Workflows, Hiring & HRTraining Courses
On this page0

Unfamiliar word? See Glossary: words used in these docs. Looking for the tasks in order? Begin at Start Here.

Reference

Included in: Team and Advanced. Which Plan Includes What

Training Courses

This page describes what a course is made of, knowledge checks, the starter library, assigning, reminders and renewals, and how completion is recorded. Courses are on Team and Advanced. This page is part of the reference Training, Phishing & Policy Signing.

What It Does

  • What a course is made of. Parts of text read one per page, video, and optionally a link to training held elsewhere. A video is one of the ready-made ones shipped with the product, a link to your own video, or an uploaded file. Uploaded video is part of the preview and not yet validated end-to-end.
  • How a course is marked done. You choose one of four ways: the person presses a button, ticks that they have read and understood, passes a knowledge check, or uploads a certificate.
  • Knowledge checks. A set of multiple-choice questions, up to 30. The pass mark is a whole number from 50 to 100, and 80 when left empty. Answers are marked on the server. After a fail the person is told their score and how many answers were wrong, never which ones.
  • The starter library. 13 ready-made courses. Nothing is added by itself, and a course you add is assigned to nobody until you assign it. They are starting texts: read each one and make it yours first.
  • Assigning. A course goes to everyone, a department or named people, and each person is told by email and in the app. A course can also be given to new joiners automatically.
  • Reminders and renewals. A daily run reminds the person 7 days before the due date, on the day, the day after, and then every week until it is done. From a week late, the person’s manager is told too. A course can be set to come back for redoing after a number of months.
  • Completion. The roster lists every assignment, with a CSV download and, for one course, a signed roster as a PDF. A manager sees what is open and overdue for the people below them, read-only, and cannot complete training for them.

Courses

TrainingCourses lists every course with how many people have it, how many are done and how many are overdue. “New course” opens an editor of five steps, starting with “Basics” and ending with “Preview”, which plays the course as an employee will see it without saving or recording anything. A course needs a “Title”; everything else is optional. Switching “Active” off retires a course: it can no longer be assigned or reminded about, what was still open on it leaves people’s lists, and what was completed stays as history.

What A Course Is Made Of

Parts To Read

The text is written as parts, each with a “Heading” and “Text”. Employees read one part per page. A line that starts with “- ” is a bullet point and words wrapped in ** ** are bold. The whole text holds at most 20,000 characters. A course can also carry a “Link to the training (optional)” for training held elsewhere, with or without text of its own.

Video

A course video is shown before the reading, and each part can have a video of its own at the top of its page. There are three kinds: one of the 13 ready-made videos shipped with the product, “A link to my own video…”, or “Upload a video file…”. A link must start with https:// and point directly at a video file that plays in a browser; a page on a video site will not play. An uploaded file must be an .mp4 or a .webm of at most 95 MB, is checked by its own contents rather than its name, and can only be added once the course has been saved. Only people the course is assigned to, and holders of the training permission, can fetch an uploaded video.

Must Watch

With “People must watch videos to the end before they continue” switched on, the “Start” and “Next” buttons wait for the video to end and skipping ahead is put back. This is enforced in the person’s browser only. Nothing on the server records or proves that a video was watched, so treat it as a nudge, not as evidence. A course that is already finished opens without the lock.

How It Is Marked Done

“To mark it done” has four choices: “Nothing extra” (the person presses “I have done this”), “Tick “I have read and understood””, “Pass a knowledge check” or “Upload a certificate”. A course with a compliance topic cannot use “Nothing extra”.

Knowledge Checks

A knowledge check is a set of multiple-choice questions, the only kind of question there is. A check holds up to 30 questions. Each has between 2 and 6 answers, exactly one of them correct, and an optional short example shown above it. The person sees one question per page, then a page to review their answers before sending them.

Pass Mark

“Pass mark (%)” is a whole number from 50 to 100 and is 80 when left empty. An unanswered question counts as wrong. Answers are marked on the server; the correct answers are never sent to the person’s browser.

Question Pools

“Questions per try (optional)” turns the questions into a pool. Write more questions than this number and each try draws that many at random, so a second try is a different paper. Left empty, every try shows all of them. The order of the questions and of their answers is reshuffled on every try either way.

Attempts

By default a person can try again until they pass. “Tries per day (optional)”, from 1 to 10, sets a daily limit; the tries start again the next day, so nobody is locked out for good. The score and the number of tries are kept on the completion record.

After A Fail

The person is told their score, the pass mark and how many answers were wrong — never which ones, and never the right answer. They can use “Read the text again” and then try a new set of questions. A pass completes the course at once.

The Starter Library And Topics

The Library

The “Library” button opens 13 ready-made courses, each with parts to read, a video and a knowledge check that shows 5 questions per try from a larger pool. Nothing is added by itself. Adding a course creates an ordinary course that you can edit like one you wrote, and it is assigned to nobody until you assign it. They are starting texts: read each one and make it yours first.

