# project44 Autonomous ocean exceptions agent Research: https://www.safecli.org/company/project44.com Company: https://project44.com ## Evidence status Procurement review needed Source review: 2026-10-31T13:59:04.202Z API: API mentioned Company-published claims, not independently verified controls. Unknown is not evidence of absence. ## Procurement checks ### Security assurance — Mixed claims — review > SOC 2 Type II Source: https://trust.project44.com/ Reviewed: 2026-10-31T13:59:04.202Z > Certifications: SOC 2 Type 2, ISO 27001, TISAX Source: https://trust.project44.com/ Reviewed: 2026-10-31T13:59:04.202Z > ### ISO 27001 (Information Security Management) Source: https://www.project44.com/security/ Reviewed: 2026-10-31T13:59:04.202Z > This year, project44 was evaluated against the newest 2022 standards for SOC 2 compliance, further underscoring our dedication to excellence in information security. Source: https://www.project44.com/blog/information-security-milestones-project44-renews-certifications-under-newer-standards/ Reviewed: 2026-10-31T13:59:04.202Z - [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### SSO & provisioning — Mixed claims — review > As a customer of project44, you have the option to configure Single Sign On (SSO) to access project44's products. Source: https://support.project44.com/hc/en-us/articles/14099448626205-Set-Up-SSO-with-project44 Reviewed: 2026-10-31T13:59:04.202Z > ## SSO Configuration Using SAML Protocol Source: https://support.project44.com/hc/en-us/articles/14099448626205-Set-Up-SSO-with-project44 Reviewed: 2026-10-31T13:59:04.202Z > - Which protocol do you want to use: OpenID Connect (OIDC) or Security Assertion Markup Language (SAML, specifically SAML 2.0)? Source: https://support.project44.com/hc/en-us/articles/14099448626205-Set-Up-SSO-with-project44 Reviewed: 2026-10-31T13:59:04.202Z - [ ] Test SSO enforcement, user removal and privileged-account recovery. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### Access controls — Not found - [ ] Test least-privilege roles and cross-tenant access with separate test accounts. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### Auditability — Not found - [ ] Verify administrative and data-access events, retention and export. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### Data handling — Mixed claims — review > #### Subprocessors, where to find the current lists Source: https://trust.project44.com/ Reviewed: 2026-10-31T13:59:04.202Z > ### DATA PROCESSING AGREEMENT Source: https://nmc-eu12.voc.project44.com/resources/Documents/Portal_DataProcessingAgreement_Carriers_version_18.4_FINAL.pdf Reviewed: 2026-10-31T13:59:04.202Z > Capitalized terms not otherwise defined in this Data Processing Agreement (“DPA”) shall have the meanings set forth in the Services Agreement or if not defined in neither this DPA, nor the Services Agreement (jointly the “Agreement”), capitalized terms shall have the meaning set forth in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”). Source: https://nmc-eu12.voc.project44.com/resources/Documents/Portal_DataProcessingAgreement_Carriers_version_18.4_FINAL.pdf Reviewed: 2026-10-31T13:59:04.202Z > The Processor and the Controller agrees to apply the transfer mechanisms listed below, which shall apply in the order of precedence as set out below to any transfers of Personal Data under this DPA from the European Union, the European Economic Area and/or their member states and Switzerland to countries which do not ensure an adequate level of data protection within the meaning of the GDPR of the foregoing territories, to the extent such transfers are subject to such GDPR and the mechanism is available. Source: https://nmc-eu12.voc.project44.com/resources/Documents/Portal_DataProcessingAgreement_Carriers_version_18.4_FINAL.pdf Reviewed: 2026-10-31T13:59:04.202Z - [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### Reliability & support — Mixed claims — review > project44 is the only TMS provider that offers a contractual 95% data quality SLA within 60 days of go-live. Source: https://www.project44.com/platform/tms/ Reviewed: 2026-10-31T13:59:04.202Z > Continuity and Disaster Recovery Source: https://trust.project44.com/ Reviewed: 2026-10-31T13:59:04.202Z > ### Why is project44 the only TMS offering a contractual 95% data quality SLA? Source: https://www.project44.com/platform/tms/ Reviewed: 2026-10-31T13:59:04.202Z - [ ] Request SLA, incident history, recovery targets and support escalation terms. - [ ] Record reviewer, test date, scope, result and supporting artifact. ### Product effectiveness — Company-published > - > At ASICS, we value project44 for its comprehensive ocean analytics and the accuracy of the data it provides, which is critical for our decision-making processes. Source: https://project44.com/ Reviewed: 2026-10-31T13:59:04.202Z > Benchmarks rates continuously, recommends mini-bids when lanes decay, and runs award logic so your procurement team stops reacting and starts optimizing. Source: https://www.project44.com/platform/tms/ Reviewed: 2026-10-31T13:59:04.202Z - [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost. - [ ] Record reviewer, test date, scope, result and supporting artifact. ## Decision - Owner: - Intended use and data sensitivity: - Blocking requirements: - Pilot success criteria: - Unresolved risks: - Decision and review date: