TRUST CENTER

Privacy

At Smartsheet, we take a global approach to privacy that aligns with international standards and practices for data processing and recognized privacy principles. The information below explains how we collect, use, and share personal data, as well as your related rights or choices regarding how we manage that data.

Read the Privacy FAQ

Privacy Notice

At Smartsheet, we value your privacy and respect your right to know how information about you is collected and used. Our privacy notice describes how Smartsheet collects, uses, and discloses personal and other information we gather through our websites, our mobile applications, and the Smartsheet work execution platform including Brandfolder, Resource Management and Bridge.

Privacy Notice ›

Privacy Practices

Smartsheet is committed to respecting privacy rights and treating personal data with the utmost care. Smartsheet takes a global approach to privacy that adheres to standard international practices for data handling and recognized privacy principles.

Review our Privacy FAQs ›
Learn more about Smartsheet Privacy Practices ›

Exercise Privacy Rights

You may have certain rights relating to your personal data under local data protection laws (e.g., the General Data Protection Regulation, the California Consumer Privacy Act, etc.) or based on your use of our Offerings. Our privacy notice includes more information about these rights. To exercise these rights please complete the form below.

Privacy Request Form ›

General Data Protection Regulation

The General Data Protection Regulation (GDPR) is a European regulation that took effect on May 25, 2018, and sets out standards for the protection and processing of personal data. Learn more about Smartsheet and the GDPR, including how to request a Data Processing Agreement (DPA) with Smartsheet as a data processor.

Learn more about Smartsheet and the GDPR ›

ISO/IEC 27701:2019

Smartsheet operates an ISO/IEC 27701:2019 compliant privacy program. The requirements of this standard can be mapped to and help comply with data privacy laws and regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Learn more about Smartsheet Certifications ›

Smartsheet Subprocessors

Smartsheet engages third-party service providers that process the content customers choose to upload or submit to an online subscription service on our behalf in connection with the provision of our services to customers ("Subprocessors").

Learn more about Smartsheet Subprocessors ›

International Data Transfers

On July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to U.S. companies under the new framework. During this time, Smartsheet will be reviewing its policies and practices with respect to international data transfers and then making any reasonably required updates as we wait for further direction from the Commission.

Learn more about International Data Transfers ›

Have questions?

Please contact us if you need more information on our privacy practices, have a privacy related question or concern, or would like to exercise your privacy rights.