SmartSuite holds ISO/IEC 27001:2022 certification and a SOC 2 Type II attestation report, issued by an independent CPA firm under the AICPA's SOC 2 framework. SmartSuite undergoes an annual SOC 2 Type 2 audit; the certificate and the reports are in the Trust Center and available from your account manager or the sales team.
Plan Availability | All plan types. |
Permissions | Applies to every workspace and member. Administrators request the reports. |
Platform | Web |
Related Reading |
What is ISO/IEC 27001?
ISO/IEC 27001:2022 is the international standard from ISO and IEC for information security management systems (ISMS). SmartSuite's certification recognizes the strength of our information security management system. The pricing page adds that the certification was issued by an accredited certification body.
What does it mean for customers?
The certificate, listed as SmartSuite Holdings Inc. - ISO_IEC 27001 2022 Official Certificate, is in the Trust Center. A security questionnaire that asks for ISO/IEC 27001 can cite it; for more information, contact your account manager or the sales team.
What is SOC 2?
SOC 2 is the AICPA's framework for reporting on an organization's controls for security, availability and confidentiality. SmartSuite also holds a SOC 2 Type II attestation report, issued by an independent CPA firm under the AICPA's SOC 2 framework. SmartSuite undergoes an annual SOC 2 Type 2 audit.
Which documents are in the Trust Center?
Document, as the Trust Center names it | Standard |
SOC 2 Type 1 | SOC 2 |
SmartSuite SOC-2 Type 2 Report 2025 | SOC 2 |
SmartSuite SOC 2 - 2026 | SOC 2 |
Letter_of_Attestation_GDPR + SOC 2 | SOC 2 and GDPR |
SmartSuite Holdings Inc. - ISO_IEC 27001 2022 Official Certificate | ISO/IEC 27001:2022 |
The HIPAA, GDPR and PCI DSS statements are in SmartSuite Security Practices.
Frequently asked questions
The first question came from a conversation this month.
How do I get the SOC 2 report for a security review?
Contact your account manager or the sales team to request SmartSuite's latest report; the Terms of Use state that SmartSuite can provide its SOC 2 report under confidentiality upon request. The Trust Center lists the current documents behind a Get Access request.
Is the SOC 2 audit repeated?
Yes. SmartSuite undergoes an annual SOC 2 Type 2 audit.
Does SmartSuite hold a Type 1 or a Type 2 report?
Both are listed in the Trust Center: a SOC 2 Type 1 report, the SOC-2 Type 2 Report 2025 and the SOC 2 - 2026 report. The security page describes the current attestation as SOC 2 Type II.
Where do I find the ISO certificate?
In the Trust Center at trust.smartsuite.com, and from your account manager or the sales team.
Last verified 22 Oct 2026 against www.smartsuite.com/security (ISO/IEC 27001:2022 and SOC 2 Type II statements; read 22 Oct 2026), trust.smartsuite.com (document names), the pricing page and the Terms of Use