audit rights dpa residency · Privacy Policy

Smartsheet policy finding

“Smartsheet and its U.S. affiliates participate in the EU-U.S. Data Privacy Framework (" EU-U.S. DPF "), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (" Swiss-U.S. DPF ") as set forth by the U.S. Department of Commerce (collectively, "the Data Privacy Framework "). We are committed to complying with the Data Privacy Framework Principles (" Principles ") with respect to personal data transferred to the United States from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. To learn more about the Data Privacy Framework, and to view our certification, please visit https://www.dataprivacyframework.gov . Smartsheet’s commitments under the Data Privacy Framework Principles are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements (please see our Trust Center for additional information). Smartsheet is and will remain liable for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf (see "How We Share Personal Data" in the applicable notice). We comply with the Data Privacy Framework Principles for all onward transfers of personal data from the EEA, UK, and Switzerland, including the onward transfer liability provisions. If there is a conflict between the terms of this Privacy Notice and the Data Privacy Framework Principles, the Principles will govern.”

Document

Privacy Policy

Captured

2026-06-08

Location

Privacy Policy › “Data Transfer Mechanism for EU and UK Personal Data”

Snapshot SHA-256

2d388b01e58044236dc0a96353fb547c0e395722acc087877406a98f18005012

Informational only, not legal advice. Terms change; verify the source and capture date.