Learning delivery
RODMENA cmi5
Comin suneThe launchin system that gars cmi5 coorses behave the wey the staundart says.
RODMENA cmi5 is the LMS side o the cmi5 staundart. It imports cmi5 coorse packages, registers learners, an launches ilka pairt o a coorse wi a single-use link. It checks ilka learning record a coorse sends agin the cmi5 rules afore acceptin it, then decides completion an satisfaction by the coorse’s ain criteria. Records are keepit an forrit in order tae the RODMENA LRS, sae learning continues even whan the LRS is unavailable.
Wha it is for. Organisations and learning platforms that deliver cmi5 courses, includin public-sector buyers that need learning records they can audit. It is uised throu its API by a learning management system, and learners never cry it directly. REES is its first consumer.
- Status
- Comin sune
- Pairt o
- Offerins
- Licence
- Proprietary. Copyright RODMENA LIMITED, aw richts reserved.
- Conformance
- 21 cmi5 package tests, aw passed
- 66 cmi5 runtime tests, aw passed
- Verified 24 September 2026
- Tags
- cmi5xAPIe-learningCoorse launchLMS integrationLairnin records
Technical specification
Stated for a technical assessor. A row wi nae measured value is left oot.
Standards
- cmi5
- cmi5 (Quartz), wi xAPI 1.0.3 as the statement format.
- Conformance suite
- ADL CATAPULT LMS test suite, run in heidless Chrome against the rinnin system.
- Conformance result
- Paukage tests: 21 o 21. Runtime tests: 66 o 66.
- Repeatability
- Baith suites were run fower times in a single day against the rinnin system, and aw fower runs were identical.
- System o record
- The RODMENA LRS. cmi5 forrits ilka record it taks til it.
Coorse lifecycle
- Import
- cmi5 coorse packages are importit an their structur read frae the manifest.
- Launch
- Ilka assignable unit is launched wi a single-use link, sae a link canna be replayed or shared intae a seicont session.
- Rules at the door
- Ilka statement a course sends is checkit against the cmi5 session and verb rules afore it is acceptit. A refusal names the specification requirement it breaks.
- Compleetion
- Completion and satisfaction are decided by the course’s ain criteria, as the staundart requires, and no by a rule o ours.
- Return
- Whan the learning management system gies a return URL, the learner is offered a wey back tae it.
Durability
- Throu an LRS outage
- Records are acceptit an haudit while the LRS is unavailable, syne forrit when it returns. Learning continues in the meantime.
- Exackly ance, in order
- Held records are forrit exactly yince and in order, and order hauds across forrit batches.
- Measurt
- A ten-meenit LRS outage wi 200 learners brocht nae learner-facing errors. The delivery o ilka held record wis checked efterhaund against whit cmi5 had acceptit.
Isolation and security
- Tenant isolation
- Ilka customer's data is separatit by rules the database enforces, and no by application code alane.
- Encryption at rest
- AES-256-GCM, wi keys bund tae the row they pertect.
- Learner identifiers
- The identifier the learning management system supplies is an xAPI account o hame page and name. Email-style identifiers are refused. It is stored anely as a keyed token.
- Client addresses
- Never stored. Request logs cairry a keyed token in place o an IP address.
- Objects hained
- Course packages and erasure records are encrypted on oor host afore they are uplaidit tae object storage.
Data protection
- Role
- A processor, acting for the learning management system customer as controller. Article 28 terms are on the Data Processing Agreement page.
- Whit is processed
- The learner identifier the customer’s system supplies, and the learning records a course sends, including results and scores.
- Retention
- Per tenant an contractual. The defauts are 1,095 days for registrations an statement bodies, configurable doun tae ae day.
- Erasure
- A learner’s records are pseudonymised in cmi5 straucht awa, their document copies in the LRS are stappit and taen awa, and the erasure is haundit tae the RODMENA LRS wi a recordit receipt, sae ae request reaches baith systems. Efter a database restore, ilka erasure is reapplied frae sealed records keepit ootside the database, as a step o the restore procedure.
- Reasons for the operator
- The reason recordit for an erasure or a deletion is a ticket reference or a code, never free text about a person, because thae records outlive the data.
- Location
- The same database tier the Trust Centre states, in the Unitit Kinrick, France an Germany, wi nae ither transfer.
Integrations
- Document copies tae the LRS
- Optional an aff by default, per customer. Saved-state an learner-preference documents are copied ae way tae the RODMENA LRS an deleted there whan they are deleted or reach retention. Session launch data is copied withoot its entitlement key.
- LRS cross-check
- On request, a registration’s statements are compared wi the LRS copy, an a signed result for ilka statement is addit tae the evidence pack.
