Smartsheet Subprocessors
Smartsheet engages third party service providers to help us run and scale our business and offerings. Where these service providers process the content customers choose to upload or submit to our online subscription services, they are classified as "Subprocessors,'' and must meet related Smartsheet due diligence requirements.
Included on this page are the Subprocessors that Smartsheet engages today; this list is subject to change at Smartsheet's discretion. This webpage is provided as a high-level overview; additional details, including Data Transfer Impact Assessments, are available, which can be obtained by contacting your sales representative or by submitting this form.
Table of Contents
Subprocessors:
- Business Operations Subprocessors
- Smartsheet Corporate Entities
- Infrastructure Subprocessors:
- Smartsheet Private Beta Program Subprocessors
- Professional Services
Additional Information:
Business Operations Subprocessors
Subprocessors included in this section apply when you engage with Smartsheet as an organization and purchase or use any of our offerings.
| Subprocessor | Purpose | Location |
|---|---|---|
| Atlassian Pty Ltd. | Confluence houses internal team documentation, which may include customer support or technical incident response. | United States |
| Avalara, Inc. | Sales tax and/or VAT obligation calculator which uses billing information provided either via the in-application billing and payments feature or on the customer’s order form. | United States |
| Google LLC | Google Workspace processes email messages. Customer Content may be processed by Google Workspace but only if Customer chooses to provide Customer Content in email interactions with Smartsheet staff. | United States |
| Oracle Corporation | Netsuite processes billing and payment transactions for all Smartsheet customers. This includes the billing and payment information that customers may provide via billing and payments features in the Smartsheet and Resource Management applications. | United States |
| PayPal Holdings Inc. | Payflow Gateway processes payments for customers that utilize the billing and payments feature in the Smartsheet and Resource Management applications. | United States |
| Salesforce, Inc. | Service Cloud provides customer support services. Customer Content may be processed by Service Cloud but only if Customer chooses to provide Customer Content in a support interaction. Salesforce Service Agent is used to provide AI generated/summarized support responses to customers. | United States |
| Slack Technologies, LLC | Internal team communication tool, which may include customer support or technical incident response information. | United States |
| Smartsheet Inc. | Internal work management platform, which may include customer support, product feedback, or technical incident response information. | United States |
| Snowflake Inc. | Provides data analytics services. Customer Content may be processed by Snowflake but only if Customer chooses to provide Customer Content when engaging with Smartsheet value realization services. | United States |
| Stripe, Inc. | Processes payments for customers that utilize the billing and payments feature in the Smartsheet and Resource Management applications. | United States |
| TaskUs, Inc. | Provides customer support services. Customer Content may be processed by TaskUs but only if Customer chooses to provide Customer Content in a support interaction. | Philippines |
| Ujwal Inc. | Level AI provides Smartsheet with services to aid customer support personnel. Customer Content may be processed by Level AI but only if Customer chooses to provide Customer Content in a support interaction. | United States |
| Unbabel Inc. | Provides translation services for Smartsheet Support. Customer Content may be processed by Unbabel but only if Customer chooses to provide Customer Content in a support interaction. | United States |
Smartsheet Corporate Entities
Smartsheet may engage one or more of the following corporate entities, each (with the exception of Smartsheet Inc.) a wholly-owned subsidiary of Smartsheet Inc., as Subprocessors to deliver some or all of the Services provided to customers.
| Entity Name | Location |
| Smartsheet Inc. | United States |
| Artefact Product Group LLC dba 10,000ft | United States |
| Brandfolder, Inc. | United States |
| On Brand Australia Pty Ltd., dba Outfit | Australia |
| On Brand Holdings, Inc., dba Outfit | United States |
| On Brand Investments Ltd., dba Outfit | United Kingdom |
| On Brand Investments Pty Ltd., dba Outfit | Australia |
| Smartsheet Australia Pty Ltd | Australia |
| Smartsheet Bulgaria EOOD | Bulgaria |
| Smartsheet Costa Rica Limitada | Costa Rica |
| Smartsheet Germany GmbH | Germany |
| Smartsheet Japan K.K. | Japan |
| Smartsheet Technologies India Private Limited | India |
| Smartsheet UK Limited, formerly known as Helpa Ltd. and Converse | United Kingdom |
| TernPro, Inc. dba Slope | United States |
Smartsheet - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet application and premium apps offered by Smartsheet (e.g., Bridge, Calendar, Control Center, Pivot).
