Third party suppliers
The suppliers we use in order to provide you with the Umbraco products and services
The table below provides an overview of the suppliers we engage for various products and services. This includes suppliers who act as sub-processors by processing our customers' or users' personal data through their systems.
For suppliers based in Europe, we secure Data Protection Agreements (DPAs) that include the necessary contractual terms, ensuring compliance with the General Data Protection Regulation (GDPR).
As of September 2023, we continue to rely on Standard Contractual Clauses (SCCs) for third-party data transfers. Additionally, from July 2023, we have incorporated the Data Privacy Framework as an additional legal basis for processing such transfers.
Would you like to stay informed about Umbraco's third-party suppliers?
Supplier |
Function |
Product used/ Involved/ Support* |
Location of data center |
Legal grounds for processing |
| Microsoft Azure | Hosting platform (Umbraco offers multiple hosting locations dedicated to the specific project) | Umbraco Cloud, Heartcore, & Support | EU West, US East, UK South, AUS | DPA incorporated with SCC and DPF |
| Cloudflare | Caches public traffic in local servers (CDN) for public traffic for Umbraco Cloud. | Umbraco Cloud, Heartcore, Support | Global | DPA incorporated with SCC and DPF |
| Twilio | Email service for Umbraco Cloud (Sendgrid) | Umbraco Cloud, Heartcore | US | DPA incorporated with SCC and DPF |
| Atlassian | Public service status page with operational information on systems and custom messages. (Statuspage.io) | Umbraco Cloud, Heartcore | US East | DPA incorporated with SCC and DPF |
| GitHub | GIT repositories | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF |
| Intercom | Ticket/mail customer support tool | Umbraco Cloud, Heartcore, Support | US East | DPA incorporated with SCC and DPF |
| Delighted | Collect customer feedback from support requests | Umbraco Cloud, Heartcore | US East | DPA incorporated with SCC |
| Nuuday A/S | Umbraco Support phone service (Relatel) | Umbraco Support | EU | DPA |
| Eurekos | LMS platform for Umbraco Training | Umbraco Training | EU | DPA |
| Verizon | Umbraco Support phone service - US | Umbraco Support | US | DPA incorporated with SCC |
| ZoHo | Customer Relations Management (CRM) | Umbraco Cloud, Heartcore, Support | Netherlands & Ireland | DPA incorporated with SCC and DPF |
| Zoom | Webinar software and sales meeting tool | Umbraco Cloud, Heartcore, Support | Netherlands (EU), US | DPA incorporated with SCC |
| Apollo | Sales Intelligence & Sales Engagement Solution | DPA incorporated with SCC | ||
| Calendly | Sales demo scheduling platform | USA | DPA incorporated with SCC | |
| Active Campaign | To deliver e-mails with product information and security updates to customers and users of Umbraco, handle lead-scoring and marketing automation. | Umbraco Cloud, Heartcore | EU & USA | DPA incorporated with SCC and DPF |
| SpotMe | Event management system | DPA incorporated with SCC and DPF | ||
| Universe | Event ticket system | DPA incorporated with SCC | ||
| E-conomic | ERP-system including daily bookkeeping, invoicing, handling of VAT | All Products | Netherlands | DPA |
| Google Workspace | Email, document storage/ sharing | Umbraco Support | Global | DPA incorporated with SCC and DPF |
| Slack | Cross-platform instant messaging service | Umbraco Cloud, Heartcore, Support | EU & USA | DPA incorporated with SCC and DPF |
*Umbraco support is included in the paid plans of Umbraco and to some extent in the free versioning of Umbraco and comes with various benefits and response times. We help customers with their support needs and might interfere with Personally identifiable information, which we handle with care and respect.
The data processor can use other Umbraco Subsidiaries as sub-processors without listing them above and without notifying the data controller.
Audit procedures / annual inspection
We audit our data processors regularly using a risk-based approach to verify their compliance with our data processing agreement. Such will usually be in the form of questionnaires or review of certificates/audit reports, etc., and usually occur every six months. However, the risk-based approach may impact the frequency and intensity of the audit.
Last update on this site:
January 2025
What was changed:
January 2025: Updated Zoho with active DPF listing
January 2025: Added subscribe button to receive emails about changes
April 2024: Removed Ringcentral
March 2024: Removed Zendesk
October 2023: Removed Momentive - no longer used.
October 2023: Removed Sessionize - due to data classification not relevant
October 2023: Added Apollo.io
October 2023: Added Eurekos
October 2023: Added Universe
October 2023: Added Calendly
October 2023: Added Verizon