Project & Work Management · smartsheet.comSmartsheet
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“4.1 Content on the Site . All Site Content, including the design, structure, coordination, "look and feel," and arrangement of such Site Content, is owned, controlled, or licensed by Smartsheet. Site Content and elements of the Site are protected by trade dress, copyright, patent, trademark laws, and various other intellectual property rights and unfair…”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Establishes Smartsheet's obligation to retain personal data only as long as reasonably necessary for stated purposes or contractual terms, while creating exceptions permitting longer retention for tax, accounting, legal claims, dispute resolution, contractual enforcement, or legitimate need, with a general maximum of seven years after last date of communication.
Establishes Washington state law as governing law, mandates exclusive jurisdiction in Seattle, Washington courts, imposes a one-year statute of limitations on claims, and addresses waiver and severability—defining the dispute resolution framework and procedural requirements.
Disclaims Smartsheet's responsibility for third-party websites linked from the Site and for widgets/social media features provided by other companies, including any data collection those third parties may perform, allocating risk for third-party services.
Scores derived from 33 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Smartsheet at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Smartsheet's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 89 verified, verbatim-cited findings below — read the citations.
Based on 104 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 12 citationsstaticLast captured 2026-06-08
- Privacy PolicyVerified - read in full - 40 citationsstaticLast captured 2026-07-03
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Restricts Smartsheet's collection of Sensitive Personal Data as defined under U.S. state laws including CCPA, enumerating specific categories such as SSNs, financial information, biometric data, and genetic data that are not collected.
" We do not collect Sensitive Personal Data. Sensitive Personal Data defined under the respective U.S. states (such as the California Consumer Privacy Act, or "CCPA") includes social security numbers, driver’s license numbers, state identifi..."
Provides a detailed description of the content of the Privacy Notice sections, stating that all notices will inform users about data collection, use, sharing, protection, and retention — operative incorporation clause binding together multiple notice sections into a unified legal framework.
" This Privacy Notice is divided into several parts, including separate notices for our general business operations and our applications and services, referred to as our Services. All notices will provide you with information about what pers..."
Disclaims all express and implied warranties regarding the Site, Site Content, and services obtained through the Site, providing an 'as is' and 'as available' disclaimer that limits Smartsheet's representations and allocates risk to the user.
" 8. DISCLAIMER. YOUR USE OF THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE IS AT YOUR OWN RISK. THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE ARE PROVIDED WITHOUT ANY WARRANTIES OF ..."
This segment discloses that Smartsheet Inc. shares personal data with affiliated companies (including Smartsheet UK Limited, Smartsheet Australia Pty Limited, and Brandfolder, Inc.) for internal business purposes, marketing similar products, and legal requirements, and defines how references to 'Smartsheet' encompass the relevant processing affiliate — operative data-sharing obligation and definitional clause establishing the corporate scope of data sharing with named affiliates.
"Smartsheet Inc. shares personal data with our affiliated companies, including, but not limited to, Smartsheet UK Limited, Smartsheet Australia Pty Limited, and Brandfolder, Inc. (a full list of Smartsheet’s affiliates is available here ), f..."
Establishes the complaint resolution procedure for Data Privacy Framework certifications, including a 45-day response commitment, internal resolution process, and escalation to JAMS as a third-party dispute resolution provider for EEA, UK, and Switzerland residents, defining the dispute resolution pathway.
" Complaints or Questions About Smartsheet’s Data Privacy Framework Certifications. If you have any questions or complaints regarding our Data Privacy Framework Certification, please complete this form or email privacy@smartsheet.com. We wil..."
Clause A states that transferred personal data may not guarantee the same level of protection, while Clause B claims the use of EU Standard Contractual Clauses (SCCs) as an 'appropriate data transfer mechanism' for EU/UK data, which are specifically designed to ensure an adequate level of protection.
" Smartsheet’s primary processing activities are in the United States, as detailed on the Data Residency page of our Trust Center . Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live. By providing us with your personal data, you agree to such transfer and/or processing. Smartsheet assesses the circumstances involving all cross-border data transfers and has suitable safeguards in place to require that your personal data will remain protected in accordance with this notice. In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as the applicable standard contractual clauses."
" Smartsheet relies on the EU Standard Contractual Clauses alongside the United Kingdom International Data Transfer Addendum (collectively, the “ SCCs ”) as its appropriate data transfer mechanism for EU and UK personal data. Where applicable, the SCCs are incorporated as part of Smartsheet’s standard DPA as detailed below."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Erasure . You can ask us to erase your personal data if certain conditions are met. We are not required to comply with your request to erase your personal data if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims. "
Grants users the right to request erasure of personal data when conditions are met, while simultaneously establishing an exception whereby Smartsheet is not obligated to comply when processing is required for legal compliance or defense of legal claims.
AI-generated interpretation, not legal advice.
" We keep your personal data for as long as reasonably necessary for the purposes set out in our notices (see "How We Use Personal Data" in the applicable notice) or, if applicable, in accordance with the relevant terms in an agreement between you and Smartsheet. We will keep your personal data longer if required for tax or accounting purposes, to ensure we would be able to defend or raise a claim, to resolve disputes, to enforce our contractual rights, or where we have a legitimate need - though we will generally not keep personal data for longer than seven years following the last date of communication with you. Where personal data is no longer required, we anonymize or dispose of it in a secure manner. "
Establishes Smartsheet's obligation to retain personal data only as long as reasonably necessary for stated purposes or contractual terms, while creating exceptions permitting longer retention for tax, accounting, legal claims, dispute resolution, contractual enforcement, or legitimate need, with a general maximum of seven years after last date of communication.
AI-generated interpretation, not legal advice.
"To opt out of the sharing of your personal data for all of our advertising and marketing activities, please complete this form ."
Grants users the right to opt out of all sharing of personal data for advertising and marketing activities, restricting Smartsheet's ability to share data for such purposes upon user request.
AI-generated interpretation, not legal advice.
" Custom Audiences. If you would prefer we do not include you in third party Custom Audiences, submit this form . Additional information relating to our use of Custom Audiences can be found in our Cookie Notice . "
Grants users the right to opt out of inclusion in third-party Custom Audiences, thereby restricting Smartsheet's ability to share personal data with third parties for targeted advertising, and references the Cookie Notice for additional details.
AI-generated interpretation, not legal advice.
" We may amend, update, or revise this notice from time to time to reflect changes to our privacy practices, changing technologies, industry practices, regulatory requirements, or for other reasons. If we make any material changes that affect the way we treat your data, we will notify you by email, through the Site or Services, or by other legally acceptable means. We encourage you to periodically review this notice for the latest information on our privacy practices."
Establishes Smartsheet's right to amend the privacy notice and its obligation to notify users of material changes via email, the site, or other legally acceptable means, while encouraging periodic review by users.
AI-generated interpretation, not legal advice.
" SMARTSHEET MAY, IN ITS SOLE DISCRETION, MODIFY, UPDATE, SUSPEND OR DISCONTINUE THE SITE OR ANY PORTION THEREOF, INCLUDING SITE CONTENT, AT ANY TIME AND WILL NOT BE LIABLE TO YOU OR ANY OTHER THIRD PARTY FOR ANY SUCH MODIFICATION, UPDATE, SUSPENSION, OR DISCONTINUATION."
Disclaims liability for modifications, updates, suspension, or discontinuation of the Site at Smartsheet's sole discretion, reserving the right to alter the Site without liability to users or third parties.
AI-generated interpretation, not legal advice.
" 6. THIRD-PARTY SITES. This Site may include links to websites owned, controlled, or otherwise provisioned by third parties (“ Third-Party Sites ”). Such Third-Party Sites are not under Smartsheet’s ownership or control, and Smartsheet is not responsible for the content or your use of such Third-Party Sites, including any information or materials contained therein. Additionally, the Site may include social media features and widgets (“ widgets ”), such as a “share this” button or other interactive mini-programs. Widgets can be used to provide you specific services from other companies (e.g., displaying the news, opinions, music, etc.). Widgets displayed on the Site are not provisioned by Smartsheet, and are therefore subject to the policies, terms, and conditions of the third-party providing the widget. You are solely responsible for reviewing the terms and conditions of any such Third-Party Sites on which you share Your Content. "
Disclaims Smartsheet's responsibility for third-party websites linked from the Site and for widgets/social media features provided by other companies, including any data collection those third parties may perform, allocating risk for third-party services.
AI-generated interpretation, not legal advice.
