Docebo

As of 17 Sep 2026, Docebo is listed in the FedRAMP registry with a status of FedRAMP Authorized, issued 21 May 2025, with the assessment conducted by A-LIGN Compliance and Security, Inc. dba A-LIGN. As of 17 Sep 2026, Docebo is listed in the EU-US Data Privacy Framework registry as Active for SW-US Certification, EU-US Certification, and UK Extension Certification, originally issued 15 Nov 2016 and set to expire 30 Dec 2026. As of 17 Sep 2026, no expiration date is listed for Docebo's FedRAMP authorization in the registry. As of 17 Sep 2026, no public evidence found for SOC 2 or HIPAA frameworks for Docebo. As of 17 Sep 2026, no subprocessor records were found in the evidence provided for Docebo.

• FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 21 May 2025, assessed by A-LIGN Compliance and Security, Inc. dba A-LIGN (as of 17 Sep 2026).
• EU-US Data Privacy Framework: listed in DPF registry as Active (SW-US, EU-US, UK Extension Certifications), issued 15 Nov 2016, expires 30 Dec 2026 (as of 17 Sep 2026).
• SOC 2 and HIPAA: no public evidence found for Docebo as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.