Tekla Trust Center – Reliable Products and Services

Security

Access control

We have limited the number of people who can access the customer data in Tekla services. Only authorized Trimble personnel has administrative access to the customer data when there is a need to provide e.g. support to the customer.

We have designed Tekla products and services to be administered by you as our customers. Tekla Online Admin tool allows you to retain control over your data and you can decide what kind of access rights are given within your own organization.

Incident management

We have set up practices for incident management to ensure that all incidents are handled efficiently. Regarding all of our services and products, we maintain incident response plans that include instructions on handling security incidents, including defined responsibilities, technical steps to take, and how to mitigate issues.

Disaster recovery

Tekla services have disaster recovery plans that detail how we can bring up the service again in the event of partial or total loss. The plans ensure that we can maintain acceptable service levels even if something unexpected happens.

Secure DevOps

Our dedicated 24/7/365 DevOps team makes sure you can access Tekla Online services whenever you need them, and the services are running like expected. The team also manages the security so that you can focus on using our products safely.

Compliance

Compliance and best practices

We include security throughout the whole development lifecycle. We utilize industry standards wherever possible to ensure consistency and best practices across the organization and in all the products and services we deliver. Our main Tekla products and services are ISO/IEC 27001 certified. See the full list of Trimble products in the scope of the certificate here.

Some Tekla products have also submitted a self-attestation in alignment with CISA (US Cybersecurity and Infrastructure Security Agency) to meet the requirements of the US government customers. See the certificate in the CISA repository.

Trimble Secure Development Life Cycle

Within the Trimble Secure Development Life Cycle (TSDLC) framework, we ensure that security is embedded and operationalized continuously so that our deliverables will meet consistent security levels.

Equally important, we monitor and manage the infrastructure and environments in which our solutions are deployed. This includes identity and access management, vulnerability management and intrusion detection solutions on our networks and systems. This complemented with appropriate incident response, work together to ensure security for our customer solutions.

Within the Trimble Secure Development Life Cycle framework, we review our cloud infrastructure and processes according to industry best practices. We are continuously executing 24x7 security monitoring, vulnerability scanning and intrusion detection, dynamic and static analysis as well as open-source analysis of our solutions. We perform application security assessments both ourselves and by utilizing 3rd party security experts.

Cybersecurity awareness

A prerequisite for developing secure solutions is understanding the threat landscape in which the solution is operating. In Trimble, threat modeling is one of the core guiding principles when we are designing and developing our solutions.

Within Trimble, we constantly update our knowledge about cybersecurity topics and share awareness about cybersecurity threats among all parties responsible for managing and developing our solutions. As a baseline, all employees are required to attend mandatory cybersecurity training sessions. Solution architects and developers are required to attend specialized cybersecurity training sessions addressing threats specific to the solution they are responsible for.

Privacy

Your privacy is important to us

We are dedicated to complying with relevant global data protection legislation as well as with other good privacy practices.

We aim to minimize collecting the personal user data within our Tekla products and online services. You can find Tekla product or service specific information on what personal data is exactly collected in our Security white papers.

Data created by the users is owned by the users even when stored in Tekla products and Online services. Any exceptions to this rule are described in Service specific terms.

EU/EEA residents

Our general principles about collecting and using personal data of EU/EEA residents are described in our Privacy Notice. If we need to transfer data outside the EU/EEA, we follow appropriate GDPR based data transfer mechanisms like EU standard contractual clauses.

California residents

Our Privacy Notice describes how we collect and handle personal information of California residents. We do not share or sell the personal information we collect about you to other parties unless necessary to provide you our services. We are dedicated to comply with other CCPA legislation as well.

We use reliable partners

We use service providers to support us with e.g. marketing, market research, sales, communications, organizing events, software development, localization, consulting, analytics, license compliance, security, IT maintenance and hosting, and finance.

We require from our partners the same strict privacy and security standards to which we hold ourselves. We have entered into data protection agreements with all our service providers who process your personal data on our behalf.

Infrastructure

We have chosen Amazon Web Services (AWS) and Microsoft Azure cloud infrastructure for hosting solutions online.