" 8. DISCLAIMER. YOUR USE OF THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE IS AT YOUR OWN RISK. THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE ARE PROVIDED WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, ON AN “AS IS” AND “AS AVAILABLE” BASIS. WITHOUT LIMITING THE FOREGOING, NEITHER SMARTSHEET NOR ANYONE ASSOCIATED WITH SMARTSHEET REPRESENTS OR WARRANTS THAT THE SITE, SITE CONTENT, OR ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE WILL BE ACCURATE, RELIABLE, ERROR-FREE, NON-INFRINGING, OR UNINTERRUPTED, THAT DEFECTS WILL BE CORRECTED, THAT THE SITE OR THE SERVER THAT MAKES IT AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS, OR THAT THE SITE OR ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE WILL OTHERWISE MEET YOUR NEEDS OR EXPECTATIONS. "
Disclaims all express and implied warranties regarding the Site, Site Content, and services obtained through the Site, providing an 'as is' and 'as available' disclaimer that limits Smartsheet's representations and allocates risk to the user.
AI-generated interpretation, not legal advice.
" 9. INDEMNITY. You agree to indemnify, defend, and hold Smartsheet, its directors, officers, shareholders, employees, agents, subsidiaries and affiliates, harmless from any demands, loss, liability, claims, or expenses (including attorneys’ fees), made against Smartsheet arising out of or in connection with: (1) your violation of the Terms; (2) your use of the Site or the Site Content; (3) Your Content; or (4) your infringement or violation, or the infringement or violation by any third party using your account, of any intellectual property or proprietary right of any person or entity. Smartsheet reserves the right, at your expense, to assume the defense and control of any claim for which you are required to indemnify Smartsheet, and you agree to cooperate with Smartsheet’s defense of these claims. You agree not to settle any such matter without Smartsheet’s prior written consent. Smartsheet will notify you of any such claim, action, or proceeding within a reasonable time period after becoming aware of it. "
Imposes an indemnification obligation on users to defend, indemnify, and hold harmless Smartsheet and affiliates from claims arising out of user violations of the Terms, use of the Site, user-submitted content, or IP infringement by the user or their account holders.
AI-generated interpretation, not legal advice.
" 4.4 Content posted by others . Smartsheet is not responsible for, and does not pre-screen or endorse, content posted by any other individual. Accordingly, Smartsheet is not liable, directly or indirectly, for any loss or damage caused to you in connection with any content posted by another Site user. "
Disclaims Smartsheet's responsibility for, endorsement of, and liability arising from third-party user content posted on the Site, allocating risk away from Smartsheet for user-generated content.
AI-generated interpretation, not legal advice.
"Smartsheet Inc. shares personal data with our affiliated companies, including, but not limited to, Smartsheet UK Limited, Smartsheet Australia Pty Limited, and Brandfolder, Inc. (a full list of Smartsheet’s affiliates is available here ), for our or our affiliates’ internal business purposes (e.g., when you use or purchase an affiliate’s services, when you apply to one of our global offices, etc.), marketing similar products, or for other legal requirements. A reference to " Smartsheet ," " we ," or " us " is a reference to Smartsheet Inc. and the relevant affiliate involved in the processing activity. "
This segment discloses that Smartsheet Inc. shares personal data with affiliated companies (including Smartsheet UK Limited, Smartsheet Australia Pty Limited, and Brandfolder, Inc.) for internal business purposes, marketing similar products, and legal requirements, and defines how references to 'Smartsheet' encompass the relevant processing affiliate — operative data-sharing obligation and definitional clause establishing the corporate scope of data sharing with named affiliates.
AI-generated interpretation, not legal advice.
" 11. ADDITIONAL TERMS. These Terms are governed by the laws of the State of Washington, without regard to its conflict of laws rules. You expressly agree that the exclusive jurisdiction for any claim or dispute under these Terms resides in the courts located in Seattle, Washington, and you further expressly agree to submit to the personal jurisdiction of such courts for the purpose of litigating any such claim or action. Any claim under these Terms must be brought within one (1) year after the cause of action arises, or such claim or cause of action is barred. The waiver of any breach of these Terms will be effective only if in writing, and no such waiver will operate or be construed as a waiver of any subsequent breach. If any provision of these Terms is held to be unenforceable, then that provision is to be construed either by modifying it to the minimum extent necessary to make it enforceable (if permitted by law) or disregarding it (if not permitted by law), and the rest of these Terms are to remain in effect as written."
