How to decide when to build vs. buy compliance training - Join us April 30th, RSVP now

From Creator to Strategist: Reclaiming Your Role in Compliance Training

  • Photo of Ethena Team
    Ethena Team

Key takeaways (TL;DR for busy leaders):

  • The role has drifted. L&D and compliance leaders were hired to do risk-shaped work, but content production has quietly crowded out the strategic work the role was designed for.
  • The fix isn't working harder. It's updating one assumption: that building compliance training in-house is the default and vendor content is the fallback. That hasn't been true for years.
  • Combining vendor content with AI customization is the strategic move, not a compromise. It lets you keep the cultural layer (your terminology, your scenarios, your executive voice) without owning the legal maintenance burden.
  • For most teams, the program is roughly 70/20/10: a vendor foundation with AI-powered customization for most regulatory topics, a small number of fully in-house builds for culture-defining moments, and a few pure off-the-shelf courses where customization genuinely doesn't matter.
  • The payoff is the work you get back: culture audits, analytics, high-risk interventions, strategic partnership with legal and people ops. The work that separates a strategic compliance function from a reactive one.

For more on why static, in-house training becomes a maintenance burden, see our companion post: The Maintenance Trap: Why Your Compliance Strategy Is Quietly Killing Your Budget.


For L&D and compliance leaders, the job has quietly changed shape.

The title still says "leader." The calendar says "producer."

Somewhere between the new regulation that landed Monday, the course outline leadership asked for on Friday, and the 15 modules your team is maintaining from the last three years of urgent requests, the strategic part of the role got crowded out by the production part. You can't point to when it happened; just that the strategic conversations are rarer now, and the "we need training on X by Y" conversations are constant.

Here's what that shift actually looks like, and why combining vendor content with AI customization, rather than choosing between Build and Buy, is the move most mature teams are making.


Why Do L&D and Compliance Leaders End Up Running a Production House?

Training starts eating the calendar. A regulation shifts, so a course has to update. A policy changes, so scenarios need refreshing. A new market opens, so localization kicks off. Each ask is legitimate. Each one displaces the strategic work by a few hours, and a few hours, repeated across a year, is how you end up running an internal content studio with a strategy title.

The cost isn't the hours themselves. It's what those hours would have been spent on. Every week your team spends hand-maintaining a standard Anti-Bribery module is a week not spent on:

  • Auditing the gap between your stated values and the behaviors your training actually reinforces
  • Analyzing your training data to find the populations where training isn't landing
  • Partnering with the business on the high-risk interventions that don't fit a course format: the manager conversation, the onboarding redesign, the quarterly risk review
  • Monitoring where compliance exposure is actually growing, and reacting by implementing just-in-time training and comms on it
  • Building the small set of training experiences that only your team can build, because they're about your company

None of that work shows up on a ticket. None of it produces a SCORM file. It's all the work that separates a strategic compliance function from a reactive one, and it's all the work that gets deferred when production volume goes up.

Jeannine Lemker, who led compliance training programs at both Microsoft and Meta, has pressure-tested this tradeoff across two of the most complex regulatory environments in tech. Shared in a recent webinar with Ethena, her framing, honed across years of deciding which training to resource internally and which to hand off, is a single question: "Is the juice worth the squeeze?"

In other words: for any given training topic, does the strategic value your team adds by owning it justify the production and maintenance cost of owning it? Most of the strategic work above has enormous juice and modest squeeze. Most of the content production work has high squeeze and, for the 80% of your program that's universal regulatory baseline, genuinely limited juice, because a vendor can produce a more legally accurate version faster than you can.

The strategist's question isn't "can we build this?" It's "is building this the highest use of our team's finite, specialized capacity?"

For most compliance topics, the honest answer is no.


Is Blend, Buy, or Build With AI a Compromise or a Strategic Choice?

