Transform Learning with a Powerful Enterprise LMS

Learn more
Industries

Best LMS for government agencies

Six LMS platforms for public-sector agencies scored on a published rubric: FedRAMP status, audit records, accessibility, mandatory training, hosting control, identity and price, checked October 2026.

Learn more about this topic with AI

Gemini opens with the prompt copied - paste it into the chat to start.

Illustration of government building with a self-hosted server, representing best lms for government agencies

Disclosure: LMS Advisor is built by the All-in-One LMS team. We score it with the same criteria as every other product on this page.

The best LMS for government agencies is one your security office can approve, your accessibility team can defend and your auditors can trust: a cloud service with the right authorization or a version you can host yourself, documented accessibility conformance, and training records that hold up years later. On our published rubric, Totara scores highest (80/100) because it is the only product here with both a FedRAMP Certified government cloud and a licence that allows self-hosting. Docebo (78) and Cornerstone (75) follow, both FedRAMP Certified at Class C (Moderate).

Our own product, LMS Advisor, ranks fifth of six (66/100). It earns full marks for self-hosting, audit logging and mandatory training, but it has no FedRAMP or other government certification and claims no verified WCAG or Section 508 conformance. For a state, local or non-US agency that self-hosts, the order changes, and the "How to choose" section shows how.

This guide is for public-sector training officers in mid-sized and large agencies, mainly in the US, with notes for other jurisdictions. We checked every authorization on the FedRAMP Marketplace and every product claim on the vendor's own pages on 30 October 2026.

How we evaluated government training software

Three sets of rules shape a public-sector LMS purchase in the US.

  • Cloud security. FedRAMP provides a standardized approach to assessing and authorizing cloud services that handle federal information, and federal agencies are required by law and OMB policy to follow it. Since 2026 the FedRAMP Marketplace labels authorized services "FedRAMP Certified" with a class, and FedRAMP notes that classes are not one-for-one replacements for the old Low, Moderate and High levels. Only your agency can decide whether a use case is in scope.
  • Accessibility. The Revised Section 508 Standards incorporate WCAG 2.0 Level AA for federal ICT. For state and local governments, the Department of Justice's 2024 ADA Title II rule sets WCAG 2.1 Level AA as the standard; an interim final rule effective 20 April 2026 moved compliance to 26 April 2027 for entities of 50,000 people or more, and to 26 April 2028 for smaller entities and special districts.
  • Training records. Under 5 CFR 410.601, each federal agency must maintain records of training plans, expenditures and activities so it can report them to OPM, and OPM asks agencies to report completed training at least monthly, with cost data on every record even when the cost is $0.

So the rubric weights federal authorization and audit evidence most, then accessibility and mandatory training, then hosting control, identity and price. We read product pages, help centers, accessibility statements and pricing pages, and the FedRAMP Marketplace and GovRAMP product lists. This is a documentation review, not a hands-on test, and no vendor paid to be included. Where a vendor does not document a capability, we score it 1 (not documented). Each platform is scored from 1 to 5 per criterion; the weighted score is the weight multiplied by the score and divided by 5, so the maximum is 100.

CriterionWeightHow we scored it
Federal cloud authorization205 = FedRAMP Certified, Class C (Moderate) or higher; 3 = FedRAMP Ready or in process; 1 = none
Audit trail and records20Who changed what and when, retained completion history, retention settings and exports an auditor can read
Accessibility155 = a stated WCAG 2.1 or 2.2 AA conformance with a published ACR or VPAT; 4 = a WCAG target plus an ACR; 3 = ACRs with no level stated; 1 = no conformance claim
Mandatory training and role qualification15Assignment by role or position, due dates, reminders, expiring certifications and recertification
Hosting control105 = self-hosting on agency infrastructure; 4 = a dedicated government cloud; 2 = standard SaaS only
Identity10SAML SSO, SCIM provisioning, MFA and PIV card support
Price transparency10Starts at 1; +2 for published prices, +1 for a free tier or free trial, +1 for a self-hosted option
PlatformFedRAMP (20)Audit (20)Accessibility (15)Mandatory (15)Hosting (10)Identity (10)Price (10)Total
Totara543553280
Docebo544444178
Cornerstone534543175
Moodle (Workplace and Moodle for Government)335551270
LMS Advisor151554366
Absorb LMS144524161