Establishes Washington state law as governing law, mandates exclusive jurisdiction in Seattle, Washington courts, imposes a one-year statute of limitations on claims, and addresses waiver and severability—defining the dispute resolution framework and procedural requirements.
AI-generated interpretation, not legal advice.
" Restriction. You can ask us to restrict (i.e., keep but not use) your personal data, but only where: its accuracy is contested (see "Rectification" above), to allow us to verify its accuracy; the processing is unlawful, but you do not want it erased; it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise, or defend legal claims; or you have exercised the right to object, and verification of any overriding grounds is pending. We can continue to use your personal data following a request for restriction where we have your consent to establish, exercise, or defend legal claims, or to protect the rights of another."
Grants users the right to request restriction of processing under specified conditions (contested accuracy, unlawful processing, expired purpose, pending objection), while also establishing exceptions where Smartsheet may continue use of restricted data with consent or for legal claims.
AI-generated interpretation, not legal advice.
" Our Site and Services are not directed toward children under 18 and we do not knowingly collect personal data from minors. If you are under 18, please do not use the Site or Services or share personal data with us. If you learn that anyone younger than 18 has unlawfully provided us personal data, please contact us. See also our Acceptable Use Policy . "
Continues the restriction on collection of children's personal data by instructing minors not to use the site or services, establishing a reporting mechanism for unlawful collection, and incorporating the Acceptable Use Policy by reference.
AI-generated interpretation, not legal advice.
" We do not collect Sensitive Personal Data. Sensitive Personal Data defined under the respective U.S. states (such as the California Consumer Privacy Act, or "CCPA") includes social security numbers, driver’s license numbers, state identification cards, passport numbers, your precise geo-location, racial or ethnic origins, religious or philosophical beliefs, union memberships, the contents of your mail and email (unless Smartsheet is the intended recipient of that content), or genetic data. We do not collect account log-ins, financial information, debit or credit card numbers in combination with your security codes or passwords. If we had any reason to collect Sensitive Personal Data, we would do so according to your rights and choices as described in the section "Your Rights" above, and with a clearly defined business purpose."
Restricts Smartsheet's collection of Sensitive Personal Data as defined under U.S. state laws including CCPA, enumerating specific categories such as SSNs, financial information, biometric data, and genetic data that are not collected.
AI-generated interpretation, not legal advice.
" Unless prohibited by local laws, non-English translations of this notice are provided for convenience only and in the event of any ambiguity or conflict between translations, the English version is authoritative and controls."
Restricts reliance on non-English translations by declaring them convenience-only and making the English version authoritative in cases of ambiguity or conflict, subject to local law prohibitions, thereby limiting interpretive rights of non-English readers.
AI-generated interpretation, not legal advice.
" 7. GEOGRAPHIC RESTRICTIONS. Smartsheet, the owner and controller of the Site, is based in the State of Washington in the United States. Smartsheet makes no claims that the Site or any Site Content is accessible or appropriate outside of the United States. You are responsible for securing, using, and monitoring an internet connection, which may include a VPN, that is compliant with laws and regulations of the jurisdiction from which you access the Site."
Restricts the scope of the Site's accessibility claims to the United States, places the burden of legal compliance for international access on the user, and identifies Washington as Smartsheet's base of operations.
AI-generated interpretation, not legal advice.
