Trimble Connect
Appendix 1: Processing Specification Form 1
Types of personal data:
Name
Phone
Email
Location
Information
Online ID
Language Preference
Data processing activities and purpose:
User authentication
Application use
Project location
Spatial data rendering
Categories of data subject affected:
Employees and Contractors of Enterprise customers
Application end-users
Appendix 2: Technical and organizational security measures
This Appendix describes the technical and organizational security measures and procedures that the Data Processor shall, as a minimum, maintain to protect the security of personal data created, collected, received, or otherwise obtained. Data Processor will keep documentation of technical and organizational measures identified below to facilitate audits and for the conservation of evidence.
Data security
All communication with Trimble Connect occurs over HTTPS, ensuring communication is encrypted with TLS (SSL). All customer data is stored for high-availability and durability. Data generated within Trimble Connect is stored in secure databases which are backed-up daily. The Trimble Connect application security model prevents customer data cross-over and ensures complete customer data segregation and privacy.
Software security
All code developed in-house or by third-parties is checked for security defects with a source code analysis tool. Production servers are regularly scanned for vulnerabilities.
Access controls
Only authorized employees have access to servers and application data. Trimble Connect servers can only be accessed through secure encrypted channel connections using a VPN operated by Trimble Connect.
Account security
Accounts for Trimble Connect are managed in a secure database stored outside of the Trimble Connect application. Additionally, passwords are stored as salted one-way hashes. Passwords themselves are never stored and never transmitted in plain text.
Appendix 3: List of third party sub-processors
Amazon Web Services, Inc.
440 Terry Avenue N.
Seattle, WA 98109, USA
Safeguards acc. to Art. 44 - 50 GDPR – Data Processing Agreement
Microsoft Inc. / Azure
One Microsoft Plaza
Redmond, WA 98052
Safeguards acc. to Art. 44 - 50 GDPR – Data Processing Agreement
Trimble Inc.
935 Stewart Drive
Sunnyvale, CA 94085 USA
Safeguards acc. to Art. 44 - 50 GDPR – Data Processing Agreement
Revised March 08, 2022
