Smartsheet completes IRAP assessment at OFFICIAL: Sensitive level

Smartsheet has completed an Information Security Registered Assessors Program (IRAP) assessment at the OFFICIAL: Sensitive classification level, giving Australian government agencies and regulated organisations documented validation to use the platform for sensitive workloads.

The assessment, conducted by Australian cybersecurity firm Sekuro, evaluated Smartsheet against the requirements of the Australian Government Information Security Manual (ISM).

The company said the result means government agencies and regulated organisations can use Smartsheet - including its AI capabilities - to manage work without compromising control over their data.

Smartsheet said the IRAP assessment also supports organisations adopting AI agents to work alongside staff, where a governance foundation becomes more critical.

"For Australian government agencies and highly regulated organisations, adopting new technology starts with proving it can be trusted with sensitive data," said Jarrod Kinchington, vice president and general manager, APAC at Smartsheet.

"IRAP gives them that proof, backed by an independent assessment. It also points to something bigger: we built our platform to be trustworthy from the ground up, so government agencies and enterprises can run their most critical work on Smartsheet, and scale AI, without compromising security or control."

The assessment follows Smartsheet's launch last year of Smartsheet Regions Australia, a data residency option hosted in Sydney with backup infrastructure in Melbourne. The offering allows customers to keep their data within Australia, supporting compliance with the Australian Privacy Act.

The company holds a range of globally recognised certifications including SOC 2 Type II, ISO 27001, ISO/IEC 27701, ISO 27017 and ISO 22301. Smartsheet recently achieved ISO 42001 certification - the first international standard for AI management systems.