Smartsheet engages third party service providers to help us run and scale our business and offerings. Where these service providers process the content customers choose to upload or submit to our online subscription services, they are classified as "Subprocessors,'' and must meet related Smartsheet due diligence requirements.
Included on this page are the Subprocessors that Smartsheet engages today; this list is subject to change at Smartsheet's discretion. This webpage is provided as a high-level overview; additional details, including Data Transfer Impact Assessments, are available, which can be obtained by contacting your sales representative or by submitting this form.
Table of Contents
Subprocessors:
- Business Operations Subprocessors
- Smartsheet Corporate Entities
- Infrastructure Subprocessors:
Smartsheet
Brandfolder
Content Automation
Resource Management
Resource Management (EU)
Smartsheet Gov
Smartsheet Regions
- Smartsheet Private Beta Program Subprocessors
- Professional Services
Additional Information:
- Frequently Asked Questions (FAQs)
- Revision History
Business Operations Subprocessors
Subprocessors included in this section apply when you engage with Smartsheet as an organization and purchase or use any of our offerings.
| Subprocessor | Purpose | Location |
|---|---|---|
| Atlassian Pty Ltd. | Confluence houses internal team documentation, which may include customer support or technical incident response. | United States |
| Avalara, Inc. | Sales tax and/or VAT obligation calculator which uses billing information provided either via the in-application billing and payments feature or on the customer’s order form. | United States |
| Google LLC | Google Workspace processes email messages. Customer Content may be processed by Google Workspace but only if Customer chooses to provide Customer Content in email interactions with Smartsheet staff. | United States |
| Oracle Corporation | Netsuite processes billing and payment transactions for all Smartsheet customers. This includes the billing and payment information that customers may provide via billing andpayments features in the Smartsheet and Resource Management applications. | United States |
| PayPal Holdings Inc. | Payflow Gateway processes payments for customers that utilize the billing and payments feature in the Smartsheet and Resource Management applications. | United States |
| Salesforce, Inc. | Service Cloud provides customer support services. Customer Content may be processed by Service Cloud but only if Customer chooses to provide Customer Content in a support interaction. | United States |
| Slack Technologies, LLC | Internal team communication tool, which may include customer support or technical incident response information. | United States |
| Smartsheet Inc. | Internal work management platform, which may include customer support, product feedback, or technical incident response information. | United States |
| Snowflake Inc. | Provides data analytics services. Customer Content may be processed by Snowflake but only if Customer chooses to provide Customer Content when engaging with Smartsheet value realization services. | United States |
| Stripe, Inc. | Processes payments for customers that utilize the billing and payments feature in the Smartsheet and Resource Management applications. | United States |
| TaskUs, Inc. | Provides customer support services. Customer Content may be processed by TaskUs but only if Customer chooses to provide Customer Content in a support interaction. | United States & Philippines |
| Unbabel Inc. | Provides translation services for Smartsheet Support. Customer Content may be processed by Unbabel but only if Customer chooses to provide Customer Content in a support interaction. | Portugal |
| Zendesk, Inc. | Provides customer service software. Customer Content may be processed by Zendesk but only if Customer chooses to provide Customer Content in a support interaction regarding the Brandfolder application. | United States |
Smartsheet Corporate Entities
Smartsheet may engage one or more of the following corporate entities, each (with the exception of Smartsheet Inc.) a wholly-owned subsidiary of Smartsheet Inc., as Subprocessors to deliver some or all of the Services provided to customers.
| Entity Name | Location |
| Smartsheet Inc. | United States |
| Artefact Product Group LLC dba 10,000ft | United States |
| Brandfolder, Inc. | United States |
| On Brand Australia Pty Ltd., dba Outfit | Australia |
| On Brand Holdings, Inc., dba Outfit | United States |
| On Brand InvestmentsLtd., dba Outfit | United Kingdom |
| On Brand Investments PtyLtd., dba Outfit | Australia |
| Smartsheet Australia Pty Limited | Australia |
| Smartsheet Costa Rica Limitada | Costa Rica |
| Smartsheet Germany GmbH | Germany |
| Smartsheet Japan K.K. | Japan |
| Smartsheet UK Limited, formerly known as Helpa Ltd. and Converse | United Kingdom |
| TernPro, Inc. dba Slope | United States |
Smartsheet - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet application and premium apps offered by Smartsheet (e.g., Bridge, Calendar, Control Center, Pivot).
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting services for the core Smartsheet application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Google LLC | Google Cloud Platform hosts services that support integrations, connectors, and processing of third-party integration notifications including mobile notifications. | United States |
| Microsoft Corporation | Azure OpenAI processes Customer Content submitted to AI tools that assist users with generating formulas, text, and summaries; analyzing data; and processing support tickets submitted to the Get Help feature. | United States |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet application. | United States |
| PagerDuty, Inc. | Incident alerting service to notify engineering teams of technical or security related incidents. | United States |
| Salesforce, Inc. | Salesforce processes support ticket information submitted through contact support features in the Smartsheet application. | United States |
| Snowflake Inc. | Data warehouse to support the Work Insights application feature and business intelligence services and log repository. | United States |
Brandfolder - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Brandfolder application.
