Docebo

Overview

Docebo is an AI-powered learning management system (LMS) designed for enterprise training, partner enablement, and customer education programs. The platform serves organizations that need to deliver structured learning experiences at scale — onboarding programs, compliance training, certification courses, and continuing education. When Docebo's scripts appear on a website, they power the interactive learning experience: course players, progress tracking, assessment interfaces, and learner dashboards.

For website operators, Docebo represents a specialized functional tool that serves an audience of enrolled learners rather than casual website visitors. Users who interact with Docebo's embedded components have typically already authenticated and enrolled in a learning program, making the interaction intentional and relationship-based rather than passive or anonymous.

What This Script Does

Docebo's embedded scripts deliver the complete learning management experience on the host website:

• Course Player Rendering: Loads and displays training content including video lessons, interactive modules, SCORM/xAPI packages, slide presentations, and document-based learning materials within an embedded player interface.
• Progress Tracking: Monitors and records learner progress through courses and learning paths — tracking which modules have been started, completed, or passed, along with time spent on each content piece. This data is synchronized with Docebo's servers to maintain persistent learning records.
• Assessment and Quiz Engines: Renders interactive assessments, quizzes, and knowledge checks within courses. Scripts handle question display, answer collection, scoring, and result reporting back to the LMS.
• Engagement Metrics: Collects data on how learners interact with content — video watch duration, pause and replay patterns, document scroll depth, and interaction frequency — to inform content effectiveness analysis and adaptive learning recommendations.
• Authentication and Access Control: Manages learner session authentication, ensuring that only enrolled users can access restricted course content. This includes SSO integration handling and session timeout management.
• Gamification Elements: Displays badges, leaderboards, points, and achievement notifications as part of Docebo's gamification features designed to increase learner engagement and completion rates.

Consent & Compliance

Docebo's data processing is grounded in the contractual relationship between the organization and its learners. Under GDPR Article 6(1)(b), tracking learner progress and course completion is necessary for the performance of the training agreement — whether that's employee onboarding, partner certification, or customer education. The learner has enrolled in a program and expects their progress to be recorded.

The engagement metrics component warrants closer examination. While tracking course completion is clearly contractual, detailed behavioral analytics (video replay patterns, scroll depth, time-on-page analysis) could be characterized as going beyond what is strictly necessary for the learning service. Organizations should evaluate whether their Docebo configuration collects engagement data proportionate to the stated purpose.

Cookies and session storage used by Docebo to maintain authentication state and track in-session learning progress fall under the strictly necessary exemption. The learner has explicitly logged in and is accessing a service they enrolled in.

Organizations deploying Docebo should include the LMS in their employee or learner privacy notice, disclosing what learning activity data is collected, how completion records are used (e.g., for compliance certification), and how long learning records are retained.

Should You Block This Without Consent?

Docebo's scripts serve a functional purpose for authenticated learners who have enrolled in training programs. The core functionality — course delivery, progress tracking, and assessment — is directly tied to the learning service the user has signed up for. The data collection is expected by learners and necessary to deliver the training experience.

No.