# Umbraco

Umbraco (umbraco.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/umbraco
- Documents last verified: 2026-10-06
- Transparency rating: 88/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 7/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 0/6 (not found); security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 5/5; Pages still reachable 8/8
- Supply chain: relies on 16 tracked vendors directly, 130 within two hops, 412 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Umbraco, Third Party Index, https://thirdpartyindex.com/vendors/umbraco (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://umbraco.com/trust-center/ | 2026-10-06 | 2026-10-06 |
| Subprocessor list | https://umbraco.com/trust-center/privacy-and-umbraco/gdpr-and-umbraco/third-party-suppliers | 2026-10-06 | 2026-10-06 |
| Data processing addendum | https://umbraco.com/media/j2hgtrdk/2024-dpa-data-processing-agreement-umbraco.pdf | 2026-10-06 | 2026-10-06 |
| Terms | https://umbraco.com/terms-and-conditions/ | 2026-10-06 | 2026-10-06 |
| Security page | https://umbraco.com/trust-center/security-and-umbraco/ | 2026-10-06 | 2026-10-06 |
| security.txt | https://umbraco.com/.well-known/security.txt | 2026-10-06 | 2026-10-06 |
| Security advisories | https://umbraco.com/trust-center/security-and-umbraco/how-to-get-informed-about-security-advisories/ | 2026-10-06 | 2026-10-06 |

## Subprocessors (22)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| Active Campaign | To deliver e-mails with product information and security updates to customers and users of Umbraco, handle lead-scoring and marketing automation. | EU & USA | 2026-10-06 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Umbraco general day-to-day operations | USA | 2026-10-06 |
| [Calendly](https://thirdpartyindex.com/vendors/calendly-com.md) | Sales demo scheduling platform | USA | 2026-10-06 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Caches public traffic in local servers (CDN) for public traffic for Umbraco Cloud. | Global | 2026-10-06 |
| E-conomic | ERP-system including daily bookkeeping, invoicing, handling of VAT | Netherlands | 2026-10-06 |
| Eurekos | LMS platform for Umbraco Training | EU | 2026-10-06 |
| [GetAccept](https://thirdpartyindex.com/vendors/getaccept.md) | Contract signing and document handling for partners and customers | EU | 2026-10-06 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | GIT repositories | EU & USA | 2026-10-06 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Email, document storage/ sharing | Global | 2026-10-06 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Ticket/mail customer support tool | US East | 2026-10-06 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Hosting platform (Umbraco offers multiple hosting locations dedicated to the specific project) | EU , US , UK, AUS, CAN (See table below) | 2026-10-06 |
| Nuuday A/S | Umbraco Support phone service (Relatel) | EU | 2026-10-06 |
| [Open AI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Umbraco general day-to-day operations | USA | 2026-10-06 |
| [Simplesat](https://thirdpartyindex.com/vendors/simplesat.md) | Collect customer feedback from support requests | EU | 2026-10-06 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Cross-platform instant messaging service | EU & USA | 2026-10-06 |
| SpotMe | Event management system | — | 2026-10-06 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | Email service for Umbraco Cloud (Sendgrid) | US | 2026-10-06 |
| Universe | Event ticket system | — | 2026-10-06 |
| [Verizon](https://thirdpartyindex.com/vendors/verizon.md) | Umbraco Support phone service - US | US | 2026-10-06 |
| [Zapier, Inc.](https://thirdpartyindex.com/vendors/zapier.md) | Workflow automation — connecting internal tools and automating processes in support delivery | USA | 2026-10-06 |
| [ZoHo](https://thirdpartyindex.com/vendors/zoho.md) | Customer Relations Management (CRM) | Netherlands & Ireland | 2026-10-06 |
| [Zoom](https://thirdpartyindex.com/vendors/zoom.md) | Webinar software and sales meeting tool | Netherlands (EU), US | 2026-10-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/52249)). CSV: https://thirdpartyindex.com/vendors/umbraco/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 2. All vendors that list one: https://thirdpartyindex.com/ai

## Subprocessor of (0)

No tracked vendor lists it.

## Security contact

From its security.txt (https://umbraco.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/51443)):

- Contact: mailto:security@umbraco.com
- Disclosure policy: https://umbraco.com/trust-center/security-and-umbraco/how-to-report-a-vulnerability-in-umbraco/
- Acknowledgments: https://umbraco.com/trust-center/security-and-umbraco/how-to-report-a-vulnerability-in-umbraco/list-of-security-contributors/
- Security jobs: https://umbraco.com/work-at-umbraco/job-openings/
- Languages: en, da
- Valid until 2030-12-30

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api