Lairnin delivery
RODMENA cmi5
Comin suneThe launchin system that maks cmi5 coorses behave the way the staundart says.
RODMENA cmi5 is the LMS side o the cmi5 staundart. It imports cmi5 coorse packages, registers learners, an launches ilka pairt o a coorse wi a single-use link. It checks ivery learning record a coorse sends agin the cmi5 rules afore acceptin it, then decides completion an satisfaction by the coorse's ain criteria. Records are keepit an forrit in order tae the RODMENA LRS, sae learning continues even whan the LRS is unavailable.
Wha it is for. Organisations an learnin platforms that deliver cmi5 coorses, includin public-sector buyers that need learnin records they can audit. It is used throu its API by a learnin management system, an learners never caa it directly. REES is its first consumer.
- Status
- Comin sune
- Pairt o
- Offerins
- Licence
- Proprietary. Copyright RODMENA LIMITED, all rights reserved.
- Conformance
- 21 cmi5 package tests, aa passed
- 66 cmi5 runtime tests, aa passed
- Verified 24 September 2026
- Tags
- cmi5xAPIe-learningCoorse launchLMS integrationLairnin records
Technical specification
Stated for a technical assessor. A row wi nae measured value is left oot.
Standards
- cmi5
- cmi5 (Quartz), wi xAPI 1.0.3 as the statement format.
- Conformance suite
- ADL CATAPULT LMS test suite, run in headless Chrome against the running system.
- Conformance result
- Poukage tests: 21 o 21. Runtime tests: 66 o 66.
- Repeatability
- Baith suites war run fower times in a single day agin the runnin system, an aw fower runs war identical.
- System o record
- The RODMENA LRS. cmi5 forrits ivery acceptit record tae it.
Coorse lifecycle
- Import
- cmi5 coorse packages is importit an thair structur read fae the manifest.
- Launch
- Ilka assignable unit is launched wi a single-use link, sae a link cannae be replayed or shared intae a seicont session.
- Rules at the door
- Ilka statement a coorse sends is checked agin the cmi5 session an verb rules afore it is acceptit. A refusal names the specification requirement it breaks.
- Compleetion
- Completion an satisfaction is decided by the course's ain criteria, as the staundart requires, an no by a rule o oors.
- Return
- Whar the learning management system gies a return URL, the learner is offered a wye back tae it.
Durability
- Throu an LRS outage
- Records is taen an haudit while the LRS is no available, than forrit when it comes back. Learin continues in the meantime.
- Exackly wance, in order
- Held records is forrit on exactly yin time an in order, an the order hauds across forrit batches.
- Measured
- A ten-meenit LRS outage wi 200 learners brocht nae learner-facing errors. The delivery o ilka held record wis checked efterhaun against whit cmi5 had accepted.
Isolation an security
- Tenant isolation
- Ilka customer's data is separatit by rules the database enforces, an no by application code alane.
- Encryption at rest
- AES-256-GCM, wi keys bund tae the row they pertect.
- Learner identifiers
- The identifier the learning management system supplies is an xAPI account o hame page an name. Email-style identifiers is refused. It is stored only as a keyed token.
- Client addresses
- Never stored. Request logs cairry a keyed token in place o an IP address.
- Stored objects
- Course packages an erasure records is encryptit on oor host afore they are uplaidit tae object storage.
Data protection
- Role
- A processor, actin for the learnin management system customer as controller. Article 28 terms is on the Data Processing Agreement page.
- Whit is processed
- The learner identifier the customer’s system supplies, and the learning records a coorse sends, includin results and scores.
- Keepin
- Per tenant an contractual. The defaults is 1,095 days fur registrations an statement bodies, configurable doon tae ae day.
- Erasure
- A learner’s records are pseudonymised in cmi5 straucht awa, their document copies in the LRS are stapped and taen oot, and the erasure is haundit tae the RODMENA LRS wi a recordit receipt, sae ae request reaches baith systems. Efter a database restore, ilka erasure is reapplied fae sealed records keepit ootside the database, as a step o the restore procedure.
- Operator raisons
- The reason recordit for an erasure or a deletion is a ticket reference or a code, never free text about a person, because thae records outlive the data.
- Location
- The same database tier the Trust Centre states, in the Unitit Kinrick, France an Germany, wi nae ither transfer.
Integrations
- Document copies tae the LRS
- Optional an aff by default, per customer. Saved-state an learner-preference documents is copied ae way tae the RODMENA LRS an deleted there whan they are deleted or reach retention. Session launch data is copied withoot its entitlement key.
- LRS cross-check
- On request, a registration’s statements are compared wi the LRS copy, an a signed result fur ilka statement is addit tae the evidence pack.