Topics

“What is this training about?” gives a course a compliance topic, or “Something else (not a compliance topic)”. You never link a course to a control yourself. A course with a topic must ask for a tick, a knowledge check or a certificate, and must be redone at least every 12 months.

Assigning, Reminders And Renewals

Assigning

“Assign” gives a course to “Everyone”, “A department” or “Named people”. Each person is told by email and in the app. Assigning again leaves people who already have it as they are and never resets someone who has finished. “Due (optional)” sets the date; left empty, it is the course’s “Days to finish” (1 to 365, 30 unless changed) from today.

Joiners And Standing Audiences

“Give it to new joiners automatically” assigns the course to everyone who joins from the day it is switched on; people already here are not affected. A course can also keep a standing audience of “Everyone” or “People who match…” chosen departments, job titles or locations. A daily run gives it to anyone who comes into that audience. Each person is given a course this way once: if you remove it, it is not put back.

Reminders

A daily run reminds the person 7 days before the due date, on the day, the day after, and then every week until it is done. From a week late, the person’s manager is told too, each week; with no manager on record, holders of the training permission are told instead. On Mondays, managers also get one summary of overdue training in their team. TrainingSettings lets you change the “First reminder (days before the due date)” (1 to 30) and the hour of the daily run in UTC (“Send at”).

Renewals

“Redo every (months)” takes 1 to 120. A completed course then comes back to the person that long after they finished it, with 30 days to do it again. “Days to redo it once it has lapsed” in Settings changes the 30 (7 to 90), for renewals opened from then on. Changing a course’s renewal period re-dates the completions already recorded.

Completion, The Roster And The Team View

Who Can Mark It Done

The person themselves, by giving whatever the course asks for. A holder of the training permission can “Mark done” for someone under “Who has done it”; the lists then show it as “Marked by HR” and it is recorded in their name in the audit log. On a course with a compliance topic that needs a reason, unless the person uploaded their own certificate. A manager cannot complete training for a report, and a knowledge check can only be answered by the person it is assigned to.

Certificates

A course that asks for a certificate takes a PDF, PNG or JPEG of up to 10 MB, kept in the person’s documents. Separately, a finished course offers a “Certificate of completion (PDF)” on the person’s own list. When a person completes a course themselves they also get an email, with that PDF attached when it can be produced; if it cannot, the email is sent without it.

The Roster

TrainingPeople lists every assignment, filtered by course, department or status, with “Download CSV” and, for one course, a “Signed roster (PDF)” that can be taken as of a past day. Tick rows to change the due date, remind now, mark done or remove for several people at once. On a course with a compliance topic, moving a deadline later, or removing it from someone who has not done it, needs a reason. People who have left are not listed.

A Manager's Team View

My WorkMy Team shows a manager what is open and overdue for everyone below them in the reporting line: the course, the due date and whether it is late. It is read-only and needs no permission.

If something here is not working as you expect, start with When something goes wrong.

The plain explanation is above. This part is for IT and developers: the exact settings, permission names, API addresses and data fields behind it. Closed: select the heading above to open it. While it is closed, your browser’s find-on-page (Ctrl+F or Cmd+F) does not search this part.

Worked Example: Mark Your Own Training Done

A write made with the signed-in session cookie, using the same host placeholder as the API reference. A cookie-authenticated write must send an Origin header for your instance’s own address, or the gateway answers 403 CSRF check failed: missing or untrusted Origin. before the route runs. The same call with Authorization: Bearer $ZX_TOKEN in place of the cookie needs no Origin.

# 57 is the id of one of your own assignments, from GET /user-management/training/mine.

curl -X POST https://<your-instance>-api.zonitix.com/api/v1/user-management/training/assignments/57/complete \

-H 'Origin: https://<your-instance>.zonitix.com' -H 'Content-Type: application/json' \

--cookie '__Host-token=<session-jwt>' -d '{ "acknowledged": true }'

# 200. Sending it again is safe: nothing new is recorded, and the item comes back as it is with "course": null.

{ "assignment": { "id": 57, "courseId": 12, "userId": 7, "dueDate": "2026-10-31",

"status": "completed", "completedAt": "2026-10-10T09:30:00.000Z",

"lastCompletedAt": "2026-10-10T09:30:00.000Z", "expiresAt": "2027-10-10", "overdue": false,

"acknowledgedAt": "2026-10-10T09:30:00.000Z", "hasCertificate": false,

"quizTriesLeft": null, "quiz": null, "course": { "id": 12, "title": "...", ... } } }

# 400 "Confirm that you have read and understood it." when the item asks for it and acknowledged is missing.

# 404 "Assignment not found." for an assignment that is not yours, unless you hold manage_employee_training.

# 402 "Subscription lapsed" when the subscription has lapsed. Values above are illustrative.

Related reference