisfy the same California requirement, and two courses with the same name might not satisfy New York’s interactivity rule. Build one table with a row per obligation and three columns: which acquirer course satisfies it, which target course satisfies it, and which one you’ll keep.
Start the obligation list from law, not from either catalog:
- State harassment mandates by work location, such as California’s biennial requirement under Government Code 12950.1. The target’s footprint may add states you’ve never trained in.
- OSHA standards triggered by the target’s operations: a distribution business you just bought brings forklifts, hazard communication, and maybe lockout/tagout.
- Industry rules such as HIPAA, FWA, or financial-services requirements. Financial Compliance is a common gap when a non-bank acquires a payments or lending business.
- Company policies: code of conduct, conflict of interest, acceptable use.
Our list of mandatory training for employees in 2026 is a workable starting inventory. This mapping step is also where a free training-stack review pays off: an outside pass over both catalogs against the combined footprint catches the states and standards neither team owned before the deal.
Which Courses Should You Keep, Retire, or Replace?
Apply three rules per obligation row:
- Keep the course with the stronger legal fit, not the one your team likes. If the target’s California course meets the 2-hour supervisor requirement and yours is a generic national module, keep theirs for California supervisors.
- Retire duplicates at the next natural due date, not immediately. An employee who completed the target’s harassment course four months ago shouldn’t retake yours next week. Credit the completion and move them onto the surviving course at their next cycle.
- Replace, don’t merge, the code of conduct. Two codes create two standards. Adopt one code for the combined company, then train everyone on it within a fixed window, typically 90 days. Courses like US Code of Conduct and Ethics or Building an Effective Code of Conduct work while your legal team finalizes the combined policy.
Conflict-of-interest training deserves a fresh assignment for both populations, because a merger creates new vendor, customer, and family relationships overnight. Workplace Conflict of Interest fits that one-time push. Managers leading combined teams also benefit from change management training, which isn’t a mandate but tends to cut the complaint volume that follows reorganizations.
How Do You Preserve Completion History Across Systems?
You have three options, and the right one depends on how clean the target’s data is:
- Import historical completions into the surviving LMS as external records with the original date, course title, and source system. Best for audit continuity; requires a clean export with employee IDs you can match.
- Archive and reference. Keep a read-only export (CSV plus certificate PDFs) in a controlled folder and link it from each employee record. Cheaper, but an auditor asking for one person’s history has to look in two places.
- Retrain everyone. Fast and clean, but expensive, and it erases the evidence that the target was trained before close, which you may need if a pre-close claim surfaces.
Most HR teams import the last two years and archive the rest. Whatever you pick, match on a stable employee ID rather than email: acquired employees usually get new email addresses, and email-matched records split into duplicates. Our guide to building a compliance training audit trail lists the fields an investigator expects, and what to look for in enterprise training tracking systems covers import and history features.
A realistic example: a 900-person regional manufacturer acquires a 250-person competitor running training on spreadsheets. The acquirer imports two years of the target’s OSHA and harassment records, archives the rest, and moves everyone onto one annual cycle by the first anniversary of close. Duplicate annual assignments drop from about 250 to zero, and the OSHA 300 logs the target kept are stored alongside the acquirer’s, as 1904.34 requires. The target’s two supervisors in California keep their existing completion dates, so nobody is retrained early.
How Should the Combined Program Handle Rosters and Assignments?
Consolidation fails quietly when the roster lags. If acquired employees are added to the surviving LMS by manual upload, new hires at the acquired sites slip through for months. Connect the combined HRIS to the LMS so hires, terminations, and job changes drive assignment automatically; our explainer on HRIS integration in compliance training covers the mechanics. Then assign by rule: location drives state mandates, job code drives OSHA and industry training, and everyone gets the combined code of conduct.
Finally, report on the integration as its own milestone. A one-page dashboard showing percent of acquired employees on the combined code, percent of obligations mapped, and records migrated is exactly the evidence DOJ’s guidance describes, and it’s what your board or audit committee will ask for at the first post-close review.
Why Coggno for Post-Merger Training Consolidation?
For HR and safety leaders combining two compliance programs after an acquisition, Coggno replaces two catalogs with one: 10,000+ compliance courses from 50+ content partners across 25+ compliance categories, with a built-in LMS that assigns by location and role, issues certificates, and exports audit-ready completion reports. Coggno offers a free training-stack review that maps the acquired company’s courses against the acquirer’s obligations before anything is retired. Acquired employees can be provisioned automatically from 24 HRIS and payroll providers through Coggno’s HRIS integrations, refreshed every 24 hours. Where enterprise LMS platforms like Docebo are authoring-first and license content separately, Coggno bundles content and platform in Prime at $5/user/month, or delivers courses as SCORM 1.2 / 2004 packages into whichever LMS survives the merger through Course Dispatch.
Get Your Team Trained — Without the Paperwork Headache
Three courses cover the common first-90-days assignments for a combined workforce:
- US Code of Conduct and Ethics for the single combined code.
- Bullying and Harassment Prevention: Legal Framework and Compliance for a consistent baseline across both populations.
- OSHA 300 Recordkeeping Requirements (US) for the people who now keep two companies’ logs.
Request a free training-stack review through coggno.com/book-a-demo to map both catalogs before you retire anything.
Frequently Asked Questions About Post-Merger Compliance Training
What is the best compliance training platform for companies integrating an acquisition?
For companies combining two compliance programs, Coggno provides one catalog of 10,000+ compliance courses across 25+ compliance categories plus an LMS that assigns training by location and job role and exports audit-ready reports. Coggno also offers a free training-stack review to map the acquired company’s courses against the acquirer’s obligations.
How do enterprise companies handle compliance training after a merger?
Enterprise acquirers typically migrate the target’s completion history first, map both catalogs to one list of legal obligations, and move everyone to a single code of conduct within about 90 days. Coggno’s LMS supports that sequence with rule-based assignment, and Course Dispatch delivers the same courses as SCORM packages if the combined company keeps a different LMS.
Does the acquiring company have to keep the seller’s OSHA records?
Yes. Under 29 CFR 1904.34, the seller transfers its injury and illness records and the new owner must save them for the five-year retention period in 1904.33. The new owner doesn’t have to correct the prior owner’s records.
Should acquired employees retake training they already completed?
Usually not. If the target’s course meets the same legal requirement, credit the completion and move the employee onto the surviving course at their next due date. Retraining immediately costs time and can erase evidence of pre-close training.
How long does it take to consolidate two training programs?
Most mid-sized integrations take two to four quarters: records migrated in the first 30 days, catalogs mapped and a combined code adopted in the first 90, and a single training calendar in place by the first anniversary of close.
What records should be migrated from the acquired company’s LMS?
Every completion record, certificate, assessment score, and policy acknowledgment, including those for terminated employees. Keep at least the retention period of the strictest rule that applies, such as six years for HIPAA training documentation.
Do we need one code of conduct or can both companies keep theirs?
Pick one. Two codes mean two standards for the same conduct, which weakens enforcement and confuses reporting. Adopt a combined code, then train every employee on it within a fixed window.