Here's where most posts about Build vs. Buy fall apart for strategic leaders. They set up the binary โ€” control vs. convenience, culture vs. efficiency โ€” and then gesture at some kind of hybrid as a wishy-washy middle option. "A little of both." The implication is that anyone who truly cared about culture and quality would still Build.

That framing is wrong, and it's worth taking apart directly. Combining vendor-built content with AI customization isn't a compromise between Build and Buy; it's a genuinely different approach that addresses four distinct concerns that leaders typically have.

The workflow concern. Compliance teams have long known you can customize off-the-shelf content โ€” the problem was doing it well meant expensive professional services, weeks of back-and-forth, and a final product that still felt generic. Most teams gave up and shipped the default version. AI removes that tradeoff. Starting from a vendor's legally-vetted foundation, you can now customize an entire course in a single prompt: your terminology, tone, scenarios, reading level, policy references, even a short video from your CCO. The compliance backbone stays maintained by people whose full-time job is tracking regulatory shifts. The cultural layer is yours, without the professional services bill.

The culture concern. The argument for Build has always been that culture can't be outsourced โ€” that employees can feel when training is generic. That's true. What's changed is that "generic" used to be the default state of vendor content and is no longer. With AI-enabled customization tools like Compass, you can take an off-the-shelf Harassment Prevention course and customize it course-wide in a single prompt: swap "employees" for "teammates," adjust the tone from formal to conversational, replace the stock scenarios with ones set in your actual workplace, and have it reflect your real reporting policy. The original vendor version stays untouched as a pristine template โ€” you can always revert. The version your employees see is unmistakably yours. (See how AI Module Editing works.)

The ownership concern. The worry with Buy has always been that you're tied to someone else's vision of what the content should say. AI-powered customization inverts this. You choose what to customize, how much, and where. You own the cultural and scenario layer, while the vendor owns the legal infrastructure. You can scale customization up when something matters to your culture and scale it back when it doesn't, without ever owning the underlying regulatory maintenance.

The talent concern. The question isn't whether Blend produces good training; it does. The question is whether your team's time is better spent on the 20% of content only they can build, or on the 80% a vendor can build more accurately and maintain indefinitely. Blend is what makes that allocation possible: it's not a middle ground between Build and Buy, but what frees up your team to Build the things that actually matter.

Rashelle Tanner, who built compliance training at Microsoft and Meta, describes how her teams moved toward this split:

"We script our big annual training in-house because that's where culture lives. But for everything else โ€” the smaller, role-based trainings, the reinforcement content โ€” we're exploring how AI can help us personalize and scale without requiring more headcount."
Rashelle Tanner
Director, Regulatory, Risk & Ethics Learning
Meta

Both Lemker and Tanner will be on Ethena's upcoming webinar to go deeper on exactly this tradeoff: what they resource internally now, what they've handed off, and how AI has changed the math on both. Register for the webinar here.

Same principle, operationalized: build where the juice is worth the squeeze, blend vendor content with AI customization everywhere else, and buy straight off the shelf only where customization genuinely doesn't matter.


How Do You Decide What to Build, Buy, or Blend?

The shift from Creator to Strategist is mostly a shift in how you triage an incoming training request. A Creator asks how do we build this. A Strategist asks what's the right path for this, given what we're trying to achieve.

Here's how that triage usually plays out across three types of training:

Regulated topics that change frequently: export controls, anti-bribery, data privacy.

  • The path: Vendor foundation for legal accuracy, AI customization for your voice, policy references, and scenarios.
  • Time investment: A handful of hours per course.
  • What you get back: The weeks your team would have spent on legal research, scripting, and production โ€” redirected into the strategic work the role was designed for.
  • How it plays out: See how Brex upgraded their compliance training by pairing vendor-built courses with AI-powered customization.

Topics that define your culture: Code of Conduct, values refresh, "how we make decisions" training.

