# Umbraco — Content Marketing

Umbraco by Umbraco HQ A/S holds a panel rating of 3/5 from 6 AI judges (category median 2.5/5), as of 2026-11-03. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Umbraco HQ A/S (https://umbraco.com)
- Category: [Content Marketing](https://whats-best.ai/software/content-marketing.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/content-marketing/umbraco
- Alternatives: https://whats-best.ai/software/content-marketing/umbraco/alternatives ([markdown](https://whats-best.ai/software/content-marketing/umbraco/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-11-03 · oldest source captured 2026-11-03

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Umbraco HQ A/S
- Headquarters: Not stated on the vendor’s pages as of 3 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 3 Nov 2026
- Free plan: Yes, per the vendor’s own page [S3]

## The panel's verdict

Umbraco is a free and open-source.NET content management system. Its strength is collaboration and approval, scored 7, for configurable multi-step approval groups, approval requiring one, most or all members, mandatory comments, content locked after the first approval, and licensed external approval by secure link or email reply. Content model and reuse follows at 7-8, crediting a self-service zip export and import of content, schema and templates with validation and migration hooks across major versions. AI and content rights scores 6-7 for an opt-in, bring-your-own-key design: no provider is bundled, and with none configured no data relating to these features is sent anywhere. Distribution and integrations scores 6 on a documented read-only delivery API. Editorial planning draws the widest spread, 0 to 3, from no public information on a calendar, briefs or campaigns to a workflow history with statuses and dates. Sovereignty scores 3-4: Azure is named as cloud host without a region, and the captured pages establish no data residency, contracting-entity jurisdiction or subprocessor locations. Pricing transparency scores 3; no paid-license figures are public.

**Speaks for it:**
- Configurable multi-step approval with groups, approval requiring one, most or all members, mandatory comments, and licensed external approval by secure email link or email reply
- Self-service zip export and import of content, media, schema and templates with validation and migration hooks across major Umbraco versions
- AI is opt-in and bring-your-own-key: no provider is bundled or enabled by default, and with none configured no data relating to these features is sent anywhere
- The CMS is free and open source under the MIT license, installable on your own Windows, Linux or macOS infrastructure with an on-premises Deploy option
- A publicly documented read-only delivery API serves published content and media per culture, with named integrations for Google Analytics, Matomo and Hotjar and the Engage add-on

**Held against it:**
- We found no public information on an editorial calendar, briefs, campaign or topic grouping, or per-person workload and deadline views
- The captured pages establish no data residency, contracting-entity jurisdiction or subprocessor locations, and Azure is named as cloud host without a region
- We found no public information on webhooks, published rate limits, SDKs, API versioning or a public status page for the delivery API
- We found no public information on retention periods for AI prompts and outputs, the AI processing location, or output ownership written into the terms — the full-ownership claim appears in marketing copy
- We found no public information on prices for paid licenses, Cloud plans or add-ons, with unlicensed installations capped at five approval groups

**Best for:**
- You need configurable multi-step approval chains and want external reviewers such as agencies to approve via secure email link or email reply (both behind a paid license)
- You want an open-source.NET CMS you can self-host on your own infrastructure and export from as a self-service zip
- You require AI to be strictly opt-in and bring-your-own-key, with content travelling directly from your instance to your chosen provider on your own credentials
- You deliver multilingual content through an API, requesting specific cultures with default-language fallback when none is specified

**Avoid if:**
- You need an editorial calendar, briefs and campaign planning inside the CMS — the captured pages document only a scheduled date within the approval workflow and a workflow history
- Your multilingual workflow depends on managed translation — the delivery API serves culture variants, but we found no public information on translation status per locale or named translation-service connectors
- You must confirm a hosting region, data residency or subprocessor locations before signing — the captured pages name Azure as cloud host without a region, and transfer impact assessments are held internally and released on request

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v2). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Head of Content | The SME Marketer | The Localisation Lead | The Web Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Planning, editorial calendar & briefs | 1/5 | 1/5 | 1.5/5 | 1/5 | 0.5/5 | n/r |
| Creation, review & approval | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Structured content, localisation & export | 4/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 4/5 |
| Publishing, distribution & integrations | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| AI assistance & content rights | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| European sovereignty | 2/5 | 1.5/5 | 2/5 | 1.5/5 | 2/5 | 2/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **3/5** | **3/5** | **3/5** | **3.5/5** |

