The Maintenance Trap: Why Your Compliance Strategy Is Quietly Killing Your Budget

Key Takeaways (TL;DR for busy leaders):

The Maintenance Trap: Compliance teams spending too much time updating old content instead of addressing new risks.
Static Debt: The compounding risk gap between "frozen" training files and shifting regulations, business priorities, and workforce changes.
The Third Way: A Blend model that uses a vendor's legal backbone with AI-enabled cultural customization.
Decision Framework: Use "Juice vs. Squeeze" to decide where to build (Culture) vs. buy (Regulation) vs. blend (Both).

The bottom line: For most organizations, the answer to "build vs. buy vs. blend compliance training" is Blend: using a vendor's legally-vetted content as a foundation, then customizing it with AI to reflect your culture, policies, and workforce. It combines regulatory accuracy with workplace relevance, without the full cost and maintenance burden of building in-house.

Is your team stuck in a loop of updating old training or building new training instead of moving your compliance program forward?

It usually starts with a clear plan: you get the budget, sketch out the content, perhaps you hire a vendor for production, and launch. It feels like a win.

But then reality hits. Regulations shift. Business priorities change. New executive orders land. Your legal team demands edits, your instructional designers are swamped, and your internal team starts scrambling just to keep up. Before you know it, your training is out of sync with the real world.

By year three, you're drowning. You're spending half your time babysitting old files instead of solving new problems. This is the Maintenance Trap, and it's a massive drain on your most expensive resources.

The Problem: Static Debt

Think of this as Static Debt. It's the risk that piles up when your "frozen" training files stay the same while global rules keep moving. It's like ignoring a leak in the roof: it doesn't look like a crisis today, but eventually, an audit will show that your team is following a 2023 playbook in a 2026 world. That gap is where the real risk lives, and closing it later is always more expensive than staying current now.

As Jeannine Lemker (former compliance lead at Microsoft and Meta) put it in a recent roundtable with Ethena: "Is the juice worth the squeeze?" If you're burning hundreds of hours just to track legal tweaks for a static slide deck, you aren't just losing time. You're falling behind.

The Decision Point: Build, Buy, or Blend Compliance Training

Today, the "Build vs. Buy" compliance training choice isn't binary. Modern enterprises are adopting a Blend approach. Here's what each path actually means:

Build (In-House): Your team creates compliance training from scratch, writing, producing, and maintaining it entirely internally. Full control, full cost, full ongoing maintenance burden.
Buy (Off-the-Shelf): You license pre-built training from a vendor like Ethena. The vendor handles legal updates, production, and accuracy. Fast and low-maintenance, but content is generic by default.
Blend (Custom + Platform): You start with a vendor's legally-vetted content as a foundation, then use AI to customize it (swapping terminology, adjusting tone, adding company-specific scenarios) so it feels bespoke to your organization without requiring you to build or maintain it from scratch.

Strategy Path	Best For...	The "Squeeze" (Effort)	The "Juice" (Result)
Build (In-House)	Culture-defining, low-volatility topics (Values, Code of Conduct).	Very High. Expensive. You own the updates, the production, and the maintenance forever.	100% bespoke storytelling.
Buy (Off-the-Shelf)	High-risk, regulatory-heavy topics (GDPR, Anti-Bribery, Sanctions).	Very Low (Vendor handles updates).	Expert-vetted, global accuracy.
Blend (Custom + Platform)	Scalable culture + Regulatory accuracy.	Low to Moderate (Vendor backbone + AI customization).	The "Best of Both Worlds": Culture + Automation.

The "Build" Play: Only for Your Secret Sauce

Building in-house is a power move, but only when you're defining your core cultural DNA: the things that make your company unique.

The Big Win: You get total control. This is where you tell your story, use your internal shorthand, and make people feel like they actually belong to the org.

The Trade-off: You own the maintenance forever, and the production costs, the headcount, and the update cycles that come with it. Rashelle Tanner nails it: building in-house is a "labor of love." But love doesn't scale. If you don't have a dedicated team and sustained budget to keep it fresh, that investment compounds into a burden that quietly consumes your team's capacity year after year.

Buy (Off-the-Shelf)

This is the right call for high-risk, regulatory-heavy topics where accuracy and currency matter most. Anti-Bribery. Harassment. GDPR. Export Controls.

