Prevent files with Social Security Numbers from being shared?

NeilKY

Is there no built-in way to prevent Smartsheet from allowing users from sharing data outside of Smartsheet automatically, if the data includes a Social Security number? (Enterprise Version)

The only information I've found about this topic is

https://www.smartsheet.com/content-center/product-news/product-releases/new-security-governance-and-compliance-announcements?srsltid=AfmBOooUtdF0lO3miOJACNO9wtM9iATakREu8J2UBoMtg1RVG8ygXZ18

Screen Shot of the paragraph:

So they imply we must find our own solution. Is that correct? We are part of a Government Organization (But not Gov Smartsheet) with thousands of users.

We want to block Social Security Numbers, NAMES, phone numbers, Sexual Orientation, and Race information.

Can anyone please suggest an elegant and automatic solution? Thank you :)

-Neil

Christina09

The only way I could think of is using Dynamic View. This premium app that allows the editor/ viewer to see data that are design for them to view and does not need to share the underlying sheet.

NeilKY

https://community.smartsheet.com/discussion/comment/463744#Comment_463744

I see what you're saying but I'm talking about something automatic that warns the user that they cannot share a sheet or report etc because it contains sensitive data. I'm so surprised nothing like this exists.

Darren Mullen

@NeilKY I'm guessing because Smartsheet wasn't originally intended to be a repository for sensitive information that hasn't been added in. But, it would be nice to have this since Smartsheet has morphed into many uses outside of project plans :)

The manual way would be to have a workspace with super controlled access…. but that may or may not be realistic depending on the architecture.

Since you are on Enterprise, do you have Bridge? I'm just thinking if when you create a sheet that has sensitive data in it…. you could probably use Bridge to remove users shared outside of a specific list of users, but I'd have to think about how quickly the automation would respond. Meaning, it's possible there would be a small window of time where if an unauthorized user were shared, then they could gain access for a short time.