### The judges

- **The Head of Content** (v1.0): Runs an editorial team of six plus freelancers and answers for what goes live. Wants briefs that carry the goal to the writer, a calendar that shows what is late, and an approval trail that says which version legal released — not a status anyone can flip to "approved".
- **The SME Marketer** (v1.0): Is the marketing department of a 120-person Mittelstand company and writes half the content with an AI assistant. Wants to know who owns what the model wrote, whether her drafts train it, and what the plan costs once she adds a second language and the agency as guests.
- **The Localisation Lead** (v1.0): Ships every piece in German, English and French for the DACH region and beyond. Wants locales on the field, not copies of the entry, translation status per language, and a documented export of content, model and locales — because a repository that cannot leave is a hostage, not an asset.
- **The Web Engineer** (v1.0): Builds the website and the integrations the content flows through. Wants a versioned API with published rate limits, webhooks on publish, preview environments, and a migration CLI that works in both directions — and reads "headless" as a promise about the API, not a logo.
- **The Data Protection Officer** (v1.0): Signs off every tool that stores the company's drafts, author profiles and campaign data. Wants the contracting entity and hosting region named, the subprocessor list with the AI providers on it, prompt retention in days, and training on customer content excluded in the terms rather than in a blog post.
- **The Skeptic** (v1.0): Has read "AI-powered content at scale", "one source of truth for every channel" and "no lock-in, it's headless" on every page in this category. Reads instead for the export that includes locales and history, the clause on training with customer content, and what the invoice does when the third locale and the API overage arrive.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- AI act risk assessment: minimal-to-limited · no · no [S11]
- AI act role: no [S11]
- Erasure responsibility: 17 · customer [S11]
- GDPR roles: controller · processor/sub-processor [S11]
- Nonapproved AI prohibited: yes [S10]
- Opensource mit license: MIT [S11]
- Tia dpia: gdpr@umbraco.com · yes · no [S10]
- Vendor governance: yes [S10]

**Data**
- AI data flow byok: BYOK · yes [S11]
- GDPR right to be forgotten: yes · GDPR Article 17 [S10]
- Human review: yes · yes [S10]
- No data without provider: no [S11]
- No logging AI requests: self-hosted / on-premises · no [S11]
- No public model training: no [S10]
- No unrelated reuse: no [S10]
- Retention limitation: no [S10]
- Sensitive info guidance: avoid sharing passwords, API keys, secrets/tokens, credit card info, national ID numbers, health information, unrelated personal data [S10]
- Usage limitation: investigating and resolving the support issue only [S10]

**Hosting**
- Cloud DPA governs: Umbraco Cloud hosting terms and Cloud DPA govern data handling; enabling AI does not change existing Cloud DPA [S11]

**Integrations**
- Artifact service: ExportArtifactsAsync · ImportArtifactsAsync · IArtifactImportExportService [S7]
- Extensions: Umbraco is extremely extensible and can do whatever you need. [S3]
- Github: yes [S1]
- Heartcore: Umbraco Heartcore offered as a CMS service [S1]
- Marketplace: yes [S1]
- Storage provider implementations: physical directory · Umbraco file system · zip file [S7]

**Legal**
- Internal AI scope excluded: Umboto · Claude · Gemini · AI Usage in Umbraco Support disclosure [S11]
- License: MIT [S3]
- Open books: Open Books page exists [S1]
- Terms: Terms & Conditions and Trust Center pages exist [S1]

