In the table below you'll find a list of the suppliers, we use for our various products and services. Suppliers that through their system will process our customer's/user's personal data as a sub-processor.
For our suppliers inside Europe, we collect Data Protection Agreements (DPA) with incorporated, and their legal ground for processing data is based on the GDPR.
As of September 2023, we still rely on the SCC and from July 2023 include the Dataprivacy Framework as legal grounds for processing third-party data transfers.
Supplier |
Function |
Product used/ Involved/ Support* |
Location of data center |
Legal grounds for processing |
| Microsoft Azure | Hosting platform (Umbraco offers multiple hosting locations dedicated to the specific project) | Umbraco Cloud, Heartcore, & Support | EU West, US East, UK South, AUS | DPA incorporated with SCC and DPF |
| Cloudflare | Caches public traffic in local servers (CDN) for public traffic for Umbraco Cloud. | Umbraco Cloud, Heartcore, Support | Global | DPA incorporated with SCC and DPF |
| Twilio | Email service for Umbraco Cloud (Sendgrid) | Umbraco Cloud, Heartcore | US | DPA incorporated with SCC and DPF |
| Atlassian | Public service status page with operational information on systems and custom messages. (Statuspage.io) | Umbraco Cloud, Heartcore | US East | DPA incorporated with SCC and DPF |
| GitHub | GIT repositories | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF |
| Intercom | Ticket/mail customer support tool | Umbraco Cloud, Heartcore, Support | US East | DPA incorporated with SCC and DPF |
| Delighted | Collect customer feedback from support requests | Umbraco Cloud, Heartcore | US East | DPA incorporated with SCC |
| Nuuday A/S | Umbraco Support phone service (Relatel) | Umbraco Support | EU | DPA |
| Eurekos | LMS platform for Umbraco Training | Umbraco Training | EU | DPA |
| Verizon | Umbraco Support phone service - US | Umbraco Support | US | DPA incorporated with SCC |
| ZoHo | Customer Relations Management (CRM) | Umbraco Cloud, Heartcore, Support | Netherlands & Ireland | DPA incorporated with SCC and DPF (Currently being investigated in terms of inactive DPF) |
| RingCentral | Sales department, connecting with potential and already partners and customers | Umbraco Cloud, Heartcore | US | DPA incorporated with SCC and DPF |
| Zoom | Webinar software and sales meeting tool | Umbraco Cloud, Heartcore, Support | Netherlands (EU), US | DPA incorporated with SCC |
| Apollo | Sales Intelligence & Sales Engagement Solution | DPA incorporated with SCC | ||
| Calendly | Sales demo scheduling platform | USA | DPA incorporated with SCC | |
| Active Campaign | To deliver e-mails with product information and security updates to customers and users of Umbraco, handle lead-scoring and marketing automation. | Umbraco Cloud, Heartcore | EU & USA | DPA incorporated with SCC and DPF |
| SpotMe | Event management system | DPA incorporated with SCC and DPF | ||
| Universe | Event ticket system | DPA incorporated with SCC | ||
| E-conomic | ERP-system including daily bookkeeping, invoicing, handling of VAT | All Products | Netherlands | DPA |
| Google Workspace | Email, document storage/ sharing | Umbraco Support | Global | DPA incorporated with SCC and DPF |
| Slack | Cross-platform instant messaging service | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF |
*Umbraco support is included in the paid plans of Umbraco and to some extent in the free versioning of Umbraco and comes with various benefits and response times. We help customers with their support needs and might interfere with Personally identifiable information, which we handle with care and respect.
The data processor can use other Umbraco Subsidiaries as sub-processors without listing them above and without notifying the data controller.
Audit procedures / annual inspection
We audit our data processors regularly using a risk-based approach to verify their compliance with our data processing agreement. Such will usually be in the form of questionnaires or review of certificates/audit reports, etc., and usually occur every six months. However, the risk-based approach may impact the frequency and intensity of the audit.
Last update on this site:
March 2024
What was changed:
March 2024: Removed Zendesk
October 2023: Removed Momentive - no longer used.
October 2023: Removed Sessionize - due to data classification not relevant
October 2023: Added Apollo.io
October 2023: Added Eurekos
October 2023: Added Universe
October 2023: Added Calendly
October 2023: Added Verizon