LMS in the UK: a guide for companies and training providers

What UK companies and training providers need from an LMS

UK employers train a lot, on a tighter budget. The Department for Education’s Employer Skills Survey 2024 found that 59% of UK employers had trained staff in the past 12 months, and 63% of the workforce received training. Employers spent £53.0 billion, about £1,700 per employee. In England, spending fell 11.1% in real terms from 2022.

And 70% of employers that train offer online training or e-learning. So the question is rarely whether to train online, but how to do more with less and still prove who was trained, on what and when.

Who regulates training in the UK

There is no single licence for training providers in the UK; what you answer to depends on what you deliver. Every employer must give “such information, instruction, training and supervision as is necessary” for health and safety at work (Health and Safety at Work etc. Act 1974, section 2), and sector rules add more, so expect to be asked for training records.

Apprenticeships in England have their own system. To be funded for apprenticeship training, a provider must be on the Department for Education’s apprenticeship provider and assessment register (APAR). Ofsted inspects that training, and since 10 November 2025 it grades providers with report cards under a renewed framework. An applicant rated “urgent improvement” in an evaluation area, or with safeguarding “not met”, cannot join the register, and the Department can remove a provider at its discretion.

In England, Ofqual regulates qualifications, exams and assessments, including apprenticeship end-point assessments, so a provider that teaches a regulated qualification works through a recognised awarding organisation. Scotland, Wales and Northern Ireland have their own qualification regulators and run apprenticeships their own way.

UK GDPR, the Data (Use and Access) Act and transfers

Learner data falls under the UK GDPR and the Data Protection Act 2018. The Data (Use and Access) Act 2025 changed both. It received Royal Assent on 19 June 2025, and most of its data protection changes have applied since 5 February 2026. On 30 September 2026 the ICO’s functions passed to a new Information Commission, so guidance may carry either name.

Three changes matter for an LMS. Solely automated decisions are allowed more widely, but when one has a significant effect on someone, they must be told, be able to challenge it and get a person to step in. Searches for a subject access request need only be reasonable and proportionate. And the transfer risk assessment is now a “data protection test”. If an AI grade can decide a job or a qualification, plan that human review now.

Your organization is usually the controller and the LMS vendor a processor, under a written contract (UK GDPR, Article 28). Data can go to the EEA and other places the UK has found adequate, and to US companies certified under the UK Extension to the EU-US Data Privacy Framework, in force since 12 October 2023. Other transfers usually rely on the IDTA or the UK Addendum. The EU renewed its adequacy decision for the UK on 19 December 2025, until 27 December 2031. A breach that risks people’s rights must be reported to the regulator within 72 hours where feasible.

Classbase’s hosting region is confirmed during the demo, before anything is agreed. Whoever you talk to, ask these questions:

• In which country and data center are learner records, files and backups stored?
• Which sub-processors see the data, including AI model providers, where are they, and on which transfer tool?
• Will you sign an Article 28 contract that names the region and the sub-processors?
• How fast will you tell us about a breach, so we can report within 72 hours?
• Can we export one learner’s full record to answer a subject access request?
• Which decisions, if any, does the AI take on its own, and how does a person review them?

Language: English first, and Welsh in Wales

Most UK training runs in English. In Wales, 538,300 people aged three and over, 17.8% of residents, could speak Welsh at the 2021 Census, and public bodies there follow Welsh language standards set through the Welsh Language Commissioner. If you train for those bodies, ask how a course, its emails and its certificates work in Welsh.

To be clear about Classbase: its own screens are in English, Arabic and Turkish today. Courses can be taught in the 40 languages the app lists. The AI translates a course with your glossary, ready for review, and flags cards that need a new translation when the source changes. If you need Welsh, ask in the demo whether it is on that list; we won’t promise it here.

The Growth and Skills Levy in England: what changed in 2026

Employers with a pay bill over £3 million pay the levy at 0.5% of that bill, less a £15,000 yearly allowance, through PAYE. It was the Apprenticeship Levy and is now the Growth and Skills Levy. Apprenticeships are devolved, so the funding rules below are England’s.

From 1 August 2026, the 10% government top-up stopped, and new funds expire after 12 months instead of 24. Once its funds run out, a levy payer pays 25% of the cost for new apprentices aged 25 and over, up from 5%. Apprenticeship units, short courses of 30 to 140 hours for employees aged 19 and over, started in April 2026. From September 2026, 16 standards lost funding for new starts, including Team Leader at level 3. From 1 October 2026, non-levy employers can claim £2,000 for hiring a new apprentice aged 16 to 24.

Be clear on what the levy buys. It pays an approved provider for apprenticeship training and assessment. It doesn’t buy an LMS for your company, and the funding rules list the purchase and set-up of an e-portfolio system as an ineligible cost.

What the levy needs is evidence. Providers record planned off-the-job hours on the apprenticeship agreement, the training plan and the Individualised Learner Record (ILR), at least the minimum published for each standard (less only for prior learning), and no programme may fall below 187 hours of evidenced delivery. They review progress at least every three months and keep an evidence pack that backs everything reported in the ILR. If fewer hours were delivered than planned, the employer and apprentice sign a statement within 12 weeks of completion. Electronic evidence and signatures are accepted. These rules change every year, so check the current funding rules on gov.uk.

Classbase has no integration with the apprenticeship service, the ILR or any UK fund. It is designed to keep the evidence behind them: enrollment, attendance at live sessions, test attempts and results, completion and certificates per learner, exported as CSV per group.

Buying an LMS in the UK: tenders and a checklist

Public procurements started on or after 24 February 2025 follow the Procurement Act 2023. Notices go on Find a Tender, the central digital platform, where suppliers register when they want to bid. From 1 January 2026 the thresholds, including VAT, are £135,018 for central government, £207,720 for other authorities and £663,540 for light-touch contracts, a regime that covers many education and training services.

Public buyers can buy cloud software through G-Cloud 15 (lot 2b, software as a service), which runs from 6 August 2026 to 5 February 2028 and is managed by the Government Commercial Agency (Crown Commercial Service until 1 April 2026). Central government and NHS bodies must ask for Cyber Essentials or Cyber Essentials Plus, or equivalent controls, when a supplier handles citizens’ personal data (PPN 014). Public sector websites and apps are measured against WCAG 2.2 level AA under the 2018 accessibility regulations. Private buyers may ask the same questions. Put these points in your requirements:

How Classbase is designed to help

Classbase is an agent-first LMS and LXP: you ask in plain words and it does the work, with your permissions. A typical week for Hannah Becker, training lead at Harbour Logistics: she drops in the new manual handling procedure and gets a course outline to keep or change, sets a rule that enrolls every new warehouse starter with a due date, and lets an agent nudge only the people who are behind. Before an audit she asks who is compliant, expiring or expired, and exports the list.

Training companies run each client as its own organization, so a client sees only its own people, and provider staff who step in get access that ends after eight hours, logged in the client’s activity log. You choose Do it, Ask first or Never for each kind of AI action, and grades the AI is unsure of wait for an instructor. It supports SSO with OIDC or SAML, SCIM, SCORM, LTI 1.3 and xAPI.

Be clear on what it isn’t. Classbase holds no Cyber Essentials, ISO 27001 or SOC 2 certification, has no integration with the apprenticeship service or any UK fund, and doesn’t publish a hosting region yet. Its screens are in English, Arabic and Turkish. It is designed to keep the records UK rules ask for, and in the demo we say what is ready today. Book a demo with one of your own courses and your hardest requirement, and we’ll confirm hosting.