Training that tracks itself, from SCORM to certification

Digital Training, Course & Learning Management System (DTCLMS): author and deliver SCORM 1.2/2004, xAPI, and HTML5 courses with server-graded quizzes, assign mandatory training by department and track compliance, issue verifiable certificates, give learners an AI tutor, and integrate through a documented REST API — all in one role-based platform.

Create your account Sign in

Resume · 45% throughCertificate ready3 courses · 4h 10m on task

lms.kazsystems.com

SCORM: 1.2 & 2004 supported; Upload a 1.2 or 2004 zip and every module becomes its own unit.
xAPI: Embedded LRS included; SCORM and HTML5 statements land in a built-in store — no extra LRS.
8 roles: Granular RBAC built in; Each role gets its own portal, with permissions that match the job.
API: Public playground & keys; A course-grounded tutor in the player, plus drafted quizzes to review.

Features

Everything a modern training program needs

Not a file host with a progress bar bolted on — built around how SCORM, xAPI, real cohorts and mandatory training actually work, with an API for everything else.

One SCORM upload, a whole course

Drop in a SCORM 1.2 or 2004 zip and every module in its manifest becomes its own unit automatically — sequencing requests and all. Or bring an HTML5 bundle with our lightweight tracking SDK.

course.zip

Module 1 — Fundamentals
Module 2 — In Practice
Final Assessment

An AI tutor inside every course

A course-grounded AI tutor answers learner questions in context, right beside the player. Instructors get AI-drafted quizzes to review and refine — never published blind.

AI Tutor

Workplace Safety & Compliance

On this course

Can you explain module 2’s key idea again?

Of course — based on this course’s outline, the core concept is…

Ask a question about this course…

Grounded in this course

Cohort analytics & compliance

Completion rates, per-unit drop-off, quiz pass rates and time-on-task for every course — and a people × training compliance matrix that answers “who is overdue in Warehouse?” in one click. CSV export when you need to go deeper.

Progress overview from the learner dashboard: 48% average completion, completed versus in-progress counts, and time on task

Real role-based access
Eight built-in roles with resource-level permissions and row-level ownership — plus a manager view that follows the reporting line, not a role.
Verifiable certificates
Sequentially numbered PDF certificates with a public, no-login verification page, optional validity periods and automatic recertification cycles.
Sequential unlocking
Units unlock in order as learners complete them, with per-unit overrides for orientation content.
Assignments & compliance
Assign mandatory training to dynamic audiences by department, job role or hire date, with due rules, reminders, manager escalation and an exemption register.
Question bank & quizzes
Reusable, tagged questions assembled into server-graded quizzes with pass marks, timers, attempt caps and shuffling — imported from CSV or drafted by AI.
A real REST API
Every screen runs on the same documented API: scoped API keys, a request log, OpenAPI export and a public playground to try it before you write a line.

Training built for every audience

Whether you’re training staff, onboarding partners, or educating customers, DTCLMS delivers the right training to the right people — and, for mandatory training, proves who completed it and by when. No extra platforms. No spreadsheets.

Live
Employee & compliance training
Welcome aboard — your first module is ready
Onboarding training
+12%
Partner training
Customer training

See all solutions

In the room

Built for the moment a learner actually needs help

Progress, certificates and the AI tutor sit in the same place the course does — so nobody leaves the player to hunt for a status, a score, or a second opinion.

See it in your account

A support specialist wearing a headset, ready to help from the same session

Live support · same session

AI tutor on the player

For every role

One platform, purpose-built for every role

Admins, instructors and learners each get their own portal; managers get My Team the moment someone reports to them. Nobody wades through screens meant for someone else’s job.

An administrator reviewing the DTCLMS learner portal on a desktop

Admins

Manage users, roles and enrollments, run the organization structure and HR import, assign training and watch compliance, moderate reviews, and issue API keys — from one overview.

An instructor on a headset walking a learner through a course

Instructors

Build courses module by module, import a full SCORM package in one upload, assemble quizzes from your question bank, reply to feedback, and track your own cohorts.

A learner taking notes while working through a course on a laptop

Learners

Browse the catalog, see what is due on your training plan, ask the AI tutor when stuck, climb the leaderboard, and download a verifiable certificate and transcript.

Embedded xAPI store
Statements from SCORM and HTML5 content land in a built-in xAPI endpoint — no separate LRS to stand up.
Full audit trail
Every user, role, course, assignment and exemption change is logged — plus every API request made with a key — searchable and exportable from the admin portal.
DRAFT → REVIEW → PUBLISHED
A real content workflow — reviewers approve before anything reaches a learner’s catalog.

Security

Secure by design

Engineered around OWASP-aligned practices at every layer — authentication, authorization, input handling, and content isolation.

Hardened authentication: Passwords stored only as bcrypt hashes. Short-lived access tokens paired with single-use, rotating refresh tokens — held in httpOnly, Secure cookies and stored server-side as hashes.
Granular access control: Every request passes role-based permission checks at the resource-action level, with row-level ownership rules on top — instructors touch only their own courses, managers only their reports. API keys are scoped to a subset of their owner’s permissions and can never escalate.
Brute-force protection: Strict rate limiting on sign-in and registration, per-key limits for integrations, a read-only sandbox for the public playground, and separate limits across the rest of the API to blunt credential-stuffing and abuse.
Injection-resistant data layer: Schema-validated input on every endpoint and fully parameterized database access through an ORM — no raw SQL anywhere.
Safe file handling: Uploads are type- and size-validated; course packages are screened for path traversal and zip-bomb expansion before a single file is extracted.
Isolated course content: Uploaded content runs inside sandboxed iframes under a content security policy, with hardened response headers and a strict CORS origin allowlist on the API.

Covering OWASP Top 10 risk areas including broken access control, cryptographic failures, injection, identification & authentication failures, and security misconfiguration.

Partners