whats-best.ai
Search Sign in

Content Marketing

Umbraco

Provenance unknown Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Umbraco HQ A/S · umbraco.com

Report an error on this page Is this your product? →

Link to this page

Umbraco: AI-assisted analysis on whats-best.ai Umbraco: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Umbraco at a glance

Vendor
Umbraco HQ A/S
Headquarters
Not stated on the vendor’s pages as of 3 Nov 2026
Data hosting
Not stated on the vendor’s pages as of 3 Nov 2026
Free plan
Yes, per the vendor’s own page source, captured 3 Nov 2026
Panel verdict
The AI panel rates Umbraco 3/5, the mean of 6 judges. Umbraco is a free and open-source.NET content management system. how scores are made
As of
Vendor pages captured 3 Nov 2026; evaluated by the panel 3 Nov 2026. all sources

Umbraco alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Signs off every tool that stores the company's drafts, author profiles and campaign data. Wants the contracting entity and hosting region named, the subprocessor list with the AI providers on it, prompt retention in days, and training on customer content excluded in the terms rather than in a blog post.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
Planning, editorial calendar & briefs 1 of 5 0.5 of 5
Creation, review & approval 3.5 of 5 3.5 of 5
Structured content, localisation & export 4 of 5 3.5 of 5
Publishing, distribution & integrations 3 of 5 3 of 5
AI assistance & content rights 3.5 of 5 3.5 of 5
European sovereignty 2 of 5 2 of 5

Planning, editorial calendar & briefs

How this is scored

Turning a content strategy into scheduled work: topics and campaigns, an editorial calendar across channels, briefs that carry the goal, audience and keywords to the writer, and a view of what is due, late or missing.

0 — No planning at all; the product only stores or renders content.

3 — A calendar or list view of content with publish dates and statuses.

5 — An editorial calendar across channels with owners, due dates and custom statuses, and content grouped by campaign, topic or channel.

8 — Strategy connected to the plan: briefs carrying goal, audience and keywords attached to each piece, topics or personas defined once and assigned to pieces, configurable workflows per content type, workload and deadline views per person, and recurring formats scheduled as series.

10 — The plan is accountable: every published piece traces back to its brief, topic and campaign, gaps in coverage per topic or funnel stage are reported, and plan-versus-published is visible over time without a spreadsheet.

Report an error

The Data Protection Officer

We found scheduling only inside the approval workflow — an optional scheduled date when initiating a workflow and reminder emails every 24 hours — plus marketing messaging about launching without developer bottlenecks. We found no public information on an editorial calendar, briefs, campaign or topic grouping, or per-person workload and deadline views. 1 5

Report an error

Creation, review & approval

How this is scored

Writing and reviewing content together: editing with comments and suggestions, roles and permissions for internal and external contributors, and an approval trail that records who released which version — published content is a legal statement (UWG, Heilmittelwerbegesetz, the imprint duty).

0 — A single-user tool; content cannot be shared with or reviewed by others.

3 — Several users working on content, with comments or a version history.

5 — Roles and permissions that separate writing from publishing, comments on content, a version history with restore, and an approval or review status before publishing.

8 — Configurable multi-step approval per content type or market, mandatory reviewers (legal, product, brand), inline suggested edits, guest or freelancer access limited to assigned pieces, scheduled publishing that waits for approval, and an audit log of every edit, approval and publish with user and timestamp.

10 — Approval is evidence: the exact version each approver released is preserved and exportable, permissions reach down to field and locale level, and the audit trail is retained for a stated period and available after the contract ends.

Report an error

The Data Protection Officer

Umbraco Workflow gives a real approval chain: configurable multi-step workflows per document type or node, approval groups with members and permissions, approval requiring one, most or all members, mandatory comments on submission, content locked after the first approval, and external approval by secure link or email reply for people without back-office access. The history view records requester, created and completed dates, page language and workflow status, with a detail dialog and an activity chart. We found no public information on inline suggested edits, or on how long the approval trail is retained and whether it can be exported at contract end — the two things I need before signing. 4 5

Report an error

Structured content, localisation & export

How this is scored

Whether content is stored as reusable structure rather than pages: a content model, components shared across channels, German and other locales managed side by side, and the whole repository exportable in a documented format.

0 — Not a content store; the product keeps no content of its own (for example a pure scheduling or analytics tool).

