Trimble Connect Security is a set of security standards that have been deployed to help us build and manage software products and platforms. The security standards include workflows that help us manage data centers, cloud services, business continuity, and disaster recovery.
Trimble Connect Security White Paper
The Trimble Connect Security Whitepaper provides a comprehensive overview of the security architecture, information security protocols, and operational safeguards that govern the platform. It is designed to provide transparency into Trimble's security and data privacy strategies.
Key topics covered in the whitepaper:
Trimble Security Framework: Details regarding the "Secure by Design" methodology, which utilizes a framework centered on ISO 27001 and ISO 27701 principles for managing privacy and information security management systems.
- Identity and Access Management: Information about the following:
- "Private by Default" architecture
- Granular project permissions
- Mandatory Multi-Factor Authentication (MFA) enforced via Trimble Identity (TID) services.
- Data Protection: Specifications about cryptographic practices, Transport Layer Security (TLS) 1.2 or higher for data in transit, and the usage of AES-256 or equivalent algorithms for data at rest.
- Data Residency and Deletion: Overview of sovereign hosting jurisdictions (United States, Ireland, United Kingdom, Singapore, and Australia) and media sanitization practices that meet or exceed NIST 800-88 standards.
- Infrastructure Resilience: Information about the following:
Our "defense-in-depth" approach that utilizes top-tier AWS and Microsoft Azure data centers
Round-the-clock Security Operations Center (SOC)
Disaster recovery plans.
- Compliance and Certifications: Information about the following:
Annual independent third-party audits for ISO/IEC 27001:2022
SOC 2 status
NIST 800-171 alignment
Foundational framework for executing an ISO 19650-compliant Common Data Environment (CDE).
Read the Trimble Connect Security White Paper for more information.
Trimble Connect Allow List
The Trimble Connect Allow List includes the following domains:
- *.trimble.com
- *.trimblepaas.com
- *.connect.trimble.com
- tracking.tekla.com
Allowing these domains cover the necessary domains for access to Trimble Connect; however, there may be third-party cookies (from other domains) which could reduce functionality if they are blocked. Third-party cookies are addressed in the OneTrust Cookie Banner when you log in to Trimble Connect.
Trimble Connect is hosted on Amazon Web Services (AWS) and does not use a static IP address. AWS publishes their IP addresses on their documentation site. Trimble Connect makes use of TCP ports 443 and 8080.
We do not require a specific customer-deployed antivirus or firewall in order to use Trimble Connect.
Additional Trimble Connect Security Information
For more information, please see our Trust Site.