Learning Management (LMS)
Sana Learn
EU origin, foreign-owned Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Sana Labs AB · sanalabs.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Sana Learn at a glance
- Vendor
- Sana Labs AB
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Default not stated; pages mention the EU source, captured 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates Sana Learn 2.5/5, the mean of 6 judges. Sana Learn, an AI-assisted learning management system from Sana Labs AB of Stockholm, earns the judges' weighted verdicts between 5.1 and 5.5, scoring high on content and integrations and low on compliance evidence and reporting. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Sana Learn, an AI-assisted learning management system from Sana Labs AB of Stockholm, earns the judges' weighted verdicts between 5.1 and 5.5, scoring high on content and integrations and low on compliance evidence and reporting. Courses and content and integration and portability both sit at 6 across the bench: AI authoring turns SCORM, PDFs and documents into interactive courses, translation covers 50+ languages, and 100+ connectors cover SAP SuccessFactors, Workday HCM and Personio alongside SAML single sign-on and SCIM provisioning. Onboarding and academies score 5-6, with programs that trigger the moment a hire is added to the HRIS. Reporting and codetermination sits at 4: we found no public information on scheduled reports, pseudonymised reporting, or works council material. Compliance training splits 4-5 — rule-based enrolment and expiring certificates are documented; policy attestations, course versioning and audit-ready exports are not — and sovereignty splits 5-6 as judges weighed the EU/EEA processing commitment against the site's statement that Sana is now part of Workday. Pricing transparency scores 2-3; no prices are stated on the captured pages.
Speaks for it
- AI authoring converts existing SCORM, PDFs and documents into interactive courses, with in-house translation across 50+ languages
- Onboarding programs trigger the moment a new hire is added to the HRIS, with automated pre-boarding before day one
- Certificates issue automatically on completion, with expiration dates that trigger renewals before they lapse
- SAML single sign-on and SCIM provisioning come with 100+ synced connectors, including SAP SuccessFactors, Workday HCM and Personio
- Multi-tenancy with customizable permissions supports white-labeled portals for external audiences, with CRM-triggered customer enrollment
Held against it
- We found no public information on policy attestations, course versioning, escalation to managers, or audit-ready exports
- We found no public information on scheduled reports, aggregated or pseudonymised reporting, customer-configurable retention, or works council material
- We found no public information on a documented REST API, webhooks, or export of users, completions and certificates, so what leaving would cost is not described
- We found no public information on the hosting infrastructure behind learner records, product-chain subprocessors, or a published data processing agreement
- We found no public information on xAPI, cmi5 or LTI support, question pools, or accessibility conformance
Best for
- You want onboarding that runs itself — programs trigger from the HRIS by role and start date, with pre-boarding before day one
- Your stack centers on named HR and identity systems such as Personio, SAP SuccessFactors, Workday HCM, Okta and Microsoft Entra ID, with SAML single sign-on and SCIM provisioning
- You build courses in-house from existing PDFs, documents and SCORM and need translation across 50+ languages
- You run customer or partner academies on white-labeled multi-tenant portals with CRM-triggered enrollment
Avoid if
- You need inspection-grade compliance evidence — policy attestations, course versioning or exportable audit trails — documented before an audit cycle
- You must agree a works agreement with your works council before rollout and need codetermination material, customer-configurable retention or pseudonymised reporting to do it
- Your procurement requires documented exit paths — a REST API, webhooks or export of users, completions and certificates — before signature
- You must budget from published figures before contacting sales — ask the vendor: the public pages we read do not show it
The scores
| Criterion | Panel median |
|---|---|
| Courses, learning paths & content standards | 3 of 5 |
| Compliance training, recertification & audit trail | 2 of 5 |
| Onboarding, extended enterprise & academies | 3 of 5 |
| Reporting, learner data & works council | 2 of 5 |
| Integrations, administration & portability | 3 of 5 |
| European sovereignty | 3 of 5 |
Courses, learning paths & content standards
Show reasoningHide reasoning
How this is scored
How learning is built and delivered: a course builder with video, documents, quizzes and assignments, import of SCORM 1.2 and 2004, xAPI, cmi5 and LTI packages, learning paths with prerequisites, assessments and question pools, certificates, blended learning with classroom or virtual sessions, a mobile app with offline access, multilingual courses and interface, accessibility (WCAG), AI-assisted authoring, and an off-the-shelf content library.
0 — Not a learning management system; courses cannot be delivered or tracked with it.
3 — Courses with video, documents and quizzes and a completion record; content standards, learning paths and mobile use are basic or not described.
5 — A course builder with quizzes and certificates, SCORM import, learning paths with prerequisites, scheduled instructor-led or virtual sessions, a responsive or native mobile app, and courses and interface in several languages.
8 — SCORM, xAPI and cmi5 or LTI documented, question pools and graded assignments, adaptive or branching paths, an offline mobile app, automatic translation of courses, accessibility conformance stated against WCAG 2.1 or 2.2, and AI authoring with the model and data use explained.
10 — A content platform an L&D team runs on: every major standard with a published conformance statement, a learning record store or xAPI export, skills tagged to content, multilingual versions managed as one course, and course content exportable as packages another LMS imports.
The Onboarding Lead
AI authoring that turns SCORM, PDFs and documents into interactive courses, plus in-house translation into more than 50 languages in minutes, is exactly what I need to keep one course in German, Czech and English — and an off-the-shelf, editable content library and in-person and hybrid live sessions are documented too. Quizzes, question pools, offline mobile access and accessibility conformance are not described on the captured pages, and beyond a stated SCORM compliance no other content standard appears, so this sits between the levels for me. 3 4 5 7
The Compliance Officer
AI authoring that converts SCORM, PDFs and documents into interactive courses, in-house translation across 50+ languages, an off-the-shelf editable content library, learning paths, spaced repetition and hosted in-person and hybrid sessions are all documented. The captured pages give no information on xAPI, cmi5 or LTI support, question pools, WCAG accessibility conformance or an offline mobile app, so the content story is strong but the standards and accessibility evidence is thin. 3 4 5 7
The Customer Education Lead
AI authoring that turns SCORM, PDFs and documents into interactive courses, automatic translation across 50+ languages handled in-house, learning paths, in-person and hybrid live sessions, and both an off-the-shelf library and connectors for twenty named external libraries are documented. I found no public information on xAPI, cmi5 or LTI, question pools, WCAG accessibility or an offline mobile app, so this sits above the middle of the road but well short of a full standards-competent platform. 3 4 5 6 7
The Works Council Member
AI authoring turns PDFs, documents and SCORM into interactive courses, journeys blend self-paced courses with in-person and hybrid live sessions, translation into more than fifty languages runs in-house, and certificates issue automatically with expiry dates. We found no public information on xAPI, cmi5 or LTI support, an offline mobile app, question pools or accessibility conformance, so the higher level is out of reach on this evidence. 3 4 5 7 8
The IT & HR Systems Admin
AI authoring that turns SCORM, PDFs and documents into interactive courses, automatic in-house translation into 50+ languages, certificates that expire and trigger renewals, learning paths blending self-paced courses with in-person and hybrid live sessions, cross-device mobile use and an editable off-the-shelf content library are all documented. We found no public information on xAPI or cmi5 support, question pools or graded assignments, an offline mobile app, WCAG conformance, or courses exportable as SCORM packages another LMS could import. 3 4 5 7
The Skeptic
AI authoring turns PDFs and existing SCORM files into interactive courses, structured learning paths and live in-person and hybrid sessions are documented, certificates are issued automatically with expiry dates that trigger renewal, courses translate into 50+ languages, and an off-the-shelf editable content library is included. We found no public information on xAPI, cmi5 or LTI support, question pools, accessibility conformance, or an offline mobile app — cross-device pickup is described as a web experience, not a documented app. 7 3 4 5
Compliance training, recertification & audit trail
Show reasoningHide reasoning
How this is scored
Whether mandatory training can be run and proven: automatic assignment by role, department, location or legal entity, due dates with reminders and escalation to the manager, recurring recertification (annual data protection, IT security, anti-money-laundering, occupational safety instruction), attestations and acknowledgements of policies, attendance records for classroom sessions, course versioning with who completed which version, expiry of certificates, and audit-ready reports and exports for regulators or auditors.
0 — No way to assign mandatory training or record completion.
3 — Courses can be assigned with a due date and completions reported; recertification, escalation and audit evidence are basic or not described.
5 — Rule-based assignment by group or attribute, due dates with automatic reminders, recurring recertification with certificate expiry, policy acknowledgements, attendance for live sessions, and completion reports exportable for an audit.
8 — Escalation to managers, course versioning with the completed version stored per learner, an unalterable audit trail, e-signatures or attestations with timestamp, ready-made compliance dashboards by entity and location, and named regimes supported (occupational safety instruction, GxP or 21 CFR Part 11, FINMA or BaFin requirements).
10 — Compliance evidence that holds in an inspection: validated or certified for a named regulated use, every assignment, reminder, attempt and completion traceable to a timestamped record, retention of training records configurable per regulation, and the audit trail exportable in a documented format.
The Onboarding Lead
Certificates are issued automatically with expiration dates that trigger renewals, and assignment by role, attribute and start date with reminders and compliance on autopilot is stated — that covers the basics of my annual safety instruction. I found no public information on policy attestations, attendance records, course versioning or audit-ready exports; audit logging is named among security features, but inspection-grade evidence is not described. 3 5 7
The Compliance Officer
Automatic enrollment by role and start date, editable attributes routing the right training to the right person, reminders on autopilot, and certificates whose expiration dates trigger renewals are documented — enough to run my annual anti-money-laundering and data protection cycle. But we found no public information on escalation to managers, course versioning that records who completed which version, policy attestations with timestamps, or an exportable, unalterable audit trail, which is precisely what my last audit demanded. 1 3 4 5 7
The Customer Education Lead
Assignment by role and start date, compliance and reminders on autopilot, and certificates whose expiration dates trigger renewals before they lapse are stated — exactly the expiring-certification mechanics my 120 implementation partners need. I found no public information on policy acknowledgements, classroom attendance records, course versioning, escalation to managers or audit-ready exports, and no named regulatory regime appears on these pages. 3 4 7
The Works Council Member
Rule-based assignment by role and editable attributes, reminders running on autopilot, and automatic recertification where certificate expiry triggers renewal are documented, with audit logging listed among the security features. Policy acknowledgements, course versioning, an unalterable audit trail and audit-ready exports are not described, and for our occupational safety instructions I would not rely on this level of evidence. 3 4 5 7
The IT & HR Systems Admin
The compliance pages document enrollments, compliance and reminders on autopilot, assignment by role, start date and editable attributes, certificates whose expiration triggers renewals, spaced repetition and CSRD templates, and audit logging is listed among the security features. We found no public information on policy acknowledgements or attestations, course versioning, escalation to managers, or completion records exportable for an audit. 1 3 4 5 7
The Skeptic
Enrolment runs on rules by role and start date with reminders on autopilot, HR-synced attributes route the right training, and certificate expiry triggers renewal before it lapses — the skeleton of a compliance programme is there. We found no public information on escalation to managers, course versioning with the completed version stored per learner, policy attestations, classroom attendance records, or support for a named regime such as occupational safety instruction; audit logging appears as a feature word with no detail. 3 7 4 6
Onboarding, extended enterprise & academies
Show reasoningHide reasoning
How this is scored
Which audiences the product serves and how much runs without an administrator: onboarding journeys enrolled automatically from the HR system on the start date, manager and buddy tasks, frontline staff without a company email, multiple branded portals or tenants for customers, partners, franchisees or members, self-registration and SSO for external users, selling courses with checkout, subscriptions and coupons, partner certification programmes, and groups, branches and delegated administration.
0 — Serves no organisational audience; a personal course viewer only.
3 — Users can be grouped and enrolled by hand; automated onboarding and external audiences are basic or not described.
5 — Onboarding paths assigned automatically on creation of the user, groups or branches with their own administrators, a branded portal for external learners with self-registration, and either course sales with payment or several portals for different audiences.
8 — Onboarding triggered by HR-system events with manager tasks and checklists, login for frontline staff without email (username, QR code or kiosk), several branded tenants with separate content, reporting and administrators, course sales with subscriptions, bundles and invoices, and partner certification with renewal.
10 — Internal and external learning run from one platform at scale: unlimited tenants with their own domains and data separation stated, e-commerce with VAT handling and accounting integration, onboarding journeys that span HR, IT and the manager, and every audience reported on separately and together.
The Onboarding Lead
This matches my top requirement almost word for word: the right program enrols new hires automatically the moment they are added to the HRIS, based on role and start date, with automated pre-boarding before day one and managers getting insight into progress. Multi-tenancy with customisable permissions serves customer audiences, and a customer issuing 1,000+ certifications in three months shows external training at some scale — but manager or buddy task checklists, login for my shift workers without a company email address, self-registration and course sales are not described. 4 5 6
The Compliance Officer
Onboarding programs trigger and enroll the moment a hire is added to the HRIS, with automated pre-boarding, tailored journeys and manager visibility into progress, and the external-training pages document multi-tenancy with customizable permissions, white-labeling and CRM-triggered enrollment of customers. We found no public information on manager task checklists, self-registration for external learners, course sales with checkout, or login for frontline staff without a company email. 4 5 6 7
The Customer Education Lead
Onboarding auto-triggers from the HRIS on role and start date with automated pre-boarding, and multi-tenancy with customizable permissions supports distinct learning experiences per group, white-labelled and segmented by group, role or account, with CRM-triggered enrollment for customers and certifications that renew. I found no public information on selling courses, checkout or invoices, on self-registration for external learners, or on separate administrators and reporting per portal — the pieces a partner academy lives or dies on. 3 4 5 6 7
The Works Council Member
Onboarding triggers the moment a hire is added to the HR system, with automated pre-boarding, personalized journeys by role and manager insight, and external audiences run on multi-tenancy with customizable permissions, white-labeling and CRM-triggered customer enrollment. Manager tasks, login for frontline staff without a company email, course sales with checkout and partner certification detail are not described, which holds it below the top of the band. 4 5 6 7
The IT & HR Systems Admin
Onboarding programs trigger the moment a new hire is added to the HRIS, with automated pre-boarding, enrollment by role and start date, blended journeys and manager insight into progress; for external audiences there is multi-tenancy with customizable permissions for distinct learning experiences per group, white-labelling and customer certification results. We found no public information on manager tasks or checklists, branded portals with self-registration, frontline access without a company email, or selling courses with checkout. 4 5 7
The Skeptic
Onboarding triggers the moment a hire is added to the HRIS, pre-boarding starts before day one, journeys blend self-paced courses, live sessions and external content, and multi-tenancy with customizable permissions builds distinct experiences for different audiences on white-labeled portals — a customer story of 1,000+ certifications issued in three months suggests external academies work at scale. We found no public information on manager task checklists, login without a company email for frontline staff, self-registration for external learners, or course sales with checkout and subscriptions. 4 5 7
Reporting, learner data & works council
Show reasoningHide reasoning
How this is scored
What the system shows about learning and about each learner, and how far the customer can limit it: dashboards and reports for L&D, managers and auditors, custom and scheduled reports, which learner data is recorded (completions, scores, time spent, logins), role-based visibility so managers see only their team, aggregated or pseudonymised reports, the option to switch off time tracking or scoring, retention and deletion rules, learner access to their own data, and material for a works agreement under §87(1) no. 6 BetrVG or the vendor's description of codetermination. Where the data is processed is scored under sovereignty.
0 — No reports, or individual learner activity shown to every administrator with no settings at all.
3 — Completion and progress reports exist and a privacy policy covers the product; what is recorded per learner and who sees it are basic or not described.
5 — Dashboards and custom reports with scheduled delivery, roles that restrict managers to their own team, the learner data recorded described, retention and deletion of learner records configurable, and a data processing agreement offered.
8 — Granular visibility per role and organisational unit, aggregated or pseudonymised reports for analytics, tracking of time spent or scores that can be switched off, automatic deletion after a set period, a learner data export, and a works council or codetermination guide, template works agreement or data protection impact assessment supplied.
10 — Learner data under the customer's full control and documented as such: every recorded field and every report listed with who can see it, privacy settings per country or entity, an audit log of who viewed learner data, and the codetermination position confirmed by a named works council, law firm or certification.
The Onboarding Lead
Real-time AI dashboards showing who is on track and who needs a nudge, custom user roles, advanced permissions and audit logging are stated, and the privacy notice lists which data categories are kept about users. Scheduled custom reports, manager views restricted to their own team, configurable retention of learner records, pseudonymised analytics and any works-council or codetermination material are not described — and with 1,400 employees in Germany I cannot roll a tool out without material for a works agreement. 1 4 7 8
The Compliance Officer
AI-generated real-time dashboards, manager insight into learner progress, custom user roles with advanced permissions, and a privacy notice listing the learner fields held and the retention periods applied give me something to work with. We found no public information on custom or scheduled reports, aggregated or pseudonymised reporting, switching off time or score tracking, configurable deletion, or any works council material for a works agreement under §87(1) no. 6 BetrVG. 1 4 7 8
The Customer Education Lead
AI-generated real-time dashboards, manager insight into new-hire progress, custom reports through the HR sync, and a privacy notice that lists the data categories held and retention periods are documented. I found no public information on scheduled reports, aggregated or pseudonymised reporting, deletion configurable by the customer, or any works council and codetermination material. 1 6 7 8
The Works Council Member
AI-generated dashboards, real-time insight into who is on track and manager insight into individual progress are documented, and custom user roles, advanced permissions and audit logging are listed as security features, but we found no public information on which learning data is recorded per person, whether managers see only their team, or whether scoring and time tracking can be switched off. The privacy notice states the vendor's own retention periods rather than customer-configurable deletion, and no data processing agreement, works council guide or codetermination material is evidenced; a works agreement under works constitution law cannot be built from these pages. 1 4 7 8
The IT & HR Systems Admin
AI-generated real-time dashboards, progress insight for managers and segmentation by group, role or account are documented, and the privacy notice lists the user data fields processed with retention periods, alongside custom user roles, advanced permissions and audit logging. We found no public information on custom or scheduled reports, customer-configurable retention and deletion, aggregated or pseudonymised reporting, switching off time or score tracking, or works council and codetermination material. 1 4 5 7 8
The Skeptic
Real-time AI dashboards, custom reports through the HR sync, custom user roles and advanced permissions are claimed, and the privacy notice lists the account fields processed along with retention periods. Those retention clocks are the vendor's own statutory ones rather than rules a customer configures, and we found no public information on scheduled report delivery, aggregated or pseudonymised reporting, switching off time or score tracking, or any works council material — nothing a works agreement could be built from. 1 6 7 8
Integrations, administration & portability
Show reasoningHide reasoning
How this is scored
How the system fits the company and what leaving would cost: single sign-on (SAML, OpenID Connect) and user provisioning (SCIM) from Entra ID, Google or Okta, sync with HR systems (Personio, SAP SuccessFactors, Workday), Microsoft Teams, Slack and video conferencing integrations, a documented REST API and webhooks, CRM and e-commerce connectors for academies, export of users, completions and certificates, export of courses as SCORM, open-source code, and a self-hosted or on-premise edition.
0 — No integrations and no export; users and records exist only inside the product.
3 — CSV import of users and an export of reports; SSO, an API and HR-system sync are basic or not described.
5 — SAML or OpenID Connect single sign-on, a documented REST API, a connector or documented sync for at least one named HR system, Microsoft Teams or video conferencing integration, and export of users, completions and certificates.
8 — SCIM provisioning, prebuilt connectors for several named HR, CRM and identity systems, webhooks, a public API reference with rate limits, a sandbox or test instance, courses exportable as SCORM, and a self-hosted or private-cloud edition with its own documentation.
10 — The customer can run, extend and leave the platform freely: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export of users, history, certificates and content in open formats, and the return and deletion of all data on termination documented.
The Onboarding Lead
Strong where it counts for me: SAML single sign-on and SCIM provisioning with named providers, sync with dozens of named HR systems including Personio and SAP SuccessFactors that auto-enrol learners from user attributes, Teams and Slack notifications, and 100+ synced apps. The captured pages show no documented API reference, no stated export of users, completions and certificates, and no self-hosted edition — migration into Sana is offered as a service, but what leaving would cost is not described. 1 6 7 9
The Compliance Officer
SAML single sign-on with SCIM provisioning across named identity providers, prebuilt HR connectors including Personio, SAP SuccessFactors and Workday HCM, Microsoft Teams and Slack, a catalog of 100+ synced apps and content migration services are all documented. We found no public information on a documented REST API, webhooks, export of users, completions and certificates, SCORM export of courses, or a self-hosted edition — so what leaving would cost is not described in the captured pages. 1 6 7 9
The Customer Education Lead
SAML single sign-on and SCIM provisioning with named identity providers including Entra ID, Okta and Google Workspace, sync with dozens of named HR systems including Personio, SAP SuccessFactors and Workday HCM, Teams, Slack and video tools, and CRM connectors including Salesforce and HubSpot cover my day-one wiring. I found no public information on a documented REST API, webhooks, or export of users, completions and certificates, so what leaving would cost stays unknown. 1 6 7 9
The Works Council Member
SAML single sign-on with SCIM provisioning, dozens of named HR connectors including Personio, SAP SuccessFactors and Workday HCM, plus CRM, Teams, Slack and video integrations are documented as turnkey or custom. A documented API, webhooks, export of users, completions and certificates and any self-hosted edition are not described, and content migration appears only as a question, which caps what leaving would cost in transparency. 1 6 7 9
The IT & HR Systems Admin
SAML single sign-on and SCIM provisioning are documented with Microsoft Entra ID among the named providers, Personio appears in a long list of HR connectors that sync user data to auto-enrol learners and assign access rights, Microsoft Teams and Slack carry notifications and reminders, and 100+ connectors plus bespoke custom integrations are offered. We found no public information on a documented REST API, webhooks, export of users, completions and certificates, or export of courses as SCORM; migrating existing content appears only as an FAQ question. 1 6 7 9
The Skeptic
SAML single sign-on with SCIM provisioning across a dozen named identity providers, a long list of named HR connectors including SAP SuccessFactors, Workday HCM and Personio, Teams, Slack and video tools, twenty content libraries, and inbound content migration from other LMSs make the integration story the strongest on the site. Leaving is the thin part: we found no public information on a documented REST API, webhooks, export of users, completions and certificates, or SCORM export of courses built inside. 6 9 1
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where learner data (names, completions, scores, certificates) is stored and processed, and who the subprocessors are (hosting, video streaming, email, AI features, support and payment tools). Independently sourced by the sovereignty pipeline; learner records are employee data, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (video, email, AI features, support, payment) run through non-EU providers without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every learner record on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Onboarding Lead
Processing within the EU/EEA is stated, the contracting entity is Sana Labs AB in Stockholm with ISO 27001 and SOC 2 Type 2 claimed, and the Swedish data protection authority is named for complaints. But the site states Sana is now part of Workday, joint controllership with Workday, Inc. and Workday Limited is declared with data subject requests routed through Workday's online form, third-country transfers under standard contractual clauses are acknowledged, and only marketing-side subprocessors are named — no published data processing agreement or full service-chain subprocessor list with locations appears on the captured pages. 1 7 8
The Compliance Officer
The privacy notice commits to processing personal data within the EU/EEA, with adequacy decisions or standard contractual clauses for any third-country transfers, the contracting entity is Sana Labs AB of Stockholm under the Swedish data protection authority, and ISO 27001 and SOC 2 Type 2 are listed. But we found no public information on the hosting infrastructure by name, the product-chain subprocessors such as hosting, video, AI and support, or a published data processing agreement. The site also states Sana is now part of Workday, and data subject requests are routed through Workday's online form. 1 7 8
The Customer Education Lead
The contracting entity is Sana Labs AB in Stockholm, the privacy notice states processing within the EU/EEA with standard contractual clauses for any third-country transfers, and ISO 27001 and SOC 2 Type 2 are stated. The same notice describes Sana as part of Workday and as a joint controller with Workday, Inc. and Workday Limited that routes privacy requests through Workday's form; we found no public information on named hosting infrastructure, a published data processing agreement, or subprocessors other than the marketing tools that are listed. 1 7 8
The Works Council Member
The contracting entity is Sana Labs AB of Stockholm and the privacy notice commits to processing personal data within the EU/EEA, with SOC 2 Type 2 and ISO 27001 stated and acknowledged third-country transfers naming standard contractual clauses as a safeguard. The site itself states Sana is now part of Workday, the named marketing subprocessors include US entities, and we found no published data processing agreement or a full subprocessor list with locations covering the learning chain. 1 7 8
The IT & HR Systems Admin
The privacy notice states processing within the EU/EEA with regional deploys, the contracting entity is Sana Labs AB in Stockholm, ISO 27001 and SOC 2 Type 2 are stated, and transfer safeguards are named; the same notice discloses that Sana is now part of Workday, acts as joint controller with Workday, Inc., and routes data subject requests through Workday's online form, while the named subprocessors cover marketing sources. We found no public information on the hosting infrastructure behind learner records, the product-chain subprocessors for hosting, video, AI or support, or a published data processing agreement. 1 7 8
The Skeptic
The contracting entity is Sana Labs AB of Stockholm, the privacy notice commits to processing personal data within the EU/EEA and names transfer safeguards, the Swedish data protection authority is the complaint route, and ISO 27001 and SOC 2 Type 2 are stated. Against that, Sana states it is now part of Workday of the USA, privacy requests are submitted through Workday's form, and only marketing tools are named as subprocessors — we found no public information on the hosting infrastructure, the subprocessor chain behind learner records, or a published data processing agreement. 1 8 7
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per tier by active or registered users, what counts as an active user, what happens above the tier, which features (SSO, API, HR connectors, extra portals, e-commerce, custom domain, content library) cost extra, the free tier or trial and its limits, implementation and support fees, the self-hosted edition and its licence, minimum term and VAT treatment.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, portals or features is unclear.
5 — Tiers are public with their price per user band and main inclusions, but at least one commonly needed piece (SSO, API, extra portals, HR connector, implementation) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (active or registered users, portals), the definition of an active user and overage stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of learners, portals and features, with every add-on, implementation, support and overage fee and the cancellation and data-return terms published.
The Onboarding Lead
No prices are stated on any captured page; the pricing page poses the right questions — how pricing is calculated, what counts as a user, whether implementation costs extra — without publishing figures, tiers or user-band rules, and a free Civic Tier is documented only in the privacy notice. For my headcount, every real annual cost starts with a sales conversation. 1 7 8
The Compliance Officer
The pricing page asks how pricing is calculated, what counts as a user and whether implementation and onboarding are an added cost, but no figures are stated on any captured page; a free Civic Tier is named in the privacy notice without its limits described. I cannot compute an annual cost for 900 staff from these pages, and "full access, no hidden costs" is not a price. 1 7 8
The Customer Education Lead
The pricing page poses the right questions — how pricing is calculated, what counts as a user, whether implementation and onboarding cost extra — and claims "Full access, no hidden costs", yet we found no stated price, tier, user definition or scaling rule on the pages I read. A free Civic Tier for individual users exists, which lifts this off the bottom, but I cannot compute an annual cost for 3,000 customers and 120 partners from anything published. 1 7 8
The Works Council Member
A free Civic Tier is mentioned in the privacy notice, but no prices are stated on the pricing page; the FAQ asks how pricing is calculated, what counts as a user and whether implementation is extra, and the captured pages give no figures for any of it. From public information alone I could not compute an annual cost for our headcount. 1 7 8
The IT & HR Systems Admin
No prices appear on the captured pages; the pricing page asks how pricing is calculated, what counts as a user and whether implementation is an added cost, states "Full access, no hidden costs" and lists enterprise services without figures, while a free Civic Tier is described in the privacy notice. A free tier therefore exists, but how cost scales with users, portals or features is not stated. 1 7 8
The Skeptic
The pricing page poses my own questions — how pricing is calculated, what counts as a user, whether implementation and onboarding are an added cost — and we found no public information answering them: no tier prices, per-user figures or scaling rule on any captured page. A free Civic Tier appears once in the privacy notice, and "full access, no hidden costs" is a slogan rather than a number, so the real annual cost starts with a sales conversation. 1 7 8
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Sana Learn
Is Sana Learn European?
Partly. whats-best.ai classifies Sana Learn as EU origin, foreign-owned.
Where does Sana Learn store data?
The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention the EU as hosting location, per the vendor’s page captured 1 Nov 2026.
Does Sana Learn have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Sana Learn?
As of 2 Nov 2026, the panel rates iSpring LMS (iSpring Learn) (3/5), Zensai Learn365 (formerly LMS365) (3/5) and LearnWorlds (3/5) highest among the other 12 Learning Management (LMS) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Zensai Learn365 (formerly LMS365) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Sana Learn alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 22 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
Sources (9)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (Sana Learn product page) sanalabs.com Checked 1 Nov 2026 Details →
- 2 Features page (learning management) sanalabs.com Checked 1 Nov 2026 Details →
- 3 Features page (compliance training) sanalabs.com Checked 1 Nov 2026 Details →
- 4 Features page (employee onboarding) sanalabs.com Checked 1 Nov 2026 Details →
- 5 Features page (external training) sanalabs.com Checked 1 Nov 2026 Details →
- 6 Integrations page sanalabs.com Checked 1 Nov 2026 Details →
- 7 Pricing page sanalabs.com Checked 1 Nov 2026 Details →
- 8 Privacy policy sanalabs.com Checked 1 Nov 2026 Details →
- 9 Integrations, administration & portability — found from sitemap sanalabs.com Checked 1 Nov 2026 Details →