3 — Templates or custom fields for content, a media library, and content in several languages.

5 — A configurable content model or content types with reusable components, locales managed side by side for each entry, and an export of entries in JSON, CSV, XML or a similar documented format.

8 — References between entries, field-level localisation with fallback languages, variants per market or audience, translation workflows with status per locale and named translation-service connectors, and a full export of content, model, locales and assets documented and self-service.

10 — The repository is portable by design: model and content exportable together and re-importable, migration tooling or a CLI documented in both directions, version history included in the export, and no feature that only works while the content stays.

Report an error

The Data Protection Officer

Document types, data types and templates form a configurable content model, languages are managed as first-class schema with default-language fallback when no culture is requested on the delivery API, and Deploy's import and export moves content, media, schema and templates together as a self-service zip with dependency options, validation and migration hooks across major versions. We found no public information on translation workflows with status per locale or named translation-service connectors, which is what I would look for before committing multilingual campaign content. 6 7 9

Report an error

Publishing, distribution & integrations

How this is scored

Getting approved content to where it is read: publishing to websites and channels, a documented API and webhooks, and named connections to the CMS, CRM, analytics, SEO and translation tools a marketing stack already runs.

0 — A closed tool; content leaves only by copy and paste.

3 — Publishing to one website or CMS, and a few named integrations.

5 — Publishing to websites and several channels from one place, a publicly documented API or webhooks, and integrations named for common CMS, CRM or analytics tools.

8 — A versioned API with published rate limits and SDKs, webhooks on publish and change, preview environments, a marketplace or integration directory with maintained connectors, performance data per piece pulled back from analytics, and a public status page.

10 — The platform is a dependable source for every channel: API deprecation policy published, CDN and delivery SLA stated, scheduled and event-driven publishing documented end to end, and content performance attributed per channel without a separate tool.

Report an error

The Data Protection Officer

A publicly documented read-only delivery API serves published content and media to any app, website or device with culture selection, and analytics integrations are named — Google Analytics, Matomo, Hotjar, plus the Engage add-on for analytics, A/B testing and personalization inside the CMS — alongside a marketplace. We found no public information on webhooks, published rate limits, SDKs, a status page or a delivery SLA, so the delivery side is documented but not to a dependable-source standard. 1 2 8 9

Report an error

AI assistance & content rights

How this is scored

What the platform's AI does with the customer's content and what the customer may do with the AI's: the models and where they run, whether content trains them, opt-out, labelling of generated text under the EU AI Act, and who holds the rights to output.

0 — The vendor states that customer content trains its models with no opt-out, or reserves the rights to AI output for itself.

3 — AI writing features described with what they do, and a general statement on how content is handled by them.

5 — The AI model provider named, a statement that customer content does not train models, and AI features that an admin can switch off.

8 — Model providers listed as subprocessors, EU processing for AI features stated or selectable, retention of prompts and outputs given in days, ownership of generated output assigned to the customer in the terms, generated content markable for EU AI Act transparency, and brand voice or terminology rules applied without training a shared model.

10 — AI is governed and documented: per-feature list of model, provider and processing location, admin controls per role and content type, an audit trail of AI-generated changes, and the output rights and any indemnity written into the contract terms.

Report an error

The Data Protection Officer

The AI disclosure is unusually candid: no provider is bundled or enabled by default, content goes directly from the customer's instance to a provider chosen from ten named ones using the customer's own credentials, Umbraco is not an intermediary for self-hosted deployments and does not receive, log or store the request contents, and the customer is documented as controller with the chosen provider as processor under the customer's own agreement. The vendor also publishes an EU AI Act risk assessment, states it does not develop or train the underlying models, and says support-conversation data is not intentionally used to train public models. Still missing for sign-off: prompt and output retention is not stated in days, no EU processing location for AI is given, output ownership appears on the product page rather than assigned in the terms, and we found no public information on marking generated text for AI Act transparency or an audit trail of AI changes. 1 10 11

Report an error

European sovereignty

How this is scored

Who the contracting entity is, where content, assets and AI prompts are stored and processed, and which subprocessors touch them. Independently sourced by the sovereignty pipeline; dimensions the evidence does not establish are unknown, not non-European.

0 — Vendor, contracting entity and hosting all shown to be outside the EU, with no data processing agreement offered.

