# Docebo Docebo declares [16 subprocessors](https://thirdpartyindex.com/vendors/docebo#subprocessors), plus 6 of its own affiliates, in [its subprocessor list](https://trust.docebo.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/7549)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-23. [14 tracked vendors](https://thirdpartyindex.com/vendors/docebo#used-by) name Docebo as a subprocessor, including [Conga](https://thirdpartyindex.com/vendors/conga), [Genesys](https://thirdpartyindex.com/vendors/genesys) and [Wrike](https://thirdpartyindex.com/vendors/wrike). Docebo (docebo.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/docebo - Documents last verified: 2026-11-11 - Transparency rating: 88/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 7/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 14 tracked vendors directly, 140 within two hops, 497 within three; 14 tracked vendors rely on it directly, 43 within two hops, 742 within three - Cite as: Docebo, Third Party Index, https://thirdpartyindex.com/vendors/docebo (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.docebo.com/ | 2026-11-11 | 2026-11-09 | | Subprocessor list | https://trust.docebo.com/subprocessors | 2026-11-11 | 2026-09-23 | | Data processing addendum | https://www.docebo.com/company/data-processing-addendum/ | 2026-11-11 | 2026-09-23 | | Privacy policy | https://www.docebo.com/company/privacy-policy/ | 2026-11-11 | 2026-09-23 | | Security page | https://www.docebo.com/company/compliance-security/ | 2026-11-11 | 2026-09-23 | | Status page | https://status.docebo.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (16) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) (AI model provider: Amazon Bedrock) | Service provider (IaaS/PaaS/SaaS) for all application data storage and processing required to support Docebo Software Services functionalities. Bedrock\*\*\*\*: Generative AI-powered Data functionalities, including content generation, enhancement, revision, file transcription, and translation, Docebo AI functionalities, as governed under the applicable Software Service Addendum incorporated into the Agreement\*\*\*\*\*. IaaS provider for Docebo's resource planning application (Provisio), including related data storage and processing, as well as customer support to address technical or service issues. | — | 2026-10-01 | | Atlassian, Inc.: Jira | Internal tracking of requests handled by Docebo Support and Customer Success. | EU (Ireland, Germany) and US (California) | 2026-09-23 | | [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary.md) | Image and video management and media asset Content Delivery Network. | USA | 2026-10-01 | | [Colossyan](https://thirdpartyindex.com/vendors/colossyan-creator.md) | Service Provider used to create videos from text via artificial representations of individuals (“AI Avatars”) | EU or | 2026-10-01 | | [Datadog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | Application and infrastructure log monitoring. | USA | 2026-10-01 | | [GO1 Pty Ltd](https://thirdpartyindex.com/vendors/go1.md) | Content Service provider integrated into Docebo Learn LMS: delivery of content (Courses/Learning Objects) to End Users upon Customer’s LMS Administrators activation and management. | Australia | 2026-10-01 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) (AI model provider: Google Vertex AI / Gemini) | Vertex AI: Generative AI-powered functionalities, including content generation, enhancement, revision, and file transcription and translation, for Docebo AI functionalities, as governed under the applicable Software Service Addendum incorporated into the Agreement\* | — | 2026-10-01 | | Kantata Mavenlink Totango | Professional Service tool used (i) internally by Docebo to manage Professional Service time tracking and (ii) externally as a customer-facing project management tool for service delivery. Customer success analytics and engagement tool | Professional Customer | 2026-10-01 | | [Lunaweb GmbH](https://thirdpartyindex.com/vendors/cloudconvert.md) | Content format conversion (Cloudconvert). | Germany (EU) | 2026-10-01 | | [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) (AI model provider: Azure OpenAI) | Azure OpenAI: generative AI-powered functionalities, including content generation, enhancement, revision, and file transcription and translation, for Docebo AI functionalities, as governed under the applicable Software Service Addendum incorporated into the Agreement\*\*. | — | 2026-10-01 | | [OpenSesame](https://thirdpartyindex.com/vendors/opensesame.md) | Content Service provider integrated into Docebo Learn LMS: delivery of content (Courses/Learning Objects) to End Users upon Customer’s LMS Administrators' activation and management. | USA | 2026-10-01 | | [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md) | Management of surveys to collect Email Customer satisfaction feedback on the Docebo Docebo product user experience. | (EU) Helpdesk Customer Professional | 2026-10-01 | | [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Data laking/warehousing of learning and analytical data used by the reporting and dashboarding features of Docebo Learn LMS and stream processing of Learn LMS events. | USA and EU Canada UK Australia | 2026-10-01 | | [Tavus](https://thirdpartyindex.com/vendors/tavus.md) | Service Provider used to provide dynamic artificial version of an individual’s likeness ("Virtual and used to support real-time conversational video conversations with End Users. | USA\* by with | 2026-10-01 | | [Workato, Inc.](https://thirdpartyindex.com/vendors/workato.md) | Integration-platform-as-a-service