  • The path: Either a full in-house Build, or a heavily customized vendor foundation with entirely rewritten scenarios, executive video, and your voice throughout.
  • The test: Do you have the team, the passion, and the sustained budget for full Build? If yes, go. If not, a heavy blend of vendor structure plus AI customization gets you most of the way at a fraction of the cost.
  • Where it fits: This is where your scarce creative capacity earns its keep, not across your whole program.
  • How it plays out: See how Asana built policy-embedded training using Ethena's AI Training Builder to turn internal documents into bespoke, interactive courses.

Universal topics that don't need to feel organization-specific: rare, but they exist.

  • The path: Light customization or straight Buy from Ethena's full course library.
  • The test: If a reasonable employee couldn't tell whether this was authored internally or not, and nothing about the topic benefits from them being able to tell, you're spending creative energy in the wrong place.
  • Not sure which courses you need? The AI Compliance Advisor can recommend a starting set based on your team and risk profile.

Most teams find that the majority of their program lands in the first category โ€” a vendor foundation with AI-powered customization on top โ€” with a small number of fully in-house builds for culture-defining moments, and a few pure off-the-shelf courses where customization genuinely doesn't matter. This isn't a compromise position. It's the program a strategic leader would design from scratch if they were starting today.

The strategist's mindset, applied to the training itself

The Build / Buy / Blend decision is one version of this question: where is your team's talent best used? But the same question applies inside every training you do end up building or customizing.

Austin Light, Ethena's VP of Learning Experience, puts it this way in a recent webinar:

"That is where backwards design comes in. You're like, what are the things people need to walk away with? I started my career as a newspaper reporter, and you would go into every story of, like, what's the hook? What's the thing that, when someone's done reading this, that they will walk away knowing? And it's usually one or two things."
Austin Light
VP of Learning Experience
Ethena

Start from the behavior you want, not the body of information you feel you have to cover. That's the strategic work. And once you've done it, the production work can increasingly be handed off.

"It's all about reducing your own cognitive load," Austin says about how his team uses AI in the build process. "I already have to build a slide and pick out the pictures and find the colors, and I have all the information. Let somebody else just organize it for you in a way that works with your tools."

That's the same principle scaled up to the program level. Own the strategic decisions โ€” what behavior you're trying to change, which topics actually need your voice โ€” and let AI-powered customization, sitting on top of a vendor's expert content, handle the organizing work underneath.


What Do You Actually Get Back When You Stop Producing Content?

The capacity is there โ€” but you have to reclaim it deliberately. Put the culture audit on the calendar. Protect the analytics time. Block the partnership hours with legal and people ops.

What your team gets back: the gap analysis between stated values and actual training, the data on which populations aren't passing or completing, and the high-risk interventions that don't fit a course format (such as the manager conversation or onboarding redesign). The strategic partnership with legal makes compliance proactive instead of reactive.

The companies running the sharpest compliance programs aren't producing the most training. They're producing the least โ€” and spending the time they've reclaimed on the work that actually moves the needle.


People Also Ask: FAQ for L&D and Compliance Leaders

Q: What's the difference between building, buying, and blending compliance training?

A: Building compliance training means your team creates it from scratch internally, owning the writing, production, updates, and legal accuracy. Buying means licensing a vendor's pre-built courses; the vendor handles updates and accuracy, but the content is generic by default. Blending is the middle path: you start with a vendor's legally-vetted foundation and use AI to customize it with your terminology, scenarios, tone, and policy references, so it feels authored without requiring your team to maintain the regulatory backbone. For most L&D and compliance teams, a blended approach is now the most practical and scalable.

Q: Is it better to build or buy compliance training?

A: For most organizations, neither pure option is the right answer. Pure Build is only sustainable if you have a dedicated, well-resourced team with the sustained capacity to maintain content as regulations shift. Pure Buy works but can feel generic to employees, which hurts engagement and behavior change. The blended approach (vendor foundation plus AI customization) has become the default for most mature teams because it keeps legal accuracy and cultural relevance in the same course without forcing you to choose. For a deeper breakdown of when each option makes sense, see our companion post, The Maintenance Trap.

Q: How do I move from being an L&D "creator" to an L&D "strategist"?