Amazon Web Services

Amazon Web Services (AWS), the world’s leader in cloud infrastructure, is designed to deliver a flexible, reliable, scalable, and secure cloud computing environment with a high quality global network performance.

AWS provides secured data centers all around the world. You can find up-to-date information on the AWS global infrastructure here. AWS data centers are protected from unauthorized physical access and environmental hazards by a range of security controls.

You can find more information about AWS data centers and physical security here.

Microsoft Azure

Microsoft Azure cloud infrastructure is designed to bring applications closer to users around the world, preserving data residency, and offering comprehensive compliance and resilience options for customers. You can find up-to-date information on the Microsoft Azure global infrastructure here.

Microsoft data centers are designed and operated in a way that strictly controls all physical access to the areas where customer data is stored. The extensive layers of protection include, for example, access request and approval, security checkpoints at each facility and screening of anyone entering the facilities.

You can find more information about Azure data centers and physical security here.

Cloud security

Cloud and data security is a shared responsibility between the cloud infrastructure provider and the client utilizing the cloud solution. In our case, it means that we trust Amazon Web Services and Microsoft Azure to manage the security of the cloud infrastructure and we are responsible for the security in the cloud environment.

We ensure infrastructure security and the high availability of our cloud solutions by implementing and applying industry best practices to the infrastructure. This includes hardened Linux hosts with automatic patching, isolated VPC, data encryption, role-based access control and security groups. Whenever possible we utilize managed services like AWS Shield and AWS WAF protection. We have 24x7 SOC teams for monitoring alerts in our solutions.

You can read more about cloud security in AWS Whitepapers & Guides and Azure Security white papers.

Availability

Availability of Tekla Online services

Our goal is to continuously deliver highly available, scalable and secure products and services that you can rely on when you are doing your daily work.

Tekla products and services are integrated with other Trimble products and in many cases, our customers are working with several products at the same time.

For us, this means that we ensure the availability of critical services first and take care of possible service-specific issues later. We are constantly monitoring the performance of our services in order to prevent possible incidents.

You can at all times check the status of Trimble and Tekla products and services here:

Trimble Identity service
Tekla Online profile
Tekla Model Sharing service
Tekla Warehouse service
All Tekla Online Services

Please subscribe to status updates in order to always stay informed in case an incident would occur.

If you experience an outage when using Tekla products and services, and our status pages are not indicating any incidents, please let your local Tekla reseller know about the issue.

Historical data

We have provided reliable, resilient, secure and scalable cloud solutions to our customers for years and even though historical data is not guaranteeing future success, it provides valuable insight into how we have been performing.

You can at any time check the availability and possible incidents in our solutions for the past 90 days on the public status page.

Content moderation policy

Tekla Online services comply with the European Union Digital Services Act (DSA) . The act protects users of online platforms by reducing the distribution of illegal content and creating transparency between online platforms and their users.

In accordance with the Digital Services Act, we publish bi-annual information on our average monthly active users in the European Union. For the six-month period ending July 31st, 2025, Tekla Discussion Forum had approximately 14 000 monthly active users and Tekla Warehouse 46 000 monthly active users.

Please read the following Content moderation policy carefully. Unless otherwise stated, definitions used in this policy are defined in the Terms and Conditions for Services.

1. Rules

These rules are designed to maintain a safe, respectful, and inclusive environment for all Tekla Online service users. We expect all users to follow these basic professional guidelines:

Comply with the Terms and Conditions for Services, your agreement with Trimble, and other Documentation provided
Ensure you only share files for which you own the intellectual property rights (IPRs)
Do not share content that violates applicable laws or regulations
Do not share harmful or false content
Do not spam members of the service
Do not submit manifestly unfounded moderation reports
Do not impersonate someone else
Do not cause harm to operators’ service or networks
When posting on Tekla Discussion Forum, in addition to the above, follow the House Rules

2. Reporting content

As Tekla Online services are not pre-moderated, users are encouraged to report any content in Tekla Online services that they think may be violating the Terms and Conditions for Services, this Content moderation policy, other provided Documentation, or applicable laws or regulations.

Reporting violating content will follow the process set out below:

Create a report here .
You receive an email confirming that we have received the report.
Our moderation team reviews the report.
After review, we will inform all parties in question of the moderation decisions made.

Users have the right to appeal moderation decisions. A dedicated team reviews appeals to ensure fairness and accuracy. Appeals regarding moderation decisions can be made here .

3. Enforcement

We take proportionate action if we determine that someone is breaking our rules. Such actions include, for example, warnings, removing content, and limiting access to features or services.

In cases of serious or repeated violations we may, after a prior warning, suspend the account temporarily for up to six (6) months, or if necessary, permanently. The length of the suspension depends on the seriousness and frequency of the violation.

In cases of suspicion of a threat of a serious criminal offense involving a threat to the life or safety of persons, we will also contact the appropriate authorities.

Find your local Tekla contact with the link below

Security

Access control

Incident management

Disaster recovery

Secure DevOps

Compliance

Compliance and best practices

Trimble Secure Development Life Cycle

Within the Trimble Secure Development Life Cycle (TSDLC) framework, we ensure that security is embedded and operationalized continuously so that our deliverables will meet consistent security levels.

Cybersecurity awareness

Privacy

Your privacy is important to us

We are dedicated to complying with relevant global data protection legislation as well as with other good privacy practices.

Data created by the users is owned by the users even when stored in Tekla products and Online services. Any exceptions to this rule are described in Service specific terms.

EU/EEA residents

California residents

We use reliable partners

Infrastructure

We have chosen Amazon Web Services (AWS) and Microsoft Azure cloud infrastructure for hosting solutions online.

Amazon Web Services

You can find more information about AWS data centers and physical security here.

Microsoft Azure

You can find more information about Azure data centers and physical security here.

Cloud security

You can read more about cloud security in AWS Whitepapers & Guides and Azure Security white papers.

Availability

Availability of Tekla Online services

Our goal is to continuously deliver highly available, scalable and secure products and services that you can rely on when you are doing your daily work.

Tekla products and services are integrated with other Trimble products and in many cases, our customers are working with several products at the same time.

You can at all times check the status of Trimble and Tekla products and services here:

Trimble Identity service
Tekla Online profile
Tekla Model Sharing service
Tekla Warehouse service
All Tekla Online Services

Please subscribe to status updates in order to always stay informed in case an incident would occur.

If you experience an outage when using Tekla products and services, and our status pages are not indicating any incidents, please let your local Tekla reseller know about the issue.

Historical data

You can at any time check the availability and possible incidents in our solutions for the past 90 days on the public status page.

Content moderation policy

Please read the following Content moderation policy carefully. Unless otherwise stated, definitions used in this policy are defined in the Terms and Conditions for Services.

1. Rules

These rules are designed to maintain a safe, respectful, and inclusive environment for all Tekla Online service users. We expect all users to follow these basic professional guidelines:

Comply with the Terms and Conditions for Services, your agreement with Trimble, and other Documentation provided
Ensure you only share files for which you own the intellectual property rights (IPRs)
Do not share content that violates applicable laws or regulations
Do not share harmful or false content
Do not spam members of the service
Do not submit manifestly unfounded moderation reports
Do not impersonate someone else
Do not cause harm to operators’ service or networks
When posting on Tekla Discussion Forum, in addition to the above, follow the House Rules

2. Reporting content

Reporting violating content will follow the process set out below:

Create a report here .
You receive an email confirming that we have received the report.
Our moderation team reviews the report.
After review, we will inform all parties in question of the moderation decisions made.

Users have the right to appeal moderation decisions. A dedicated team reviews appeals to ensure fairness and accuracy. Appeals regarding moderation decisions can be made here .

3. Enforcement

We take proportionate action if we determine that someone is breaking our rules. Such actions include, for example, warnings, removing content, and limiting access to features or services.

In cases of suspicion of a threat of a serious criminal offense involving a threat to the life or safety of persons, we will also contact the appropriate authorities.

We are here to help you

We are here to help you

Reliable products and services

Security

Compliance

Privacy

Infrastructure

Availability

Cookie notice

Content moderation

We are here to help you

Reliable products and services

Security

Compliance

Privacy

Infrastructure

Availability

Cookie notice

Content moderation

We are here to help you