Best LMS for government agencies: comparison table

PlatformBest forDeploymentStarting price (as of October 2026)StandoutLimitation
Totara (80)Agencies that want a FedRAMP cloud now and the option to self-host laterTotaraGov cloud or self-hostedQuote, subscription per instance and active usersRecertification and assignment by position or organisationxAPI needs third-party plugins
Docebo (78)Federal agencies that want a SaaS platform with PIV sign-inSaaS on AWS GovCloudQuote, by active learnersAudit trails, e-signatures and PIV card authenticationAccessibility conformance covers the learner role only
Cornerstone (75)Large agencies that want learning inside a wider talent suiteSaaSQuote, per employee per yearFedRAMP Certified since 2016 and DoD IL4 provisional authorizationAudit trail details not documented publicly
Moodle (70)Agencies with in-house or partner Moodle skillsSaaS on AWS GovCloud, federal cloud code release, or self-hosted Moodle LMSMoodle LMS free (GPL); Workplace on quoteWCAG 2.2 AA accreditation with VPATsFedRAMP Ready, not yet certified
LMS Advisor (66, our product)State, local and non-US agencies that must self-hostSelf-hosted or cloudQuote-based, free trialDetailed audit log and per-data-type retentionNo FedRAMP and no verified WCAG or 508 conformance
Absorb LMS (61)State and local agencies buying SaaSSaaSQuote onlyWCAG 2.1 AA VPAT and timestamped, e-signed exportsNot FedRAMP Certified

No vendor here publishes a government price as of October 2026. Ask for a written quote at your learner count that names the hosting environment, because the authorized government offering is often priced and contracted separately from the commercial product.

1. Totara: 80/100

Totara is the only option on this list that combines a FedRAMP Certified government cloud with a licence that permits self-hosting. Its "Totara Talent Development Government Cloud Platform" is listed on the FedRAMP Marketplace as FedRAMP Certified, Class C (Moderate), on the agency path since August 2023. Totara says USDA's AgLearn program runs on TotaraGov hosted in AWS GovCloud (US). Its licence also allows instances deployed on customer computers, which matters for agencies that want to move on premises later.

  • Pros: recertification management with expiry-based cycles; compliance reporting; assignment by position and organisation, with multiple job assignments per person; site logs; Accessibility Conformance Reports per version; SAML 2.0, LDAP and OAuth 2.0.
  • Cons: the accessibility help page does not state a WCAG level; SCORM 2004 sequencing and navigation are not supported; xAPI requires third-party plugins and is not supported by Totara; the code is available to Totara partners only, so self-hosting goes through a partner; SCIM and PIV are not documented.
  • Pricing note: quote only as of October 2026. Totara Core is GPLv3 plus proprietary enterprise extensions, sold as a subscription per production instance and active users, directly or through partners (Totara licence).

2. Docebo: 78/100

"Docebo Learning Platform for Gov (DCBO-GOV)" has been FedRAMP Certified, Class C (Moderate), since May 2025. Docebo says it runs on AWS GovCloud, supports SAML, MFA and PIV card authentication, and provides audit trails and e-signatures for federal customers. Docebo estimates a federal implementation at roughly 90 to 120 days.

  • Pros: the only vendor here that documents PIV card authentication; audit trails and e-signatures; enrollment rules that assign training when someone joins a group or branch; certifications with expiry dates; an accessibility statement that targets WCAG 2.1 and cites Section 508 and EN 301 549, with Accessibility Conformance Reports available; SCORM 1.2, SCORM 2004 and xAPI.
  • Cons: SaaS only; its accessibility conformance currently applies only to the learner role, not to admins and authors; on the federal platform some advanced AI features are not yet enabled and screen recording is disabled; SCIM is not documented.
  • Pricing note: quote only, based on active learner usage, as of October 2026 (Docebo pricing).

3. Cornerstone: 75/100

Cornerstone Galaxy has been FedRAMP Certified, Class C (Moderate), since February 2016, the longest record on this list. Cornerstone also announced a Department of Defense Impact Level 4 provisional authorization in March 2025, and in July 2025 added its Learning Experience Platform and Talent Marketplace to its federal offerings. Learning covers automated assignments, certifications, renewals and proof, with skill- and role-based learning paths.