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting services for the core Smartsheet application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| Amplitude Inc. | Command AI processes comments, requests, and questions submitted by Customer to the onboarding chatbot assistant included in the Smartsheet application. Customer Content may be processed by Command AI but only if Customer chooses to provide Customer Content to Command AI. | United States |
| Blitline LLC | File conversion functionality for the File Library feature. File Library is available only to User Subscription Model ("USM") customers who have not executed a Business Associate Agreement ("BAA") with Smartsheet. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Google LLC | Google Cloud Platform hosts services that support integrations, connectors, and processing of third-party integration notifications including mobile notifications. Google Cloud Platform provides hosting services for the File Library feature. File Library is available only to USM customers who have not executed a BAA with Smartsheet. | United States |
| Fastly, Inc. | Content delivery network to support the File Library feature. File Library is available only to USM customers who have not executed a BAA with Smartsheet | United States |
| Microsoft Corporation | Azure OpenAI processes Customer Content submitted to AI tools that assist users with generating formulas, text, and summaries; analyzing data; and processing support tickets submitted to the Get Help feature. | United States |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet application. | United States |
| Mux, Inc. | Video transcoding service to process videos uploaded to the File Library feature. File Library is available only to USM customers who have not executed a BAA with Smartsheet. | United States |
| One More Cloud, Inc. | Search functionality for the File Library feature. File Library is available only to USM customers who have not executed a BAA with Smartsheet. | United States |
| Rollbar, Inc. | Error logging for the File Library feature. File Library is available only to USM customers who have not executed a BAA with Smartsheet. | United States |
| Salesforce, Inc. | Salesforce processes support ticket information submitted through contact support features in the Smartsheet application. | United States |
| Snowflake Inc. | Data warehouse to support the Work Insights application feature and business intelligence services and log repository. | United States |
Brandfolder - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Brandfolder application.
| Subprocessor | Purpose | Location |
| Blitline LLC | File conversion functionality. | United States |
| Castle Global | Hive provides logo recognition services for the Brandfolder application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Fastly, Inc. | Content delivery network. | United States |
| Google LLC | Google Cloud Platform provides hosting services for the Brandfolder application. Google Vertex AI provides automated image analysis, tagging, and suggested descriptions. | United States |
| Idera, Inc. | Apilayer provides insights functionality. Filestack provides file uploading service. | United States |
| Mode Analytics, Inc. | Intelligence and analytics. | United States |
| Monotype Imaging Holdings Inc. | Font rendering. | United States |
| Mux, Inc. | Video transcoding. | United States |
| One More Cloud, Inc. | Search functionality. | United States |
| Rollbar, Inc. | Error logging. | United States |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
| Transloadit Limited | Upload service | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Brandfolder application. | United States |
| Zencoder, Inc. | Video conversions. | United States |
| Amazon Web Services, Inc. | Customer Choice - Asset hosting provider. | United States |
| CI Hub GmbH | Customer Choice - Integrations tool. | Germany |
| Design Huddle LLC | Customer Choice - Design tool. | United States |
| PrintUI, Inc. | Customer Choice - InDesign server. | United States |
| Storyteq B.V. | Customer Choice - Template tool. | Netherlands |
Content Automation - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Content Automation application.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting services for the Content Automation application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States & Australia |
| Catamorphic, Co. | LaunchDarkly manages feature flags for the Content Automation application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Content Automation application | United States |
Resource Management - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Resource Management application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management application | United States |
Resource Management European Union - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management European Union (EU) application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Resource Management EU application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | Germany & Ireland |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management EU application. | United States |
Smartsheet Gov - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Gov application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS GovCloud provides hosting services for the Smartsheet Gov application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | United States |
| Snowflake Inc. | Pending DISA approval. SnowGov provides a data warehouse to support business intelligence services and log repository. | United States |
Smartsheet Regions Australia - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Regions Australia (AU) application. Additional information on the data transfers of Smartsheet Regions AU is available here.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Smartsheet Regions AU application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. Simple Email Service processes and delivers emails sent from the Smartsheet Regions AU application. | Australia |
| Amplitude Inc. | Amplitude processes comments, requests, and questions submitted by Customer to the onboarding chatbot assistant included in the Smartsheet Regions AU application. Customer Content may be processed by Command AI but only if Customer chooses to provide Customer Content to Command AI. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Google LLC | Google Cloud Platform provides hosting services for the File Library feature. | Australia |
