Umbraco

What Is Umbraco?

In 2004, Niels Hartvig built a CMS for his own agency projects and released it to the internet with no commercial plan. Twenty-two years later, Umbraco A/S runs from Odense, Denmark, employs a team across Europe, and supports over 730,000 active installations worldwide. That trajectory — community-first, revenue second — explains a great deal about why Umbraco feels different from the enterprise CMS platforms that evolved through acquisitions and private equity cycles.

Umbraco is built on Microsoft .NET. This positions it firmly within a specific ecosystem: organisations that run Microsoft infrastructure, employ .NET developers, and are often already invested in Azure Active Directory, SharePoint, or Dynamics. For those teams, a CMS that integrates natively with the Microsoft stack rather than requiring workarounds is a meaningful operational advantage.

The product has three distinct deployment surfaces. The open-source CMS is free to self-host and forms the foundation of everything. Umbraco Cloud provides managed EU-hosted infrastructure starting at €45 per month, with automated upgrades and included Umbraco Forms. Umbraco Heartcore is the headless SaaS product, delivering content via REST and GraphQL APIs for teams building decoupled front-end applications. Each surface targets a different team profile, and they share a consistent backoffice editing experience.

Umbraco A/S holds ISO 27001 certification, operates on Microsoft Azure in West Europe (Netherlands), and is subject to Danish and EU regulation. The company has a GDPR trust centre and provides Data Processing Agreements for Cloud customers.

Key Features

Document Types and Content Modelling

Umbraco's content architecture centres on document types — blueprints that define what fields an editor can populate. This is more flexible than WordPress's post-type model and more structured than many headless CMS platforms. Editors see exactly the fields relevant to each content type. Developers define compositions (reusable field groups) and nested content blocks that can be combined across types without duplication.

The block editor enables rich, composable page layouts where editors assemble content blocks from a defined palette — grids, feature rows, testimonials, embeds — without needing developer involvement for structural changes. Multi-site management from a single installation is built in, covering shared content models across brand families or regional variants.

Headless Delivery via Heartcore and Content Delivery API

Umbraco works as a headless CMS in two configurations. The managed Heartcore SaaS product provides content via RESTful API and GraphQL with CDN distribution — editors work in the familiar Umbraco backoffice, content reaches any front-end at CDN speed. The self-hosted CMS includes a Content Delivery API that enables the same headless pattern on self-managed infrastructure, feeding Next.js, Nuxt, Astro, or any framework that consumes JSON.

This matters for teams building omnichannel experiences — websites, apps, digital signage, and e-commerce fronts from a single editorial source. The GraphQL API allows selective content fetching: a front-end requests only the fields it needs rather than loading full document structures.

.NET Integration Depth

Umbraco's .NET foundation means custom business logic, third-party data source connections, and enterprise workflow requirements are implemented in the same language the organisation's developers already use. Connecting to Dynamics CRM, pulling from a custom SQL database, or implementing an approval workflow that interacts with a line-of-business system is standard .NET development — not a plugin dependency or vendor lock-in.

Azure Active Directory integration for backoffice authentication ships as a first-party package. For organisations standardising on Entra ID (formerly Azure AD), this eliminates separate credential management for CMS users.

Umbraco Forms

Forms is included in all Umbraco Cloud plans and available as a paid add-on for self-hosted installations. It provides a drag-and-drop form builder accessible to editors without developer involvement: conditional logic, multi-step forms, GDPR consent fields, and submission storage with export capabilities. For content sites needing contact, registration, or survey forms, this removes the common dependency on third-party form plugins that introduce their own data handling concerns.

Package Ecosystem

Over 1,000 community packages extend Umbraco's capabilities — media management, search (Algolia, Elasticsearch), e-commerce, multilingual workflows, and more. The Our Umbraco community site hosts package listings, forum support, and documentation contributed by a 220,000-strong community. This ecosystem depth, built over two decades, is one of Umbraco's most durable competitive advantages over newer headless CMS platforms.

Pricing

Umbraco's self-hosted CMS is free. The cost equation shifts with Umbraco Cloud, where pricing reflects infrastructure, managed operations, and included add-ons.

The Starter plan at €45 per month provides a single production environment with automated upgrades, Umbraco Forms, and standard database performance. For low-traffic content sites and small editorial teams, this is a complete managed CMS stack at a defensible monthly cost. The 2026 pricing represents a modest increase from 2025 levels — Umbraco published the increases ahead of the January 2026 effective date, which is worth noting as a sign of transparent pricing governance.

