Ontario, Manitoba and British Columbia all require an approved training provider to verify the learner's identity. None of them says how. A Canadian company on a Canadian problem.
01 · The obligation you already have
For most of the time this clause has existed, its silence about method did not matter. The instructor was in the room.
“The training provider must ensure that: the learner’s identity is verified.”
It says what must be true. It does not say what evidence satisfies it, what the record must show, or how you demonstrate it to a quality assurance review.
Identical wording, in the version updated 5 August 2026 to permit hybrid delivery. The delivery model moved. The clause did not.
The same duty on endorsed providers, with neither a retention period nor a withdrawal process published alongside it.
Photo ID before certification. Refuse, and you may take the course but will not be issued a certificate.
Every regulation cited on this page is Canadian. Federal, Ontario, Manitoba, British Columbia, Alberta and Saskatchewan sources are listed at the foot of the page.
We read the Chief Prevention Officer's eLearning design guidelines word by word, looking for what the standard leaves out. Occurrences found:
02 · The gap
Ontario's Certification Management System and Energy Safety Canada's validation tool are both useful. Neither is doing what people assume it does.
Online, the completion, the attendance and the card are all entered by the same party attesting to its own performance.
Records are produced to the Chief Prevention Officer on request. What is produced is what the provider wrote down.
The UK's card scheme now reports very few fakes. Its own taxonomy names what is left: someone sitting a test on behalf of someone else.
In a classroom, the proof that training happened is a person who watched it happen.Online, the proof is a record the provider creates about itself
03 · The one case that reached a courtroom
We are a Canadian company writing about Canadian regulation, and we would much rather use a Canadian case. There is not one that has reached a courtroom, and we are not going to build an argument on a number we cannot source. So this section is American, and we flag that plainly. Everything in it comes from an indictment, a guilty plea, a sentencing release and a city integrity agency.
Undercover investigators purchase 40-hour certificates without taking any training classes. The company files a completed test with the regulator on behalf of an investigator who had never seen it. Video surveillance shows empty classrooms billed as full.
Ivan A. Frias, 36, falls from the fifteenth floor and dies. The school had certified ten hours of safety training including eight hours of fall protection. It never trained him at all.
17,000 active cards invalidated. The president pleads guilty to attempted enterprise corruption, ten counts of offering a false instrument and reckless endangerment, and is sentenced to one year in jail.
Accepted in full, with certain items requiring legislative and rule changes and additional funding. A direction of travel, not a system in force. We quote it because a government integrity agency, working backwards from a death, arrived at proof of participation rather than better paper.
04 · What we found ourselves
There is no Canadian prevalence figure, so we built a standing audit programme. We enrol in safety and compliance training under our own names, work through it exactly as any learner would, and record what the provider actually checked. We have now done this more than a hundred and fifty times. Here is what we found, and one file in full.
What the provider checked
Every control in that system worked. None of them was pointed at the learner.
Fields we have obtained them in
Where it ended up
This is not a forgery. It is a genuine certificate, issued by a legitimate provider, to the real person named on it, by a system working exactly as designed. Nobody committed fraud. That is the whole point, and it is why hardening the certificate does not fix it.
We have redacted the provider. Naming them would make this a story about one company, and it is not one. The pattern holds across the providers and fields we have audited: the certificate is issued against a payment and an enrolment, not against a person and an attendance record.
The full audit file is available to any certifying partner or approved training provider who asks for it.
05 · Precedent
“Self-certification of attendance or completion alone is not sufficient.”
Verification must “capture the learner identity and indicate the duration of attendance,” with prompts at least three times per 50-minute credit hour that “lack predictability.”
“Invigilation by artificial intelligence may also be used.”
The benchmark standard for bodies certifying persons now defines invigilation to include an invigilator “physically or remotely present.”
“Verifying that the learner who is recognized for successfully completing the learning event is the same learner who registered and participated.”
Quoted from IACET's own published comment draft. We label it a draft because it is one.
And one we checked and are not citing. ANSI/ASSP Z490.1 and CSA Z1001 are both paywalled, and we could not verify from any primary source that either addresses learner identity or time on task. We are not going to quote a clause we have not read. We also full-text searched Energy Safety Canada's 71-page COR audit protocol: zero occurrences of Z490, ANSI or Z1001.
06 · Our position
No Canadian regulator publishes a prevalence figure, and we are not going to import New York's or the UK's to fill the gap. So we went and measured it ourselves, under our own names, and we publish the method next to the finding.
It would be the most useful thing we could say. We traced it to a single alert from a training vendor with no survey, no sample and no methodology.
Moving training online put certification within reach of workers hours from a classroom and saved contractors millions. It was a good trade.
07 · Where it bites, and what fits
3 hours theory plus 3.5 practical, refreshed every three years, CPO-approved providers only.
Common safety orientation, H2S, confined space. Tickets that function as site-entry credentials.
JHSC Part One and Two, 32.5 hours, now deliverable hybrid. Where distance delivery is already the norm.
IntegrityProctorLite
Cost-effective integrity without compromising student experience.
Awareness modules, orientations and refreshers, where the risk is completion inflation rather than a site-access credential.
IntegrityProctorPlus
Comprehensive monitoring with the flexibility most institutions need.
Mandated certification with prescribed hours. JHSC, working at heights, fall protection, confined space, traffic control.
IntegrityProctorPro
Multi-layered security and rigorous review for critical assessments.
Site-access credentials and certification exams where the ticket is the gate. Common safety orientation, H2S, common core, first aid.
08 · How it works
Your approved content, instructors and LMS. We sit at the session, not in the curriculum. No re-approval.
Government photo ID, compared one to one. No downloads, any device, 65 languages.
Continuous participation evidence against the hours your standard prescribes, not a completion checkbox.
A flag is a question, never a finding. The record attaches to your file; video goes in 24 hours.
All data on servers in Canada.
Video and audio typically 24 hours.
Compared against the document presented, not a database.
Browser based, any device.
Why this is built the way it is
If you have avoided proctoring technology because of what you have read, you were not being unreasonable. Peer-reviewed testing found students with darker skin tones flagged 6.07 times per assessment against 1.19 for lighter, with no difference in actual cheating behaviour.
We are not going to argue with that research. The harm came from a design choice: automated flags treated as findings.
09 · FAQ
It requires the outcome, not our product. Ontario s.3.8 and s.3.9, Manitoba s.2.9, and photo ID in BC. What none of them does is prescribe a method, and Ontario's eLearning guidelines are silent. If someone says the standard does not say webcam, they are right. The obligation is outcome-based and the risk of failing it is yours.
Correct, and we would not argue otherwise. The question is what happens to that control when a program moves online or hybrid, which Ontario's July 2026 JHSC revision now expressly permits. The delivery model moved. The clause and the prescribed hours did not.
A real objection where the provider down the road is ten dollars cheaper. One of our customers runs roughly 150,000 learners a year on a certification priced under fifty dollars, so the economics work well below a Working at Heights seat. Pricing is per learner by tier, and you get a number on the first call.
Identity verified against a government photo document, session start and end, verified presence against prescribed hours, continuity, and who adjudicated any flag. That maps onto what s.7.2 already requires you to hold, retained four years.
We are a Canadian company that has done this for over twelve years, and training providers, certifying bodies and workplace safety organizations have always been core to it. What is new is that mandated safety training moved online fast enough that the gap opened before anyone had a name for it.
The monitored window is one training session, not ongoing work monitoring. Nothing continues after it ends and nothing connects to job performance, productivity or location. We would rather say that directly to a union than have it relayed through an employer.
All data on servers in Canada. Video, audio and photos typically kept 24 hours. Identity comparison is one to one against the document you present, not a search against any database of faces.
No. A flag is a question a trained specialist has to answer, in context, with the ability to conclude the system was wrong. No outcome is generated automatically.
A fraudulent ticket puts a qualified tradesperson next to someone who has not been trained. The person most exposed by an unverified certificate is the person working beside it.
10 · Next step
Thirty minutes with your training, quality assurance and privacy leads. We walk one of your online or blended programs end to end, find where a proxy learner would pass through today, and show you what the record would look like if a review asked for it.
A working session, not a pitch. Or email sales@integrityadvocate.com.
And the thing that used to satisfy it left the room when the training did.
Book thirty minutes →
.jpg){kind=link}
.jpg){kind=link}
.jpg){kind=link}
.jpg){kind=link}
