Smartsheet Subprocessors
Smartsheet engages third party service providers to help us run and scale our business and offerings. Where these service providers process the content customers choose to upload or submit to our online subscription services, they are classified as "Subprocessors,'' and must meet related Smartsheet due diligence requirements.
Included on this page are the Subprocessors that Smartsheet engages today; this list is subject to change at Smartsheet's discretion. This webpage is provided as a high-level overview; additional details, including Data Transfer Impact Assessments, are available upon request in the Smartsheet Security Packet. Please contact your Sales Representative if you would like to request a copy of the Smartsheet Security Packet.
Table of Contents
Subprocessors:
- Business Operations Subprocessors
- Smartsheet Corporate Entities
- Smartsheet - Infrastructure Subprocessors
- Brandfolder - Infrastructure Subprocessors
- Content Automation - Infrastructure Subprocessors
- Resource Management - Infrastructure Subprocessors
- Resource Management (EU) - Infrastructure Subprocessors
- Smartsheet Gov - Infrastructure Subprocessors
- Smartsheet Regions - Infrastructure Subprocessors
- Professional Services
Additional Information:
Business Operations Subprocessors
Subprocessors included in this section apply when you engage with Smartsheet as an organization and purchase or use any of our offerings.
| Subprocessor | Purpose | Location |
|---|---|---|
| Avalara, Inc. | Supports Smartsheet in calculating each customer’s sales tax and/or VAT obligations based on the billing information provided either via the in-application billing & payments feature or on the customer’s order form. |
United States |
| Atlassian Pty Ltd. | Internal team documentation via the Confluence application which may include customer support or technical incident response. | United States |
| Google LLC | Customer Content may be processed by Google Workspace but only if a Customer chooses to provide it during email interactions with Smartsheet staff. | United States |
| Oracle Corporation | NetSuite supports payments and transactions for all Smartsheet customers. This includes the billing and payment information that customers may provide via billing & payments features in the application to purchase their application licenses. | United States |
| PayPal Holdings Inc. | Payflow Gateway supports payment processing for customers that utilize the billing & payments feature in the application to purchase their application licenses. | United States |
| salesforce.com, inc. | Customer Content may be processed by the Service Cloud application but only if Customer chooses to provide it during a support interaction. | United States |
| Slack Technologies, LLC | Internal team communication via the Slack application which may include customer support or technical incident response. | United States |
| Smartsheet Inc. |
Internal work management platform, Smartsheet, which may include customer support, product feedback, or technical incident response. |
United States |
| Stripe, Inc. | Stripe supports payment processing for customers that utilize the billing & payments feature in the application to purchase their licenses. | United States |
| TaskUs, Inc. | Customer Content may be processed by TaskUs but only if Customer chooses to provide it during a support interaction. | United States & Philippines |
| Unbabel Inc. | Provides translation services for the Smartsheet Support Team. Customer Content may be processed by Unbabel but only if Customer chooses to provide it during a support interaction. | Portugal |
| Zendesk, Inc. | Customer Content may be processed by Zendesk but only if Customer chooses to provide it during a support interaction regarding the Brandfolder or Content Automation applications. | United States |
| Snowflake Inc. | Optional - Applies when customers engage with Smartsheet Value Realization Services. | United States |
Smartsheet Corporate Entities
Smartsheet may engage one or more of the following corporate entities, each (with the exception of Smartsheet Inc.) a wholly-owned subsidiary of Smartsheet Inc., as Subprocessors to deliver some or all of the Services provided to customers.
| Entity Name | Location |
| Smartsheet Inc. | United States |
| Artefact Product Group LLC dba 10,000ft | United States |
| Brandfolder, Inc. | United States |
| On Brand Australia Pty Ltd., dba Outfit | Australia |
| On Brand Holdings, Inc., dba Outfit | United States |
| On Brand Investments Ltd., dba Outfit | United Kingdom |
| On Brand Investments Pty Ltd., dba Outfit | Australia |
| Smartsheet Australia Pty Limited | Australia |
| Smartsheet Costa Rica Limitada | Costa Rica |
| Smartsheet Germany GmbH | Germany |
| Smartsheet Japan K.K. | Japan |
| Smartsheet UK Limited, formerly known as Helpa Ltd. and Converse | United Kingdom |
| TernPro, Inc. dba Slope | United States |
Smartsheet - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet application and premium apps offered by Smartsheet (e.g., Calendar, Control Center, Pivot).
