Security

Security first. Hosted on Microsoft Azure.

ProjectSmith is project management for MSPs on Datto Autotask, and your clients trust you with their businesses. We built it the way you’d build your own stack: on Azure, behind Microsoft sign-in, with your workspace walled off from everyone else’s.

Six promises

  • Hosted on Microsoft Azure

    The same cloud you run for your clients. Encrypted, backed up automatically, and never shared with another customer’s workspace.

  • Sign in with Microsoft

    Your team signs in with the work accounts they already have. Your MFA and Conditional Access rules apply, and when someone leaves your Entra tenant, they leave ProjectSmith too.

  • Your data stays yours

    Every MSP gets its own walled-off workspace. Nobody outside it can see in, and our own staff can only look with a logged reason.

  • Encrypted, end to end

    In transit and at rest. Your Autotask credentials are locked in Azure Key Vault and never written to disk in the clear.

  • Every change on the record

    Who changed what, and when, for every edit anyone makes. Ask us for the record any time.

  • Autotask on your terms

    You create the API user and can revoke it in a click. Writes stay inside the projects you choose, and ProjectSmith can never delete a project, a time entry or a ticket.

Microsoft native

Built for the Microsoft world you already run

Your team lives in Microsoft 365 and Entra all day, and so does ProjectSmith. Connect your Entra tenant once and your sign-in rules are our sign-in rules. One identity. One set of policies. Nothing new to manage.

And because Autotask stays the system of record, there’s nothing to migrate in and nothing to unpick on the way out. Export your workspace whenever you like. Your Autotask data never left Autotask.

Running a vendor review?

Security questionnaires, our data processing addendum and the full sub-processor list: email support@getprojectsmith.com and we answer in writing. The technical detail is in thehelp centre.

Common questions

Will you complete our security questionnaire?

Yes. Send it to support@getprojectsmith.com with “Security” in the subject line and we answer it in writing.

Can ProjectSmith staff see our data?

Not without leaving a trace. Any look at a workspace by our staff is written to the audit log with its purpose, and you can ask us for that record at any time.

Can we sign in with our Microsoft accounts?

Yes. Each customer can connect its own Microsoft Entra tenant, so your people use Sign in with Microsoft with their work accounts, and your Conditional Access and offboarding apply. People can also sign in with an emailed one-time code plus multi-factor authentication, unless your workspace requires Microsoft sign-in.

Where is our data hosted?

On Microsoft Azure, in Australia, with encrypted backups. United Kingdom and United States regions are planned.

What happens to our data if we leave?

Your workspace Owner exports it from the app and requests deletion there. It is permanently deleted 30 days later. Your Autotask data is untouched, because it never left Autotask.

See it on your own Autotask data

Connect Autotask, keep writes fenced to a test project, and judge ProjectSmith on your real projects and people.