Source
Trust center — Smartsheet
Checked for Smartsheet on 15 Sep 2026
- Page
- https://www.smartsheet.com/trust
- Checked
- 15 Sep 2026, 15:40 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:702e5d514b42eed2046f4209befa155873b2c30160c04211230b97b583364580
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Frameworks Report an error
“Smartsheet adheres to leading security and compliance frameworks, including SOC 2, ISO 27001, ISO 27701, and FedRAMP. We are also actively pursuing ISO 42001 certification for AI management.”
-
Phi baa Report an error
“Enterprise Plan customers in healthcare can use Smartsheet to receive, maintain, or transmit certain types of Protected Health Information (PHI) after executing a Business Associate Agreement (BAA) with Smartsheet.”
-
Default region Report an error
“By default, customers are hosted in AWS East, with regional options available via Smartsheet Regions.”
-
Regions Report an error
“Smartsheet Commercial environment: AWS East regions (Virginia/Ohio)”
-
SLA uptime Report an error
“Smartsheet provides a 99.9% Availability SLA.”
-
Availability zones Report an error
“Smartsheet's Business Continuity/Disaster Recovery implementation maintains current data through the use of three availability zones”
-
Encryption Report an error
“All data is encrypted in transit using TLS 1.2/1.3 encryption and at rest using AES-256 bit encryption.”
-
Cmek Report an error
“Smartsheet also offers Customer Managed Encryption Keys (CMEK), as a premium capability for organizations that require direct control over their encryption keys.”
-
Access roles Report an error
“Viewer, Commenter, Editor, Admin, or Owner”
-
SSO Report an error
“Smartsheet supports SSO via Google, Microsoft, Apple, and SAML 2.0 — compatible with major identity providers including Okta, Microsoft Entra ID, and PingIdentity.”
-
MFA Report an error
“For non-SSO users, we offer authenticator-app-based MFA, which Enterprise admins can require at the plan or domain level.”
-
Logging Report an error
“Smartsheet provides exportable logs covering user login history, sheet access, and asset-level activity, with cell-level history available within each asset.”
-
Event reporting Report an error
“Event Reporting as an advanced capability, providing visibility into over 100 types of security and user activity events”
-
AI training Report an error
“Smartsheet does not use customer data to train AI models.”
-
Fortune 500 Report an error
“85% of Fortune 500 companies trust Smartsheet”
2 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Bootstrapper Collaboration depth
- The Bootstrapper Reporting
- The Bootstrapper Integrations
- The Bootstrapper European sovereignty
- The Bootstrapper Support & documentation
- The Bootstrapper Collaboration depth
- The Bootstrapper Reporting
- The Bootstrapper European sovereignty
- The Data Protection Officer Collaboration depth
- The Data Protection Officer Reporting
- The Data Protection Officer Integrations
- The Data Protection Officer European sovereignty
- The Data Protection Officer Support & documentation
- The Data Protection Officer Collaboration depth
- The Data Protection Officer Integrations
- The Data Protection Officer European sovereignty
- The Enterprise Architect Pricing transparency
- The Enterprise Architect Collaboration depth
- The Enterprise Architect Reporting
- The Enterprise Architect Integrations
- The Enterprise Architect European sovereignty
- The Enterprise Architect Support & documentation
- The Enterprise Architect Collaboration depth
- The Enterprise Architect Reporting
- The Enterprise Architect Integrations
- The Enterprise Architect European sovereignty
- The Integrator Collaboration depth
- The Integrator Reporting
- The Integrator Integrations
- The Integrator European sovereignty
- The Integrator Support & documentation
- The Integrator Collaboration depth
- The Integrator Reporting
- The Integrator European sovereignty
- The Integrator Support & documentation
- The Skeptic Collaboration depth
- The Skeptic Reporting
- The Skeptic Integrations
- The Skeptic European sovereignty
- The Skeptic Support & documentation
- The Skeptic Collaboration depth
- The Skeptic European sovereignty
- The UX Purist Collaboration depth
- The UX Purist Reporting
- The UX Purist Integrations
- The UX Purist European sovereignty
- The UX Purist Support & documentation
- The UX Purist Collaboration depth
- The UX Purist Reporting
- The UX Purist European sovereignty