Smartsheet Subprocessors

Smartsheet engages third party service providers to help us run and scale our business and offerings. Where these service providers process the content customers choose to upload or submit to our online subscription services, they are classified as "Subprocessors,'' and must meet related Smartsheet due diligence requirements.

Included on this page are the Subprocessors that Smartsheet engages today; this list is subject to change at Smartsheet's discretion. This webpage is provided as a high-level overview; additional details, including Data Transfer Impact Assessments, are available, which can be obtained by contacting your sales representative or by submitting this form.

Table of Contents

Subprocessors:

• Business Operations Subprocessors
• Smartsheet Corporate Entities
• Infrastructure Subprocessors:

  • Smartsheet

  • Brandfolder

  • Content Automation

  • Resource Management

  • Resource Management (EU)

  • Smartsheet Gov

  • Smartsheet Regions

• Smartsheet Private Beta Program Subprocessors
• Professional Services

Additional Information:

• Frequently Asked Questions (FAQs)
• Revision History

Business Operations Subprocessors

Subprocessors included in this section apply when you engage with Smartsheet as an organization and purchase or use any of our offerings.

Smartsheet Corporate Entities

Smartsheet may engage one or more of the following corporate entities, each (with the exception of Smartsheet Inc.) a wholly-owned subsidiary of Smartsheet Inc., as Subprocessors to deliver some or all of the Services provided to customers.

Smartsheet - Infrastructure Subprocessors

Subprocessors included in this section apply to the use of the Smartsheet application and premium apps offered by Smartsheet (e.g., Bridge, Calendar, Control Center, Pivot).

Subprocessor Frequently Asked Questions

Does Smartsheet have written agreements with its Subprocessors?

Yes; our selection and engagement of each Subprocessor is subject to written agreements containing data protection terms required by applicable laws and our contractual commitments with our customers.

What are the integrations and connectors to the applications offered by Smartsheet?

Our Offerings may provide access via connectors and integrations (collectively, “Integrations”) to third party accounts such as Microsoft, Tableau, Slack, or Facebook. Integrations can be used to pull and/or push information from or to Smartsheet , and to enable the applicable third party to receive notifications, such as sheet updates. Any information users authorize to be transferred from Smartsheet offerings to an Integration is governed by the third party’s privacy and security obligations, including the Subprocessors that they may engage. We encourage you to carefully read the privacy statement of any third party you authorize to receive information from Smartsheet offerings. Additional information on available Integrations is available at www.smartsheet.com/integrations.

Does Smartsheet have a process for vetting or selecting Subprocessors to engage?

Yes; Smartsheet Subprocessors are reviewed during the initial engagement and they go through an annual security review to ensure security controls are in place for protecting customer data. Where applicable, Smartsheet will review security attestations for Subprocessors including, but not limited to, reviewing SOC I and/or SOC II reports, vulnerability and penetration tests, PCI-DSS audits, and external security risk assessments.

Can my organization subscribe to notifications of additions to this Subprocessor page?

Yes; customers may subscribe to be notified of additions to the Subprocessor lists by completing this form. 

Who can I contact if I have questions or concerns about the Smartsheet Subprocessor page?

Additional information regarding our use of Subprocessors is available in the Smartsheet Security Packet. Please contact your sales representative or submit this form to obtain a copy.

Revision History

The revision history for this page is available for review here.