Security

Secure management of your Smartsheet Governace data

Smart Admin Studio reads account and object metadata through the Smartsheet Admin API — never the data inside your cells. Industry standard security for every customer, and Dedicated offers more for the highest data privacy requirements.

Every tier, every customer

Metadata-only sync

Never copies, captures, or saves the underlying data inside your sheets — only structural and activity metadata.

Encryption

Smartsheet credentials are securely encrypted. All communication with the Smartsheet API and your browser is encrypted in transit.

Per-customer data isolation

Your smartsheet data is never co-located or aggregated with another customer's.

Authenticated, role-based access

Admin access requires authentication, with permissions scoped to the logged-in user's role — Admin or Viewer.

Access, on your terms

You control who gets in, and what they can see.

Role-based access

Admin and Viewer roles — Share access safely with your team
Invite & revoke viewers — Admins manage team roster and invites

Self-service key management

Add, rotate, or revoke — your Smartsheet Admin API key stays under your control, always.
No standing dependency — revoke the key and the scan stops.

Dedicated tier

For maximum security, scale, and control.

The baseline above holds for every customer. Dedicated goes further for buyers who need their own compliance boundary — Fortune 1000, or regulated mid-market: healthcare, financial services, insurance, government, life sciences.

Dedicated tier

Your own cloud environment. Your compliance boundary.

For Dedicated customers, Smart Admin Studio deploys directly into your own cloud environment — not a shared instance, not a logical partition inside ours. Your infrastructure, your controls, your audit trail.

Deployed in your cloud

Runs inside your own cloud tenant — never our shared infrastructure.

Fully isolated

Single-tenant by construction — there's no other customer's data to be co-located with.

A real point of contact

Sales-assisted onboarding, scoped to your environment and compliance requirements.

For maximum security, scale, and control, ask about our Dedicated tier.

Questions

Security FAQ

Do you ever see our actual sheet data?

No. Smart Admin Studio is metadata-only — it never copies, captures, or saves the underlying data inside your sheets. Cell contents are never read.

What certifications do you hold?

We don't publish a compliance certification today. If a certification is a requirement for your evaluation, ask about our Dedicated tier — our team can walk through your specific compliance questionnaire directly.

What if we need more security or scale than the standard tiers?

That's what Dedicated is for: a fully isolated, single-tenant deployment inside your own cloud environment, with unlimited sheets and a real point of contact.

Who can access our environment?

Only authenticated users you've invited, scoped by role — Admin or Viewer. You control your own Smartsheet Admin API key and can rotate or revoke it at any time.