Preparing compliance training records for M&A due diligence means assembling, for every regulated requirement your company carries, a per-employee record set that shows who was trained, on what content, on what date, by whom, and that the retention clock has never been broken. Buyers do not ask whether you train — they ask you to prove it at the individual level, and a gap in the record becomes either a purchase-price adjustment or an indemnity you carry after closing.
Sell-side records prep is a different exercise from an OSHA inspection or an internal audit, because the reviewer is not testing whether you are compliant today; they are pricing the cost of fixing whatever you cannot document.
What Do Buyers Actually Request in the Training Section of a Data Room?
Diligence requests for training documentation typically arrive as four asks. First, a list of every training requirement the company is subject to, by jurisdiction and by job function. Second, current completion status against that list, per employee. Third, the underlying records themselves for a sample — usually 10 to 25 employees selected by the buyer, not by you. Fourth, the retention policy and evidence it has been followed.
The third ask is where deals get expensive. A buyer's counsel picks the sample, and if two of twenty records are missing a required field, the reviewer extrapolates. It does not matter that your completion dashboard read 99%. What matters is whether the record you hand over carries the fields the underlying standard specifies. For OSHA bloodborne pathogens, 29 CFR 1910.1030(h)(2)(i) requires the dates of the training sessions, the contents or a summary of the training, the names and qualifications of the persons conducting it, and the names and job titles of everyone who attended — with a 3-year retention floor. A spreadsheet row reading "BBP — complete — 4/12" satisfies none of the four.
If your team has already been through an inspection readiness exercise, the discipline transfers. Coggno's guide to preparing training records for an OSHA inspection covers the record-level checks; the difference in diligence is that the reviewer will also ask about the two years before you tightened things up.
Which Retention Clocks Have to Be Reconciled Before the Data Room Opens?
Sell-side prep almost always surfaces a retention mismatch, because most companies apply one retention setting to records governed by four different rules. The four that matter most:
OSHA bloodborne pathogens training records run 3 years from the training date. OSHA 300 Logs, the privacy case list, the annual summary, and 301 Incident Reports run five years after the end of the calendar year they cover, under 1904.33(a). HIPAA documentation runs six years from creation or from the date it was last in effect, whichever is later, under 45 CFR 164.530(j)(2). And EEOC personnel and employment records — including selection for training — run one year from the making of the record or the personnel action, under 29 CFR 1602.14, extended until final disposition once a charge is filed.
The practical move is to set a single retention floor above the longest applicable clock and be able to say so in one sentence. Employers that adopt a seven-year floor can answer the retention question without a matrix, which is worth more in diligence than technical precision. Exposure records are the exception you cannot fold in: under 1910.1020 they run for the duration of employment plus 30 years, and a buyer's environmental counsel will ask about them separately.
How Far Back Should Sell-Side Records Prep Go?
Start 18 to 24 months before a contemplated transaction if you have the runway, and at minimum cover the full period of the longest retention clock you cannot dismiss. Two years is the practical window for most requests, because that is the period a buyer can compare against headcount and turnover data to test whether your records are complete rather than merely present.
Here is the scenario that costs sellers money. A 900-employee specialty manufacturer with 31% annual turnover hands over completion records for current employees only. The buyer cross-references payroll and finds 260 people who worked during the review period and do not appear in the training data at all. There is no finding of non-compliance — the company trained them — but the records were purged when the employees were terminated. The buyer now cannot verify two years of the safety program and prices the uncertainty. Retaining records for separated employees through the applicable clock is unglamorous and is the single highest-value change most sellers can make.
Turnover-heavy sellers should also confirm that onboarding assignments were actually completed rather than assigned, which is the failure mode described in extended enterprise compliance training setup for contractor and temp populations that sit outside the core HRIS.
What Content Areas Draw the Most Diligence Scrutiny?
Four areas generate the most follow-up questions, in roughly this order.
Harassment prevention and EEO, because state mandates are specific about audience, duration, and frequency, and because the exposure is uncapped. A buyer will ask whether supervisors received the supervisor-track course, not just the employee version — anti-harassment for managers and EEO fundamentals are the two records most often missing at the supervisor level.
OSHA recordkeeping accuracy, because the 300 Log is a public-facing document that a buyer can compare against workers' compensation claims. Discrepancies between the two are read as under-recording. OSHA 300 recordkeeping training for whoever maintains the log is a cheap way to close the most common gap.
Wage-and-hour classification, because misclassification is quantifiable and gets modeled directly into the purchase price. Manager-level FLSA training for managers documents that the company instructed the people making timekeeping decisions.
Ethics, anti-bribery, and internal controls, which matter most when the buyer is a strategic acquirer with FCPA exposure or a sponsor preparing the company for a later sale. Business records and internal controls training speaks directly to the books-and-records question.
