Digital attendance in training: regulations and best practices

Attendance tracking: a fundamental piece of evidence

Attendance tracking — the signature attesting to a learner's presence at a training session — is one of the most scrutinized documents in the professional training sector. It is the proof that the training actually took place and that the learner participated. Without valid attendance records, there is no OPCO funding, no CPF reimbursement, and no supporting evidence for the Qualiopi audit.

With the growth of e-learning and remote training, the question of digital attendance has become central. This guide covers the legal framework, accepted methods, and best practices for compliant digital attendance.

The legal framework for attendance tracking

Reference texts

Attendance in professional training is governed by several texts:

• Article D6313-26 of the Code du Travail: "The completion of the training action is justified by the provider through any probative element." This text does not prescribe a specific format — paper or digital are both accepted.
• Article L6353-1 of the Code du Travail: training actions must result in the issuance of a certificate specifying the objectives achieved and the nature of skills acquired.
• eIDAS Regulation (EU 910/2014): the European framework for electronic signatures, which applies to digital attendance records.
• GDPR (EU Regulation 2016/679): connection and tracking data collected for digital attendance are personal data subject to the GDPR.

What case law says

Case law is clear: digital attendance is legally admissible, provided it offers guarantees of integrity and authenticity. Courts have confirmed that:

• A timestamped connection log is admissible evidence of participation in remote training
• An electronic attendance record with author identification and timestamping has the same value as a handwritten signature
• The absence of attendance records — whether paper or digital — can justify a funder's refusal to cover costs

What funders accept

Key point: since 2020, the Caisse des Depots (CPF manager) explicitly accepts digital proof of completion, including connection logs and online course completion certificates.

Accepted attendance methods

For face-to-face training

Method 1: Paper attendance sheet (traditional)

The historic method: a presence sheet signed by each trainee at each half-day or full day of training.

Mandatory elements:

• Training organization name and NDA
• Training title
• Date and location
• First and last name of each trainee
• Time slots (morning / afternoon or specific hours)
• Trainee signature for each slot
• Trainer signature

Advantages: universally accepted, simple, no technology required. Disadvantages: risk of loss, bulky physical archiving, impossible to verify after the fact (signatures can be imitated), manual data entry for BPF.

Method 2: Tablet or touchscreen attendance

Trainees sign on a touchscreen (tablet, smartphone) via a dedicated app. The signature is timestamped and geolocated.

Advantages: automatic digital archiving, timestamping, paper reduction. Disadvantages: requires equipment (tablet), technology dependency.

Method 3: Electronic signature

Each trainee receives a link (email or QR code) to electronically sign their attendance. The signature is certified by a trusted third party.

Advantages: high evidentiary value, impossible to falsify, automatic archiving. Disadvantages: cost of the signature solution, slightly heavier process for the trainee.

For synchronous remote training (video call)

Video call training presents a particular challenge: how to prove presence when trainees are remote?

Method 1: Video platform connection logs

Platforms like Zoom, Teams, or Google Meet generate participation reports: who connected, at what time, for how long.

Advantages: automatic, objective, timestamped. Limitations: does not prove the trainee was attentive (they may be connected without following). Funders accept it, but some OPCOs request supplementary evidence.

Method 2: In-session attendance link

The trainer sends an attendance link at each half-day via the video chat. Trainees click and sign electronically. The link is active for a limited time (10-15 minutes) to prevent late signatures.

Advantages: combines proof of connection with a voluntary signature act. Disadvantages: slightly interrupts the session.

Method 3: Combined log + attendance

The most robust method: combine the automatic connection log (technical proof) with an electronic attendance record (declarative proof). This is the practice recommended by most OPCOs.

For asynchronous remote training (e-learning)

Asynchronous e-learning is the most complex case for attendance tracking. The learner follows the course at their own pace, without a live session. How to prove participation?