| Subprocessor | Purpose | Location |
| Blitline LLC | File conversion functionality. | United States |
| Castle Global | Hive provides logo recognition services for the Brandfolder application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Fastly, Inc. | Content delivery network. | United States |
| Google LLC | Google Cloud Platform provides hosting services for the Brandfolder application. Google Vertex AI provides automated image analysis, tagging, and suggested descriptions. | United States |
| Idera, Inc. | Apilayer provides insights functionality. Filestack provides file uploading service. | United States |
| Mode Analytics, Inc. | Intelligence and analytics. | United States |
| Monotype Imaging Holdings Inc. | Font rendering. | United States |
| Mux, Inc. | Video transcoding. | United States |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
| Rollbar, Inc. | Error logging. | United States |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
| Transloadit Limited | Upload service | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Brandfolder application. | United States |
| Zencoder, Inc. | Video conversions. | United States |
| Amazon Web Services, Inc. | Customer Choice - Asset hosting provider. | United States |
| CI Hub GmbH | Customer Choice - Integrations tool. | Germany |
| Design Huddle LLC | Customer Choice - Design tool. | United States |
| PrintUI, Inc. | Customer Choice - InDesign server. | United States |
| Storyteq B.V. | Customer Choice - Template tool. | Netherlands |
Content Automation - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Content Automation application.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting services for the Content Automation application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States & Australia |
| Catamorphic, Co. | LaunchDarkly manages feature flags for the Content Automation application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
| Snowflake Inc. | Data warehouse to support businessintelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Content Automationapplication | United States |
Resource Management - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Resource Management application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
| Snowflake Inc. | Data warehouse to support businessintelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management application | United States |
Resource Management (EU Hosted) - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management (EU) application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Resource Management application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | Germany & Ireland |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
| Snowflake Inc. | Data warehouse to support businessintelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management application. | United States |
Smartsheet Gov - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Gov application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS GovCloud provides hosting services for the Smartsheet Gov application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
Smartsheet Regions - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Regions application. Additional information on the data transfers of Smartsheet Regions is available here.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Smartsheet Regions application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | Germany & Ireland |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Microsoft Corporation | Azure OpenAI processes Customer Content submitted to AI tools that assist users with generating formulas, text, and summaries; analyzing data; and processing support tickets submitted to the Get Help feature. | France |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet Regions application. | Ireland |
| PagerDuty, Inc. | Incident alerting to notify engineering teams of technical or security related incidents. | United States |
| Salesforce, Inc. | Salesforce processes support ticket information submitted through contact support features within the Smartsheet application. | United States |
| Snowflake Inc. | Data warehouse to support the Work Insights application feature. Data warehouse to support business intelligence services and log repository. | Germany United States |
Smartsheet Private Beta Program Subprocessors
Subprocessors in this section apply to the use of Beta Features and process Beta Content as defined in the AI Private Beta Terms and Conditions. This section is only applicable to customers who’ve executed AI Private Beta Terms and Conditions with Smartsheet.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS Bedrock provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. | United States |
| Google LLC | Google Vertex AI provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. | United States |
| Microsoft Corporation | Azure OpenAI processes Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. | United States |
Professional Services
Depending on the professional services requested, Smartsheet may engage a third party contractor to complete the services outlined in the applicable Order or Statement of Work (“SOW”).
| Professional Services Provider | Purpose | Location |
|---|---|---|
| Agile Management Experts | Optional - Professional services provider. | Germany |
| CloudWave Inc. | Optional - Professional services provider. | United States & India |
| Concentrix Catalyst Pty. Ltd. | Optional - Professional services provider. | Australia & Mexico |
| Concentrix CVG Customer Management Group Inc. | Optional - Professional services provider | United States |
| Cortac Group Inc. | Optional - Professional services provider. | United States |
| DigitalRadius LLC | Optional - Professional services provider. | United States |
| Optimum | Optional - Professional services provider. | United States |
| Prime Consulting Group Solutions | Optional - Professional services provider. | United States |
| Protiviti Inc. | Optional - Professional services provider. | United States & Bulgaria |
| Servicios y Sistemas Tecnologicos para la Construccion SA de CV | Optional - Professional services provider. | Mexico |
| Sevan Multi-Site Solutions | Optional - Professional services provider. | United States |
| SoftwareX | Optional - Professional services provider. | United States |
| Xpanxion, LLC | Optional - Professional services provider. | United States, United Kingdom, & Philippines |
Subprocessor Frequently Asked Questions
Does Smartsheet have written agreements with its Subprocessors?
Yes; our selection and engagement of each Subprocessor is subject to written agreements containing data protection terms required by applicable laws and our contractual commitments with our customers.
What are the integrations and connectors to the applications offered by Smartsheet?
Our Offerings may provide access via connectors and integrations (collectively, “Integrations”) to third party accounts such as Microsoft, Tableau, Slack, or Facebook. Integrations can be used to pull and/or push information from or to Smartsheet , and to enable the applicable third party to receive notifications, such as sheet updates. Any information users authorize to be transferred from Smartsheet offerings to an Integration is governed by the third party’s privacy and security obligations, including the Subprocessors that they may engage. We encourage you to carefully read the privacy statement of any third party you authorize to receive information from Smartsheet offerings. Additional information on available Integrations is available atwww.smartsheet.com/integrations.
Does Smartsheet have a process for vetting or selecting Subprocessors to engage?
Yes; Smartsheet Subprocessors are reviewed during the initial engagement and they go through an annual security review to ensure security controls are in place for protecting customer data. Where applicable, Smartsheet will review security attestations for Subprocessors including, but not limited to, reviewing SOC I and/or SOC II reports, vulnerability and penetration tests, PCI-DSS audits, and external security risk assessments.
Can my organization subscribe to notifications of additions to this Subprocessor page?
Yes; customers may subscribe to be notified of additions to the Subprocessor lists by completing this form.
Who can I contact if I have questions or concerns about the Smartsheet Subprocessor page?
Additional information regarding our use of Subprocessors is available in the Smartsheet Security Packet. Please contact your sales representative or submit thisform to obtain a copy.
Revision History
The revision history for this page is available for review here.
