Welcome to the Smartsheet Forum Archives

The posts in this forum are no longer monitored for accuracy and their content may no longer be current. If there's a discussion here that interests you and you'd like to find (or create) a more current version, please Visit the Current Forums.

Safe Harbor R.I.P.



my company is located in Germany and uses a variety of smartsheets, which sometimes contain personal data (names and addresses etc.).

The Safe Harbor framework has been a fundamental precondition for the transfer of personal data to the U.S. and it formed part of Smartsheets privacy policy. 


Seen from EU, the United States are now unsafe regarding privacy and data protection. My company now has no legal basis allowing transfer / handling of personal data with Smartsheet.



We can now either eliminate any personal data in our smartsheets (don't want that),

or have a so called EU standard contractul clauses agreement signed (yes please!) 


Unlike other U.S. based providers of cloudbased software, we did not get any information from Smartsheet.

Any other EU customers having this issue?



  • Ken Asher



    Smartsheet's security and compliance practices have been built in alignment with US and EU law and have not changed as a result of the recent ruling on Safe Harbor.  US-based providers such as Smartsheet are anticipating that clarification regarding the process of transferring data from the EU to the US will be forthcoming. Smartsheet will continue to monitor this issue.


    I have reached out to our security and legal team and they have informed me that we are currently evaluating how best to serve our customers in the EU related to the Safe Harbor decision.  Please rest assured that we are working on it and will come back to you once we have decided on a solution. 






    Smartsheet Security Specialist

  • Stefan, I came across your post whilst researching this issue.  We are in the same position and I have been advised by Smartsheet that they will not sign any agreements or 'Model contracts'  as we know them.  I have been advised that they are waiting for the rollout of Privacy Shield which is not due to be released until June. As part of the process a member state, the Council or the European Parliament could seek to refer the draft Privacy Shield to the CJEU or ask the Commission to maintain, amend or withdraw the draft decision which means delaying the release or abandoning it altogether.  


    We have no option but to close down all sheets that have personal data in them.  Very dissapointed with Smartsheet.


    Have they responded to you since October?




  • Aki
    edited 11/10/16



    Can someone from Smartsheet please explain why you still havent signed up to the new Privacy Shield framework and why you still tout Safe Harbor on the privacy page when it is no longer valid?



  • Gwyneth C
    Gwyneth C ✭✭✭✭✭✭

    Hi Aki,


    Looks like you also posted this question in a related thread. Linking to that from here

    https://community.smartsheet.com/discussion/privacy-shield so that others can see the response.




  • Chris Magill

    Great news! Smartsheet's EU Privacy Shield application has been approved and Smartsheet is now officially Privacy Shield certified! Our certification can be viewed on the Privacy Shield web site here: https://www.privacyshield.gov/participant?id=a2zt0000000CbpFAAS&status=Active

    You'll also find the changes reflected in Smartsheet's Privacy Policy at Smartsheet.com/Privacy

This discussion has been closed.