The Upside: Instant updates and proven legal accuracy.

The Downside: Can feel like a generic "checkbox" exercise. Employees often fail to see themselves in the training. The scenarios don't feel real, the culture doesn't feel familiar, and behavior change suffers for it.

Blend (Custom + Platform)

This is the evolution. You take a vendor's legally-vetted, constantly-updated backbone and inject your signature cultural elements. Your CEO's cameo. Your company's scenarios. Your tone. Your "Easter eggs," even a "talking pizza slice" (an engagement tactic Yum! Brands uses to drive 99% completion rates).

The beauty of Blend is that it solves the Maintenance Trap without sacrificing culture. Lemker explains the logic:

"Your high-risk areas — privacy, third-party risk, regulatory requirements — those are where the juice is worth the squeeze. But for everything else, you can use a platform to give you consistency, engagement, and ease of update, while you pour your resources into the moments that truly define your culture."

Jeannine Lemker
Associate Dean, Director, Assistant Professor
University of Washington School of Law

When Does Each Path Make Sense?

The strategic decision requires triage. Use this four-point framework to determine the optimal path:

Is this topic legally volatile? (Does it shift with regulations, executive orders, or business changes more than once a year?) → If yes: Buy or Blend. If no: Build may work.
Is this a cultural differentiator? (Does it need to feel uniquely "us"?) → If yes: Build or Blend. If no: Buy is fine.
Do we have the team capacity? (Can we realistically maintain this forever, including production and budget?) → Be honest. Most teams can't. If no: Buy or Blend.
What's the regulatory risk? (Do we get audited on this? Are we liable for inaccuracy?) → High risk: Buy or Blend. Medium/low: flexibility.

One company in the Ethena community was spending significant time and money building their annual Code of Conduct training in-house. When a new Chief Compliance Officer arrived, the first question was: "Why are we doing this ourselves?" The answer: "We weren't sure we had another choice." Now, they're using a vendor platform with internal customization, reclaiming dozens of hours per year.

The AI Inflection Point

This is where things actually get easy. AI isn't just hype here. It's the tool that makes Blend practical at scale.

With a Blend approach, you take a vendor's legal backbone and use AI to make it feel like yours, in minutes rather than months. That's exactly what Compass, Ethena's AI agent, is built to do.

Instead of opening a design tool or hiring an expensive studio, you give Compass a prompt:

"Change all instances of 'Employee' to 'Teammate' and 'HR' to 'People Team'"
"Adapt these scenarios to feel relevant to our customer support team"
"Make this training feel like Lyft: casual tone, real-world examples"

In about 30 seconds, AI Module Editing transforms an entire course module, not slide by slide, but all at once. You can swap terminology, adjust reading level, inject brand voice, or pull in scenarios from your actual workplace. And because Compass works on a copy of Ethena's off-the-shelf content, you always have access to the original, pristine version to revert to.

Need to go further? The AI Training Builder lets you upload your own policy documents (PDFs, SCORM files, internal decks) and turn them into structured, interactive training modules automatically. Your Insider Trading policy becomes a bespoke course. Your safety manual becomes scenario-based learning for field technicians. No studio required.

Rashelle Tanner describes how her teams now use AI to unlock efficiency:

"We script our big annual training in-house because that's where culture lives. But for everything else — the smaller, role-based trainings, the reinforcement content — we're exploring how AI can help us personalize and scale without requiring more headcount."

Rashelle Tanner
Director, Regulatory, Risk & Ethics Learning
Meta

You get the best of both: the legal speed of a vendor and the cultural "soul" of custom content, without the typical three-month production cycle.

People Also Ask: FAQ for Compliance Leaders

Q: What is the difference between building, buying, and blending compliance training?

A: Building means your team creates training from scratch internally. You own everything, including ongoing updates and production costs. Buying means licensing pre-built content from a vendor; they handle legal accuracy and updates, but the content is generic by default. Blending means starting with vendor content and using AI to customize it to your organization (your terminology, your tone, your scenarios) so it feels bespoke without the cost and maintenance of building from scratch. For most compliance teams today, Blend is the most practical and scalable approach.

Q: What is the main risk of building compliance training in-house?