provider for native and custom 3rd party integrations and automation services. | USA Germany (EU)() | 2026-10-01 | | [Zendesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Ticketing service for inbound Software Service customer support, or through the widget support integrated into the Software Service. | Germany (EU) | 2026-09-23 | Read from ([evidence](https://thirdpartyindex.com/evidence/7549)). CSV: https://thirdpartyindex.com/vendors/docebo/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (6) - Docebo S.p.A. (Canada; Italy (EU)) - Docebo Australia Pty Ltd. (Australia) - Docebo DACH GmbH (Germany (EU)) - Docebo France SAS (France (EU)) - Docebo NA, Inc. (USA) - Docebo UK Limited (UK) ## Compliance As its trust center lists them. - Audited: SOC 2, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701 ([evidence](https://thirdpartyindex.com/evidence/12881)) - Claimed: ISO 9001, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/171787)) - FedRAMP Marketplace: Moderate · 1 agency authorization · since May 21, 2025 ## Web Technologies Docebo's homepage made 321 requests to 36 domains, 21 services controlled by another company, and 4 domains not identified. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 21 third parties by category: Advertising 7 (Google Cloud, N.Rich, Influ2, Inc., Metadata, OpenAI, StackAdapt, X Corp.); Analytics 4 (ZoomInfo, UserGems, Hotjar, Cloudflare); Marketing automation 1 (GetVector, Inc.); Live chat 1 (Qualified.com, Inc.); Cookie compliance 1 (TrustArc); CDN 1 (jsDelivr); CMS 1 (reviewed: WordPress.org); Customer data platform 1 (reviewed: LiveRamp); Geolocation 1 (ipify); Issue trackers 1 (usually detected as Issue trackers: Sentry); RUM 1 (reviewed: New Relic); SEO 1 (Ahrefs). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (21) - Google Cloud: 41 requests to youtube.com, google.com, doubleclick.net, gstatic.com, jnn-pa.googleapis.com, ytimg.com, googleadservices.com; DoubleClick Floodlight, YouTube (its subprocessor list names it too) - Qualified.com, Inc.: 27 requests to qualified.com; Qualified - New Relic: 8 requests to nr-data.net, newrelic.com - N.Rich: 7 requests to nrich.ai; N.Rich - GetVector, Inc.: 6 requests to vector.co; Vector - TrustArc: 5 requests to trustarc.com; TrustArc - ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo - Influ2, Inc.: 4 requests to influ2.com; Influ2 - Metadata: 4 requests to metadata.io; Metadata.io - OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel - StackAdapt: 4 requests to stackadapt.com; StackAdapt - UserGems: 3 requests to usergems.com; UserGems - X Corp.: 3 requests to ads-twitter.com, t.co, twitter.com; Twitter Ads - jsDelivr: 3 requests to jsdelivr.net; jsDelivr - Hotjar: 2 requests to hotjar.com; Hotjar - Ahrefs: 1 request to ahrefs.com; Ahrefs - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights - LiveRamp: 1 request to rlcdn.com - Sentry: 1 request to sentry.io - WordPress.org: 1 request to w.org - ipify: 1 request to ipify.org; ipify ### Unknown (4) Domains not identified yet: userled.io, usbrowserspeed.com, userledclient.io, ug-webapp-public-production.s3.amazonaws.com ### First party (1) - Docebo: 174 requests to docebo.com; Fastly, GSAP 3.13.0, Google Analytics, Google Tag Manager, HSTS, Lucide, MariaDB, MySQL, New Relic, Nginx, Open Graph, PHP, Pantheon, PostHog, Priority Hints, RSS, Sentry, Twitter Emoji (Twemoji), Varnish, WordPress 7.1.4, WordPress Block Editor, WordPress Multisite, WordPress Site Editor, Yoast SEO 28.8, core-js 3.38.0 14 tracked companies loaded by the homepage are not in Docebo's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (14) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Assent](https://thirdpartyindex.com/vendors/assent.md): Learning management system (LMS) for Assent University training. - [AutogenAI](https://thirdpartyindex.com/vendors/autogenai.md): Learning Management Services - [Benevity](https://thirdpartyindex.com/vendors/benevity.md): Learning management system (LMS) capabilities and e-learning content within the Enterprise Impact Platform. - [Conga](https://thirdpartyindex.com/vendors/conga.md): LMS (Learning Management System) Provider - [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Learning Management Software (LMS); Online training content hosting for colleagues and partners - [Experian](https://thirdpartyindex.com/vendors/experian.md): Docebo host the learning management system (LMS) that services the KYC360 Academy.; Sub-processor - [Genesys](https://thirdpartyindex.com/vendors/genesys.md) - [Genetec](https://thirdpartyindex.com/vendors/genetec.md): learning management solution - [GlassHive](https://thirdpartyindex.com/vendors/glasshive.md): Learning management / training delivery - [Klaxoon by Wrike](https://thirdpartyindex.com/vendors/klaxoon-by-wrike.md): Wrike Discover - [Minitab](https://thirdpartyindex.com/vendors/minitab.md) - [Squirro](https://thirdpartyindex.com/vendors/squirro.md): E-Learing platform for customers; Provider; SaaS for Operations - [Wrike](https://thirdpartyindex.com/vendors/wrike.md): Wrike Discover - [Zilliant](https://thirdpartyindex.com/vendors/zilliant.md): Customer Product Training ## Service status Incidents it reported on its own status page. - Last 90 days: 3 reported incidents (0 major or critical, 0 minor, 3 with no impact stated) - Status page last read: 2026-11-11 - 2026-10-06: Docebo Service Disruption (no impact stated) - 2026-09-11: Snowflake Service Outage in EU Central (eu-central-1) (no impact stated) - 2026-09-04: Snowflake Service Outage in EU Central (eu-central-1) (no