Docebo
Compliance evidence
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
Compliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 30 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 30 Sep 20262 sources
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · A-LIGN Compliance and Security, Inc. dba A-LIGN
PCI DSSVendor-statedVendor states PCI DSS - SAQ A on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27701Vendor-statedVendor states ISO 27701 on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27017Vendor-statedVendor states ISO 27017 on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27018Vendor-statedVendor states ISO 27018 on its trust centre
as of 30 Sep 20262 sources- ISO 9001Vendor-stated
Vendor states ISO/IEC 9001:2015 on its trust centre
as of 30 Sep 20262 sources 
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 20261 source
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 30 Sep 20262 sources
No public evidence yet for HIPAA, CSA STAR, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.