POSH training, certificates & complaints

Under the POSH Act 2013, every employee should be trained on prevention of sexual harassment at work, and your organisation must offer a confidential way to raise a complaint. This module covers both: interactive training with a module quiz that issues a certificate on a pass, and a complaint workflow where an employee files privately and the Internal Committee (ICC) runs the inquiry. Setting up the policy and constituting the committee is covered in Set up POSH & the ICC.

Click to enlarge

• Every employee: completes training, earns and downloads certificates, and can file a complaint and track it under My complaints. Filing is not two-factor gated, so anyone can raise a concern.
• ICC members (the icc_member role): see the ICC registerand manage each complaint's inquiry. This surface is the confidential one.
• HR admins (company_admin or hr_manager): assign training, view the org-wide compliance roster, generate the policy and the annual report.
• Strict 2FA:the ICC complaint register and complaint administration require two-factor authentication. A member who hasn't enrolled in 2FA is blocked from the confidential surface (not waved through) and is pointed to set 2FA up first.

1. Open POSH → Training. Work through each module scenario; mandatory modules are flagged.
2. Take the module quiz. Pass at the module's passing score to earn your certificate.
3. Find earned certificates under Certificates. Download the PDF, or share the public verification link so anyone can confirm it is genuine. A revoked certificate can no longer be downloaded.

1. Any employee opens POSH → Complaints and clicks File a complaint. The complaint goes to the Internal Committee.
2. The complainant tracks progress under My complaints — no two-factor needed to follow their own case.
3. ICC members switch to the ICC register (behind two-factor) to open a complaint, record the inquiry, assign it and attach documents.
4. The committee progresses the inquiry within the statutory window — the inquiry must complete within 90 days, and WorkRight tracks and reminds on the deadline.

Complaint data is treated as sensitive throughout. The ICC register and complaint administration sit behind strict two-factor, the complaint surface is never exposed over the public API, and the handling reflects the Section 16 confidentiality the Act requires. The annual report (§21)reports counts only — never complainant identities — so you can file with the District Officer without compromising anyone's privacy.

• Set up POSH & constitute the ICC — publish the policy and seat a compliant committee first.
• POSH Act 2013 — plain-English overview.