The General Data Protection Regulation (GDPR) is a European regulation that took effect on May 25, 2018, and sets out new standards for the protection and processing of personal data. Learn more about Smartsheet and the GDPR, including how to request a Data Processing Agreement (DPA) with Smartsheet as a data processor.
The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks were designed by the U.S. Department of Commerce and the European Commission and Swiss Administration to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce. Smartsheet self-certifies to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework.
When governments or law enforcement entities make lawful requests for customer data from Smartsheet, we are committed to complying while carefully limiting what we disclose. Because we believe that customers should have control over their own data, we will release only the information that we must to comply with the lawful request.
If you need more information on our security practices, find a security issue with our products, or are concerned or suspect that your Smartsheet account has been compromised, please contact us at firstname.lastname@example.org or call us at 844-324-2360.