In the table below you'll find a list of the suppliers, we use for our various products and services. Suppliers that through their system have access to our customer's/user's personal data as a sub-processor.
For our suppliers inside Europe, we collect Data Protection Agreements (DPA) and their legal ground for processing data is based on the GDPR. Prior to July 16th, 2020, Privacy Shield was the legal reason for US companies to handle data with the same high security as in the EU.
Due to the invalidation of Privacy Shield from July 16th 2020, the SCC (Standard Contractual Clauses) is now the legal reason to transfer data between companies in the EU and e.g. the US.
Supplier |
Function |
Product used/ Involved/ Support* |
Link to DPA or SCC** |
Location of data center |
Legal grounds for processing |
| Within EU | |||||
| Microsoft Azure | Hosting of websites - Umbraco EU Datacenter option | Umbraco Cloud, Heartcore, & Support | Link | Netherlands |
Within the EU |
| E-conomic | ERP-system including daily bookkeeping, invoicing, handling of VAT | All Products | Link | Netherlands |
Within the EU |
| ZoHo | Customer Relations Management (CRM) | Umbraco Cloud, Heartcore, Support | Link | Netherlands & Ireland |
Within the EU |
| Momentive | Polling and Feedback (former known as Survey Monkey) | Umbraco Cloud, Heartcore | Link | EU |
Within the EU |
| Nuuday A/S | Umbraco Support phone service | Umbraco Support | Link | EU |
Within the EU |
| Sessionize | Community event platform | Link | EU |
Within the EU |
|
|
Outside EU |
|||||
|
Microsoft Azure |
Hosting of websites - Umbraco US Datacenter option | Umbraco Cloud, Heartcore, & Support | Link | US East |
SCC |
|
Microsoft Azure |
Hosting of websites - Umbraco UK Datacenter option | Umbraco Cloud, Heartcore, & Support | Link | UK |
SCC |
|
Ringcentral |
Sales department, connecting with potential and already partners and customers | Umbraco Cloud, Heartcore | Link | US | SCC |
|
Zendesk |
Ticket/mail customer support tool | Umbraco Cloud, Heartcore, Support | Link | EU, US | SCC |
|
Intercom |
Chat support tool | Umbraco Cloud, Heartcore, Support | Link | US East | SCC |
| Twillio | Email service for Umbraco Cloud (Sendgrid) | Umbraco Cloud, Heartcore | Link |
US |
SCC |
| Atlassian | Public service status page with operational information on systems and custom messages. (Statuspage.io) | Umbraco Cloud, Heartcore | US East | SCC | |
| Delighted | To collect NPS from survey responses sent to users that engage on our support platforms. |
Umbraco Cloud, Heartcore |
Link | US East | SCC |
| Zoom | Webinar software | Umbraco Cloud, Heartcore, Support | Link |
Netherlands (EU), US |
SCC |
| Cloudflare | Caches public traffic in local servers (CDN) for public traffic for Umbraco Cloud. | Umbraco Cloud, Heartcore, Support | Link |
Global |
SCC |
| GitHub | GIT repositories | Umbraco Cloud, Heartcore, Support | Link |
EU & USA |
SCC |
| Slack | Primarily Internal Communication tool, however, Gold Partners are invited in. | Umbraco Cloud, Heartcore, Support | Link |
EU & USA |
SCC |
| Active Campaign |
To deliver e-mails with product information and security updates to customers and users of Umbraco, handle lead-scoring and marketing automation. |
Umbraco Cloud, Heartcore | Link |
EU & USA |
Internal procedures undergoing - reach out if any questions. |
| SpotMe |
Event management system |
All Products | Link |
Global |
SCC |
| Google Workspace |
Email, document storage/ sharing |
Umbraco Support | Link |
Global |
SCC |
|
|
*Umbraco support is included in the paid plans of Umbraco and to some extent in the free versioning of Umbraco and comes with various benefits and response times. We help customers with their support needs and might interfere with Personally identifiable information, which we handle with care and respect.
** We link unsigned DPA/ SCC reports due to internal policies and processes
The data processor can use other Umbraco Subsidiaries as sub-processors without listing them above and without notifying the data controller.
Audit procedures / annual inspection
We audit our data processors on a regular basis using a risk-based approach to verify their compliance with our data processing agreement. Such will usually be in the form of questionnaires or review of certificates/audit reports etc. and usually take place every six months. However, the risk-based approach may impact the frequency and intensity of the audit.
Latest update on this site:
April 2023