Trimble Prolog

Project management software

trimble.com

Enterprise evidence

Insufficient enterprise evidence

Public information covers security assurance, sso & provisioning. Still unresolved: access controls, auditability, data handling.

9 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-16

2 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceCompany-published
- SOC 2 Type 1Reviewed 2026-10-16View source
- SOC 2 Type 2Reviewed 2026-10-16View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningCompany-published
In a nutshell, Trimble ID provides single sign-on capability and handles the responsibility of authenticating the identity of the users across multiple applications, products, and APIs.Reviewed 2026-10-16View source
| SAML 2.0 | Security Assertion Markup Language (SAML) is an XML-based protocol, that provides both authentication and authorization between trusted parties.Reviewed 2026-10-16View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityNot found

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingMixed claims — review
- Data Residency & Privacy: You must comply with all regional data protection laws (GDPR, CCPA, etc.).Reviewed 2026-10-16View source
DATA PROCESSING AGREEMENT This Data Processing Agreement (“DPA”) is the parties’ agreement with regard to the Processing of Personal Data and supplements all License, Subscription, Services or other written or electronic agreements (the “Agreements”) between Trimble and Customer for the purchase of services (including Software as a Service, their associated Trimble offline or mobile applications, and support, and defined as “Services” or otherwise in the Agreement or hereinafter) in the course of which Trimble receives personal data from Customer.Reviewed 2026-10-16View source
- If the Customer entity signing this DPA has submitted an order that has been accepted by Trimble or any of its Affiliates, but is not itself a party to the Agreement, this DPA is an addendum to that order (including any renewal order) and the Trimble entity on which such order has been placed is party to this DPA.Reviewed 2026-10-16View source
- If the Customer entity signing the DPA has purchased Trimble services via an authorized reseller of Trimble, Customer has to indicate so on page 6 and provide a Trimble or Reseller issued customer number, or, in lack thereof, confirmation from the reseller that Customer is subscribed to a Trimble service.Reviewed 2026-10-16View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportMixed claims — review
#### Continuity and Disaster RecoveryReviewed 2026-10-16View source
Trimble Connect service data resiliency and physical data center disaster recovery capabilities are powered by AWS/Azure Availability Zones.Reviewed 2026-10-16View source
- SLA: Trimble does not guarantee a specific uptime for the API unless explicitly defined in a separate Service Level Agreement.Reviewed 2026-10-16View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Used by The Weitz Company and Swinerton Builders to manage change orders and integrate with ERPs like JD Edwards.

Worth asking

How will this legacy construction management suite modernize its interface to compete with cloud-native startups?

Sources

Evidence details

Enterprise controls

2 - SOC 1 Type 1 - SOC 1 Type 2 - SOC 2 Type 1 - SOC 2 Type 2 - SOC 3 - GovRAMP - TX-RAMP - WCAG 2 - SOC 1 Type 1 - SOC 1 Type 2 - SOC 2 Type 1 - SOC 2 Type 2 - SOC 3 - GovRAMP - TX-RAMP - WCAG 2 - SOC 1 Type 1 - SOC 1 Type 2 - SOC 2 Type 1 - SOC 2 Type 2 - SOC 3 - GovRAMP - TX-RAMP - WCAG

Developer access

- Concurrency: We reserve the right to limit the number of concurrent connections per API Key/Client ID - Credential Hygiene: API keys and secrets must be stored in secure vaults (e.g., Azure Key Vault, AWS Secrets Manager)

Last checked Oct 16, 2026

Company-published evidence, not an independent audit. Unknown means unverified.