- Signit statements
- Optional, per customer. The statements cmi5 writes itself (launched, abandoned, satisfied, waived) carry an xAPI digital signature with RODMENA’s service certificate. The signature is removed wi the statement body at retention or erasure.
- Webhooks
- Optional. Event notifications gang tae HTTPS endpoints the customer registers, signed wi HMAC-SHA256. They cairry only ids the customer already hauds and timestamps, never a learner identifier or a learning record. Events are keepit for 30 days.
Exit and portability
- Return o data
- A customer requests an export throu the API. It runs anely efter a seicont person approves it, is encryptit tae the customer's ain key, and comes wi a signed manifest kiverin ilka table the customer awns.
- Deletion at contract end
- Ilka record and ilka stored object version is remuived. The customer receives a signed, timestamped deletion certificate listing whit wis deleted, whit is keepit and why, and whit it disna cover.
Evidence
- Pruif o completion
- Exportit as a signed, timestamped pack that a third pairty can verifie affline, withoot access tae oor systems.
- Timestampin
- A public RFC 3161 timestamp authority anchors the audit chain. It receives a SHA-256 digest o a signed chain heid, aboot every fifteen meenits, and only for a customer whase chain has chynged. Nae personal data, nae identifiers and nae statements are sent tae it.
- Gin the authority cannae be reached
- Learning, launches, statements and evidence export are no affected. Anchoring retries on the next pass, the newest audit rows are simply no yet covered by an anchor, and ilk tenant’s health reports how lang they hae waited.
Accessibility
Partly conformant wi WCAG 2.2 AA. Oor surfaces are designed tae meet WCAG 2.2 AA sae that a public-sector customer can meet its duty under the Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018; the Equality Act 2010 binds RODMENA directly.
This product
- Whit this covers
- The fower pages a learner sees: the launch page; the app launch page (“Open your course in its app”), shawn insteid whan a course opens in a separate app on the learner’s device, that niver opens onything by itsel and ayeweys waits for Continue; the page shawn whan a link has expired or has aaready been used; and the error page. Course content itsel belangs tae the customer and is ootside this statement.
- Automatit testin
- axe-core 4, WCAG 2.2 AA alang wi its best-practice rules: 20 checks clean oot o 20, kiverin five page forms (launch, app launch, expired wi and wiout a wey back, error) at desktop and phone widths in baith the licht and the dark theme, run agin the live pages on 26 September 2026.
- Screen reader
- Testit wi Orca 46 and Google Chrome on Linux on ilka page. Ilka page is annunced wi its title or main landmark, and the ae control as “Continue push button” or “Return to the course page link”.
- Keybuird
- Testit wi the keyboard alane in Google Chrome on macOS and Linux. The first Tab raxes the ae control on ilka page, wi a visible 3 px focus state. On macOS, Chrome and Safari skip links on Tab unless “Press Tab to highlight each item” is on; Option+Tab raxes thaim ether wey.
- Wantin JavaScript
- The launch page submits on its ain whaur scriptin is available, and a visible Continue button is the path whaur it is no. Naething on thir pages needs a script.
- Nae time limits
- Nae coontdoun an nae time leemit is pitten tae the learner on ony o the pages.
- Biggit frae
- Plain semantic HTML wi ae main landmark, a single-column layoot an a polite live region fur status. Nae third-pairty user-interface framework is uised.
- No yet duin
- Testing wi VoiceOver, NVDA or JAWS, and TalkBack, and a third-pairty accessibility audit. Till the audit is complete the statement bides at pairtially conformant, and we will say sae tae ony buyer that speirs.
- Reportin a problem
- Accessibility problems wi thir pages gang tae the address on oor accessibility statement, and we answer them thare.
Whit it dis
-
Conformance-tested
Passes the ADL CATAPULT cmi5 LMS test suite: 21 o 21 package tests an 66 o 66 runtime tests.
-
Rules enforced at the door
Ilka statement a course sends is checkit against the cmi5 session and verb rules, and a refusal names the requirement it breaks.
-
Keep wirkin throu an ootage
Records are taen in and haudit, syne forrit exackly ance and in order. A ten-meenit LRS outage wi 200 learners caused nae learner-facing errors.
-
Isolatit an encryptit
Ilka customer's data is separatit by database row-level security, encryptit at rest, an learner identifiers are stowit anely as keyed tokens.
-
Evidence a third pairtie can check
Completion evidence is exportit as a signed, timestamped pack that verifies offline wiout access tae oor systems.
-
Erasure that reaches the LRS
A learner’s erasure is applied straucht awa in cmi5 and haundit tae the LRS wi a recordit receipt.
For documentation, a pilot or an integration, contact us.