How to prove staff training for a CQC inspection

Most providers preparing for an assessment start from the same assumption: that somewhere in the regulations is a list of documents, and the job is to have one of each. It is a reasonable assumption and it is wrong, which matters, because it leads people to collect the wrong things very diligently.

What the regulations actually require is narrower in one way and much broader in another. Narrower, because no specific document is named. Broader, because the obligation is continuous rather than a matter of having paperwork ready when someone visits.

What the regulations actually say

Two regulations do the work here, and it is worth reading what they say rather than what they are assumed to say.

Regulation 18 (Staffing) requires providers to deploy sufficient numbers of suitably qualified, competent, skilled and experienced staff, and requires those staff to receive the support, training, professional development, supervision and appraisal necessary for their duties. CQC’s guidance on it adds something people tend to skip over: providers should monitor whether training has been completed and act quickly where it has not.

Regulation 17 (Good governance) requires providers to maintain securely such records as are necessary in relation to persons employed and the management of the regulated activity. Training records are not named. The requirement is that the records you keep are adequate for the purpose, kept securely, and accurate.

Read together, those two produce a requirement that is not really about documents at all. It is about being able to show that the people working in your service are competent to do what they are doing, and that you have a working method for noticing when someone is not yet trained. The certificate is a by-product. The method is the thing being assessed.

That is also how the single assessment framework approaches it. Staffing sits under the quality statement on safe and effective staffing within the Safe key question, and assessors gather evidence across several categories rather than from documents alone. Processes and feedback from staff are two of them. A folder can satisfy the first and be contradicted by the second, which is worth sitting with for a moment: if your records say everyone has done moving and handling training and three members of staff tell an assessor they have not, the records have made your position worse rather than better.

Why a signed attendance sheet is weaker than it looks

The attendance sheet is still the most common form of training evidence in social care, and it has two problems that are easy to miss because the document itself looks so reassuring.

The first is that a signature proves presence, not engagement. Someone signed in at the start of a session. What they did for the following forty minutes is not recorded anywhere. For most purposes that is accepted, and reasonably so. It becomes a problem when the training is the thing being examined after an incident, because presence is a low bar and everybody in the room knows it.

The second is more serious and it is the one that causes trouble. An attendance sheet is a record of who came. It is silent on who did not. The two staff on shift that afternoon, the one who was on annual leave, the new starter who joined the following week, and the agency worker covering nights do not appear on the sheet at all. They do not appear as gaps, either. They simply are not on it.

So the evidence you are holding is structurally incapable of showing the thing Regulation 18 asks you to show, which is that you monitored completion. It shows attendance. Completion is a different measurement, and it requires knowing your denominator.

The four things a training record needs

Whatever you use, a record that survives being questioned needs to answer four things without anyone having to remember anything.

• Who. A named individual. Not a session, not a headcount, not “all staff”.
• What. The specific content, and which version of it. Policies get updated, and “safeguarding training” in March may not be the same material as “safeguarding training” in September.
• When. A date and time recorded by the system, not written in afterwards. A handwritten date is a claim about when something happened; a system timestamp is a record of it.
• Evidence of engagement, not receipt. That the person did something, rather than that something was sent to them. This is the one most systems get wrong.

Worth being honest about the limit: no record can prove attention. A video can play to the end in a browser tab nobody is looking at, and a handout can be signed for without being read. What a good record establishes is that the material was properly delivered, that it was engaged with to the end, and that a named person put their name to having done so. That is the standard the whole e-signature industry operates on and it is normally sufficient. Claiming more than that invites a question you cannot answer.

The gap almost nobody closes

If you take one thing from this, take this part, because it is where otherwise well-run services come unstuck.

Training compliance is usually measured as a snapshot: a matrix, filled in, showing who has done what. The matrix is accurate on the day it was completed. Staff turnover, shift patterns and agency cover then erode it continuously and invisibly, because nothing in the process is watching.

Three specific holes, in rough order of how often they cause problems:

• The people who missed the session. Catch-up is almost always handled informally, by someone intending to sort it out. There is rarely a record of the intention, so there is rarely a record of it not happening.
• New starters mid-cycle. Annual training delivered in one block creates a cohort problem. Someone joining in month two either waits ten months or gets something ad hoc that never makes it onto the matrix.
• Agency and bank staff. Regulation 18 applies to the staff deployed in your service. “The agency said they are trained” is an assurance about a record you do not hold and probably cannot produce.