" 4.1 Content on the Site . All Site Content, including the design, structure, coordination, "look and feel," and arrangement of such Site Content, is owned, controlled, or licensed by Smartsheet. Site Content and elements of the Site are protected by trade dress, copyright, patent, trademark laws, and various other intellectual property rights and unfair competition laws. You must keep intact all copyright and other proprietary notices for the Site Content. Your use of the Site Content that discloses Site Content to a third party or general public must include appropriate ownership attribution to Smartsheet. Nothing contained on the Site should be construed as granting any license or right to use Smartsheet’s trade names, trademarks, or service marks without Smartsheet’s prior written consent. "
Asserts Smartsheet's ownership, control, or licensure of all Site Content and its protected status under IP laws, and imposes obligations on users to maintain copyright notices and provide attribution when disclosing Site Content, establishing Smartsheet's proprietary rights.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Smartsheet's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
20 verified clausesClauses in Smartsheet's policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“Smartsheet and its U.S. affiliates participate in the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce (collect…”
Commits Smartsheet and its U.S. affiliates to compliance with the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. DPF Principles for personal data transferred from the EEA, UK, and Switzerland to the United…
📍 Privacy Policy › “Data Transfer Mechanism for EU and UK Personal Data”Jump to exact text → - Audit rights, DPA & residency
“Smartsheet’s primary processing activities are in the United States, as detailed on the Data Residency page of our Trust Center . Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet,…”
Discloses that Smartsheet's primary processing is in the United States and that personal data may be transferred to jurisdictions with different levels of protection; obtains user consent for such transfers; and establis…
📍 Privacy Policy › “International Transfers”Jump to exact text → - Audit rights, DPA & residency
“Complaints or Questions About Smartsheet’s Data Privacy Framework Certifications. If you have any questions or complaints regarding our Data Privacy Framework Certification, please complete this form or email privacy@smartsheet.com. We will respond within 45 d…”
Establishes the complaint resolution procedure for Data Privacy Framework certifications, including a 45-day response commitment, internal resolution process, and escalation to JAMS as a third-party dispute resolution pr…
📍 Privacy Policy › “Webform: Contact privacy form”Jump to exact text → - Privacy & data use
“Exercise of Rights. To exercise your rights, please contact us using this form or using the contact details provided under the "How to Contact Us" section below. We do not discriminate based on whether you choose to exercise your choices and rights and will no…”
Establishes the procedure for exercising data subject rights, including the non-discrimination obligation whereby Smartsheet commits not to deny services, charge different rates, or provide different quality based on rig…
📍 Privacy Policy › “Your Rights”Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“We do not collect Sensitive Personal Data. Sensitive Personal Data defined under the respective U.S. states (such as the California Consumer Privacy Act, or "CCPA") includes social security numbers, driver’s license numbers, state identification cards, passpor…”
Restricts Smartsheet's collection of Sensitive Personal Data as defined under U.S. state laws including CCPA, enumerating specific categories such as SSNs, financial information, biometric data, and genetic data that are…
📍 Privacy Policy › “Sensitive Data Collection”Jump to exact text → - Privacy & data usesale/sharing of personal data
“Objection. You can object in writing to any processing of your personal data, which is done on the basis of our “legitimate interests,” if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you object in writing to our proce…”
Grants users the right to object in writing to processing based on legitimate interests and to processing for direct marketing purposes including profiling, while specifying that Smartsheet may demonstrate overriding com…
📍 Privacy Policy › “Your Rights”Jump to exact text →
+ 14 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
2 verified clausesWhat Smartsheet requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“By accessing or using the Site, you agree that you: (1) are at least 18 years old; (2) will comply with all applicable laws, rules and regulations; (3) will use the Site and Site Content in accordance with these Terms; (4) will not use the Site or Site Content…”
Imposes multiple affirmative obligations and restrictions on users accessing the Site, including age requirements, legal compliance, adherence to the Acceptable Use Policy, and prohibitions on submitting harmful or IP-in…
📍 Terms of Service › “Smartsheet Site Terms”Jump to exact text → - Prompt ownership
“4.1 Content on the Site . All Site Content, including the design, structure, coordination, "look and feel," and arrangement of such Site Content, is owned, controlled, or licensed by Smartsheet. Site Content and elements of the Site are protected by trade dres…”
Asserts Smartsheet's ownership, control, or licensure of all Site Content and its protected status under IP laws, and imposes obligations on users to maintain copyright notices and provide attribution when disclosing Sit…
📍 § 4.1Jump to exact text →
What the policies actually cover
10 topics- Advertising & tracking2 protective4 clauses
- Sale or sharing of personal data1 protective1 clause
- Sensitive data (biometric, location, health)1 protective1 clause
- Children's data1 protective1 clause
- Damages & liability cap1 clause
- Indemnity direction1 clause
- Terms can change at any time1 protective2 clauses
- Deletion rights & post-termination survival1 clause
- Breach-notification promises1 protective1 clause
- Conduct restrictions1 obligation1 clause
38 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause restricts commercial use.