  • Pros: long FedRAMP history; DoD IL4; certification and recertification; a talent suite beyond learning; WCAG 2.2 AA as the stated aim, with VPATs on request; Section 508-compliant content subscriptions on its public sector page; SAML 2.0; SCORM, AICC and xAPI.
  • Cons: its accessibility statement says it "aims to conform" rather than claiming conformance, and does not cover third-party content; audit trail detail, SCIM and PIV are not documented on the pages we read.
  • Pricing note: quote only as of October 2026; Cornerstone says its packages are licensed per employee per year (Cornerstone packages).

4. Moodle (Moodle Workplace and Moodle for Government): 70/100

Moodle has the strongest accessibility evidence here: Moodle states it has achieved WCAG 2.2 Level AA accreditation for Moodle LMS, Moodle Workplace and the Moodle App, and links VPATs. For federal buyers, "Moodle for Government" is listed on the FedRAMP Marketplace as FedRAMP Ready, Class C (Moderate), not yet certified. Moodle offers it as SaaS on AWS GovCloud or as a Moodle Workplace code release on federal cloud infrastructure, and open-source Moodle LMS can be self-hosted anywhere.

  • Pros: WCAG 2.2 AA accreditation with VPATs; automated recertification and dynamic rules in Workplace; multi-tenancy for departments; Moodle LMS is free under the GPL; downloadable activity logs that record who did what, when and from which IP address.
  • Cons: FedRAMP Ready is not an authorization; Moodle Workplace is not open source and, in the US government offering, can only be implemented by Moodle's own certified services team; Moodle's support site says work on SCORM 2004 has stopped; identity options are not documented on its government pages, so ask your partner.
  • Pricing note: Moodle LMS is free to download; Workplace is quote only, based on hosting and services, as of October 2026 (Moodle for Government).

5. LMS Advisor: 66/100

LMS Advisor, our self-hosted LMS, installs on agency servers or an approved cloud and runs on PHP and MySQL, with in-app migrations, backups and a health check. Its audit log records role changes, SSO configuration, manual completions and exam resets with the account that made each change. Retention is set separately for audit logs, session history, analytics, AI chats, proctoring snapshots and exam audio, a scheduled job purges expired data, and inactive accounts can be anonymized while completion records are kept. Mandatory courses carry due dates and reminders, and role exams with expiring certificates prompt requalification.

  • Pros: self-hosting with external services (AI, SMS, video conferencing) that can each be switched off; detailed audit and retention controls; SAML 2.0 and SCIM 2.0 that creates and deactivates accounts; 2FA and passkeys; native proctoring with a person making the final call; SCORM 1.2, SCORM 2004, xAPI with a built-in LRS, and cmi5; every AI call logged with the user who triggered it.
  • Cons: no FedRAMP, StateRAMP, SOC 2 or ISO 27001 attestation; no verified WCAG or Section 508 conformance (its government page mentions skip links and keyboard focus and recommends your own testing); no library of off-the-shelf mandated courses; no skills matrix; PIV is not documented; not a course-selling storefront.
  • Mobile: lmsadvisor.com lists native iOS and Android apps and a separate installable web app (PWA); confirm which one your agency's device policy allows.
  • Pricing note: quote-based by deployment, learner numbers and modules, with a written quote for procurement and a free trial. You can see how LMS Advisor handles this (disclosed: our product).

6. Absorb LMS: 61/100

Absorb LMS, now marketed from absorbai.com, is a capable SaaS option for state and local agencies that do not need FedRAMP. Its VPAT states that it meets WCAG 2.1 AA, its compliance training tools assign courses by role, location, department and hire date, renew before certifications lapse and export records with e-signatures and timestamps. It supports SAML 2.0 and SCIM.

  • Pros: WCAG 2.1 AA VPAT; automatic assignment and renewal; timestamped, e-signed exports; SAML and SCIM; SCORM 1.2 and 2004, AICC and xAPI.
  • Cons: no FedRAMP Marketplace listing and not on the GovRAMP list we checked; cloud only; Absorb says WCAG conformance is currently supported only in Chrome with the NVDA screen reader; no multi-SCO SCORM packages.
  • Pricing note: quote only as of October 2026 (Absorb compliance).