impact stated) - 2026-06-24: Service disruption on certain report types (no impact stated) - 2026-06-15: Partial Service Disruption (no impact stated) - 2026-06-11: Docebo pages may be slow loading (no impact stated) - 2026-05-20: ILT Disruption (no impact stated) - 2026-04-13: Help desk ticket unavailable (no impact stated) ## Incidents reported by Docebo's subprocessors Incidents reported in the last 30 days on their own status pages by 7 vendors Docebo lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000347 (minor) - 2026-11-11: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Latency in multiple services in the Japanese region (minor) - 2026-11-09: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported Degraded performance for the Marketplace and course launches (minor) - 2026-11-09: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported We experienced an issue loading survey projects and the My Projects Page in the European region (no impact stated) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000337 (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000336 (minor) - 2026-11-05: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported API Platform Performance Degradation (minor) - 2026-11-03: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported EX project issues in the Western US region (minor) - 2026-11-03: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Legacy Results-Report export issues in FedRAMP environment (minor) - 2026-11-02: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported User's are unable to log into Oro Skills (minor) - 2026-11-02: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported XM Directory Task issues in the Eastern US and United Kingdom regions (no impact stated) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000321 (minor) - 2026-10-30: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Webhooks Performance Degradation (minor) - 2026-10-30: [Colossyan Creator](https://thirdpartyindex.com/vendors/colossyan-creator#status), which Docebo lists as a subprocessor, reported Neo 2 inference is degraded (minor) - 2026-10-29: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported Some launches are failing (no impact stated) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000319 (minor) - 2026-10-29: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Intermittent errors in knowledge base search (minor) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Docebo lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-27: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Issue with Genie Conversation History and AIRO Chats (minor) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Docebo lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-26: [Colossyan Creator](https://thirdpartyindex.com/vendors/colossyan-creator#status), which Docebo lists as a subprocessor, reported Stock media-related operations are degraded (minor) - 2026-10-24: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Docebo lists as a subprocessor, reported Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264) (no impact stated) - 2026-10-23: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported Service degradation with Curate with AI Feature (minor) - 2026-10-23: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Salesforce Integration issues in all regions (minor) - 2026-10-23: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Customer Hub Issues (no impact stated) - 2026-10-21: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported Issue relaunching courses on Mobile (major) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Docebo lists as a subprocessor, reported Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (no impact stated) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000299 (minor) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000294 (critical) - 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Genie and AIRO Not Responding in Workato UI (no impact stated) - 2026-10-20: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Log Processing Service Degradation (minor) - 2026-10-19: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Discover Connector issues (minor) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000290 (minor) - 2026-10-16: [Cloudinary](https://thirdpartyindex.com/vendors/cloudinary#status), which Docebo lists as a subprocessor, reported Issues accessing the Cloudinary web UI (major) - 2026-10-16: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Errors in AI by Workato Analyze text action (minor) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000287 (critical) - 2026-10-14: [OpenSesame](https://thirdpartyindex.com/vendors/opensesame#status), which Docebo lists as a subprocessor, reported Course launches are failing (critical) - 2026-10-14: [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics#status), which Docebo lists as a subprocessor, reported Copied report generation issues in all regions (no impact stated) - 2026-10-14: [Workato](https://thirdpartyindex.com/vendors/workato#status), which Docebo lists as a subprocessor, reported Issues with AI by Workato (minor) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Docebo lists as a subprocessor, reported INC20000277 (minor) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-10-28: Changed certification: ISO 9001 ([evidence](https://thirdpartyindex.com/evidence/171787)) Feed: https://thirdpartyindex.com/vendors/docebo/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/docebo --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api