Smart Access Trust Center

Smart Access is the leading platform that enhances productivity on the frontline by bridging the gap between behavior and operational standards. Trusted by organizations across diverse industries, Smart Access helps teams unlock their true potential through actionable insights and operational excellence.

Compliance

SOC 2 Type II

Resources

Transparency

• SOC 2 Type II - Report (current)
• SOC 2 Type II - Letter of Attestation (current)
• Cyber & General Insurance
• Smart Access - Data Processing Agreement

Other resources

• Smart Access - Information Security Policy Packet
• Smart Access - IRP Tabletop Exercise
• Smart Access - Penetration Test Verification Report

Controls

Updated 4 minutes ago

Data and privacy

• Data classification policy established
• Data retention procedures established
• Customer data deleted upon leaving

Product security

• Data encryption utilized
• Control self-assessments conducted
• Penetration testing performed

Infrastructure security

• Unique production database authentication enforced
• Encryption key access restricted
• Unique account authentication enforced

Internal security procedures

• Continuity and Disaster Recovery plans established
• Continuity and Disaster Recovery plans tested
• Cybersecurity insurance maintained

Organizational security

• Asset disposal procedures utilized
• Production inventory maintained
• Portable media encrypted

Data collected

• Employee personally identifiable information
• Mobile app usage data
• Predictive analysis data
• Data exchange with HRIS, WMS, LMS or other systems
• Customer personally identifiable information
• Personal health information

Subprocessors

Google Cloud Platform
Cloud infrastructure and data services
United States (with multi-region support)
Google Cloud Platform is used by Smart Access to host and operate core infrastructure, including compute, storage, networking, and managed services such as databases, event pipelines, and machine learning tools.

Microsoft
Enterprise software, communication and productivity tools
United States & Canada
Microsoft provides a range of services used by Smart Access across productivity, communication, and infrastructure. This includes Office 365 applications and other enterprise tools that support email, file storage, collaboration, identity management, and cloud-based compute and networking.

Google Workspace
Identity provider, communication, collaboration, and productivity
United States & Canada
Google Workspace is used by Smart Access for internal productivity and collaboration through applications such as Gmail, Google Docs, Sheets, Slides, Drive, Calendar, and Meet.

Slack
Team communication and collaboration
United States & Canada
Slack is used by Smart Access for internal team messaging, collaboration, and integration with operational workflows.

Updates

Subprocessor Update: Vitally – Customer Success Platform

Published January 29, 2026

As part of our ongoing efforts to strengthen customer support and improve lifecycle management, Smart Access is updating its list of authorized subprocessors to include Vitally.

Subprocessor Name: Vitally – Customer Success Platform
Purpose: Vitally supports Smart Access’s Customer Success operations by enabling account health monitoring, customer engagement tracking, playbooks/workflows, task management, and customer success reporting.

Processor Role: Vitally acts as a subprocessor under our Information Security program and Data Processing Addendum (DPA).

Data Processed: Vitally may process limited customer contact and account metadata required for Customer Success workflows, including customer names and emails, company/account identifiers, lifecycle stage, renewal-related metadata, and Customer Success activity records (e.g., notes, tasks, playbook execution).

Subprocessor Update: Adobe Inc. – Developer API Platform

Published January 6, 2026

Smart Access is updating its list of authorized subprocessors to include the Adobe Developer Platform & APIs.
Purpose: Adobe’s Developer APIs are going to be introduced into different document pipelines.

Processor Role: Adobe acts as a subprocessor under our Information Security program and Data Processing Addendum (DPA).

Data Processed: Uploaded PDF files used in the SOP import process may contain customer-authored operational content.

Subprocessor Update: Addition of xAI

Published December 5, 2025

As part of this commitment, we are formally announcing the addition of xAI to our list of authorized subprocessors.

Purpose: xAI will provide AI / machine‑learning infrastructure services.

Processor Role: xAI functions strictly as a subprocessor under our Information Security program.