How to choose the best LMS for your agency

  • US federal agency using a cloud service: start with FedRAMP Certified offerings (Totara, Docebo, Cornerstone) and confirm the exact product name on the FedRAMP Marketplace, because the government offering is often a separate product from the commercial one. Moodle for Government is worth watching if it completes certification.
  • State, local or non-US agency: FedRAMP may not apply. Remove that criterion and, on the remaining 80 points, LMS Advisor scores 62, Totara 60, Docebo and Moodle 58, Absorb 57 and Cornerstone 55. That is close, so accessibility should decide: with ADA Title II deadlines in 2027 and 2028, a product without a verified WCAG 2.1 AA claim, including ours, needs your own accessibility testing before purchase.
  • Data must stay on agency infrastructure: Totara (through a partner), Moodle LMS and LMS Advisor can be self-hosted. Our guide to the best self-hosted LMS compares the operating effort.
  • Auditors are the main audience: ask every vendor to show an admin audit log entry, a retained record for someone who left, and the export you would send to OPM or your oversight body.

Before you shortlist, write down your hosting rule, the WCAG level you must meet and the records you have to report, then score vendors against those three first. Our LMS security checklist and the guide to LMS requirements by industry help with the requirements list.

How we can help

We help public-sector teams turn policy requirements into an LMS shortlist, run pilots and set up self-hosted platforms with SSO and audit logging. Our LMS consulting service can prepare the requirements and scoring for your procurement. Contact us for a free consultation.

Frequently asked questions

Does a government LMS need FedRAMP?

A cloud LMS that handles federal information on behalf of a US federal agency generally falls under FedRAMP, but only the agency can decide whether its use case is in scope. State, local and non-US agencies usually follow their own security frameworks instead.

Which LMS platforms are FedRAMP Certified?

As of 30 October 2026 the FedRAMP Marketplace lists Cornerstone Galaxy, Docebo Learning Platform for Gov and the Totara Talent Development Government Cloud Platform as FedRAMP Certified, Class C (Moderate). Moodle for Government is listed as FedRAMP Ready.

What accessibility standard applies to a government LMS?

Federal agencies follow the Revised Section 508 Standards, which incorporate WCAG 2.0 Level AA. State and local governments in the US must meet WCAG 2.1 Level AA under the ADA Title II rule, with compliance dates of 26 April 2027 or 26 April 2028 depending on population.

Can a government agency self-host its LMS?

Yes. Moodle LMS is open source, Totara's licence allows customer-hosted instances through partners, and LMS Advisor can be installed on agency servers. Self-hosting moves patching, backups and security monitoring to your own team.

Free 30-minute consultation

Not sure where to start? Talk to an LMS engineer.

Tell us what platform you run and what you need. You’ll get honest, practical advice - even if the answer is that you don’t need us.

Sources & references

  1. FedRAMP scope - FedRAMP
  2. Docebo Learning Platform for Gov (DCBO-GOV), FedRAMP Marketplace - FedRAMP
  3. Cornerstone Galaxy, FedRAMP Marketplace - FedRAMP
  4. Totara Talent Development Government Cloud Platform, FedRAMP Marketplace - FedRAMP
  5. Moodle for Government, FedRAMP Marketplace - FedRAMP
  6. Applicability and conformance (Revised 508 Standards) - Section508.gov
  7. Extension of compliance dates: accessibility of web information and services of state and local governments - Federal Register (US Department of Justice)
  8. 5 CFR Part 410 (2026 edition), section 410.601 Reporting - GovInfo
  9. Reporting training data - OPM
  10. Government - LMS Advisor
  11. Moodle accessibility - Moodle
Add as a preferred source on Google

Add All-in-One LMS as a preferred source to see more of our articles in Google’s Top Stories.

Learn more about this topic with AI

Gemini opens with the prompt copied - paste it into the chat to start.

Keep reading

Before you go - get a free LMS audit

Tell us which LMS you use and what is not working. An engineer replies within one business day.

Choose which optional cookies we may use. You can change this at any time from "Cookie preferences" in the footer. Cookie policy · Privacy policy