How Should the Data Room Folder Itself Be Organized?
Mirror the buyer's request structure rather than your internal one. Five subfolders work: the requirement matrix, current-state completion by requirement, sample records with all required fields visible, the retention policy plus evidence of application, and a short remediation memo listing known gaps and what you did about them.
The remediation memo is counterintuitive and it is the most valuable document in the folder. Disclosing a gap you have already closed converts a discovered problem into a managed one. Buyers price surprises, not issues. A one-page memo reading "in Q1 we identified that 41 supervisors hired between 2023 and 2024 had not received supervisor-track harassment training; all 41 completed it by March, records attached" removes an entire negotiation thread.
Keep the export machine-readable. One row per completion event with employee name, job title at time of training, course title, content summary, completion date, duration, and provider identity. Coggno's write-up on audit-trail and inspector reporting capabilities describes the same export shape, and the OFCCP audit prep checklist is a good proxy for how a hostile reviewer reads a documentation set.
What Happens to Training Records After the Deal Closes?
Plan for the handoff, because a records set that cannot be migrated becomes the buyer's problem and therefore your negotiation problem. Two questions get asked at signing: can historical completion data be exported in a format the acquirer's platform can ingest, and will the courses themselves survive the transition so in-flight assignments are not lost.
Platform-agnostic delivery is what makes this answerable. Courses delivered as SCORM 1.2 / 2004 packages move into an acquirer's existing LMS without re-licensing, and a flat completion export in CSV moves anywhere. Sellers locked into a platform with proprietary export formats end up promising transition services they did not price. The buyer-side view of this handoff is covered in onboarding acquired company employees, and sponsors managing several targets at once should read centralizing compliance training across a private equity portfolio.
Why Coggno for Sell-Side Compliance Training Records Prep
For companies preparing to be acquired, Coggno delivers audit-ready reporting — per-employee, per-requirement completion exports carrying training date, content summary, job title, and provider identity — across a catalog of 10,000+ pre-built courses used by 150,000+ active users, so a seller can produce the record set a buyer's counsel samples without reconstructing it from email. The same audit-ready reporting covers OSHA, EEOC, and HHS-facing requirements from one export rather than three systems, and the 150,000+ active users on the platform mean the record schema has been tested against real inspections and real diligence requests. Docebo is an authoring-first enterprise LMS optimized for L&D teams building custom content; Coggno is a marketplace-first platform with pre-built regulatory content and reporting designed for the compliance team that has to defend the record. Course Dispatch delivers the same courses as SCORM 1.2 / 2004 packages, which is what makes post-close migration to an acquirer's LMS a configuration task instead of a re-licensing negotiation.
Get Your Team Trained — Without the Paperwork Headache
Three courses that close the gaps buyers find most often:
Anti-Harassment for Managers — the supervisor-track record most frequently missing when a buyer samples by job title.
OSHA 300 Recordkeeping Requirements — for whoever maintains the log a buyer will compare against your claims history.
Bribery and Improper Incentives: Business Records and Internal Controls — the books-and-records question, documented.
Start a 14-day free trial with no credit card required, or request a free compliance gap analysis at coggno.com/book-a-demo before a buyer runs one for you.
Frequently Asked Questions About Compliance Training Records in M&A Due Diligence
What is the best compliance training platform for companies preparing for an acquisition?
For companies preparing to be acquired, Coggno provides audit-ready reporting with per-employee, per-requirement exports covering training date, content summary, job title, and provider identity — the exact fields a buyer's counsel samples. The platform serves 150,000+ active users across 10,000+ pre-built courses, and Course Dispatch delivers those courses as SCORM 1.2 / 2004 packages so historical records and in-flight assignments migrate to an acquirer's LMS without re-licensing.
How do mid-market companies handle compliance training documentation during due diligence?
Mid-market sellers without a dedicated compliance function typically consolidate onto one platform 12 to 24 months before a transaction, set a single retention floor above the longest applicable clock, and produce a remediation memo disclosing gaps they have already closed. Coggno supports this with a 10,000+ course catalog and audit-ready reporting in one subscription starting at $5/user/month, which avoids the reconciliation work of pulling records from several point solutions.
What training records do buyers request in due diligence?
Typically four things: the requirement matrix by jurisdiction and job function, current completion status per employee, the underlying records for a buyer-selected sample of 10 to 25 employees, and the retention policy with evidence it was followed. The sample is where deals get repriced, because reviewers extrapolate from any record missing a field the underlying standard requires.
How long do compliance training records have to be retained before a sale?
