Snapshot 1326
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to main content Smartsheet Subprocessors Smartsheet engages third party service providers to help us run and scale our business and Online Services. Where these service providers process the content customers choose to upload or submit to our online subscription services, they are classified as "Subprocessors,'' and must meet related Smartsheet due diligence requirements. Included on this page are the Subprocessors that Smartsheet engages today; this list is subject to change at Smartsheet's discretion. This webpage is provided as a high-level overview; additional details, including Data Transfer Impact Assessments, are available, which can be obtained by contacting your sales representative or by submitting this form. Table of Contents Subprocessors: Customer Support Subprocessors Smartsheet Corporate Entities Infrastructure Subprocessors: Smartsheet Brandfolder Content Automation Resource Management Resource Management European Union Smartsheet Gov Smartsheet Regions Australia Smartsheet Regions European Union Smartsheet Private Beta Program Subprocessors Professional Services Additional Information: Frequently Asked Questions (FAQs) Revision History Customer Support Subprocessors Subprocessors included in this section apply when you engage with Smartsheet as an organization and purchase or use any of our Online Services or engage Smartsheet for professional services. Customer Content may be processed by the Subprocessors in this section but only if Customer chooses to provide Customer Content in interactions with Smartsheet personnel. These Subprocessors do not have automated, continuous data transfers from any of our Online Services unless otherwise noted in the related Infrastructure Subprocessor section. For more information on security features that allow customers to control access to data, please refer to the Smartsheet Security Whitepaper. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting provider of internal tools United States Anthropic, PBC Internal generative AI provider United States Atlassian Pty Ltd. Internal team documentation repository United States Google LLC Staff communication and workplace tools United States Salesforce, Inc. Customer support tools and team communication services United States Smartsheet Inc. Internal intelligent work management platform United States Snowflake Inc. Data analysis and warehouse United States TaskUs, Inc. Customer support services provider Philippines UiPath, Inc. Robotic processing automation United States Ujwal Inc. Customer support services provider United States Unbabel Inc. Customer support translation services United States Smartsheet Corporate Entities Smartsheet may engage one or more of the following corporate entities, each (with the exception of Smartsheet Inc.) a wholly-owned subsidiary of Smartsheet Inc., as Subprocessors to deliver some or all of the Services provided to customers. Entity Name Location Smartsheet Inc. United States Artefact Product Group LLC dba 10,000ft United States Brandfolder, Inc. United States On Brand Australia Pty Ltd., dba Outfit Australia On Brand Holdings, Inc., dba Outfit United States On Brand Investments Ltd., dba Outfit United Kingdom On Brand Investments Pty Ltd., dba Outfit Australia Smartsheet Australia Pty Ltd Australia Smartsheet Bulgaria EOOD Bulgaria Smartsheet Costa Rica Limitada Costa Rica Smartsheet Germany GmbH Germany Smartsheet Japan K.K. Japan Smartsheet Technologies Singapore Pte. Ltd. Singapore Smartsheet Technologies India Private Limited India Smartsheet UK Limited, formerly known as Helpa Ltd. and Converse United Kingdom TernPro, Inc. dba Slope United States Smartsheet - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Smartsheet application and premium apps offered by Smartsheet (e.g., Bridge, Calendar, Control Center, Pivot). Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider United States Amplitude Inc. Customer support and application onboarding services United States Databricks, Inc. Data analysis and warehouse United States Google LLC Hosting services provider United States MessageBird B.V. Processes and delivers email United States Microsoft Corporation Generative AI services provider United States Salesforce, Inc. Customer support services provider United States Snowflake Inc. Data analysis and warehouse United States Brandfolder - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Brandfolder application. Subprocessor Purpose Location Amazon Web Services, Inc. Automated image tagging services Customer Choice - Asset hosting provider United States Blitline LLC File conversion functionality United States Castle Global Logo recognition services United States Databricks, Inc. Data analysis and warehouse United States Fastly, Inc. Content delivery network United States Google LLC Hosting services provider United States Idera, Inc. Insights functionality and file uploading services United States Monotype Imaging Holdings Inc. Font rendering United States Mux, Inc. Video transcoding United States One More Cloud, Inc. Search functionality United States Transloadit Limited Upload service United States Twilio Inc. Processes and delivers emails United States Zencoder, Inc. Video conversions United States CI Hub GmbH Customer Choice - Integrations tool Germany Design Huddle LLC Customer Choice - Design tool United States PrintUI, Inc. Customer Choice - InDesign server United States Storyteq B.V. Customer Choice - Template tool Netherlands Content Automation - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Content Automation application. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider United States & Australia Catamorphic, Co. Feature flags management United States Databricks, Inc. Data analysis and warehouse United States Twilio Inc. Processes and delivers emails United States Resource Management - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Resource Management application. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider United States Databricks, Inc. Data analysis and warehouse United States Twilio Inc. Processes and delivers emails United States Resource Management European Union - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Resource Management European Union (EU) application. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider Germany & Ireland Databricks, Inc. Data analysis and warehouse United States Twilio Inc. Processes and delivers emails United States Smartsheet Gov - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Smartsheet Gov application. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider United States Snowflake Inc. Data analysis and warehouse United States Smartsheet Regions Australia - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Smartsheet Regions Australia (AU) application. Additional information on the data transfers of Smartsheet Regions AU is available here. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider Australia Amplitude Inc. Customer support and application onboarding services United States Databricks, Inc. Data analysis and warehouse United States Google LLC Hosting services provider Australia Microsoft Corporation Generative AI services provider Australia Snowflake Inc. Data analysis and warehouse United States Smartsheet Regions European Union - Infrastructure Subprocessors Subprocessors included in this section apply to the use of the Smartsheet Regions European Union (EU) application. Additional information on the data transfers of Smartsheet Regions EU is available here. Subprocessor Purpose Location Amazon Web Services, Inc. Hosting services provider Germany & Ireland Amplitude Inc. Customer support and application onboarding services United States Databricks, Inc. Data analysis and warehouse United States MessageBird B.V. Processes and delivers emails Ireland Microsoft Corporation Generative AI services provider France, Sweden, & Switzerland Salesforce, Inc. Customer support services provider United States Snowflake Inc. Data analysis and warehouse Germany Smartsheet Private Beta Program Subprocessors Subprocessors in this section apply to the use of Beta Features and process Beta Content as defined in the AI Private Beta Terms and Conditions. This section is only applicable to customers who’ve executed AI Private Beta Terms and Conditions with Smartsheet. Subprocessor Purpose Location Amazon Web Services, Inc. AWS Bedrock provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. United States Google LLC Google Vertex AI provides hosting services for machine learning and AI services that process Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. United States Microsoft Corporation Azure OpenAI processes Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize data, and create formulas from natural language inputs, or assist users with Smartsheet functionality. United States Professional Services Depending on the professional services requested, Smartsheet may engage a third party contractor or third party services to complete the services outlined in the applicable Order or Statement of Work (SOW). Professional Services Provider Purpose Location Agile Management Experts Optional - Professional services provider. Germany CloudWave Inc. Optional - Professional services provider. United States & India Comture Corporation Optional - Professional services provider. Japan Concentrix Catalyst Pty. Ltd. Optional - Professional services provider. Australia & Mexico Concentrix CVG Customer Management Group Inc. Optional - Professional services provider United States DigitalRadius LLC Optional - Professional services provider. United States Invoka Consulting Limited Optional - Professional services provider. United Kingdom Optimum Consultancy Services, LLC Optional - Professional services provider. United States Prime Consulting Group Solutions Optional - Professional services provider. United States Project Plan Services Optional - Professional services provider. United States & United Kingdom Protiviti Inc. Optional - Professional services provider. United States & Bulgaria Servicios y Sistemas Tecnologicos para la Construccion SA de CV Optional - Professional services provider. Mexico Sevan Multi-Site Solutions, Inc. Optional - Professional services provider. United States SoftwareX Optional - Professional services provider. United States Xpanxion, LLC Optional - Professional services provider. United States, United Kingdom, & Philippines Subprocessor Frequently Asked Questions Does Smartsheet have written agreements with its Subprocessors? Yes; our selection and engagement of each Subprocessor is subject to written agreements containing data protection terms required by applicable laws and our contractual commitments with our customers. What are the integrations and connectors to the applications offered by Smartsheet? Our Online Services may provide access via connectors and integrations (collectively, “Integrations”) to third party accounts such as Microsoft, Tableau, Slack, or Facebook. Integrations can be used to pull and/or push information from or to Smartsheet , and to enable the applicable third party to receive notifications, such as sheet updates. Any information users authorize to be transferred from Smartsheet Online Services to an Integration is governed by the third party’s privacy and security obligations, including the Subprocessors that they may engage. We encourage you to carefully read the privacy statement of any third party you authorize to receive information from Smartsheet Online Services. Additional information on available Integrations is available at www.smartsheet.com/integrations. Does Smartsheet have a process for vetting or selecting Subprocessors to engage? Yes; Smartsheet Subprocessors are reviewed during the initial engagement and they go through periodic security review to ensure security controls are in place for protecting customer data. Where applicable, Smartsheet will review security attestations for Subprocessors including, but not limited to, reviewing SOC I and/or SOC II reports, vulnerability and penetration tests, PCI-DSS audits, and external security risk assessments. How does Smartsheet evaluate AI Subprocessors? In addition to the standard Subprocessor vetting process described above, Smartsheet conducts additional due diligence when evaluating AI Subprocessors. This includes reviewing the AI provider’s data handling and retention practices, confirming contractual restrictions on the use of Customer Content, assessing the provider’s approach to data isolation and access controls, and evaluating the availability of regional processing options where applicable. Is Customer Content used to train or improve Subprocessors’ AI models? No; Smartsheet’s agreements with its Subprocessors prohibit the use of Customer Content to develop, improve, or train third party foundational models. For additional details, please refer to the Smartsheet AI Security Whitepaper. Where is Customer Content processed when using AI-powered features? The processing location for AI-powered features depends on the Smartsheet application being used. For the Smartsheet application, AI features are provided by a generative AI services provider located in the United States. Customer Content submitted to AI features within Smartsheet Regions is processed within the applicable region (e.g., for Smartsheet Regions Australia, AI processing occurs within Australia). Please refer to the Infrastructure Subprocessor sections above for the specific processing locations applicable to each Smartsheet Online Service. Will my organization receive notice of additions to this Subprocessor page? Yes; customer SysAdmins are notified of additions to the Subprocessor list. Smartsheet will provide advance notice of new Subprocessors in accordance with the notification period set forth in the Data Processing Addendum (DPA) incorporated into the terms governing your use of the Online Services. Who can I contact if I have questions or concerns about the Smartsheet Subprocessor page? Additional information regarding our use of Subprocessors is available in the Smartsheet Security Packet. Please contact your sales representative or submit this form to obtain a copy. Revision History The revision history for this page is available for review here.