A: The primary risk is what's sometimes called the Maintenance Trap: you build something, it looks great at launch, and then reality hits. Regulations shift, business priorities change, new executive orders land, and now you're spending a disproportionate share of your team's time updating content instead of addressing new risks. Without a dedicated team and sustained budget to monitor changes and refresh content continuously, homegrown training becomes outdated faster than most teams anticipate. The gap between what your training says and what the world currently requires is exactly where compliance risk lives, and closing it later is always more expensive than staying current in the first place.

Q: How do you decide whether to build or buy compliance training?

A: Evaluate two dimensions: how frequently the topic changes, and how central it is to your company's culture. If the subject is highly regulated and shifts frequently (think GDPR, anti-bribery, harassment prevention), buying from a vendor gives you automatic updates and proven legal accuracy without the ongoing maintenance cost. If the topic defines who you are as an organization (your values, your code of conduct, your internal culture), building lets you tell that story on your own terms. For most topics, a Blend works best: start with the vendor's legally-vetted content, then use AI to make it feel unmistakably yours. A four-question triage can help: Is this topic legally volatile? Is it a cultural differentiator? Does your team have the capacity to maintain it forever? What's the regulatory risk if it's inaccurate?

Q: What is the Blend approach to compliance training, and how does AI make it work?

A: The Blend approach means using a vendor's off-the-shelf compliance content as a legal and structural foundation, then layering in your organization's culture, terminology, and scenarios using AI. Instead of choosing between "generic and accurate" (buy) or "bespoke and expensive" (build), you get both. AI tools like Compass make this practical at scale: you give it a prompt ("Change all references to 'HR' to 'People Team'" or "Adapt these scenarios for our customer support team") and it transforms an entire course module in seconds, not weeks. The vendor's original content stays untouched as a pristine backup, and your customized version is what learners see.

Q: Can AI help reduce the cost of custom compliance training?

A: Yes, significantly. Traditionally, customizing vendor compliance content meant expensive professional services contracts, slow turnaround times, and manual slide-by-slide editing. AI tools like Compass let compliance teams make course-wide edits with a single prompt: swap terminology, adjust reading level, add industry-specific scenarios, or upload a policy document and turn it into an interactive training module automatically. What used to take weeks and outside budget can now be done in-house in minutes. You get the bespoke feel of custom-built training with the efficiency and legal accuracy of a vendor platform.

Q: How do I know if my compliance training is outdated?

A: A few reliable signals: your training still references regulations, policies, or business practices that have since changed; your team spends more time editing existing content than building new programs; employees flag that scenarios don't reflect how the company actually works today; or you haven't done a content audit in over a year. The subtler sign is organizational. If your compliance function feels like a production house rather than a strategic one, that's usually a symptom of Static Debt accumulating quietly in the background.

Q: What's the biggest risk of buying off-the-shelf compliance training?

A: Generic content that doesn't reflect your company's values, culture, or real-world scenarios. When employees can't see themselves in the training (the scenarios feel foreign, the tone doesn't match how your organization communicates, the examples have nothing to do with their actual job), engagement drops and behavior change suffers. Completion rates become the metric you optimize for, not actual learning. The solution isn't to abandon off-the-shelf content; it's to customize it enough that employees feel seen, which is exactly what the Blend approach is designed to solve.

The Bigger Question

Ultimately, you have to decide what your team is for. If you're spending a significant portion of your time on content maintenance, you're a production house. If you want to be a strategist, you have to stop babysitting files and start focusing on risk.

The companies winning at compliance training aren't the ones building the fanciest content. They're the ones who figured out where to build (cultural moments that matter), where to buy (regulatory requirements that demand accuracy), and where to Blend both, using AI to scale customization without scaling headcount. They've reduced Static Debt. They've freed up their teams to do high-impact work.

Find Your Fit

The Maintenance Trap isn't inevitable. But it takes intentional thinking to avoid it.

If you're wrestling with this decision, wondering if your current model is sustainable, we built a quick assessment to help. It takes under 2 minutes, asks the right diagnostic questions, and shows you which path (Build, Buy, or Blend) aligns best with your organization's capacity, risk profile, and culture.

Take the Assessment: Build, Buy, or Blend — Compliance Training Strategy Quiz

Discover your Training Strategy Fingerprint.

Because the goal isn't perfect content. It's compliance that works, culture that sticks, and a team that isn't burned out.