Training that tracks itself, from SCORM to certification

Digital Training, Course & Learning Management System (DTCLMS): author and deliver SCORM 1.2/2004, xAPI, and HTML5 courses with server-graded quizzes, assign mandatory training by department and track compliance, issue verifiable certificates, give learners an AI tutor, and integrate through a documented REST API — all in one role-based platform.

Create your account Sign in

Resume · 45% throughCertificate ready3 courses · 4h 10m on task

lms.kazsystems.com

SCORM: 1.2 & 2004 supported
xAPI: Embedded LRS included
8 roles: Granular RBAC built in
API: Public playground & keys

Features

Everything a modern training program needs

Not a file host with a progress bar bolted on — built around how SCORM, xAPI, real cohorts and mandatory training actually work, with an API for everything else.

One SCORM upload, a whole course

Drop in a SCORM 1.2 or 2004 zip and every module in its manifest becomes its own unit automatically — sequencing requests and all. Or bring an HTML5 bundle with our lightweight tracking SDK.

course.zip

Module 1 — Fundamentals
Module 2 — In Practice
Final Assessment

An AI tutor inside every course

A course-grounded AI tutor answers learner questions in context, right beside the player. Instructors get AI-drafted quizzes to review and refine — never published blind.

AI Tutor

Workplace Safety & Compliance

On this course

Can you explain module 2’s key idea again?

Of course — based on this course’s outline, the core concept is…

Ask a question about this course…

Grounded in this course

Cohort analytics & compliance

Completion rates, per-unit drop-off, quiz pass rates and time-on-task for every course — and a people × training compliance matrix that answers “who is overdue in Warehouse?” in one click. CSV export when you need to go deeper.

Progress overview from the learner dashboard: 48% average completion, completed versus in-progress counts, and time on task

Real role-based access
Eight built-in roles with resource-level permissions and row-level ownership — plus a manager view that follows the reporting line, not a role.
Verifiable certificates
Sequentially numbered PDF certificates with a public, no-login verification page, optional validity periods and automatic recertification cycles.
Sequential unlocking
Units unlock in order as learners complete them, with per-unit overrides for orientation content.
Assignments & compliance
Assign mandatory training to dynamic audiences by department, job role or hire date, with due rules, reminders, manager escalation and an exemption register.
Question bank & quizzes
Reusable, tagged questions assembled into server-graded quizzes with pass marks, timers, attempt caps and shuffling — imported from CSV or drafted by AI.
A real REST API
Every screen runs on the same documented API: scoped API keys, a request log, OpenAPI export and a public playground to try it before you write a line.

Training built for every audience

Whether you’re training staff, onboarding partners, or educating customers, DTCLMS delivers the right training to the right people — and, for mandatory training, proves who completed it and by when. No extra platforms. No spreadsheets.

Live
Employee & compliance training
Welcome aboard — your first module is ready
Onboarding training
Partner progress
+12%
Partner training
AI
Customer training

See all solutions

In the room

Built for the moment a learner actually needs help

Progress, certificates and the AI tutor sit in the same place the course does — so nobody leaves the player to hunt for a status, a score, or a second opinion.

See it in your account

A training specialist wearing a headset, mid-conversation

Live support · same sessionAI tutor on the player

For every role

One platform, purpose-built for every role

Admins, instructors and learners each get their own portal; managers get My Team the moment someone reports to them. Nobody wades through screens meant for someone else’s job.

Two colleagues reviewing platform records together at a laptop

Admins

Manage users, roles and enrollments, run the organization structure and HR import, assign training and watch compliance, moderate reviews, and issue API keys — from one overview.

Two people planning a course outline over notes and laptops

Instructors

Build courses module by module, import a full SCORM package in one upload, assemble quizzes from your question bank, reply to feedback, and track your own cohorts.

Learners

Browse the catalog, see what is due on your training plan, ask the AI tutor when stuck, climb the leaderboard, and download a verifiable certificate and transcript.

Embedded xAPI store
Statements from SCORM and HTML5 content land in a built-in xAPI endpoint — no separate LRS to stand up.
Full audit trail
Every user, role, course, assignment and exemption change is logged — plus every API request made with a key — searchable and exportable from the admin portal.
DRAFT → REVIEW → PUBLISHED
A real content workflow — reviewers approve before anything reaches a learner’s catalog.

Security

Secure by design

Engineered around OWASP-aligned practices at every layer — authentication, authorization, input handling, and content isolation.

Hardened authentication: Passwords stored only as bcrypt hashes. Short-lived access tokens paired with single-use, rotating refresh tokens — held in httpOnly, Secure cookies and stored server-side as hashes.
Granular access control: Every request passes role-based permission checks at the resource-action level, with row-level ownership rules on top — instructors touch only their own courses, managers only their reports. API keys are scoped to a subset of their owner’s permissions and can never escalate.
Brute-force protection: Strict rate limiting on sign-in and registration, per-key limits for integrations, a read-only sandbox for the public playground, and separate limits across the rest of the API to blunt credential-stuffing and abuse.
Injection-resistant data layer: Schema-validated input on every endpoint and fully parameterized database access through an ORM — no raw SQL anywhere.
Safe file handling: Uploads are type- and size-validated; course packages are screened for path traversal and zip-bomb expansion before a single file is extracted.
Isolated course content: Uploaded content runs inside sandboxed iframes under a content security policy, with hardened response headers and a strict CORS origin allowlist on the API.

Covering OWASP Top 10 risk areas including broken access control, cryptographic failures, injection, identification & authentication failures, and security misconfiguration.

Partners