Skip to main content
Docebo logo

Docebo

Security and trust center evidence

Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified

docebo.comEducationLast verified 2 Nov 2026
Request the report Are you Docebo?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 30 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 30 Sep 2026GDPRVendor-statedFedRAMP mark, CertReports state Verified as of 2 Nov 2026FedRAMPVerifiedPCI DSS mark, CertReports state Vendor-stated as of 30 Sep 2026PCI DSSVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27001Vendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27701Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27018Vendor-statedISO 9001 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 9001Vendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 2 Nov 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 30 Sep 2026CCPAVendor-stated

Docebo has 2 registry-verified rows and 9 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Docebo is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 21 May 2025 and audited by A-LIGN Compliance and Security, Inc. dba A-LIGN, confirmed as of 19 Sep 2026. Docebo is listed in the EU-US Data Privacy Framework registry with active EU-US, SW-US, and UK Extension certifications, issued 15 Nov 2016 and expiring 30 Dec 2026, confirmed as of 17 Sep 2026. Docebo states on its trust centre that it holds SOC 2, GDPR, PCI DSS (SAQ A), and CCPA/CPRA compliance, as of 18 Sep 2026. Docebo also states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, and ISO 9001:2015 certifications, as of 18 Sep 2026. No CSA STAR or HIPAA evidence rows were supplied for Docebo as of 19 Sep 2026.

  • FedRAMP Authorized, issued 21 May 2025, audited by A-LIGN Compliance and Security, Inc. dba A-LIGN - listed as of 19 Sep 2026
  • Active EU-US Data Privacy Framework certification, issued 15 Nov 2016, expires 30 Dec 2026 - listed as of 17 Sep 2026
  • States SOC 2, GDPR, PCI DSS (SAQ A), CCPA/CPRA, ISO/IEC 27001:2022, 27701, 27017, 27018, and ISO 9001:2015 on its trust centre as of 18 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among education vendors

2verified rows

Category median 1, across 135 indexed education vendors. Docebo has more verified rows than 86 percent of them.

ai-powered learningemployee traininglearning management systemskills development

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, CSA STAR, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (1)

Security profile

Pen test cadence
annual
Data residency
Australia, Canada, EU, India, US

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  6. 18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
  7. 18 Sep 2026ISO 9001 evidence addedA ISO 9001 row entered the index with state Vendor-stated.
  8. 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
  9. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  10. 18 Sep 2026Subprocessor added: List of all Docebo sub processorsList of all Docebo sub processors appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the Education category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Schoox logo

Schoox

Education

Reimagine employee training with Schoox, an AI-powered corporate

DPF mark, CertReports state Verified
1 verified2 Nov 2026
ExpertusONE logo

ExpertusONE

Education

ExpertusONE is the enterprise LMS trusted by

DPF mark, CertReports state Verified
1 verified2 Nov 2026
Blackboard logo

Blackboard

Education

Discover Blackboard's AI-powered LMS designed for higher education, businesses, and government - enabling personalized learning

FedRAMP mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified2 Nov 2026
Epignosis logo

Epignosis

Education

Move your training online with TalentLMS, the leading cloud learning

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified2 Nov 2026

Evidence against regulations

All regulations for Docebo

How much of each regulation’s vendor requirements Docebo’s public evidence reaches.

Reviewing a vendor on public evidence

All articles