| Microsoft Corporation | Azure OpenAI processes Customer Content submitted to AI tools that assist users with generating formulas, text, and summaries; analyzing data; and processing support tickets submitted to the Get Help feature. | Australia |
| Microsoft 365 supports viewing of Microsoft file types (e.g., .docx, xlsx) that are uploaded to the File Library feature. | United States | |
| Snowflake Inc. | Data warehouse to support business intelligence services and log repository. | United States |
Smartsheet Regions European Union - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Regions European Union (EU) application. Additional information on the data transfers of Smartsheet Regions EU is available here.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | Hosting services for the Smartsheet Regions EU application. Ancillary AWS offerings used with hosting services include CloudWatch, Kibana, and OpenSearch, which provide monitoring, error logging, and analytics services for the hosted application. | Germany & Ireland |
| Amplitude Inc. | Amplitude processes comments, requests, and questions submitted by Customer to the onboarding chatbot assistant included in the Smartsheet Regions EU application. Customer Content may be processed by Command AI but only if Customer chooses to provide Customer Content to Command AI. | United States |
| Datadog, Inc. | Application monitoring, telemetry, and metric services. | United States |
| Microsoft Corporation | Azure OpenAI processes Customer Content submitted to AI tools that assist users with generating formulas, text, and summaries; analyzing data; and processing support tickets submitted to the Get Help feature. | France, Sweden, & Switzerland |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet Regions EU application. | Ireland |
| Salesforce, Inc. | Salesforce processes support ticket information submitted through contact support features within the Smartsheet Regions EU application. | United States |
| Snowflake Inc. | Data warehouse to support the Work Insights application feature. | Germany |
| Data warehouse to support business intelligence services and log repository. | United States |
Smartsheet Private Beta Program Subprocessors
Subprocessors in this section apply to the use of Beta Features and process Beta Content as defined in the AI Private Beta Terms and Conditions. This section is only applicable to customers who’ve executed AI Private Beta Terms and Conditions with Smartsheet.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS Bedrock provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. | United States |
| Google LLC | Google Vertex AI provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. | United States |
| Microsoft Corporation | Azure OpenAI processes Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. | United States |
Professional Services
Depending on the professional services requested, Smartsheet may engage a third party contractor to complete the services outlined in the applicable Order or Statement of Work (“SOW”).
| Professional Services Provider | Purpose | Location |
|---|---|---|
| Agile Management Experts | Optional - Professional services provider. | Germany |
| CloudWave Inc. | Optional - Professional services provider. | United States & India |
| Comture Corporation | Optional - Professional services provider. | Japan |
| Concentrix Catalyst Pty. Ltd. | Optional - Professional services provider. | Australia & Mexico |
| Concentrix CVG Customer Management Group Inc. | Optional - Professional services provider | United States |
| DigitalRadius LLC | Optional - Professional services provider. | United States |
| Invoka Consulting Limited | Optional - Professional services provider. | United Kingdom |
| Optimum Consultancy Services, LLC | Optional - Professional services provider. | United States |
| Prime Consulting Group Solutions | Optional - Professional services provider. | United States |
| Project Plan Services | Optional - Professional services provider. | United States & United Kingdom |
| Protiviti Inc. | Optional - Professional services provider. | United States & Bulgaria |
| Servicios y Sistemas Tecnologicos para la Construccion SA de CV | Optional - Professional services provider. | Mexico |
| Sevan Multi-Site Solutions, Inc. | Optional - Professional services provider. | United States |
| SoftwareX | Optional - Professional services provider. | United States |
| Xpanxion, LLC | Optional - Professional services provider. | United States, United Kingdom, & Philippines |
Subprocessor Frequently Asked Questions
Does Smartsheet have written agreements with its Subprocessors?
Yes; our selection and engagement of each Subprocessor is subject to written agreements containing data protection terms required by applicable laws and our contractual commitments with our customers.
What are the integrations and connectors to the applications offered by Smartsheet?
Our Offerings may provide access via connectors and integrations (collectively, “Integrations”) to third party accounts such as Microsoft, Tableau, Slack, or Facebook. Integrations can be used to pull and/or push information from or to Smartsheet , and to enable the applicable third party to receive notifications, such as sheet updates. Any information users authorize to be transferred from Smartsheet offerings to an Integration is governed by the third party’s privacy and security obligations, including the Subprocessors that they may engage. We encourage you to carefully read the privacy statement of any third party you authorize to receive information from Smartsheet offerings. Additional information on available Integrations is available at www.smartsheet.com/integrations.
Does Smartsheet have a process for vetting or selecting Subprocessors to engage?
Yes; Smartsheet Subprocessors are reviewed during the initial engagement and they go through an annual security review to ensure security controls are in place for protecting customer data. Where applicable, Smartsheet will review security attestations for Subprocessors including, but not limited to, reviewing SOC I and/or SOC II reports, vulnerability and penetration tests, PCI-DSS audits, and external security risk assessments.
Can my organization subscribe to notifications of additions to this Subprocessor page?
Yes; customers may subscribe to be notified of additions to the Subprocessor lists by completing this form.
Who can I contact if I have questions or concerns about the Smartsheet Subprocessor page?
Additional information regarding our use of Subprocessors is available in the Smartsheet Security Packet. Please contact your sales representative or submit this form to obtain a copy.
Revision History
The revision history for this page is available for review here.