Compliance · people

The course has been run. The rule still is not followed.

A mandatory course documents that people have been through it. That is not the same as something changing at two o’clock on a busy day. We build them as short as the subject allows and as close to the action as possible — for people who want to do their job properly.

Get in touch Is it a system instead? →

GDPR, health and safety, information security, whistleblowing. Everyone has to go through it, everyone clicks through it, and afterwards the same things happen as before. Next year it is repeated.

Most people want to do it properly. Most data breaches do not happen because someone did not know the rule — they happen because in the moment it was easier not to.

What we build

The mandatory courses

GDPR, health and safety, information security, good administrative practice. Built around the action that has to happen in the working day — not a multiple-choice test in whether you can remember the acronyms.

As short as the subject allows

Cut to the bone, written for the person receiving it, and built around the action that has to happen.

The rule and the channel around it

A rule saying the manager calls on particular days of sick leave can be written down and still not happen. In Esbjerg the automatic reminder used to go to the manager only; now it goes to both. The same move applies to policies, guidelines and the channels they rest on.

The documentation as a by-product

Completion records and certificates should fall out of people doing the thing — not be an administrative job someone does afterwards.

Case · Odense Municipality

The rule was never the problem. It was the workflows, and colleagues interrupting at the wrong moments

Information security, GDPR, good administrative practice and health and safety for a large and varied workforce — four subjects that are legally heavy and apply to everyone, from those who handle personal data every day to those who almost never do.

From the start the municipality was clear that learning costs time. That made the work harder, not easier: it is easy to pour in the whole handbook and call yourself covered. Instead the material is built on behavioural design throughout — “what do high-visibility vests have to do with GDPR?” is about making a risky situation visible, not about explaining the regulation one more time.

5 modulesbasics, information security, GDPR, administrative practice, health and safety

90 minutestotal running time for all of it

The full case →

Case · Aarsleff Rail

Seven minutes on a phone — scanned from a QR code on site

A compulsory safety course that had to work out on the site, for their own people and for external partners, in several languages. The course is part of the access flow: you scan, choose a language, complete it and get your certificate.

The content does not explain the rules — it puts you in the situation. “You need to fetch materials. Between you and the materials lies a track. You were briefed yesterday. What do you do?” The feedback comes only once the choice has been made.

7 minutesto complete the course

4 languagesDanish, English, German and Polish

QR → certificateaccess and documentation in the same flow

The full case →

What does it cost? A project typically runs between DKK 30,000 and 120,000 depending on scope — larger jobs can go above that. We give a fixed quote once we have seen the task, and the first conversation costs nothing.

A course in the rules assumes people do the wrong thing because they do not know better. That is rarely the problem.

The problem is what you do in the moment. When you are busy. When a colleague goes first. When you assume conditions are the same as yesterday.

It is also why the quantity matters: the more rules competing for attention at once, the fewer of them are followed. It is the same limit a person has in the middle of a working day. The mechanism is the same for people and for systems →

So we do not measure completion. We look at whether people do something differently afterwards — and rebuild it if they do not.