- Signed statements
- Optional, per customer. The statements cmi5 writes itself (launched, abandoned, satisfied, waived) carry an xAPI digital signature with RODMENA’s service certificate. The signature is removed with the statement body at retention or erasure.
- Webhooks
- Optional. Event notifications gaun tae HTTPS endpoints the customer registers, signed wi HMAC-SHA256. Thay cairry only ids the customer haes already and timestamps, never a learner identifier or a learning record. Events is keepit for 30 days.
Exit an portability
- Return o data
- A customer requests an export throu the API. It runs only efter a second person approves it, is encrypted tae the customer's ain key, an comes wi a signed manifest coverin ivery table the customer owns.
- Delytion at contract end
- Ilka record an ilka stored object version is taen awa. The customer gets a signed, timestamped deletion certificate that leets oot whit wis deleted, whit is keepit an why, an whit it disnae cover.
Evidence
- Evidence o completion
- Exported as a signed, timestamped pack that a third pairtie can verify offline, wi nae access tae oor systems.
- Timestamping
- A public RFC 3161 timestamp authority anchors the audit chain. It receives a SHA-256 digest o a signed chain heid, aboot ivery fifteen meenits, an only fur a customer whase chain has chynged. Nae personal data, nae identifiers an nae statements is sent tae it.
- If the authority is unreachable
- Lairnin, launches, statements an evidence export are no affected. Anchoring retries on the next pass, the newest audit rows are juist no yet covered by an anchor, an ilk tenant’s health reports hoo lang they hae waitit.
Accessibility
Pairtially conformant wi WCAG 2.2 AA. Oor surfaces is designed tae meet WCAG 2.2 AA sae that a public-sector customer can meet its duty unner the Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018; the Equality Act 2010 binds RODMENA directly.
This product
- Whit this covers
- The fower pages a learner sees: the launch page; the app launch page (“Open your course in its app”), shawn insteid whan a course opens in a separate app on the learner’s device, that niver opens onythin by itsel an aye waits for Continue; the page shawn whan a link has expired or has already been used; an the error page. Course content itsel belangs tae the customer an is ootside this statement.
- Automatit testin
- axe-core 4, WCAG 2.2 AA alang wi its best-practice rules: 20 checks clean oot o 20, kiverin five page forms (launch, app launch, expired wi an wioot a wye back, error) at desktop an phone widths in baith the licht an the dark theme, run agin the live pages on 26 September 2026.
- Screen reader
- Tested wi Orca 46 an Google Chrome on Linux on ilka page. Ilka page is annunced wi its title or main landmark, an the ae control as “Continue push button” or “Return to the course page link”.
- Keyboard
- Tested by keyboard alane in Google Chrome on macOS and Linux. The first Tab reaches the only control on ilka page, wi a visible 3 px focus state. On macOS, Chrome and Safari skip links on Tab unless “Press Tab to highlight each item” is on; Option+Tab reaches thaim either way.
- Wioot JavaScript
- The launch page submits on its ain where scripting is available, an a visible Continue button is the path where it is no. Naethin on thir pages needs a script.
- Nae time leemits
- Nae coontdoun an nae time leemit is pit afore the learner on ony o the pages.
- Biggit fae
- Plain semantic HTML wi one main landmark, a single-column layoot an a polite live region fur status. Nae third-party user-interface framework is used.
- Nocht duin
- Testing wi VoiceOver, NVDA or JAWS, an TalkBack, an a third-pairty accessibility audit. Till the audit is complete the statement stays at pairtially conformant, an we will say that tae ony buyer that asks.
- Reportin a problem
- Accessibility problems wi thir pages gang tae the address on oor accessibility statement, an we answer thaim thair.
Whit it daes
-
Conformance-tested
Passes the ADL CATAPULT cmi5 LMS test suite: 21 o 21 package tests an 66 o 66 runtime tests.
-
Rules enforced at the door
Ilka statement a course sends is checked agin the cmi5 session an verb rules, an a refusal names the requirement it breaks.
-
Keep workin throu an ootage
Records is taen in an hauden, syne forrit exactly yinst an in order. A ten-meenit LRS outage wi 200 learners caused nae learner-facing errors.
-
Isolatit an encryptit
Ilka customer's data is separatit by database row-level security, encryptit at rest, an learner identifiers is stowed only as keyed tokens.
-
Evidence a third pairty can check
Completion evidence is expoarted as a signed, timestamped pack that verifies affline wi'oot access tae oor systems.
-
Erasure that reaches the LRS
A learner’s erasure is applied immediately in cmi5 an haundit tae the LRS wi a recordit receipt.
For documentation, a pilot or an integration, contact us.