SmartSuite complies with GDPR, signs a Data Processing Agreement with standard contractual clauses on request, and hosts workspace data in AWS Ohio (US-East-2) or AWS Ireland (EU-West-1). European data residency is an Enterprise and Signature feature.
Plan Availability | All plan types for GDPR compliance. European data residency (AWS Ireland): Enterprise and Signature. |
Permissions | Administrators request the DPA and the region confirmation; every member's data is covered. |
Platform | Web |
Related Reading |
How does SmartSuite approach GDPR?
At SmartSuite, the security and privacy of customer data come first. Complying with Europe’s General Data Protection Regulation (GDPR) is a responsibility we take seriously, and we are always ready to help our customers meet these standards.
For further details on our customer data security and privacy practices, please refer to our Global Privacy Policy.
What is GDPR?
The General Data Protection Regulation (GDPR) is a data protection law that was implemented in the European Union (EU) in May 2018. It replaced the previous Data Protection Directive, introducing stronger data protection regulations and expanding rights for individuals.
Key GDPR aspects
Enhances privacy and protection of personal data for EU residents.
Applies to organizations worldwide that process data of individuals located in the EU.
Regulates businesses, government agencies, and nonprofits that handle personal data of EU residents.
How do I get a Data Processing Agreement?
SmartSuite offers Data Processing Agreements (DPAs) upon request. These agreements incorporate standard contractual clauses ("Model Clauses"), facilitating GDPR-compliant data transfers.
To request a DPA, please contact our sales team.
Note:
The DPA is tailored to SmartSuite’s service offerings.
Modifications to the DPA language are limited to qualified Enterprise accounts.
Where is my data hosted?
SmartSuite servers are located in the following regions:
United States. AWS (Amazon Web Services) in the Ohio region (US-East-2).
European Union. AWS (Amazon Web Services) in Ireland (EU-West-1).
For a deeper understanding of how SmartSuite manages customer data and privacy, refer to our Global Privacy Policy.
Who do I ask?
If you have further questions regarding GDPR compliance, please reach out to our sales team.
Frequently asked questions
Where is my workspace's data stored, the US or the EU?
In AWS Ohio (US-East-2) or AWS Ireland (EU-West-1). To confirm which region holds a specific workspace, email support@smartsuite.com with the workspace name or ID; support can also tell you whether a region change is possible for your plan.
Which plans include European data residency?
Enterprise and Signature.
How do I get a DPA?
Contact the sales team. The DPA includes the standard contractual clauses; changes to its wording are available to qualified Enterprise accounts.
Does SmartSuite support HIPAA?
Yes. SmartSuite can sign a Business Associate Agreement for customers on Enterprise and Signature plans.
What security attestations does SmartSuite hold?
A SOC 2 Type II report and ISO/IEC 27001:2022 certification. The Trust Center at smartsuite.com has the current documents.
Last verified 21 Oct 2026 against the pricing page (European Data Residency, HIPAA BAA, SOC 2 Type II, ISO/IEC 27001:2022 lines) and this article as Product wrote it (regions, DPA terms)