SaaS Ranking

Docebo

What Docebo publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.

Vendor site: docebo.com · category: Learning management

✗

Data processing agreement

No data processing agreement found.

Checked 8 addresses on 2026-08-31.

Show the 8 addresses we checked
  1. https://docebo.com/legal/dpa – reached, no match (HTTP 404)
  2. https://docebo.com/dpa – reached, no match (HTTP 404)
  3. https://docebo.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  4. https://docebo.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://docebo.com/legal/data-processing-addendum – reached, no match (HTTP 404)
  6. https://docebo.com/legal/gdpr – reached, no match (HTTP 404)
  7. https://docebo.com/trust/dpa – reached, no match (HTTP 404)
  8. https://docebo.com/privacy/dpa – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Subprocessor list

No subprocessor list found.

Checked 7 addresses on 2026-08-31.

Show the 7 addresses we checked
  1. https://docebo.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://docebo.com/subprocessors – reached, no match (HTTP 404)
  3. https://docebo.com/sub-processors – reached, no match (HTTP 404)
  4. https://docebo.com/legal/sub-processors – reached, no match (HTTP 404)
  5. https://docebo.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://docebo.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://docebo.com/legal/subprocessor-list – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Data location stated

We found this behind a sign-in, so it is not published openly.

Seen at https://www.docebo.com/company/compliance-security/ · checked 2026-08-31

Show the 7 addresses we checked
  1. https://docebo.com/security – found, but behind a sign-in
  2. https://docebo.com/trust – reached, no match (HTTP 404)
  3. https://docebo.com/legal/privacy – reached, no match (HTTP 404)
  4. https://docebo.com/privacy – reached, no match (HTTP 200)
  5. https://docebo.com/privacy-policy – reached, no match (HTTP 404)
  6. https://docebo.com/compliance – reached, no match (HTTP 404)
  7. https://docebo.com/legal/privacy-policy – reached, no match (HTTP 404)

Is this wrong? Send us the URL

–

Status page with history

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 3 addresses we checked
  1. https://status.docebo.com/ – blocked or unavailable (HTTP 403)
  2. https://docebo.com/status – blocked or unavailable (HTTP 403)
  3. https://docebo.com.statuspage.io/ – Could not be fetched: fetch failed.

Is this wrong? Send us the URL

✓

Public pricing

Actual numbers on a public page.

Source: https://www.docebo.com/pricing/ · checked 2026-08-31

✓

Certifications named

SOC 2 or ISO 27001 named on a public page.

Source: https://www.docebo.com/company/compliance-security/ · checked 2026-08-31

✗

Uptime SLA with a figure

No uptime figure found.

Checked 6 addresses on 2026-08-31.

Show the 6 addresses we checked
  1. https://docebo.com/legal/sla – reached, no match (HTTP 404)
  2. https://docebo.com/sla – reached, no match (HTTP 404)
  3. https://docebo.com/legal/service-level-agreement – reached, no match (HTTP 404)
  4. https://docebo.com/trust/sla – reached, no match (HTTP 404)
  5. https://docebo.com/uptime – reached, no match (HTTP 404)
  6. https://docebo.com/legal/uptime-sla – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

HTTPS enforced with HSTS

No enforced HTTPS with HSTS found.

Checked 2 addresses on 2026-08-31.

Show the 2 addresses we checked
  1. http://docebo.com/ – redirects to https://www.docebo.com/
  2. https://docebo.com/ – HSTS max-age=300

Is this wrong? Send us the URL

✗

No third-party tracking before consent

No consent-free first load found.

Checked 1 address on 2026-08-31.

Show the 1 address we checked
  1. https://docebo.com/ – third-party requests before any interaction: a.usbrowserspeed.com, api.intellimize.co, api.ipify.org, api.usergems.com, browser.sentry-cdn.com, cdn.intellimize.co, cdn.jsdelivr.net, cdn.metadata.io, cdn.vector.co, consent.trustarc.com, distillery.wistia.com, embed-ssl.wistia.com, fast.wistia.com, fast.wistia.net, fonts.gstatic.com, googleads.g.doubleclick.net, i.ytimg.com, j.nrich.ai, log.intellimize.co, pagead2.googlesyndication.com, pipedream.wistia.com, sdk.userledclient.io, static.doubleclick.net, tags.srv.stackadapt.com, ug-webapp-public-production.s3.amazonaws.com, www.google.com, www.youtube.com

Is this wrong? Send us the URL

✗

security.txt (RFC 9116)

No security.txt found.

Checked 1 address on 2026-08-31.

Show the 1 address we checked
  1. https://docebo.com/.well-known/security.txt – reached, no match (HTTP 404)

Is this wrong? Send us the URL

–

Notice before subprocessors change

Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.

–

Named privacy contact

Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.