Accepted evidence

1. Timestamped connection logs: date and time of each connection, duration of each session, IP address
2. Progress tracking: completion percentage of each module, time spent per lesson
3. Assessment results: scores on intermediate and final quizzes
4. Course completion certificate: automatically generated document summarizing progress

What is not sufficient

• A simple enrollment confirmation email
• An unsupported self-declaration
• A connection log without detail ("connected on March 15" with no duration or progress)

Best practice

The most robust method for asynchronous e-learning combines:

1. Detailed connection logs (timestamped, with duration)
2. Module-by-module progress tracking (completion percentage)
3. Intermediate assessment results (proof of active engagement)
4. Automatic generation of a digital attendance record summarizing all of the above

OpenFormations automatically generates this combination of evidence. For each learner, a complete digital attendance record is available: connection dates, time spent per module, quiz results, and overall progress. This document is compliant with OPCO and Caisse des Depots requirements.

Attendance granularity: half-day, full day, or hourly?

The general rule

The most common practice — and the most accepted by funders — is attendance by half-day: morning and afternoon. This is the format most OPCOs require.

Special cases

Hourly attendance

Some funders (particularly for very short courses or regulatory training) require hourly attendance. This is more demanding but can be automated with the right tools.

Retention and archiving

Mandatory retention period

Attendance records must be kept for at least:

• 5 years after the training ends (general rule)
• 10 years for training funded by European funds
• Qualiopi certification duration (3 years) + 1 year after the end of the cycle

Storage format

Recommendation: store your attendance records in a cloud system with automatic backup (your LMS, Google Drive, or a dedicated DMS). Physical media (paper, USB drives) are unnecessary risks.

Fraud prevention

Attendance fraud is a serious matter. Training organizations that produce false attendance records face criminal penalties (fraud against public funds).

Fraud risks

• Proxy attendance: a trainee signs for an absent person
• Retroactive attendance: signature after the training
• Fake attendance: creating sheets for fictitious training
• Log manipulation: altering connection data in e-learning

Prevention measures

Face-to-face:

• Supervised attendance (trainees sign under the trainer's observation)
• Identity verification in sensitive contexts
• Automatic timestamping (tablet or electronic signature)

Remote:

• Connection logs with IP address (harder to falsify than a signature)
• Mandatory intermediate assessments (prove active engagement)
• Anomaly detection: if a trainee "completes" 8 hours of training in 20 minutes, that is a red flag
• Optional geolocation (with GDPR consent)

GDPR and digital attendance

Digital attendance collects personal data: name, signature, connection dates, IP address, possible geolocation. The GDPR imposes strict obligations.

Obligations

1. Legal basis: the processing is justified by the performance of the training contract (GDPR article 6.1.b) or by a legal obligation (article 6.1.c)
2. Information: trainees must be informed of data collection and processing (privacy policy, mentions in the agreement or internal regulations)
3. Minimization: collect only data strictly necessary to prove attendance
4. Security: data must be stored securely (encryption, restricted access)
5. Retention period: do not keep data beyond the necessary duration (5 years for attendance records)
6. Data subject rights: trainees have rights of access, rectification, and portability

What to include in your privacy policy

• Types of data collected (name, signature, dates, IP)
• Purpose of processing (proof of attendance for training and funders)
• Legal basis (performance of the training contract)
• Retention period (5 years)
• Recipients (the organization, funders on request, Qualiopi auditor)
• Data subject rights (access, rectification, portability)
• Data controller contact details

Digital attendance solution comparison

How to choose?

• You already have an LMS with built-in attendance — use it, it is the most consistent solution
• You do not have an LMS or yours does not handle attendance — Edusign is the go-to specialized solution
• You need maximum evidentiary value — Yousign for advanced eIDAS signatures
• You have a minimal budget — Google Forms with timestamping, but know that evidentiary value is low

Compliant attendance checklist

Before the training

• Choose the appropriate attendance method (paper, digital, logs)
• Check the funder's requirements (OPCO, CPF, France Travail)
• Prepare the sheets or configure the digital tool
• Inform trainees of data collection (GDPR)

During the training

• Record attendance at each half-day (or per required granularity)
• Verify that all trainees have signed
• The trainer also signs their attendance sheet
• For remote training: verify that connection logs are active

After the training

• Check attendance completeness (no empty fields)
• Archive attendance records securely
• Retain for at least 5 years
• When requested by a funder, provide evidence promptly

Questions? Contact us at ${CONTACT_EMAIL}.