Smartsheet Completes IRAP Assessment at the OFFICIAL: Sensitive Level

Independent assessment validates the Smartsheet security and governance model, giving Australian government agencies and regulated organisations the confidence to run mission-critical work on the platform

BELLEVUE, Wash. & SYDNEY--(BUSINESS WIRE)--Smartsheet, the AI-powered enterprise work management platform, today announced it has completed an Information Security Registered Assessors Program (IRAP) assessment at the OFFICIAL: Sensitive classification level. The assessment confirms Smartsheet meets the Australian government’s security and governance standards for handling sensitive data. For Australian government agencies and regulated organisations, that means they can connect their work across systems and use AI to manage work in Smartsheet without compromising control over their data. As organisations increasingly rely on AI agents to get work done alongside people, having a strong governance foundation becomes even more important.

Conducted by the Australian cybersecurity firm Sekuro, the assessment evaluated Smartsheet against the requirements of the Australian Government Information Security Manual (ISM). With this independent, third-party review, Australian government agencies and organisations in regulated industries have documented validation that they can trust Smartsheet to securely manage their most important work while meeting stringent regulatory requirements. The assessment can also help streamline procurement, risk assessment and vendor review processes, reducing barriers to adoption and helping organisations see value from Smartsheet faster.

"For Australian government agencies and highly regulated organisations, adopting new technology starts with proving it can be trusted with sensitive data," said Jarrod Kinchington, Vice President and General Manager, APAC at Smartsheet. "IRAP gives them that proof, backed by an independent assessment. It also points to something bigger: we built our platform to be trustworthy from the ground up, so government agencies and enterprises can run their most critical work on Smartsheet, and scale AI, without compromising security or control."

The IRAP assessment builds on the company’s commitment to meeting the evolving trust, governance and compliance requirements of Australian government agencies and regulated organisations. Last year, the company launched Smartsheet Regions Australia, a data residency option hosted in Sydney with backup infrastructure in Melbourne. The offering allows customers to keep their data within Australia, giving them greater control over where their data is hosted and supporting their compliance with local privacy requirements, including the Australian Privacy Act.

These investments are underpinned by the platform's foundation of enterprise-grade security, privacy and governance capabilities, including a least-privilege permission model and robust encryption in transit and at rest. Smartsheet has also received globally recognised certifications such as SOC 2 Type II, ISO 27001, ISO/IEC 27701, ISO 27017 and ISO 22301. The company recently achieved ISO 42001 certification, the world's first international standard for AI management systems, validating that the company runs a rigorous system for managing AI.

“Independent validations such as IRAP give government agencies and regulated organisations greater confidence in a platform's ability to meet security and compliance requirements," said Linus Lai, Group Vice President and Chief Analyst, ANZ, IDC. "When combined with data residency and enterprise-grade governance, they can help reduce adoption barriers and support faster digital transformation."

For more information on Smartsheet security, privacy and compliance, visit the Smartsheet Trust Center.

About Smartsheet

Smartsheet is an AI-powered enterprise work management platform. Teams use it to plan programs, track work across groups, automate routine processes and give leaders real-time visibility into how work is progressing. It sits between spreadsheets, which are flexible but hard to govern, and rigid project tools built for a single team. Smartsheet is used by millions of people at organisations, including the majority of the Fortune 500, with enterprise-grade security, administration and compliance controls. To learn more about Smartsheet, visit www.smartsheet.com.