Vendor record · smartsheet.com
What Smartsheet promises about your data.
Where Smartsheet publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Smartsheet lists its sub-processors at smartsheet.com/legal/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at smartsheet.com/legal/dpa (read October 15, 2026) gives you 15 days to object.
- Window
- 15
- Sub-processors
- 59
- Pages
- 7
- Copies
- 37
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Smartsheet DPA
Smartsheet's data processing agreement gives 15 days to object to a new sub-processor. Here is the clause, from our October 15, 2026 copy:
15
days to object
“Customer's failure to provide written notice of objection within such fifteen (15) day period shall constitute Customer's approval and authorization of the new Subprocessor's appointment.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Smartsheet published it.
smartsheet.com/legal/dpa · read 2026-10-15 · fingerprint 277c64d99eb89b17…
Smartsheet sub-processors
Smartsheet publishes a sub-processor list at smartsheet.com/legal/subprocessors; we last read it on October 15, 2026. It names 59 entries. The first 15, as the list prints them: Agile Management Experts; Amazon Web Services, Inc.; Amplitude Inc.; Anthropic, PBC; Artefact Product Group LLC dba 10,000ft; Atlassian Pty Ltd.; Blitline LLC; Brandfolder, Inc.; Castle Global; Catamorphic, Co.; CI Hub GmbH; CloudWave Inc.; Comture Corporation; Concentrix Catalyst Pty. Ltd.; Concentrix CVG Customer Management Group Inc.; and 44 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
59 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Smartsheet keeps your data
We hold no statement about data retention from Smartsheet's watched pages. The pages we watch: changelog smartsheet.com/release-notes; data processing agreement smartsheet.com/legal/dpa; pricing page smartsheet.com/pricing; privacy policy smartsheet.com/privacy; sub-processor list smartsheet.com/legal/subprocessors; terms of service www.smartsheet.com/legal/site-terms; trust and security page smartsheet.com/trust. On training with customer data, Smartsheet's trust and security page (smartsheet.com/trust, in the copy read October 11, 2026) says: “Enterprise Plan customers in healthcare can use Smartsheet to receive, maintain, or transmit certain types of Protected Health Information (PHI) after executing a Business Associate Agreement (BAA) with Smartsheet. #### Is your data used to train third-party foundational models? No. Your data is not used to train third-party foundational models.”
Training on customer data
“This includes reviewing the AI provider’s data handling and retention practices, confirming contractual restrictions on the use of Customer Content, assessing the provider’s approach to data isolation and access controls, and evaluating the availability of regional processing options where applicable. ##### Is Customer Content used to train or improve Subprocessors’ AI models? No;”
smartsheet.com/legal/subprocessors · read 2026-10-05
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 59 · 1 name an AI provider we list
Agile Management Experts
Optional - Professional services provider.
Germany
Amazon Web Services, Inc.
Hosting provider of internal tools
United States
Amplitude Inc.
Customer support and application onboarding services
United States
Anthropic, PBCAI · Anthropic
Internal generative AI provider
United States
Artefact Product Group LLC dba 10,000ft
United States
Atlassian Pty Ltd.
Internal team documentation repository
United States
Blitline LLC
File conversion functionality
United States
Brandfolder, Inc.
United States
Castle Global
Logo recognition services
United States
Catamorphic, Co.
Feature flags management
United States
CI Hub GmbH
Customer Choice - Integrations tool
Germany
CloudWave Inc.
Optional - Professional services provider.
United States & India
Comture Corporation
Optional - Professional services provider.
Japan
Concentrix Catalyst Pty. Ltd.
Optional - Professional services provider.
Australia & Mexico
Concentrix CVG Customer Management Group Inc.
Optional - Professional services provider
United States
Databricks, Inc.
Data analysis and warehouse
United States
Design Huddle LLC
Customer Choice - Design tool
United States
DigitalRadius LLC
Optional - Professional services provider.
United States
Fastly, Inc.
Content delivery network
United States
Google LLC
Staff communication and workplace tools
United States
Idera, Inc.
Insights functionality and file uploading services
United States
Invoka Consulting Limited
Optional - Professional services provider.
United Kingdom
MessageBird B.V.
Processes and delivers email
United States
Microsoft Corporation
Generative AI services provider
United States
Monotype Imaging Holdings Inc.
Font rendering
United States
Mux, Inc.
Video transcoding
United States
On Brand Holdings, Inc., dba Outfit
United States
On Brand Australia Pty Ltd., dba Outfit
Australia
On Brand Investments Ltd., dba Outfit
United Kingdom
One More Cloud, Inc.
Search functionality
United States
Optimum Consultancy Services, LLC
Optional - Professional services provider.
United States
Prime Consulting Group Solutions
Optional - Professional services provider.
United States
PrintUI, Inc.
Customer Choice - InDesign server
United States
Project Plan Services
Optional - Professional services provider.
United States & United Kingdom
Protiviti Inc.
Optional - Professional services provider.
United States & Bulgaria
Salesforce, Inc.
Customer support tools and team communication services
United States
Servicios y Sistemas Tecnologicos para la Construccion SA de CV
Optional - Professional services provider.
Mexico
Sevan Multi-Site Solutions, Inc.
Optional - Professional services provider.
United States
Smartsheet Inc.
Internal intelligent work management platform
United States
Smartsheet Australia Pty Ltd
Australia
Smartsheet Bulgaria EOOD
Bulgaria
Smartsheet Costa Rica Limitada
Costa Rica
Smartsheet Germany GmbH
Germany
Smartsheet Technologies India Private Limited
India
Smartsheet Japan K.K.
Japan
Smartsheet Technologies Singapore Pte. Ltd.
Singapore
Smartsheet UK Limited, formerly known as Helpa Ltd. and Converse
United Kingdom
Snowflake Inc.
Data analysis and warehouse
United States
SoftwareX
Optional - Professional services provider.
United States
Storyteq B.V.
Customer Choice - Template tool
Netherlands
TaskUs, Inc.
Customer support services provider
Philippines
TernPro, Inc. dba Slope
United States
Transloadit Limited
Upload service
United States
Twilio Inc.
Processes and delivers emails
United States
UiPath, Inc.
Robotic processing automation
United States
Ujwal Inc.
Customer support services provider
United States
Unbabel Inc.
Customer support translation services
United States
Xpanxion, LLC
Optional - Professional services provider.
United States, United Kingdom, & Philippines
Zencoder, Inc.
Video conversions
United States
Certifications the trust page names · FedRAMP · ISO 27001 · ISO 27701 · ISO 42001 · SOC 2
Laws the trust page names · GDPR
Data location · Australia
“Customer Content submitted to AI features within Smartsheet Regions is processed within the applicable region (e.g., for Smartsheet Regions Australia, AI processing occurs within Australia).”
smartsheet.com/legal/subprocessors · read 2026-10-05
International transfer notice · United States
“Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live.”
smartsheet.com/privacy · read 2026-10-11
Retirements announced · every vendor's retirements
2026-10-12
Card view has been retired for Business plan customers
The pages' own stamps: Last Updated 2026-04-17 · Last Updated 2026-05-20 · Last updated 2022-09-07
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Smartsheet. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Smartsheet? With an email at smartsheet.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Smartsheet in your product? Hear the morning we read a change.
You get the lines that moved, in Smartsheet’s own words, and the date any window closes. No card. Nothing to cancel.