Proof
Support security and AI governance requirements with ISO 27001, ISO 42001, SOC 2 Type II, and TX-RAMP validation.
Run your entire digital ecosystem securely visually and without the chaos. dotCMS gives you the power to build deploy and govern content at enterprise scale.


























Take a Virtual Tour of dotCMS
dotCMS enforces governance at the platform level — not through a separate tool or a configuration rebuilt for every site. Granular access, approval workflows, audit trails, version history, rollback, and independent certifications give compliance-led teams the control they need to move faster.
Support security and AI governance requirements with ISO 27001, ISO 42001, SOC 2 Type II, and TX-RAMP validation.
Compare versions, require approval before publishing, and roll back changes when needed.
Maintain a complete audit trail showing who changed what and when.
Control who can view, create, review, approve, and publish through granular roles, permissions, SSO, and MFA.
Explore the workflows, digital experiences, and operational requirements
dotCMS supports across your sector.
websites
dotCMS powers over 500 websites for one of the nation's largest healthcare providers.
From first draft to global delivery, dotCMS gives compliance-led teams the tools to build faster, launch smarter,
and govern with confidence. Run dotCMS on-premise, in the Cloud or with a fully managed solution.
Give developers headless flexibility & marketers the power of visual editing.
Launch digital experiences anywhere - your way, on your timeline.
Govern experiences with workflows, version control, and user permissions.
Turn your CMS into a performance engine with real-time insights.
Give developers headless flexibility & marketers the power of visual editing.
Launch digital experiences anywhere - your way, on your timeline.
Govern experiences with workflows, version control, and user permissions.
Turn your CMS into a performance engine with real-time insights.
AI agents operate in dotCMS as actors with assigned roles, permissions, workflows, and audit trails. They can complete multi-step work in draft, but the approval process still determines what reaches production — and every action remains traceable and reversible.
Use approved models and cloud providers while keeping AI activity inside your established governance model.
Keep AI-assisted actions visible, attributable, reviewable, and reversible.
When a role requires human approval before publishing, the agent follows that requirement too.
Assign an agent a dotCMS role and limit its actions through the permissions associated with that role.
Technical buyers need more than a demo. Here’s how to evaluate dotCMS with confidence.
Business Source License is free for non-production use.
Enterprise CMS for internal portals and focused digital projects
REST and GraphQL APIs, SDKs, and integration guides for developers.
Structured migration from assessment to go-live
Certified implementation partners to help plan, build, and launch.
Ship modern front ends with headless APIs - while dotCMS handles multi-site scale, governance, and enterprise deployment needs.
REST and GraphQL for any front end and any channel.
React, Next.js, Angular, Vue - bring your stack.
CI/CD-ready workflows for predictable releases.
Run many sites from one platform with shared models and controls.
Local dev tools, scaffolding, and automation for faster builds.
Structured content types with relationships for reuse at scale.
Create, approve, and publish updates visually - with workflows and permissions that keep compliance-led teams safe.
Edit in-context on real pages without breaking headless delivery.
Drag-and-drop components with real-time preview.
Publish once across sites, portals, and experiences.
Multi-step reviews for legal, brand, and compliance teams.
Target content by audience, location, or behavior.
A/B test content and iterate with confidence.
dotCMS gives business leaders and content owners the freedom to deliver, optimize, and govern digital experiences, without the bottlenecks.
Know who changed what, when, and why.
See what performs and where to optimize.
Granular permissions and role-based publishing.
Manage many sites, brands, or regions from one platform.
Scale across high-volume environments.
Cloud, on-premise, or Cloud Anywhere based on policy.



In the IDC MarketScape: Worldwide AI-Enabled Headless CMS 2025 Vendor Assessment
See how dotCMS empowers technical and content teams at compliance-led organizations.
dotCMS is ISO 27001 and ISO 42001 certified — The first and only CMS platform with independently verified security and AI governance.