Custom integrity and code of conduct training software
Appfront builds bespoke software that doesn't just publish your organisation's integrity policy, Code of Conduct and whistleblower procedure, but also demonstrably puts them into practice. Based on role and risk profile, employees are assigned the right ethical dilemma training, sign the Code of Conduct digitally, and their participation is recorded in a file you can present during an audit or incident. Would you rather discuss this directly? Get in touch.
What is integrity training software?
Integrity training software supports the behavioural side of your compliance policy: the code of conduct, the integrity policy, the whistleblower scheme and the dilemmas employees actually face in practice. The system assigns modules by role, department or risk profile, has employees sign the relevant declaration digitally, and keeps a record of who completed what and when.
That is something different from a learning platform with a course catalogue. Where an e-learning platform is about knowledge transfer and a course library, integrity training is about obligation, repetition and evidence: who was required to complete this, whether they did, what they declared, and whether you can demonstrate it. The emphasis is on the record, not on pedagogy.
Appfront builds this as custom software in line with the OWASP security guidelines and with GDPR as a baseline. We capture your own code of conduct, role profiles, repeat cycles and escalation rules precisely in the system, so it reflects your policy rather than the other way around.
Assignment by risk profile
Not everyone needs everything. Procurement receives the module on gifts from business relations, the board receives the one on conflicts of interest. Assignment follows from role, department and risk profile.
Dilemmas instead of multiple choice
Integrity is poorly learned through factual questions. The system presents situations where no answer is clearly right, lets the employee choose, and then shows the reasoning.
Demonstrable participation record
A file per employee with assigned modules, completion date, signed declaration and repeat date, exportable when an auditor or regulator asks for it.
Integrity training or compliance training? The distinction
This page deliberately focuses on conduct and integrity. Appfront also has a page on compliance training platforms in the broader sense. The two partly overlap, so here is where the line lies: if you choose the wrong entry point, you will read a page that does not quite address your question.
Conduct, integrity and declarations
Code of conduct, integrity policy, whistleblower scheme, conflicts of interest, gifts from business relations and secondary positions. It revolves around dilemmas, digital signing and a record that holds up in an integrity investigation.
Compliance training in the broader sense
Mandatory training on laws and regulations, certification and periodic recertification across the full range. For that, see our compliance training platform, or security awareness training if the focus is specifically information security.
Training is one side; the reporting channel is the other. Employers with fifty or more employees must have an internal reporting procedure with an acknowledgement within seven days. See the app for the internal reporting scheme.
Our development process for your integrity platform
We work to an approach that removes uncertainty early on, from an initial analysis of your code of conduct and risk profiles through to go-live and ongoing management.
We map out your code of conduct, integrity policy and whistleblower scheme, plus the role profiles that determine who completes what and which declarations must be signed.
We design the module structure, assignment rules, dilemmas, declaration process and reporting model, including the permissions model, because an integrity record is sensitive material.
We build in short iterations with automated tests, structured logging and monitoring. You see working versions along the way and steer the work based on what your team actually needs in practice, rather than on a specification written months earlier.
Controlled go-live with validation and a safety net, followed by ongoing management, monitoring and further development as your code of conduct or regulations change.
What custom integrity training software delivers in practice
Every platform is configured around your code, your role profiles and your repeat cycles. Below are the features we most often deliver.
Modules and learning paths by role
Modules linked to role, department, location or risk profile. Anyone who changes role is automatically assigned the relevant path, without HR needing to intervene manually.
Integrity training with explanations
Realistic situations from your own practice, with choices and a justification afterwards. Answers can be analysed anonymously to see where the policy is unclear.
Digital declarations
Signing of the code of conduct, a declaration of secondary positions or a gifts register, with version control on the text so that anyone must sign again if it changes.
Renewal and expiry
Automatic recertification after the period you set, with reminders to the employee and their line manager, and escalation when a deadline lapses.
Integration with HR system
Joiners, movers and leavers come through an integration with your HR system, so assignments stay accurate. See also our HR compliance software.
Reporting and accountability
Dashboards showing participation rates per department, outstanding declarations and lapsed certifications, plus an export you can share with your accountant, auditor or regulator.
Typical use cases in practice
Integrity training takes different forms by sector, usually wherever a regulator, quality mark or contracting authority requires demonstrable compliance.
Financial services
Institutions with an integrity policy and an oath or pledge. Secondary positions, private transactions and business gifts are recorded and periodically reconfirmed.
Government and semi-public sector
Public-sector integrity, the civil servant's oath, reporting of secondary work, and a whistleblower scheme that has been made findable and demonstrably brought to people's attention.
