Shog Corporate Training and Moodle Workplace

It is worth clearing the ground first, because a great many vendor comparison pages in this market are built on capabilities Moodle has had for years. The mod_customcert plugin, free in the Moodle plugins directory and in wide use for years, puts a unique code on every certificate it issues and publishes a verification page for that code. It can be configured so that anyone holding the link verifies the certificate without an account and without logging in, which is precisely what an auditor, a regulator or a bank's onboarding team wants to be able to do.

Moodle Workplace Certifications cover the other half of the usual pitch. A certification carries a validity period, recertifies the learner when that period lapses, resets the course automatically so the assessment has to be taken again rather than merely re-acknowledged, and sends reminders before the expiry date. Scoring, pass marks, attempt limits, completion reporting and audit logging are ordinary platform features. Right-to-left support is complete and the interface is translated, so an Arabic deployment is not an engineering problem.

None of those belong on our side of a comparison table and we have not put them there. If a vendor tells you that public certificate verification or expiry tracking is a reason to pay them rather than to run Moodle, they are charging you for something the open-source world gave away a long time ago.

Moodle's cost advantage is real and it is large. Where a commercial compliance-training platform charges per user per year for the platform and the content together, a Moodle Workplace licence bought through a partner sits well below that, and the source code comes with it. If the platform were the whole purchase, the decision would not be a close one.

The platform is not the whole purchase. Moodle includes no compliance courseware, in Arabic or in English. Somebody has to write the anti-money-laundering course, the data-protection course and the health-and-safety course, in Arabic that an Arabic-first employee will not experience as a translation, with assessments that hold up when the compliance officer is asked how the pass mark was set and why. That means a subject-matter expert, an instructional designer and a translator, or a purchase order to a content vendor, and it is normally the largest line in the project by a distance.

Then there is the running of it. Implementation, hosting, the version upgrade cycle, and the compatibility of every plugin you depend on, the certificate plugin included, against each of those upgrades. Under a partner agreement these are quoted and they recur. Handled internally they are a share of somebody's time indefinitely. Neither arrangement is wrong, and both are frequently missing from the comparison when the licence figure is the only number on the slide.

The current UAE anti-money-laundering framework is Federal Decree-Law No. 10 of 2025, in force since 14 October 2025, together with Cabinet Resolution No. 134 of 2025, in force since 14 December 2025. Federal Decree-Law No. 20 of 2018 and Cabinet Decision No. 10 of 2019 are repealed. A vendor, a consultant or a course still citing those at you in 2026 is working from a superseded text, and that is worth checking before you check anything else.

Cabinet Resolution No. 134 of 2025 makes developing, implementing and documenting ongoing training a personal duty of the appointed compliance officer, and it sets no frequency. There is no onshore annual retraining mandate. An express annual duty exists in ADGM and in the Central Bank's standards for exchange houses, and extending that to every business in the country is a sales line rather than a legal position. There is likewise no express onshore retention period for training records specifically: the five-year rule covers transaction and customer due diligence records, ADGM sets six years for training records expressly, and Abu Dhabi's occupational safety framework sets five years for safety records.

For workplace safety the obligation is sharper. Administrative Decision No. 19 of 2023 requires the occupational safety record to include the training given, the number of employees who took part and the resources available for it, available for inspection on request. Read together these are record duties as much as training duties, and this is where the two products genuinely diverge. Moodle will hold the record perfectly well. What it does not publish is a way to bind identity evidence to the certificate, and no competitor we have examined publishes an option to write certificates and identity evidence into the customer's own storage.

Go through a partner rather than a general hosting company. Human Logic in Dubai was the first Moodle Partner in the MENA region and now holds Premium status, with separate partner entities for the UAE, Saudi Arabia and Qatar and a client list that includes Etisalat, Danone and Sodexo. Eummena is a Premium Partner with offices in Dubai and Riyadh. Premium is Moodle's own designation and it is worth insisting on, because it is the part of the arrangement you can actually verify from outside.

Get the certificate configuration written into the scope rather than left as an assumption. The mod_customcert plugin has to be installed, and its verification page has to be set so that anyone holding the link can verify, including people who are not logged in, or your auditor will be asked to create an account before they can check a certificate. Ask in writing who tests plugin compatibility at each upgrade, and what the plan is if a plugin you have come to depend on stops being maintained upstream.

Then price the content honestly and separately from the platform. Ask the partner what an Arabic anti-money-laundering course authored to the current law would cost to build, how long it would take before the first employee could sit it, and who updates it when the law changes again. If that number and that timeline work for you, Moodle is a sound answer, and we would rather you bought it well than bought us badly.