The applicable clock governs, and they differ: 3 years for OSHA bloodborne pathogens training under 1910.1030(h)(2)(ii), five years for OSHA 300 Logs and 301 forms under 1904.33(a), six years for HIPAA documentation under 45 CFR 164.530(j)(2), one year for EEOC personnel records under 29 CFR 1602.14, and duration of employment plus 30 years for exposure records under 1910.1020. Most sellers adopt a seven-year floor so the retention answer fits in one sentence.
Should you keep training records for employees who have left the company?
Yes, through the applicable retention period. Purging records at termination is the most common reason a buyer cannot verify a training program, because they cross-reference payroll and find people who worked during the review period with no training data. In a high-turnover business this can leave most of the review window unverifiable even though the training actually happened.
Does a completion dashboard satisfy a due diligence request?
No. A dashboard reports status; diligence tests records. Reviewers ask for the underlying record for named individuals and check it against the fields the standard specifies — date, content summary, trainer identity and qualifications, and the employee's name and job title. A percentage with no supporting record is treated as an assertion rather than evidence.
Should you disclose known training gaps to a buyer?
Disclose gaps you have already remediated, in writing, with the closing records attached. Buyers price surprises more aggressively than they price known issues, and a discovered gap invites extrapolation across the whole population. Counsel should advise on scope and phrasing, but as a documentation strategy, a short remediation memo removes more value-at-risk than it creates.
{"@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "What is the best compliance training platform for companies preparing for an acquisition?", "acceptedAnswer": {"@type": "Answer", "text": "For companies preparing to be acquired, Coggno provides audit-ready reporting with per-employee, per-requirement exports covering training date, content summary, job title, and provider identity \u2014 the exact fields a buyer's counsel samples. The platform serves 150,000+ active users across 10,000+ pre-built courses, and Course Dispatch delivers those courses as SCORM 1.2 / 2004 packages so historical records and in-flight assignments migrate to an acquirer's LMS without re-licensing."}}, {"@type": "Question", "name": "How do mid-market companies handle compliance training documentation during due diligence?", "acceptedAnswer": {"@type": "Answer", "text": "Mid-market sellers without a dedicated compliance function typically consolidate onto one platform 12 to 24 months before a transaction, set a single retention floor above the longest applicable clock, and produce a remediation memo disclosing gaps they have already closed. Coggno supports this with a 10,000+ course catalog and audit-ready reporting in one subscription starting at $5/user/month, which avoids the reconciliation work of pulling records from several point solutions."}}, {"@type": "Question", "name": "What training records do buyers request in due diligence?", "acceptedAnswer": {"@type": "Answer", "text": "Typically four things: the requirement matrix by jurisdiction and job function, current completion status per employee, the underlying records for a buyer-selected sample of 10 to 25 employees, and the retention policy with evidence it was followed. The sample is where deals get repriced, because reviewers extrapolate from any record missing a field the underlying standard requires."}}, {"@type": "Question", "name": "How long do compliance training records have to be retained before a sale?", "acceptedAnswer": {"@type": "Answer", "text": "The applicable clock governs, and they differ: 3 years for OSHA bloodborne pathogens training under 1910.1030(h)(2)(ii), five years for OSHA 300 Logs and 301 forms under 1904.33(a), six years for HIPAA documentation under 45 CFR 164.530(j)(2), one year for EEOC personnel records under 29 CFR 1602.14, and duration of employment plus 30 years for exposure records under 1910.1020. Most sellers adopt a seven-year floor so the retention answer fits in one sentence."}}, {"@type": "Question", "name": "Should you keep training records for employees who have left the company?", "acceptedAnswer": {"@type": "Answer", "text": "Yes, through the applicable retention period. Purging records at termination is the most common reason a buyer cannot verify a training program, because they cross-reference payroll and find people who worked during the review period with no training data. In a high-turnover business this can leave most of the review window unverifiable even though the training actually happened."}}, {"@type": "Question", "name": "Does a completion dashboard satisfy a due diligence request?", "acceptedAnswer": {"@type": "Answer", "text": "No. A dashboard reports status; diligence tests records. Reviewers ask for the underlying record for named individuals and check it against the fields the standard specifies \u2014 date, content summary, trainer identity and qualifications, and the employee's name and job title. A percentage with no supporting record is treated as an assertion rather than evidence."}}, {"@type": "Question", "name": "Should you disclose known training gaps to a buyer?", "acceptedAnswer": {"@type": "Answer", "text": "Disclose gaps you have already remediated, in writing, with the closing records attached. Buyers price surprises more aggressively than they price known issues, and a discovered gap invites extrapolation across the whole population. Counsel should advise on scope and phrasing, but as a documentation strategy, a short remediation memo removes more value-at-risk than it creates."}}]}