**Pricing**
- Free: yes [S3]
- Unlicensed group limit: 5 · yes [S4]

**Product**
- Accept language header: Accept-Language header · yes [S9]
- Agent ready: Umbraco positions itself as an agent-ready CMS with agent ecosystem tools [S1]
- AI after hours: yes [S10]
- AI capabilities: suggest support answers · analyze error logs · summarize support conversations · identify relevant documentation · improve response quality and consistency · reduce time-to-resolution [S10]
- AI capabilities: content drafting/refining/summarizing; semantic search; natural-language Q&A over content; back-office tasks via agents; developer support [S11]
- AI editor features: AI editor features: tone-of-voice generation with chosen model, one click [S1]
- AI governance: Built-in AI governance and guardrails control [S1]
- AI model choice: Users can choose their own AI tools/models without lock-in; full content ownership [S1]
- AI opt in by default: yes · Umbraco CMS · Umbraco Forms · Umbraco Commerce [S11]
- AI provider choice: yes [S11]
- AI providers supported: OpenAI · Anthropic · Amazon Bedrock · Google Gemini · Microsoft AI Foundry · Mistral · DeepSeek · Hugging Face · Fireworks AI · Together AI [S11]
- AI support assistant: AI support assistant · Umboto [S10]
- AI tools scope: no · no · no [S10]
- Allow attachments: yes [S5]
- Allow scheduling: yes [S5]
- Analytics integration method: Analytics tools connect via tracking script; events can be triggered from forms and content actions; data export to dashboards supported [S8]
- Analytics tools listed: Google Analytics · Matomo · Hotjar · Umbraco Engage Analytics · Umbraco Marketplace [S8]
- Approval by email reply 2: yes · yes [S4]
- Approval flow types: Explicit · Implicit · Exclude [S5]
- Approval groups view: Approval groups view lists active group names, members, permissions, and quick email link [S4]
- Approval thresholds: One · One · Most · All [S5]
- Archive cleanup instruction: Export archives stored temporarily on backoffice server, should be removed after use [S7]
- Backoffice preview: backofficepreview.umbraco.com · yes · no [S3]
- Backoffice UI localization: yes [S6]
- Base URL: https://cdn.umbraco.io [S9]
- Cloud features: Cloudflare · Azure · yes · 3 [S2]
- Cloud platform: Umbraco Cloud platform and hosting offered [S1]
- Commerce mcp poc: proof of concept · yes [S11]
- Content delivery readonly: delivering published content and media · yes [S9]
- Content endpoints: retrieve by ID · retrieve by URL · children · descendants · ancestors [S9]
- Content transfer method: Content and media transferred by editors via backoffice operations [S7]
- Culture parameter: culture parameter for specific language; default language returned when no culture specified [S9]
- Culture querystring: culture query string parameter · yes [S9]
- Culture specific templates: yes · yes [S5]
- Deploy content transfer: transfer content and media from backoffice [S2]
- Deploy dashboards: deployment dashboards with status, trigger, progress [S2]
- Deploy local dev: local development sync from source control [S2]
- Deploy purpose: move schema, content, media, and configuration between environments [S2]
- Deploy restore: restore content between environments [S2]
- Deploy schema transfer: transfer schema/configuration: Document Types, Data Types, templates [S2]
- Deploy settings configuration readonly: Read-only configuration view; changes made in appsettings.json [S7]
- Deploy settings schema comparison: In Umbraco · On disk · Up to date · Data Type · Document Type · Language · Media Type · Member Type · Relation Type · Template [S7]
- Deploy settings status actions: Update schema · Verify schema · Export schema · Clear signatures · Set signatures · Delete export archives [S7]
- Description: Umbraco is a free and open source .NET content management system. [S3]
- Docs: yes [S3]
- Document scope: Umbraco CMS · Umbraco Forms · Umbraco Commerce [S11]
- Document type approval flows licensed: yes [S5]
- Document type localization supported items: Document Type names and descriptions; Property names and descriptions; Custom property validation messages; Tab and group names [S6]
- Engage addon: Umbraco Engage add-on offers tailored user experiences [S1]
- Engage addon: Official add-on for testing and analytics inside the CMS [S8]
- Engage features: analytics · A/B testing · personalization [S8]
- Engage setup: Install add-on, define goals, create tests, review in CMS; existing analytics scripts can remain [S8]
- Exclude nodes licensed: yes [S5]
- Export access location: Import and Export accessed via Deploy overview panel from environment name in top-right of backoffice [S7]
- Export dependency toggles: Export tab supports toggling content/content file/schema/schema file dependency inclusion [S7]
- Export full schema option: Full schema export possible even if unused by content [S7]
- Extend permissions: replace [S5]
- External approval: yes · yes [S4]
- External approval group email constraint: no [S4]
- Forms tracking supported: yes [S8]
- G2 reviews count: 750 [S1]
- Ga4 events: Trigger form submission events and important interactions [S8]
- Ga4 integration available: yes [S8]
- Ga4 setup method: GA4 tag added in pagelayout or via tag manager [S8]
- Group email notifications: Notifications sent to group inbox instead of individual members [S4]
- Group history filters: Document Type · Requested by · Created date · Completed date · Page Language · Workflow Type · Workflow Status [S4]
- Group language: Group email language selectable from drop-down [S4]
- History detail overlay: yes [S4]
- Hotjar description: heatmaps, session recordings, feedback widgets [S8]
- Hotjar integration available: yes [S8]
- Hotjar targeting: Widgets can be enabled on specific templates or pages [S8]
- Import export purpose: Import and Export transfers content and schema between Umbraco environments via .zip export/import [S7]
- Import export use case: Intended for larger transfers, project upgrades, or one-off environment setup tasks [S7]
- Import file types: Content · Content files · Schema · Schema files [S7]
- Import migration support: Schema and content migrations during import, e.g. Nested Content to Block List [S7]
- Import upload limit cloud: yes · 500 [S7]
- Import validation: Files validated before import; dependency schema must be in upload or already exist identically on target [S7]
- Import warnings option: Option available to treat warnings as errors during import [S7]
- Inherited group membership: yes · yes [S4]
- Install dotnet: Windows · Linux · MacOS · .NET Runtime and SDK [S3]
- Json output varies by type: JSON output for Content and Media varies depending on ContentType or MediaType definition [S9]
- Languages: 61.7 · 0.4 · 37.8 [S3]
- Latest release: 18.3.0 [S3]
- Localization applies to media and member types: yes · yes [S6]
- Localization manifest location: /App_Plugins/ · /App_Plugins/{SubFolderName} [S6]
- Localization registration manifest: umbraco-package.json [S6]
- Localization restart required: yes · yes [S6]
- Localization syntax: #{area alias}_{key alias} [S6]
- Lock active content: content locked after first approval [S5]
- Mandatory comments: comments always required when submitting changes; optional for admins [S5]
- Marketing workflows: Marketers can build, test and launch without developer bottlenecks [S1]
- Marketplace analytics packages: packages for tracking, event signals and consent handling [S8]
- Matomo description: Matomo is privacy-focused, self-hosted or cloud [S8]
- Matomo GDPR friendly: yes [S8]
- Matomo integration available: yes [S8]
- Matomo setup method: Insert Matomo script in templates; send form submits and define conversion goals [S8]
- Maturity notice: beta · alpha · proof of concept [S11]
- Mcp servers: MCP servers for CMS (Management API), Forms, Commerce (proof of concept, license required), and an MCP Server SDK [S11]
- Media endpoints: retrieve media by id · children of a media folder [S9]
- Migration hooks: Hooks allow artifact and property data migrations when importing, including between major Umbraco versions [S7]
- New node approval flow: default workflow for initial publishing of new nodes [S5]