“1. USE OF SITE. In accordance with these Terms, and unless you have a separate agreement with Smartsheet regarding your use of the Site, you may access and use the Site and all information, text, graphics, images, videos, documents, templates, content, and other materials made available on or through the Site (" Site Content ") solely for Non-Commercial Personal Purposes or to learn about Smartsheet products and s...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Complaints or Questions About Smartsheet’s Data Privacy Framework Certifications. If you have any questions or complaints regarding our Data Privacy Framework Certification, please complete this form or email privacy@smartsheet.com. We will respond within 45 days of receiving your complaint and will promptly investigate and attempt to resolve it. If you reside in the EEA, UK, or Switzerland, and your complaint can...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“4.2 Content You Submit to the Site . You are solely responsible for any text, images, photos, audio, video, data, and communications that you submit to Site (collectively, “ Your Content ”), including, but not limited to, Smartsheet’s Community User Forum available at https://community.smartsheet.com . Under no circumstances will Smartsheet be liable in any way for Your Content, including, but not limited to, liab...”Open source citation
The clause affirms user ownership or retention of rights.
“4.2 Content You Submit to the Site . You are solely responsible for any text, images, photos, audio, video, data, and communications that you submit to Site (collectively, “ Your Content ”), including, but not limited to, Smartsheet’s Community User Forum available at https://community.smartsheet.com . Under no circumstances will Smartsheet be liable in any way for Your Content, including, but not limited to, liab...”Open source citation
The clause limits liability or disclaims warranties.
“8. DISCLAIMER. YOUR USE OF THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE IS AT YOUR OWN RISK. THE SITE, SITE CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH THE SITE ARE PROVIDED WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, ON AN “AS IS” AND “AS AVAILABLE” BASIS. WITHOUT LIMITING THE FOREGOING, NEITHER SMARTSHEET NOR ANYONE ASSOCIATED WITH SMARTSHEET REPRESENTS O...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | conditional | MEDIUM | 1 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 1 |
| All applicable tiers | output ownership | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | conditional | MEDIUM | 2 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Free | governing law disputes | conditional | MEDIUM | 1 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Free | prompt ownership | worsens | HIGH | 2 |
| Government | audit rights dpa residency | conditional | MEDIUM | 1 |
| Government | privacy data use | conditional | MEDIUM | 2 |
| Standard | audit rights dpa residency | conditional | MEDIUM | 1 |
| Standard | privacy data use | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“In addition, Smartsheet has implemented intercompany agreements for transfers of personal data between our affiliated companies, which require all of our affiliates to protect personal data they process in accordance with applicable data protection law. We have implemented similar appropriate safeguards where legally required with our third party service providers and partners; please see our Subprocessors page for additional details.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Smartsheet’s primary processing activities are in the United States, as detailed on the Data Residency page of our Trust Center . Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live. By providing us with your personal data, you agree to such transfer and/or processing. Smartsheet assesses the circumstances involving all cross-border data transfers and has suitable safeguards in place to require that your personal data will remain protected in accordance with this notice. In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as the applicable standard contractual clauses.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Smartsheet Inc. and its U.S. affiliates participate in the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce (collectively, "the Data Privacy Framework "). For clarity, the following U.S. affiliates adhere to the DPF Principles: Artefact Product Group LLC dba 10,000ft; Brandfolder, Inc.; On Brand Holdings, Inc., dba Outfit; and TernPro, Inc. dba Slope. We are committed to complying with the Data Privacy Framework Principles (" Principles ") with respect to personal data transferred to the United States from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. To learn more about the Data Privacy Framework, and to view our certification, please visit https://www.dataprivacyframework.gov . Smartsheet’s commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements (please see our Trust Center for additional information). Smartsheet is and will remain liable for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf (see "How We Share Personal Data" in the applicable notice).”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“4.1 Content on the Site . All Site Content, including the design, structure, coordination, "look and feel," and arrangement of such Site Content, is owned, controlled, or licensed by Smartsheet. Site Content and elements of the Site are protected by trade dress, copyright, patent, trademark laws, and various other intellectual property rights and unfair competition laws. You must keep intact all copyright and other proprietary notices for the Site Content. Your use of the Site Content that discloses Site Content to a third party or general public must include appropriate ownership attribution to Smartsheet. Nothing contained on the Site should be construed as granting any license or right to use Smartsheet’s trade names, trademarks, or service marks without Smartsheet’s prior written consent.”Open timeline citation
