dotCMS is a compliance-led CMS for customer, member, and dealer portals. Run a portal for every brand or region from one instance, with templates, permissions, and approvals set centrally and enforced everywhere. Your teams update content without relying on IT, and nothing goes live unapproved.
dotCMS controls who can see and change portal content with SSO, MFA, and granular role-based permissions. Every change is in the audit trail and version history, and approval workflows, including four-eye review, keep anything from going live unapproved.
dotCMS is certified to ISO/IEC 27001 and ISO/IEC 42001, certified at TX-RAMP Level II, and has completed a SOC 2 Type II examination.
dotCMS keeps FAQs, knowledge base articles, and help content in one place, and workflows keep them reviewed and current. dotAI semantic search helps customers find the right answer from your approved content before they open a ticket.
dotCMS delivers portal content through REST and GraphQL APIs, so your front end can show it alongside data from your CRM, ERP, billing, and help desk systems. Customers view statements, submit requests, redeem rewards, or check order status in one place, while account data stays in your systems of record.
dotCMS Personas and Rules show different content by customer segment, role, location, and language, so each customer, region, or brand sees what applies to them.
One dotCMS instance (multi-tenant) runs every portal you need (multi-site): per brand, per region, or per customer segment. Permissions and workflows are set once and enforced everywhere, while local teams customize within them.
New portals start from shared templates and components, so each one is incremental, not a new project.
Build AI search and chat into your portal with dotAI APIs, answering only from content your teams have approved. dotAI also handles translation, tagging, and content generation using the AI models your organization approves, under the same roles, permissions, and approval workflows as your people, with a human publishing.
dotCMS's AI governance is certified to ISO/IEC 42001.
dotCMS controls who can see and change portal content with SSO, MFA, and granular role-based permissions. Every change is in the audit trail and version history, and approval workflows, including four-eye review, keep anything from going live unapproved.
dotCMS is certified to ISO/IEC 27001 and ISO/IEC 42001, certified at TX-RAMP Level II, and has completed a SOC 2 Type II examination.
dotCMS keeps FAQs, knowledge base articles, and help content in one place, and workflows keep them reviewed and current. dotAI semantic search helps customers find the right answer from your approved content before they open a ticket.
dotCMS delivers portal content through REST and GraphQL APIs, so your front end can show it alongside data from your CRM, ERP, billing, and help desk systems. Customers view statements, submit requests, redeem rewards, or check order status in one place, while account data stays in your systems of record.
dotCMS Personas and Rules show different content by customer segment, role, location, and language, so each customer, region, or brand sees what applies to them.
One dotCMS instance (multi-tenant) runs every portal you need (multi-site): per brand, per region, or per customer segment. Permissions and workflows are set once and enforced everywhere, while local teams customize within them.
New portals start from shared templates and components, so each one is incremental, not a new project.
Build AI search and chat into your portal with dotAI APIs, answering only from content your teams have approved. dotAI also handles translation, tagging, and content generation using the AI models your organization approves, under the same roles, permissions, and approval workflows as your people, with a human publishing.
dotCMS's AI governance is certified to ISO/IEC 42001.
Real teams. Real outcomes. Explore how organizations modernized their digital stacks, reduced operational load, and delivered better customer experiences with dotCMS.
Yes. dotCMS is the content layer behind the portal: it stores help content, product information, disclosures, and personalized messaging, and delivers them to your portal front end through REST and GraphQL APIs. Customer logins, transactions, and account data usually stay in your own systems, such as your CRM or billing platform. BNP Paribas used this approach for its UK co-branded Mastercard portal, which covers card activation, transactions, credit-limit requests, and rewards.
Yes. In dotCMS, editors work in the Universal Visual Editor, where they preview pages, add and arrange content, adjust layouts, and run workflows. The Universal Visual Editor works on both traditional and headless pages, so marketing and support teams can keep portal content current even when developers built the front end in a framework like React or Angular.
Portal content in dotCMS moves through workflows you define, and each workflow action is permissioned by role. For sensitive content, the Four Eyes approval step lets you name the approvers and set how many of them must sign off before content moves forward. Every saved change is kept in version history, so you can see who changed what and restore an earlier version.
Yes. dotCMS Personas define the types of customers who use your portal, assign visitors to them automatically, and display content that fits each type. dotCMS Rules change what the portal shows based on visitor conditions, so a dealer, a retail customer, and a partner can each see the content that applies to them.
Yes. A single dotCMS instance runs many sites, and each site has its own content, templates, permissions, and domains. Each brand or region can have its own portal while roles, permissions, and workflows are managed in one place, so a new portal is an incremental site, not a new platform.
dotCMS offers three hosting options: dotCMS Cloud, fully managed on AWS; Cloud Anywhere, fully managed by dotCMS in your own AWS, Azure, or GCP account; and self-hosted, where you run the infrastructure. The governance model is the same in all three, so you can host the portal wherever your security and data-residency policies require.
Yes. The dotAI REST APIs provide semantic search over content stored in dotCMS, so developers can build a portal search that understands natural-language questions instead of matching keywords. The search draws on the content your teams have published, under the same permissions and workflows as the rest of the portal.
In the IDC MarketScape: Worldwide AI-Enabled Headless CMS 2025 Vendor Assessment
See how dotCMS empowers technical and content teams at compliance-led organizations.
dotCMS is ISO 27001 and ISO 42001 certified, pairing independently verified information security with governed, accountable AI.