Each of these is individually small and collectively the reason a service with a tidy training matrix can still be found wanting. The matrix was never wrong. It just stopped being current, and nothing in the process was designed to notice.

What monitoring completion looks like in practice

The practical test is whether you can answer this question without doing any work: who, right now, has not completed the training they are supposed to have?

If answering it means opening a spreadsheet and cross-referencing it against a staff list, you have a record rather than a process. That is not a disaster, but it means the answer is only correct on the days somebody does the cross-referencing, and the gap between those days is where risk accumulates.

A process that satisfies Regulation 18 needs three things working together. A known denominator, which is a current list of who is expected to complete the training, including bank and agency staff. A per-person record of completion rather than a per-session one. And something that surfaces the difference between the two without being asked. The third is the part most providers are missing, and it is the part that turns a filing system into a monitoring system.

Evidencing video-based training specifically

A good deal of mandatory training is now delivered as video, either bought in or recorded in-house, and it creates a particular evidential problem that is worth naming.

Sending a video link to a group email and asking people to confirm they have watched it produces no usable record at all. View counts are not attributable, so twelve views does not tell you which twelve people, or whether one person opened it twelve times. Replies are voluntary, so most people do not send them. And your evidence ends up living in a mailbox, which is awkward to produce and disappears when the person who sent it leaves.

The alternative is usually assumed to be a learning management system, and if training is a significant part of what you do, that is the right answer. But an LMS is a substantial commitment, and the weight of it lands on the staff rather than the manager: an account each, a password each, and an unfamiliar platform to navigate before anyone can watch a nine-minute video. If what you have is one video that forty people need to watch this week, the machinery is disproportionate to the job.

Between those two there is a narrow requirement that is easy to state: your own video, sent to named people, with a record that shows each of them watched it to the end and put their name to it. That is a smaller problem than an LMS solves, and it is the one most services preparing for an assessment actually have.

Where TrainConfirm fits

We built TrainConfirm for that narrow requirement, after looking for something that did it and not finding one.

You upload your own video. Each person gets their own link, which works once. The player has no scrub bar and no speed control, and the confirmation form stays locked until the video reaches the end. They type their name, and that signature is stored with the date, the time and the IP address it came from. Their name and the date sit on screen as a watermark while it plays. The dashboard shows who has completed and who has not, which is the monitoring half rather than the filing half, and everything exports to a spreadsheet whenever you need it.

There is no account for staff to create, no password to set and nothing to install. The email arrives from your organisation’s name with your logo on it, not ours. Most people are done inside a minute of finishing the video, which matters more than it sounds when the alternative is chasing twenty people for a fortnight.

It is not the right tool if you need a library of certified courses, quizzes, qualifications tracking or renewal scheduling. Those are LMS jobs and an LMS does them properly. It is the right tool if the training material is already yours and the thing you are short of is proof.

Common questions

Does CQC require training certificates?

No. No regulation names certificates as the required form of evidence. Regulation 18 requires competence and the monitoring of training completion; Regulation 17 requires adequate, secure records about people employed. A certificate is one way of evidencing that, and on its own it does not demonstrate that you were monitoring completion.

Is a signed attendance sheet enough?

It is evidence, but weak on two counts. It shows presence rather than engagement, and it is silent on the staff who were not there. Since assessors look at processes alongside paperwork, the follow-up question is usually about the people missing from the sheet.

How long should training records be kept?

CQC does not set a single retention period. Most providers keep records for the duration of employment plus a defined period afterwards. Because these are personal data, the period should be set out in your retention policy and justified under UK GDPR rather than left open-ended.

Do agency and bank staff need records too?

Yes. Regulation 18 concerns the staff deployed in the service, not only those directly employed. Where an agency delivers the training, you are generally expected to be able to evidence what it covered rather than relying on an assurance that it took place.

What if someone never completes their training?

Having a gap is not automatically a failure. Not knowing about the gap is the harder position to defend, because it goes to whether you were monitoring at all. A record showing that completion was tracked, the shortfall was identified and action was taken reads considerably better than a matrix that shows full compliance and is contradicted by the staff.

Related reading: How to prove someone watched a video, which compares the five approaches in more detail.