Latest stance: third party or vendor sharing on output ownership
“4.1 Content on the Site . All Site Content, including the design, structure, coordination, "look and feel," and arrangement of such Site Content, is owned, controlled, or licensed by Smartsheet. Site Content and elements of the Site are protected by trade dress, copyright, patent, trademark laws, and various other intellectual property rights and unfair competition laws. You must keep intact all copyright and other proprietary notices for the Site Content. Your use of the Site Content that discloses Site Content to a third party or general public must include appropriate ownership attribution to Smartsheet. Nothing contained on the Site should be construed as granting any license or right to use Smartsheet’s trade names, trademarks, or service marks without Smartsheet’s prior written consent.”Open timeline citation
Latest stance: restricted on commercial use
“1. USE OF SITE. In accordance with these Terms, and unless you have a separate agreement with Smartsheet regarding your use of the Site, you may access and use the Site and all information, text, graphics, images, videos, documents, templates, content, and other materials made available on or through the Site (" Site Content ") solely for Non-Commercial Personal Purposes or to learn about Smartsheet products and services. " Non-Commercial Personal Purposes " means any use or activity for which (1) a fee is not charged, (2) the purpose of the use is not the sale of a good or service, (3) the use or activity is not intended to produce a profit, and (4) the use does not directly or indirectly suggest or imply any endorsement by or partnership with Smartsheet.”Open timeline citation
Latest stance: sublicensable or transferable on prompt ownership
“4.2 Content You Submit to the Site . You are solely responsible for any text, images, photos, audio, video, data, and communications that you submit to Site (collectively, “ Your Content ”), including, but not limited to, Smartsheet’s Community User Forum available at https://community.smartsheet.com . Under no circumstances will Smartsheet be liable in any way for Your Content, including, but not limited to, liability for any errors or omissions in any content or for any loss or damage of any kind incurred as a result of the use of such content. Once published or posted, you may not be able to delete or remove it. You assume all risks associated with Your Content, including anyone's reliance on its quality, accuracy, or reliability, or any disclosure that identifies you personally or exposes your confidential information. Smartsheet may not pre-screen or review Your Content, but Smartsheet reserves the right to reject or delete Your Content in its discretion. You may not imply that Your Content is in any way sponsored or endorsed by Smartsheet. As between you and Smartsheet, you own Your Content. You represent that you have the necessary rights and permissions to give Smartsheet the right to process Your Content in accordance with these Terms. You grant Smartsheet a worldwide, perpetual, non-exclusive, royalty-free, transferable right to process Your Content for any legitimate business purpose, including by displaying, publishing, distributing, reproducing, or making it (or portions of it) available on publicly available pages of the Site or incorporating it into Smartsheet's products and services.”Open timeline citation
Latest stance: user retains rights on prompt ownership
“4.2 Content You Submit to the Site . You are solely responsible for any text, images, photos, audio, video, data, and communications that you submit to Site (collectively, “ Your Content ”), including, but not limited to, Smartsheet’s Community User Forum available at https://community.smartsheet.com . Under no circumstances will Smartsheet be liable in any way for Your Content, including, but not limited to, liability for any errors or omissions in any content or for any loss or damage of any kind incurred as a result of the use of such content. Once published or posted, you may not be able to delete or remove it. You assume all risks associated with Your Content, including anyone's reliance on its quality, accuracy, or reliability, or any disclosure that identifies you personally or exposes your confidential information. Smartsheet may not pre-screen or review Your Content, but Smartsheet reserves the right to reject or delete Your Content in its discretion. You may not imply that Your Content is in any way sponsored or endorsed by Smartsheet. As between you and Smartsheet, you own Your Content. You represent that you have the necessary rights and permissions to give Smartsheet the right to process Your Content in accordance with these Terms. You grant Smartsheet a worldwide, perpetual, non-exclusive, royalty-free, transferable right to process Your Content for any legitimate business purpose, including by displaying, publishing, distributing, reproducing, or making it (or portions of it) available on publicly available pages of the Site or incorporating it into Smartsheet's products and services.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
- Privacy Policy:Last captured 2026-07-03· verified 2026-07-03
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 96 more findings this quarter vs last (156 vs 60). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Smartsheet's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Smartsheet's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.