Companies / SmartSuite / Subprocessors
SmartSuite provides a work management platform for modeling data, orchestrating workflows, embedding AI, and connecting teams. It serves teams across GRC, IT service delivery, project and portfolio management, and business operations.
Summarized from its homepage on 6 Nov 2026.
200 Spectrum Center Drive, Irvine, CA, 92618, US
Subprocessors of SmartSuite
SmartSuite declares 11 subprocessors, including AI providers OpenAI.
| Subprocessor | Purpose |
|---|---|
| Cloud infrastructure and hosting of customer data | |
| System status notifications; user contact data only | |
| Subscription billing administration; billing contacts only | |
| Storage and delivery of uploaded files | |
| Map rendering for address fields | |
| Support messaging and ticketing; user contact data and support correspondence only | |
| Managed database services storing customer data | |
| File import and data mapping, only when a customer runs an import | |
| AI features, only when a customer turns them on; content sent for the request only; not used to train models | |
| Integration services, only when a customer enables a connector |
1 more subprocessor
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about SmartSuite
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “Built for regulated environments with SOC 2 Type II, ISO 27001, GDPR , and HIPAA alignment to support security, privacy, and compliance requirements.”The company's own statement of compliance. There is no official HIPAA certification or registry. | 12 Nov 2026Source |
| ISO 27001Company's statement | “Built for regulated environments with SOC 2 Type II, ISO 27001, GDPR , and HIPAA alignment to support security, privacy, and compliance requirements.”The company's own statement. We have not checked an accreditation registry. | 12 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Built for regulated environments with SOC 2 Type II, ISO 27001, GDPR , and HIPAA alignment to support security, privacy, and compliance requirements.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 12 Nov 2026Source |
We last read its homepage on 12 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean SmartSuite lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See SmartSuite's full stack
Every vendor with its source and date, and an alert when SmartSuite adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call