3 — A privacy policy and a data processing agreement offered, with hosting or the contracting entity outside the EU or not established.

5 — EU hosting stated for content and assets, with a data processing agreement offered.

8 — EU contracting entity, content, assets and backups stored in the EU on named infrastructure, subprocessor list published with locations and purposes, and AI processing location stated.

10 — Sovereign end to end and evidenced: European ownership, EU entity, every hosting, CDN, AI and support subprocessor European or optional, self-hosting or a European cloud offered, and certifications published.

Report an error

The Data Protection Officer

A Cloud data processing agreement is stated to govern the hosted platform, the CMS is MIT-licensed and installable on the customer's own Windows, Linux or macOS infrastructure with an on-premises Deploy option, and the support disclosure names Intercom Fin and Google Gemini as tools used on support conversations, with a compliance contact and a TIA/DPIA available on request. However, the captured pages give no contracting-entity jurisdiction, name Azure and Cloudflare for hosting without a region, and publish no subprocessor list with locations — hosting region, backups and AI processing location remain unestablished. 2 3 10 11

Report an error

Pricing transparency not rated — the vendor publishes no price

How this is scored

Whether a buyer can compute the annual cost for their team, locales and traffic from public pages alone — seats and contributor roles, locales, content records, API calls and bandwidth, AI credits, and the plan where approval workflows or SSO begin.

0 — No public prices at all; every plan is a sales conversation.

3 — A public "from" price, a free tier, or one priced plan, with the rest on request.

5 — Prices for each plan public with the billing period (per month or per year) and the seats or main limits each includes.

8 — Every plan priced with seats, locales, records, API and bandwidth limits and overage rates stated, AI usage priced or included explicitly, and the plan that unlocks approval workflows, SSO and audit logs named.

10 — Complete cost computability: annual cost derivable for a given team, locale count and traffic, every add-on and overage priced publicly, contract term and renewal conditions stated, and the cost of exporting or leaving the platform zero or published.

Report an error

The Data Protection Officer

The core CMS is free and open source, and the paid license is shown gating specific features — workflow groups beyond five on unlicensed installations, external and email-reply approval, document-type default workflows and node exclusion. We found no public prices for the licenses, Cloud or Heartcore plans on the captured pages, so an annual cost for a given team cannot be computed. 3 4 5

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined ⚠ unverified — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined ⚠ unverified — uncited Report an error

Questions about Umbraco

Is Umbraco European?

Not determined: the vendor’s pages as captured do not say where Umbraco is based.

Where does Umbraco store data?

Not stated on the vendor’s pages as of 3 Nov 2026.

Does Umbraco have a free plan?

Yes. Umbraco has a free plan, per the vendor’s page captured 3 Nov 2026.

What are the best alternatives to Umbraco?

As of 4 Nov 2026, the panel rates StoryChief (3/5), Kontent.ai (3/5) and Scompler (3/5) highest among the other 23 Content Marketing products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is StoryChief (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Umbraco alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about Umbraco? Tell us Report an error on this page

Sources (11)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor page umbraco.com Checked 3 Nov 2026 Details →
  2. 2 Self-hosting / on-premises installation docs — found from the homepage umbraco.com Checked 3 Nov 2026 Details →
  3. 3 Code repository (open-source licence) — found from the homepage github.com Checked 3 Nov 2026 Details →
  4. 4 Creation, review & approval — found from sitemap docs.umbraco.com Checked 3 Nov 2026 Details →
  5. 5 Creation, review & approval — found from sitemap docs.umbraco.com Checked 3 Nov 2026 Details →
  6. 6 Structured content, localisation & export — found from sitemap docs.umbraco.com Checked 3 Nov 2026 Details →
  7. 7 Structured content, localisation & export — found from sitemap docs.umbraco.com Checked 3 Nov 2026 Details →
  8. 8 Publishing, distribution & integrations — found from sitemap umbraco.com Checked 3 Nov 2026 Details →
  9. 9 Publishing, distribution & integrations — found from sitemap docs.umbraco.com Checked 3 Nov 2026 Details →
  10. 10 AI assistance & content rights — found from sitemap umbraco.com Checked 3 Nov 2026 Details →
  11. 11 AI assistance & content rights — found from sitemap umbraco.com Checked 3 Nov 2026 Details →