Smartsheet · Smartsheet Privacy Policy · View original document ↗

Third-Party Sub-Processor Sharing

Medium severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Smartsheet recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Smartsheet Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes the operational framework for data sharing and identifies the categories of recipients (hosting providers, analytics companies, marketing platforms, business partners) who access user personal data. It also specifies contractual obligations that Smartsheet imposes on recipients regarding data use scope and instructional compliance.

Recent Activity

This document changed recently

Medium Jun 5, 2026

The updated privacy policy states that only Smartsheet's U.S.-based affiliates participate in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework. Previously, the policy referenced participation by Smartsheet and its affiliates without geographic qualification. This narrowed scope may affect the data transfer mechanisms available for processing personal data from EU, UK, and Swiss users if non-U.S. affiliates are involved in data handling. The policy does not explicitly describe alternative transfer mechanisms for non-U.S. affiliates.

View change record →

Consumer impact (what this means for users)

Users' personal data is shared with multiple categories of third parties as part of service delivery and business operations. The terms authorize this sharing practice and reference a separate sub-processor list that identifies specific third parties, requiring users to consult that list for details on which entities receive their data.

How other platforms handle this

Tabnine Medium

We use third-party services to help us understand how users interact with our services. These may include analytics providers, advertising networks, and marketing platforms. These third parties may collect information about your online activities over time and across different websites.

Redfin Medium

We may record any telephone calls between you and our agents or other representatives for training and quality assurance purposes.

Grubhub Medium

When you use the Platform, we collect internet usage information about you, such as information about your browsing behavior, search history on the Platform, and information about your interactions with the Platform and our advertisements, including advertisement impressions and whether you clicked ...

See all platforms with this clause type →

Monitoring

Smartsheet has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We share personal data with third parties to help us operate our business and deliver services. These third parties include service providers (such as hosting providers, analytics companies, and marketing platforms), business partners, and other third parties as described in this Privacy Notice and our sub-processor list. We require these third parties to use personal data only as necessary to perform the services they provide to us and in accordance with our instructions.

— Excerpt from Smartsheet's Smartsheet Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union

Provision details

Document information
Document
Smartsheet Privacy Policy
Entity
Smartsheet
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-005134
Document ID
CA-D-00712
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
aa3e2b37314e800adf6f92513bffd0a54c2369282b4a03c0788838ef681cf41e
Analysis generated
May 7, 2026 16:22 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Smartsheet
Document: Smartsheet Privacy Policy
Record ID: CA-P-005134
Captured: 2026-05-07 16:22:45 UTC
SHA-256: aa3e2b37314e800a…
URL: https://conductatlas.com/platform/smartsheet/smartsheet-privacy-policy/third-party-sub-processor-sharing/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Smartsheet's Third-Party Sub-Processor Sharing clause do?

The clause establishes the operational framework for data sharing and identifies the categories of recipients (hosting providers, analytics companies, marketing platforms, business partners) who access user personal data. It also specifies contractual obligations that Smartsheet imposes on recipients regarding data use scope and instructional compliance.

How does this clause affect you?

Users' personal data is shared with multiple categories of third parties as part of service delivery and business operations. The terms authorize this sharing practice and reference a separate sub-processor list that identifies specific third parties, requiring users to consult that list for details on which entities receive their data.

Is ConductAtlas affiliated with Smartsheet?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.