**Subprocessors**
- Google gemini: Google Gemini · summarizing support conversations on escalation [S10]
- Intercom fin: Intercom Fin · AI-generated support responses [S10]

**Support**
- Channel list: Support is listed as a CMS service offering [S1]
- Community channels: Community, forum and Discord channels available [S1]
- Compliance contact: gdpr@umbraco.com [S11]
- Discord: Discord · yes [S3]
- Docs: Documentation and knowledge base available [S1]
- Docs templates forms: Umbraco docs for Templates and Forms referenced [S8]
- Forum: dedicated forum · yes [S3]
- Training: yes [S1]

22 more facts on the canonical page: https://whats-best.ai/software/content-marketing/umbraco

## Questions

### Is Umbraco European?

Not determined: the vendor’s pages as captured do not say where Umbraco is based.

### Where does Umbraco store data?

Not stated on the vendor’s pages as of 3 Nov 2026.

### Does Umbraco have a free plan?

Yes. Umbraco has a free plan, per [the vendor’s page captured 3 Nov 2026](https://whats-best.ai/evidence/16946).

### What are the best alternatives to Umbraco?

As of 4 Nov 2026, the panel rates [StoryChief (3/5)](https://whats-best.ai/software/content-marketing/storychief), [Kontent.ai (3/5)](https://whats-best.ai/software/content-marketing/kontent-ai) and [Scompler (3/5)](https://whats-best.ai/software/content-marketing/scompler) highest among the other 23 Content Marketing products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [StoryChief](https://whats-best.ai/software/content-marketing/storychief) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Umbraco alternatives](https://whats-best.ai/software/content-marketing/umbraco/alternatives).

## What this page leaves out

- 9 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor page: https://umbraco.com (checked 2026-11-03)
- [S2] Self-hosting / on-premises installation docs — found from the homepage: https://umbraco.com/products/add-ons/deploy/ (checked 2026-11-03)
- [S3] Code repository (open-source licence) — found from the homepage: https://github.com/umbraco/Umbraco-CMS (checked 2026-11-03)
- [S4] Creation, review & approval — found from sitemap: https://docs.umbraco.com/umbraco-workflow/workflow-section/approval-groups (checked 2026-11-03)
- [S5] Creation, review & approval — found from sitemap: https://docs.umbraco.com/umbraco-workflow/getting-started/content-approval-settings (checked 2026-11-03)
- [S6] Structured content, localisation & export — found from sitemap: https://docs.umbraco.com/umbraco-cms/model-your-content/content-types-and-structure/data/defining-content/document-type-localization (checked 2026-11-03)
- [S7] Structured content, localisation & export — found from sitemap: https://docs.umbraco.com/umbraco-deploy/deployment-workflow/import-export (checked 2026-11-03)
- [S8] Publishing, distribution & integrations — found from sitemap: https://umbraco.com/integrations/analytics-reporting-integrations-for-umbraco/ (checked 2026-11-03)
- [S9] Publishing, distribution & integrations — found from sitemap: https://docs.umbraco.com/umbraco-heartcore/api-documentation/content-delivery (checked 2026-11-03)
- [S10] AI assistance & content rights — found from sitemap: https://umbraco.com/trust-center/ai/ (checked 2026-11-03)
- [S11] AI assistance & content rights — found from sitemap: https://umbraco.com/trust-center/ai-functionality/ (checked 2026-11-03)

---

Cite as: whats-best.ai, "Umbraco — Content Marketing", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/content-marketing/umbraco

Corrections: https://whats-best.ai/correct/1381?target=page