# Trimble Prolog

Project management software

Research: https://www.safecli.org/company/trimble.com
Company: https://trimble.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-16T03:30:24.552Z
API: Public API

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Company-published

> - SOC 2 Type 1

Source: https://trust.trimble.com/
Reviewed: 2026-10-16T03:30:24.552Z

> - SOC 2 Type 2

Source: https://trust.trimble.com/
Reviewed: 2026-10-16T03:30:24.552Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Company-published

> In a nutshell, Trimble ID provides single sign-on capability and handles the responsibility of authenticating the identity of the users across multiple applications, products, and APIs.

Source: https://developer.trimble.com/docs/authentication/concepts/trimble-identity/
Reviewed: 2026-10-16T03:30:24.552Z

> | SAML 2.0 | Security Assertion Markup Language (SAML) is an XML-based protocol, that provides both authentication and authorization between trusted parties.

Source: https://developer.trimble.com/docs/authentication/concepts/trimble-identity/
Reviewed: 2026-10-16T03:30:24.552Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Not found


- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Mixed claims — review

> - Data Residency & Privacy: You must comply with all regional data protection laws (GDPR, CCPA, etc.).

Source: https://developer.trimble.com/docs/unity-maintain-permit/reference/aup/
Reviewed: 2026-10-16T03:30:24.552Z

> DATA PROCESSING AGREEMENT This Data Processing Agreement (“DPA”) is the parties’ agreement with regard to the Processing of Personal Data and supplements all License, Subscription, Services or other written or electronic agreements (the “Agreements”) between Trimble and Customer for the purchase of services (including Software as a Service, their associated Trimble offline or mobile applications, and support, and defined as “Services” or otherwise in the Agreement or hereinafter) in the course of which Trimble receives personal data from Customer.

Source: https://www.trimble.com/downloads/3fY5S1Hpz3ehn3sVNFg4c8/cfccefd80d5df726e480abcd107c8dfa/DATA_PROCESSING_AGREEMENT_English.pdf
Reviewed: 2026-10-16T03:30:24.552Z

> - If the Customer entity signing this DPA has submitted an order that has been accepted by Trimble or any of its Affiliates, but is not itself a party to the Agreement, this DPA is an addendum to that order (including any renewal order) and the Trimble entity on which such order has been placed is party to this DPA.

Source: https://www.trimble.com/downloads/3fY5S1Hpz3ehn3sVNFg4c8/cfccefd80d5df726e480abcd107c8dfa/DATA_PROCESSING_AGREEMENT_English.pdf
Reviewed: 2026-10-16T03:30:24.552Z

> - If the Customer entity signing the DPA has purchased Trimble services via an authorized reseller of Trimble, Customer has to indicate so on page 6 and provide a Trimble or Reseller issued customer number, or, in lack thereof, confirmation from the reseller that Customer is subscribed to a Trimble service.

Source: https://www.trimble.com/downloads/3fY5S1Hpz3ehn3sVNFg4c8/cfccefd80d5df726e480abcd107c8dfa/DATA_PROCESSING_AGREEMENT_English.pdf
Reviewed: 2026-10-16T03:30:24.552Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Mixed claims — review

> #### Continuity and Disaster Recovery

Source: https://help.trimble.com/dist/suf/product-guides/heretto/trimble-connect/en/trimble-connect/96959a51-397b-4b57-839e-efbd2dcd66da-Trimble_Connect_Security_Whitepaper_2024.pdf
Reviewed: 2026-10-16T03:30:24.552Z

> Trimble Connect service data resiliency and physical data center disaster recovery capabilities are powered by AWS/Azure Availability Zones.

Source: https://help.trimble.com/dist/suf/product-guides/heretto/trimble-connect/en/trimble-connect/96959a51-397b-4b57-839e-efbd2dcd66da-Trimble_Connect_Security_Whitepaper_2024.pdf
Reviewed: 2026-10-16T03:30:24.552Z

> - SLA: Trimble does not guarantee a specific uptime for the API unless explicitly defined in a separate Service Level Agreement.

Source: https://developer.trimble.com/docs/unity-maintain-permit/reference/aup/
Reviewed: 2026-10-16T03:30:24.552Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: