Third party suppliers
The suppliers we use in order to provide you with the Umbraco products and services
The table below provides an overview of the suppliers we engage for various products and services. This includes suppliers who act as sub-processors by processing our customers' or users' personal data through their systems.
For suppliers based in Europe, we secure Data Protection Agreements (DPAs) that include the necessary contractual terms, ensuring compliance with the General Data Protection Regulation (GDPR).
As of September 2023, we continue to rely on Standard Contractual Clauses (SCCs) for third-party data transfers. Additionally, from July 2023, we have incorporated the Data Privacy Framework as an additional legal basis for processing such transfers.
Would you like to stay informed about Umbraco's third-party suppliers?
Supplier | Function | Product used/ Involved/ Support* | Location of data center | Legal grounds for processing |
The following services are used by Umbraco A/S to deliver core solutions to our customers. | ||||
Hosting platform (Umbraco offers multiple hosting locations dedicated to the specific project) | Umbraco Cloud, Heartcore, & Support | EU , US , UK, AUS, CAN (See table below) | DPA incorporated with SCC and DPF | |
Caches public traffic in local servers (CDN) for public traffic for Umbraco Cloud. | Umbraco Cloud, Heartcore, Support | Global | DPA incorporated with SCC and DPF | |
Email service for Umbraco Cloud (Sendgrid) | Umbraco Cloud, Heartcore | US | DPA incorporated with SCC and DPF | |
Conditional supporting services potentially involved in service delivery. | ||||
GIT repositories | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF | |
Ticket/mail customer support tool | Umbraco Cloud, Heartcore, Support | US East | DPA incorporated with SCC and DPF | |
Collect customer feedback from support requests | Umbraco Cloud, Heartcore | EU | DPA incorporated with SCC | |
Umbraco Support phone service (Relatel) | Umbraco Support | EU | DPA | |
LMS platform for Umbraco Training | Umbraco Training | EU | DPA | |
Umbraco Support phone service - US | Umbraco Support | US | DPA incorporated with SCC | |
Customer Relations Management (CRM) | Umbraco Cloud, Heartcore, Support | Netherlands & Ireland | DPA incorporated with SCC and DPF | |
Webinar software and sales meeting tool | Umbraco Cloud, Heartcore, Support | Netherlands (EU), US | DPA incorporated with SCC and DPF | |
Contract signing and document handling for partners and customers |
| EU | DPA incorporated with SCC and DPF | |
Sales demo scheduling platform |
| USA | DPA incorporated with SCC | |
To deliver e-mails with product information and security updates to customers and users of Umbraco, handle lead-scoring and marketing automation. | Umbraco Cloud, Heartcore | EU & USA | DPA incorporated with SCC and DPF | |
Event management system |
|
| DPA incorporated with SCC and DPF | |
Event ticket system |
|
| DPA incorporated with SCC | |
ERP-system including daily bookkeeping, invoicing, handling of VAT | All Products | Netherlands | DPA | |
Email, document storage/ sharing | Umbraco Support | Global | DPA incorporated with SCC and DPF | |
Cross-platform instant messaging service | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF | |
Workflow automation — connecting internal tools and automating processes in support delivery | Umbraco Support | USA | DPA incorporated with SCC and DPF | |
Umbraco general day-to-day operations | USA | DPA with SCC | ||
Umbraco general day-to-day operations | USA | DPA with SCC | ||
Primary Region | Capacity Alternate Region |
EU West | France Central |
US East | North Central US |
UK South | UK West |
AUS | N/A |
CAN | N/A |
*Umbraco support is included in the paid plans of Umbraco and to some extent in the free versioning of Umbraco and comes with various benefits and response times. We help customers with their support needs and might interfere with Personally identifiable information, which we handle with care and respect.
The data processor can use other Umbraco Subsidiaries as sub-processors without listing them above and without notifying the data controller.
Audit procedures / annual inspection
We audit our data processors regularly using a risk-based approach to verify their compliance with our data processing agreement. Such will usually be in the form of questionnaires or review of certificates/audit reports, etc., and usually occur every six months. However, the risk-based approach may impact the frequency and intensity of the audit.
Last update on this site:
July 2026
What was changed:
July 2026: | Added section with Overflow regions Removed Atlassian as supplier |
May 2026 | Updated Suppliers with DPF information (Zoom, Calendly) Made a change to the matrix splitting the view between directly involved in delivery and potential delivery of the service. Added Zapier, Inc. as a processor |
January 2026 | Changed NPS supplier from Deligthed to Simplesat.io |
July 2025 | Updated supplier list (Removed Apollo, Added GetAccept) |
January 2025 | Updated Zoho with active DPF listing and Added subscribe button to receive emails about changes |
April 2024 | Removed Ringcentral |
March 2024 | Removed Zendesk |
October 2023 | Removed Momentive, Sessionize |