TriMundo LLC
This statement explains what personal data TriMundo LLC processes, why, and what choices you have. It covers two different situations: people who visit this website or contact us, and organisations that subscribe to RBP Advisor.
TriMundo LLC located in Dallas, TX operates this website and provides RBP Advisor for SAP SuccessFactors, a subscription service delivered on SAP Business Technology Platform.
For questions about this statement or about how we handle data, contact admin@trimundo.net.
This is the part most customers ask about first, so we state it plainly.
RBP Advisor reads permission configuration — roles, permission rules, dynamic groups and granted permissions — over standard SAP SuccessFactors OData APIs. It captures these as point-in-time snapshots so that any two can be compared.
RBP Advisor does not retrieve employee records. The only call made against the SuccessFactors User entity is an aggregate count, which returns a single number. No employee record is transferred to, processed by, or stored in RBP Advisor.
Access is read-only. RBP Advisor never writes to SAP SuccessFactors and cannot alter your permission configuration.
Although RBP Advisor is a configuration tool rather than an employee-data tool, some personal data is necessarily processed:
| Category | What it is | Why |
|---|---|---|
| Administrator identity | Name, business email address and identity-provider subject of the people at your organisation who use RBP Advisor | To authenticate users and control access |
| Activity attribution | Which administrator captured a snapshot, dispositioned a change, uploaded evidence or generated a report, with timestamps | To make the audit trail meaningful — this is the product's core purpose |
| Customer-entered content | Justification text, approver names and evidence files uploaded by your administrators | Entered by you; we store it as part of your compliance record |
| Configuration metadata | Names of roles, permission groups and rules, which may include usernames where your own configuration includes them | Captured as part of the permission model |
| Aggregate counts | Number of active employee records at the time of capture | To size the subscription and show trend |
You decide what goes into justifications and evidence attachments. We ask that you do not upload personal data beyond what your own compliance process requires.
For data held in your RBP Advisor tenancy, your organisation is the controller and TriMundo is a processor. We process that data only to provide the service, and on your instructions.
For our own business contacts generated from enquiries, prospects, billing contacts and website visitors, TriMundo is the controller.
Each customer's captured data is held in a dedicated database container within a regional SAP HANA Cloud instance on SAP Business Technology Platform. The region is fixed per customer at implementation and data is not moved between regions. Data is encrypted in transit and at rest.
| Provider | Purpose |
|---|---|
| SAP SE and affiliates | Platform hosting (SAP BTP), database (SAP HANA Cloud), authentication (SAP Cloud Identity Services), and SAP Store transaction services |
| Stripe, Inc. | Payment processing where a subscription is purchased through the SAP Store |
| Dreamhost | Hosting of this website |
| Microsoft | Business email and support correspondence |
We will tell customers in advance of adding a sub-processor that processes their service data.
Snapshots, compliance reports and evidence attachments are retained for the duration of your subscription, because their value is precisely that they form a historical record. On termination, access continues for 30 days so that you can download your records. At the end of the 30 days grace period your data is deleted
Business contact and billing records are kept for as long as needed for the relationship and for the period required by law.
Access to the service is authenticated through SAP Cloud Identity Services and governed by role assignment. Connections to SAP SuccessFactors use OAuth 2.0 SAML Bearer assertion signed with an X.509 certificate; no password-based API access is used. Customer data is separated at the database level, one container per customer.
Our development and release practices are described in our Secure Development Practice note, available on request.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability.
If your data is held in an RBP Advisor tenancy, your employer is the controller — please contact them first. We will assist them in responding. For data where TriMundo is the controller, contact admin@trimundo.net and we will respond within the period required by applicable law.
Trimundo.net uses no analytics and no non-essential cookies.
If you contact us through this site or by email, we use your details only to respond and to keep a record of the correspondence.
Where personal data is transferred outside the region in which it was collected, we rely on the transfer mechanisms available to us and to our sub-processors, including the European Commission's standard contractual clauses where applicable.
We will post any change to this statement on this page and update the effective date. Where a change materially affects how we process customer data, we will notify affected customers directly.