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | AWS provides hosting services for the core Smartsheet application | United States |
| Google LLC | Google Cloud Platform hosts services that support integrations, connectors, and processing of third-party integration notifications including mobile notifications | United States |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet application | United States |
| Snowflake Inc. | Data warehouse to support the Work Insights feature | United States |
Brandfolder - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Brandfolder application.
| Subprocessor | Purpose | Location |
| Blitline LLC | File conversion functionality | United States |
| Castle Global | The Hive application provides logo recognition services for the Brandfolder application | United States |
| Datadog, Inc. | Application monitoring and telemetry | United States |
| Fastly, Inc. | Content delivery network | United States |
| Google LLC | Google Cloud Platform provides hosting services for the Brandfolder application | United States |
| Idera, Inc. | The Apilayer application provides insights functionality The Filestack application provides file uploading service |
United States |
| LogRocket, Inc. | Error logging provider | United States |
| Mode Analytics, Inc. | Intelligence and analytics | United States |
| Mux, Inc. | Video transcoding | United States |
| Rollbar, Inc. | Error logging provider | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Brandfolder application | United States |
| Transloadit Limited | Upload service | United States |
| Zencoder, Inc. | Video conversions | United States |
| Amazon Web Services, Inc. | Customer Choice - Asset hosting provider | United States |
| CI Hub GmbH | Customer Choice - Integrations tool | Germany |
| Design Huddle LLC | Customer Choice - Design tool | United States |
| PrintUI, Inc. | Customer Choice - InDesign server | United States |
| StoryTEQ B.V. | Customer Choice - Template tool | Netherlands |
Content Automation - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Content Automation application.
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | AWS provides hosting services for the Content Automation application | United States & Australia |
| Catamorphic, Co. | LaunchDarkly provides feature flag management for the Content Automation application | United States |
| Datadog, Inc. | Application telemetry monitoring and error logging | United States |
| Intercom, Inc. | Customer engagement tool used in the Content Automation application | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Content Automation application | United States |
Resource Management - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS provides hosting services for the Resource Management application | United States |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management application | United States |
Resource Management (EU Hosted) - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Resource Management (EU) application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS provides hosting services for the Resource Management application. | Germany & Ireland |
| Twilio Inc. | SendGrid processes and delivers emails sent from the Resource Management application. | United States |
Smartsheet Gov - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Gov application.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS GovCloud provides hosting services for the Smartsheet Gov application. | United States |
Smartsheet Regions - Infrastructure Subprocessors
Subprocessors included in this section apply to the use of the Smartsheet Regions application. Additional information on the data transfers of Smartsheet Regions is available here.
| Subprocessor | Purpose | Location |
| Amazon Web Services, Inc. | AWS provides hosting services for the Smartsheet Regions application. | Germany & Ireland |
| MessageBird B.V. | Sparkpost processes and delivers emails sent from the Smartsheet Regions application. | Ireland |
Professional Services
Depending on the professional services requested, Smartsheet may engage a third party contractor to complete the services outlined in the applicable Order or Statement of Work (“SOW”).
| Professional Services Provider | Purpose | Location |
|---|---|---|
| Agile Management Experts | Optional - Professional services provider | Germany |
| CloudWave Inc. | Optional - Professional services provider | United States & India |
| Cortac Group Inc. | Optional - Professional services provider | United States |
| DevoTeam G Cloud SAS | Optional - Professional services provider | France |
| Optimum | Optional - Professional services provider | United States |
| ProKarma, Inc., dba PKGlobal | Optional - Professional services provider | Mexico |
| Protiviti Inc. | Optional - Professional services provider | United States |
| Servicios y Sistemas Tecnologicos para la Construccion SA de CV | Optional - Professional services provider | Mexico |
| Sevan | Optional - Professional services provider | United States |
| SoftwareX | Optional - Professional services provider | United States |
| Xpanxion, LLC | Optional - Professional services provider | United States & United Kingdom |
Subprocessor Frequently Asked Questions
Does Smartsheet have written agreements with its Subprocessors?
Yes; our selection and engagement of each Subprocessor is subject to written agreements containing data protection terms required by applicable laws and our contractual commitments with our customers.
What are the integrations and connectors to the applications offered by Smartsheet?
Our Offerings may provide access via connectors and integrations (“integrations”) to third party accounts such as Microsoft, Tableau, Slack, or Facebook. Integrations can be used to pull and/or push information from or to Smartsheet , and to enable the applicable third party to receive notifications, such as sheet updates. Any information users authorize to be transferred from Smartsheet offerings to an integration is governed by the third party’s privacy and security obligations including the Subprocessors that they may engage. We encourage you to carefully read the privacy statement of any third party you authorize to receive information from Smartsheet offerings. Additional information on integrations is available at www.smartsheet.com/integrations.
Does Smartsheet have a process for vetting or selecting Subprocessors to engage?
Yes; Smartsheet Subprocessors are reviewed during the initial engagement and they go through an annual security review to ensure security controls are in place for protecting customer and employee data. Where applicable, Smartsheet will review security attestations for Subprocessors including, but not limited to, reviewing SOC I and/or SOC II reports, vulnerability and penetration tests, PCI-DSS audits, and external security risk assessments.
Can my organization subscribe to notifications of additions to this Subprocessor page?
Yes; customers may subscribe to be notified of additions to the Subprocessor lists by completing this form.
Who can I contact if I have questions or concerns about the Smartsheet Subprocessor page?
Additional information regarding our use of Subprocessors is available in the Smartsheet Security Packet. Please contact your Sales Representative for a copy of the most recent version of the Smartsheet Security Packet.
Revision History
The revision history for this page is available for review here.