Standard at €280 per month adds prioritised database performance (2x baseline) and multiple staging environments. Professional at €730 per month provides 5x database performance, additional environments, and dedicated account management. Enterprise pricing is custom and includes SLA-backed uptime and tailored infrastructure arrangements.

Self-hosted deployment incurs no licence cost. Teams host on Azure, AWS, or any server supporting the .NET runtime. Umbraco Forms requires a separate licence for self-hosted installations — this is the most common gotcha for teams transitioning from free community installations to production deployments.

EU Compliance & Privacy

Umbraco A/S is ISO 27001 certified — a formal, audited commitment to information security management. This places it ahead of the majority of CMS platforms, open-source or commercial, that rely on infrastructure certifications rather than carrying their own.

Umbraco Cloud runs on Microsoft Azure's West Europe region, physically located in the Netherlands. All customer data remains within the EU. Umbraco acts as a data processor and provides a signed Data Processing Agreement for Cloud customers — a practical requirement for organisations processing personal data through web forms, member registrations, or personalisation.

The CMS includes GDPR-native features: sensitive data field flagging prevents accidental exposure of protected data in content queries. Audit logs track backoffice access and changes. Consent management fields in Umbraco Forms allow builders to implement lawful basis collection without third-party tools.

For self-hosted deployments, infrastructure GDPR compliance is the operator's responsibility. Umbraco Cloud removes this burden with a contractual data processor relationship and EU-hosted infrastructure.

Who It's Best For

Microsoft-stack organisations building complex content-driven sites. If the development team works in C# daily, Umbraco reduces the architectural friction of adding a CMS to an existing .NET estate.

Agencies and digital teams serving multiple clients on a shared platform. Multi-site management, the backoffice permission model, and the deploy workflow make Umbraco well-suited to agency operations at scale.

Enterprises with complex content workflows — approval chains, regional content variants, integration with ERP or CRM systems. The extensibility model handles requirements that headless-only platforms struggle to accommodate.

EU-regulated organisations needing a content platform with audited compliance credentials. ISO 27001 certification and EU-hosted Cloud infrastructure satisfy requirements that WordPress-on-hosting cannot.

Umbraco is not the right choice for teams without .NET development resources, small projects where €45/month is a material budget consideration, or non-technical users who want the simplicity of WordPress's editing experience.

The Verdict

Umbraco occupies a specific position in the CMS market and it holds that position well. The .NET ecosystem integration, ISO 27001 certification, and 22 years of community development give it credibility that newer headless platforms are still accumulating. The trade-off is accessibility: teams without .NET developers face steeper adoption costs than with PHP-based alternatives, and the Cloud pricing is not entry-level.

For organisations already operating in the Microsoft ecosystem — or those that need a CMS with audited EU compliance credentials and serious content modelling flexibility — Umbraco is one of the strongest available options in the EU software landscape.

Frequently Asked Questions

Is Umbraco free to use?

The Umbraco CMS is open-source and free to self-host. Umbraco Cloud (managed hosting) starts at €45 per month. Umbraco Forms requires a paid licence for self-hosted installations. The full feature set is accessible on self-hosted deployments; Cloud adds managed infrastructure and automatic upgrades.

Is Umbraco GDPR compliant?

Yes. Umbraco A/S holds ISO 27001 certification. Umbraco Cloud runs on EU-hosted Microsoft Azure infrastructure and provides a Data Processing Agreement for Cloud customers. The CMS includes GDPR features including sensitive data flagging and audit logs.

How does Umbraco compare to WordPress?

Umbraco targets organisations with .NET development teams and complex content requirements. WordPress has a larger plugin ecosystem and lower barrier for non-technical users. Umbraco provides stronger content modelling, native .NET integration, and a more defensible enterprise compliance posture. For Microsoft-stack organisations, Umbraco is typically the better fit.

Can Umbraco be used as a headless CMS?

Yes. Umbraco Heartcore is the managed headless SaaS product. The self-hosted CMS includes a Content Delivery API for headless deployments. Both configurations allow the Umbraco backoffice to serve as the editorial interface while delivering content via REST or GraphQL to any front-end framework.

Where is Umbraco Cloud data hosted?

Umbraco Cloud runs on Microsoft Azure in the West Europe region, physically located in the Netherlands. All data remains within the EU. Umbraco provides a Data Processing Agreement on request, confirming its role as a data processor under GDPR.