Healthcare and education
Institutions with a code of conduct covering the treatment of clients, pupils and confidential data, where participation differs by job group and training must be repeated periodically.
Internationally operating businesses
Organisations subject to anti-corruption and competition rules that vary by country, requiring modules in several languages that can be assigned per location.
Test your idea first: a working prototype in 1 day
With OneDayBuild, we turn your idea into something tangible in one day for €1,150, so you can see whether further development is worth the investment. Decide to go ahead with the full build? Then we credit the full cost.
Explore OneDayBuild →Technology we use
The precise choice depends on your processes, the systems to be integrated and your hosting preferences. We deliberately choose a stack that your own team can manage and continue to develop, without dependence on per-user licences.
Why Appfront for your integrity platform?
Appfront builds custom software for a range of organisations in the Netherlands. For an integrity platform, that starts with your own code and risk profiles: which roles carry which risk, which declaration belongs to them and how often it must be renewed. Only once that is clear does the conversation turn to screens.
We are realistic about this: software does not make an organisation honest. What it does is ensure the policy reaches everyone it concerns, that nobody is overlooked, and that you can show afterwards that you took it seriously. That is exactly what an auditor asks for.
On every project we write clear documentation and make sure your own team, or a future supplier, can understand and manage the system. No black box: transparent code and clear agreements on monitoring, alerting and maintenance. You own the solution and pay no per-user licence fee.
Also see our wider services in custom software, our compliance training platform and HR compliance software. Unsure about the approach? Get in touch — we give honest advice, even if custom development is not the answer.
Security and privacy for your integrity platform
An integrity file contains personal data and sometimes sensitive reports. Appfront therefore builds to the OWASP ASVS, with the GDPR as the starting point: data minimisation, role-based access following least privilege, secrets held in secure vaults, and periodic audits of who has viewed which file.
Reports made under a whistleblower scheme deserve extra protection. We keep that flow separate from routine training, limit access to an explicitly designated group and log every instance of access, so that confidentiality depends on the system rather than on good intentions.
More on our security approach: information security policy and CVD policy.
- Encryption in transit (TLS 1.2+) and at rest
- Role-based access following least privilege
- Audit trail for viewing and changes
- Secrets in a secure vault, not in code
- Documented data flows for your record of processing activities
- Separate access route for confidential reports
Frequently asked questions about building integrity training software
Answers to the questions we are asked most often.
Software that turns your code of conduct, integrity policy and whistleblower procedure into assigned modules, digital declarations and a participation record. Based on role and risk profile, the system determines who must complete what, tracks renewal deadlines and records who signed and when. The aim is not only knowledge transfer but demonstrable compliance: in an audit or incident, you can show that the policy was actively brought to people's attention.
An e-learning platform is built around a course catalogue and instructional design: enrolment, progression, assessment. Integrity training is about obligation and evidence: automatic assignment based on risk profile, signed declarations with version control, recurring cycles and an exportable record. In practice we often see organisations use both side by side, with an integration between them.
Yes, and that is usually the point. Standard modules cover general situations; what sticks are dilemmas from your own practice. We build a management environment in which your compliance officer or HR team can add, adapt and link cases to job groups themselves, without any development work being required.
Via an API integration or periodic synchronisation, we retrieve employees, roles, departments and employment contracts. New employees automatically receive their learning path, the path is adjusted when a role changes, and when someone leaves the assignment stops while the record is retained in line with your retention period.
For internal declarations such as a code of conduct, demonstrable acceptance is usually sufficient in practice: who, when, which version of the text, and from which account. We capture this with an audit trail. If you have a stricter requirement, we integrate a qualified e-signature service; that choice is yours, and we build what fits.
Participation data is personal data and integrity records are sensitive. We use role-based access: a manager sees whether someone has completed training, not which answers were given. Dilemma responses can be anonymised and aggregated for policy analysis. You set the retention periods yourself.
Yes. Modules, declarations and communications can be multilingual, and a different set of rules can apply per location or country. Version control works per language, so an amended Dutch text does not quietly leave an outdated translation in place.
If your code of conduct, job profiles and recurring cycles map well onto what an off-the-shelf package offers, a package is often the wiser choice. Custom software pays off when the assignment logic is your own, when it needs to integrate with systems a package doesn't support, or when you want to keep the record in-house without a per-user licence. We prefer to have that conversation honestly rather than as a sales pitch.
Ready to get your integrity platform built?
Tell us what your code of conduct looks like, which job groups have which obligations and how often these need to be repeated. We're happy to help you think through scope, integrations and the first version. A no-obligation first conversation will give you a clear picture of what's possible and whether custom software makes sense for your situation.