# Smart Access Trust Center

Smart Access is the leading platform that enhances productivity on the frontline by bridging the gap between behavior and operational standards. Trusted by organizations across diverse industries, Smart Access helps teams unlock their true potential through actionable insights and operational excellence.

## Compliance

SOC 2 Type II

## Resources

### Transparency

- [SOC 2 Type II - Report (current)](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=680a7d74ee13b3a1edc87fa4)
- [SOC 2 Type II - Letter of Attestation (current)](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=680a7bb91504874d2b57f475)
- [Cyber & General Insurance](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=6709ec62c300994215bd396c)
- [Smart Access - Data Processing Agreement](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=672a6a1bb1f2fee342ffd112)

### Other resources

- [Smart Access - Information Security Policy Packet](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=685ae1a37306a3701137b20a)
- [Smart Access - IRP Tabletop Exercise](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=685ae7eeb3981908605d8dc9)
- [Smart Access - Penetration Test Verification Report](https://trust.smartaccess.io/?requestAccessOpen=true&requestedResources=6a3c050808f368a70bef6b97)

## Controls

Updated 4 minutes ago

### Data and privacy

- Data classification policy established
- Data retention procedures established
- Customer data deleted upon leaving

### Product security

- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed

### Infrastructure security

- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced

### Internal security procedures

- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained

### Organizational security

- Asset disposal procedures utilized
- Production inventory maintained
- Portable media encrypted

## Data collected

- Employee personally identifiable information
- Mobile app usage data
- Predictive analysis data
- Data exchange with HRIS, WMS, LMS or other systems
- Customer personally identifiable information
- Personal health information

## Subprocessors

**Google Cloud Platform**  
Cloud infrastructure and data services  
United States (with multi-region support)  
Google Cloud Platform is used by Smart Access to host and operate core infrastructure, including compute, storage, networking, and managed services such as databases, event pipelines, and machine learning tools.

**Microsoft**  
Enterprise software, communication and productivity tools  
United States & Canada  
Microsoft provides a range of services used by Smart Access across productivity, communication, and infrastructure. This includes Office 365 applications and other enterprise tools that support email, file storage, collaboration, identity management, and cloud-based compute and networking.

**Google Workspace**  
Identity provider, communication, collaboration, and productivity  
United States & Canada  
Google Workspace is used by Smart Access for internal productivity and collaboration through applications such as Gmail, Google Docs, Sheets, Slides, Drive, Calendar, and Meet.

**Slack**  
Team communication and collaboration  
United States & Canada  
Slack is used by Smart Access for internal team messaging, collaboration, and integration with operational workflows.

## Updates

### Subprocessor Update: Vitally – Customer Success Platform

Published January 29, 2026

As part of our ongoing efforts to strengthen customer support and improve lifecycle management, Smart Access is updating its list of authorized subprocessors to include **Vitally**.

**Subprocessor Name:** Vitally – Customer Success Platform  
**Purpose:** Vitally supports Smart Access’s Customer Success operations by enabling account health monitoring, customer engagement tracking, playbooks/workflows, task management, and customer success reporting.

**Processor Role:** Vitally acts as a subprocessor under our Information Security program and Data Processing Addendum (DPA).

**Data Processed:** Vitally may process limited customer contact and account metadata required for Customer Success workflows, including customer names and emails, company/account identifiers, lifecycle stage, renewal-related metadata, and Customer Success activity records (e.g., notes, tasks, playbook execution).

### Subprocessor Update: Adobe Inc. – Developer API Platform

Published January 6, 2026

Smart Access is updating its list of authorized subprocessors to include the Adobe Developer Platform & APIs.  
**Purpose:** Adobe’s Developer APIs are going to be introduced into different document pipelines.

**Processor Role:** Adobe acts as a subprocessor under our Information Security program and Data Processing Addendum (DPA).

**Data Processed:** Uploaded PDF files used in the SOP import process may contain customer-authored operational content.

### Subprocessor Update: Addition of xAI

Published December 5, 2025

As part of this commitment, we are formally announcing the addition of **xAI** to our list of authorized subprocessors.

**Purpose:** xAI will provide AI / machine‑learning infrastructure services.

**Processor Role:** xAI functions strictly as a subprocessor under our Information Security program.