# PlanGrid (Autodesk)

Field documentation platform

Research: https://www.safecli.org/company/autodesk.com
Company: https://autodesk.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-16T03:30:36.892Z
API: API mentioned

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> We have SOC 2, SOC 3 6-month, and SOC 3 12-month attestations for the products below.

Source: https://www.autodesk.com/trust/compliance
Reviewed: 2026-10-16T03:30:36.892Z

> Forma Site Design (formerly Forma) (SOC 2 Type 1)

Source: https://www.autodesk.com/trust/compliance
Reviewed: 2026-10-16T03:30:36.892Z

> ### SOC 2 audited products

Source: https://www.autodesk.com/trust/compliance
Reviewed: 2026-10-16T03:30:36.892Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Mixed claims — review

> It supports single sign-on and enables users to manage their permissions, improving the overall usability and security of the system.

Source: https://aps.autodesk.com/developer/overview/authentication-api
Reviewed: 2026-10-16T03:30:36.892Z

> Single Sign-On (SSO) Configuration

Source: https://help.autodesk.com/cloudhelp/ENU/SG-Enterprise/files/do-sso/SG_Administrator_ar_sso_ar_sso_configuration_html.html
Reviewed: 2026-10-16T03:30:36.892Z

> Our Single sign-on (SSO) implementation is very flexible, as we do not require that the Identity Provider (IdP) server be able to directly communicate with the Flow Production Tracking server or vice versa.

Source: https://help.autodesk.com/cloudhelp/ENU/SG-Enterprise/files/do-sso/SG_Administrator_ar_sso_ar_sso_configuration_html.html
Reviewed: 2026-10-16T03:30:36.892Z

> If you do not see the ’SAML Authentication’ radio button and section, please contact Flow Production Tracking Support so that it can be enabled.

Source: https://help.autodesk.com/cloudhelp/ENU/SG-Enterprise/files/do-sso/SG_Administrator_ar_sso_ar_sso_configuration_html.html
Reviewed: 2026-10-16T03:30:36.892Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Not found


- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> To assist you in complying with your privacy obligations, Autodesk offers a Data Processing Addendum (DPA), which sets forth Autodesk’s obligations where it is a processor for personal data.

Source: https://www.autodesk.com/trust/privacy
Reviewed: 2026-10-16T03:30:36.892Z

> To sign a DPA with Autodesk, simply download the file, sign it, and send it to autodesk.dpa@autodesk.com.

Source: https://www.autodesk.com/trust/privacy
Reviewed: 2026-10-16T03:30:36.892Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Not found


- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: