This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
A categorical exclusion of Sensitive Personal Data collection limits the risk of exposure of the most legally protected categories of personal information.
Interpretive note: The excerpt appears truncated after 'passport numbers', so the full definition of Sensitive Personal Data under the policy is not visible. The canonical claim preserves only the examples explicitly present in the excerpt. Additional categories may exist in the full document.
The updated privacy policy states that only Smartsheet's U.S.-based affiliates participate in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework. Previously, the policy referenced participation by Smartsheet and its affiliates without geographic qualification. This narrowed scope may affect the data transfer mechanisms available for processing personal data from EU, UK, and Swiss users if non-U.S. affiliates are involved in data handling. The policy does not explicitly describe alternative transfer mechanisms for non-U.S. affiliates.
View change record →Smartsheet does not collect your Sensitive Personal Data, including social security numbers, driver's license numbers, state identification cards, and passport numbers.
How other platforms handle this
Automatically collected data may be linked to other Personal Data such as user name, email address and phone number.
If you are an individual user, we collect, use, transfer, disclose and store any personal Data you provide to us in accordance with our privacy policy, (available on our website), and Applicable Privacy Laws.
to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal data by local law, we also treat these identifiers as personal data in those regions.
Monitoring
Smartsheet has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We do not collect Sensitive Personal Data. Sensitive Personal Data defined under the respective U.S. states (such as the California Consumer Privacy Act, or "CCPA") includes social security numbers, driver's license numbers, state identification cards, passport numbers...— Excerpt from Smartsheet's Smartsheet Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
A categorical exclusion of Sensitive Personal Data collection limits the risk of exposure of the most legally protected categories of personal information.
Smartsheet does not collect your Sensitive Personal Data, including social security numbers, driver's license numbers, state identification cards, and passport numbers.
ConductAtlas has identified this type of provision across 299 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.