Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

DatoCMS

VéRIFIé
CMS headless · Italy
Founded 2015 · datocms.com ↗

Italian developer-friendly headless CMS (Milan); 25K+ businesses; bootstrapped feel, no US PE.

Pourquoi ce score ?

DatoCMS (Dato srl, Milan IT) is a smaller bootstrapped-feel Italian headless CMS serving 25,000+ businesses; no US-PE involvement identified; ownership_signal: eu_owned; lack of public ISO 27001 / SOC 2 attestation + sub-processors caps score at 3/5; for procurement-grade buyers verify trust / security pages directly before promoting.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
— not disclosed
JUMP TO
OVERVIEW

About DatoCMS

**DatoCMS** (operated by **Dato srl**, Milan, Italy) is a developer-friendly headless CMS positioned as "the most complete, user-friendly and performant Headless CMS" — 25,000+ businesses, scaling from small teams to enterprises with 250+ editors managing global content operations. Paid plans from **€39/mo** (Agency Partner tier; regular tier from similar entry point); free tier available for hobby projects. Mostly self-funded / bootstrapped feel — no identified US-PE majority involvement, placing DatoCMS in `ownership_signal: eu_owned`. The procurement-grade caveat is verification depth: no public ISO 27001 / SOC 2 attestation surfaced on marketing site at time of research, so the score is capped at 3/5 until trust/security pages are reviewed directly with the vendor.
SUB-PROCESSORS

Carte des sous-traitants · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Référentiels & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-12).
FEATURES

Matrice de fonctionnalités

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Tarifs & paliers

FREEMIUM
à partir de €39/mois
Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternatives dans cette catégorie

Hygraph
Germany

Berlin GraphQL-native headless CMS (formerly GraphCMS, founded 2017); enterprise clients incl. Samsung, LEGO; mostly EU-funded.
Prismic
France

Paris headless CMS / page-builder (founded 2013); Slice Machine + Next.js / Nuxt / SvelteKit focus; from €7/mo.
Storyblok
Austria

Austrian headless CMS (Linz, est. 2017); ISO 27001, enterprise customers (Disney, Netflix); Brighton Park US-PE led Series C.
See all cms headless alternatives →