Smartsheet policy evolution
Before/after stance changes across captured policy versions, with exact citations. If no before/after delta is available yet, AIRIN shows the latest citation-backed stance events instead.
No before/after stance delta is available for this filter yet. Latest citation-backed stance events are shown below.
Jul 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“In addition, Smartsheet has implemented intercompany agreements for transfers of personal data between our affiliated companies, which require all of our affiliates to protect personal data they process in accordance with applicable data protection law. We have implemented similar appropriate safeguards where legally required with our third party service providers and partners; please see our Subprocessors page for additional details.”
Open citationJul 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Smartsheet’s primary processing activities are in the United States, as detailed on the Data Residency page of our Trust Center . Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live. By providing us with your personal data, you agree to such transfer and/or processing. Smartsheet assesses the circumstances involving all cross-border data transfers and has suitable safeguards in place to require that your personal data will remain protected in accordance with this notice. In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as the applicable standard contractual clauses.”
Open citationJul 10, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Smartsheet Inc. and its U.S. affiliates participate in the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce (collectively, "the Data Privacy Framework "). For clarity, the following U.S. affiliates adhere to the DPF Principles: Artefact Product Group LLC dba 10,000ft; Brandfolder, Inc.; On Brand Holdings, Inc., dba Outfit; and TernPro, Inc. dba Slope. We are committed to complying with the Data Privacy Framework Principles (" Principles ") with respect to personal data transferred to the United States from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. To learn more about the Data Privacy Framework, and to view our certification, please visit https://www.dataprivacyframework.gov . Smartsheet’s commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements (please see our Trust Center for additional information). Smartsheet is and will remain liable for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf (see "How We Share Personal Data" in the applicable notice).”
Open citationJun 17, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“In addition, Smartsheet has implemented intercompany agreements for transfers of personal data between our affiliated companies, which require all of our affiliates to protect personal data they process in accordance with applicable data protection law. We have implemented similar appropriate safeguards where legally required with our third party service providers and partners; please see our Subprocessors page for additional details.”
Open citationJun 17, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Smartsheet and its U.S. affiliates participate in the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce (collectively, "the Data Privacy Framework "). We are committed to complying with the Data Privacy Framework Principles (" Principles ") with respect to personal data transferred to the United States from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. To learn more about the Data Privacy Framework, and to view our certification, please visit https://www.dataprivacyframework.gov . Smartsheet’s commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements (please see our Trust Center for additional information). Smartsheet is and will remain liable for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf (see "How We Share Personal Data" in the applicable notice). We comply with the Data Privacy Framework Principles for all onward transfers of personal data from the EEA, UK, and Switzerland, including the onward transfer liability provisions. If there is a conflict between the terms of this Privacy Notice and the Data Privacy Framework Principles, the Principles will govern.”
Open citationJun 17, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Smartsheet’s primary processing activities are in the United States, as detailed on the Data Residency page of our Trust Center . Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live. By providing us with your personal data, you agree to such transfer and/or processing. Smartsheet assesses the circumstances involving all cross-border data transfers and has suitable safeguards in place to require that your personal data will remain protected in accordance with this notice. In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as the applicable standard contractual clauses.”
Open citationGenerated from live stance events. Informational only, not legal advice.