Sub-processors are the third-party service providers that process customer data on SmartSuite's behalf to deliver the SmartSuite service. This article mirrors the website's Subprocessors page (Last Updated: October 24, 2026), which is the source of truth for the list.
The Data Processing Addendum (Annex 3) names the website page as the list of record and this article as its copy. Vendors are listed by legal entity name, with the trade name in brackets where it differs.
Example: a compliance team adds SmartSuite to its own vendor inventory. Its third-party risk analyst copies these sub-processors into the vendor record as fourth parties and subscribes to change notices.
Plan Availability | All plan types. |
Permissions | Anyone can read this list. Administrators use it for compliance reviews. |
Platform | Web |
Related Reading |
Where is customer data hosted and how are transfers covered?
SmartSuite Holdings, Inc. uses the sub-processors below to deliver the SmartSuite service. SmartSuite offers two hosting regions, the United States and Ireland (EU). The customer selects the region, and the core infrastructure sub-processors process and store customer data in that region.
Transfers of personal data outside the EEA and the UK are covered by the EU Standard Contractual Clauses, with the UK Addendum for UK customers.
Which sub-processors run the core infrastructure?
The core infrastructure sub-processors run in the hosting region the customer selects.
Sub Processor. | Activities. | Location(s). |
Amazon Web Services, Inc. | Cloud infrastructure and hosting of customer data. | United States or Ireland (EU), per the customer's hosting region. |
MongoDB, Inc. (Atlas). | Managed database services storing customer data. | United States or Ireland (EU), per the customer's hosting region. |
Filestack, Inc. | Storage and delivery of uploaded files. | United States or Ireland (EU), per the customer's hosting region. |
Which other sub-processors does SmartSuite use?
The other sub-processors receive limited data for the stated purpose only.
Sub Processor. | Activities. | Location(s). |
Intercom, Inc. | Support messaging and ticketing; user contact data and support correspondence only. | United States. |
Chargebee Inc. | Subscription billing administration; billing contacts only. | United States. |
Stripe, LLC. | Payment processing; billing contacts only. | United States. |
Atlassian US, Inc. | System status notifications; user contact data only. | United States. |
Google LLC. | Map rendering for address fields. | United States. |
OneSchema, Inc. | File import and data mapping, only when a customer runs an import. | United States. |
Forge Technology, Inc. (Paragon). | Integration services, only when a customer enables a connector. | United States. |
OpenAI, LLC. | AI features, only when a customer turns them on; content sent for the request only; not used to train models. | United States. |
How are sub-processors vetted?
Before engaging a sub-processor, SmartSuite performs security and legal due diligence. Each sub-processor is bound by contract terms that enforce applicable data protection law.
When was this list last updated?
The list was last updated on October 24, 2026. SmartSuite gives at least 30 days' advance notice of a new sub-processor by updating the Subprocessors page and by email to the customer's notice contact. Customers may object as their Data Processing Addendum provides.
The October 24, 2026 revision moved every entry to its legal entity name and narrowed each purpose statement. It removed two tools that SmartSuite uses for its own calls rather than to process customer data. No sub-processor was added.
Tip: To be notified by email when this list changes, subscribe on the sub-processor page at www.smartsuite.com/legal/subprocessors.
Frequently asked questions
Where is my workspace's data hosted?
Where is my workspace's data hosted?
In the United States or in Ireland (EU), per the hosting region the customer selects. To confirm the region of a specific workspace, ask Support through the in-app chat with the workspace ID.
Can we move an existing workspace from the US to the EU?
Can we move an existing workspace from the US to the EU?
Enterprise and Signature customers can move an existing workspace from the US to the EU, as the pricing page states.
Who processes our payments?
Who processes our payments?
Chargebee Inc. (subscription billing administration; billing contacts only) and Stripe, LLC (payment processing; billing contacts only), both located in the United States.
Which sub-processor provides the AI features?
Which sub-processor provides the AI features?
OpenAI, LLC, located in the United States, and only when a customer turns the AI features on. Content is sent for the request only and is not used to train models.
How will we hear about a new sub-processor?
How will we hear about a new sub-processor?
SmartSuite gives at least 30 days' advance notice by updating the Subprocessors page and by email to the customer's notice contact. Customers may object as their Data Processing Addendum provides.
Last verified 1 Nov 2026.