A: The shift is mostly about how you triage incoming training requests. A creator asks how do we build this? A strategist asks what's the right path for this, given what we're trying to achieve? Practically, that means sorting your program into three buckets: topics worth fully building in-house (culture-defining moments), topics best handled by a vendor foundation plus AI customization (most regulatory content), and topics fine to buy straight off the shelf (the rare universal ones). Once sorted, your team stops building everything and starts reinvesting that time in the strategic work โ€” culture audits, analytics, high-risk interventions, partnership with legal and people ops โ€” that the role was designed for.

Q: How does AI-powered compliance training actually work?

A: AI-enabled customization tools let you take a vendor's off-the-shelf course and customize it course-wide with a single prompt: no slide-by-slide editing, no expensive professional services project. Common examples: swap "employees" for "teammates," adjust the tone from formal to conversational, change the reading level for a different audience, or replace stock scenarios with ones that reflect your actual workforce. Compass, Ethena's AI agent, does this on a copy of the original vendor content, so the pristine version is always available to revert to. The AI Training Builder goes further โ€” you can upload internal policies or documents and have them converted into interactive, scenario-based training modules.

Q: How can I tell if my team is stuck in a compliance training "production backlog"?

A: A few reliable signals: your team spends more time maintaining existing courses than designing new programs; strategic conversations about risk, culture, and behavior change have become rarer than "we need training on X by Y" conversations; you're responding to requests rather than initiating them; and you haven't had meaningful bandwidth for a culture audit, behavioral analysis, or a high-risk intervention project in months. The subtler sign is organizational: if your function feels more like an internal content studio than a strategic advisor to the business, the production backlog has probably taken over.

Q: Can AI compliance training really sound like our company?

A: Yes, and this is the biggest shift from a few years ago. "Generic" used to be the default state of vendor content; it isn't anymore. With the right AI customization tools, you can adjust terminology, tone, reading level, scenarios, policy references, and even incorporate executive video โ€” all without rebuilding the course or compromising its legal accuracy. Employees experience a course that feels authored by your organization, even though the regulatory backbone is maintained by a dedicated vendor team.

Q: Where should we start if we want to shift toward a blended compliance training approach?

A: Start with one course. Most vendors charge per course rather than requiring a full platform commitment upfront, which means you can test a blended approach on a single high-volume topic โ€” often Harassment Prevention or Code of Conduct โ€” and see how a vendor foundation plus your team's customization plays out in practice. If the math works on one course, you have a concrete case for expanding. A good next step: take the Build, Buy, or Blend assessment to see where your current program stands.


Audit Your 2026 Program

If you're ready to sort your current training program into Build, Buy, and Blend, and see where your team's capacity is actually going, we built a short diagnostic to help.

Take the Assessment: Build, Buy, or Blend โ€” Compliance Training Strategy Quiz

Discover your Training Strategy Fingerprint in under 2 minutes.

Because the goal isn't more training. It's the right training, from the right source, with your team focused on the work only they can do.

Articles

View All

The Top 5 Pitfalls Compliance Teams Face When Building (vs. Buying) Training

AI has made it easier than ever before to generate compliance training content. With tools like HeyGen and Synthesia, you can turn a script into a video in minutes. LLMs...

5 min read

The Maintenance Trap: Why Your Compliance Strategy Is Quietly Killing Your Budget

Key Takeaways (TL;DR for busy leaders): The bottom line: For most organizations, the answer to "build vs. buy vs. blend compliance training" is Blend: using a vendor's legally-vetted content as...

8 min read

Do AI agents need a speak up culture too?

I now regularly ask my co-founder questions I would have thought were evidence of psychosis just a few years ago. The most recent was, โ€œAnne, do AI agents need a...

6 min read

Meet Compass: Training That Customizes Itself to Your Risk

Compliance training has historically been a static, one-size-fits-all product that is painful to edit and generic to consume. If you wanted something bespoke, you were often faced with costly manual...

3 min read