TriMundo LLC
This statement explains what personal data TriMundo LLC processes, why, and what choices you have. It covers two different situations: people who visit this website or contact us, and organisations that subscribe to RBP Advisor.
TriMundo LLC located in Dallas, TX operates this website and provides RBP Advisor for SAP SuccessFactors, a subscription service delivered on SAP Business Technology Platform.
For questions about this statement or about how we handle data, contact admin@trimundo.net.
This is the part most customers ask about first, so we state it plainly.
RBP Advisor reads three kinds of information over standard SAP SuccessFactors OData APIs:
| Information | What is read, and when |
|---|---|
| Permission configuration | Roles, permission rules, permission groups and granted permissions, read at each capture and kept as point-in-time snapshots so that any two can be compared. |
| Group membership | For each permission group referenced by a permission rule, the members' user IDs, read at each capture. Each member's first and last name are read at capture only to derive two initials; the names are not kept. |
| Employee name and status | Read live when an administrator views a group's members, a membership change or an access lookup, and when the service checks for inactive members of static groups. Shown on screen, never stored. |
RBP Advisor stores the minimum needed to track group membership: the user ID and two initials of each member. Employee names and status are read from SAP SuccessFactors when you look, and are never stored. No other employee data — contact details, job, compensation, personal or special-category data — is retrieved or stored.
Access is read-only. RBP Advisor never writes to SAP SuccessFactors and cannot alter your permission configuration.
Some personal data is necessarily processed. Every category, and the reason for it:
| Category | What it is | Why |
|---|---|---|
| Administrator identity | Name, business email address and identity-provider subject of the people at your organisation who use RBP Advisor | To authenticate users and control access |
| Activity attribution | Which administrator captured a snapshot, dispositioned a change, uploaded evidence or generated a report, with timestamps | To make the audit trail meaningful — this is the product's core purpose |
| Customer-entered content | Justification text, approver names and evidence files uploaded by your administrators | Entered by you; we store it as part of your compliance record |
| Configuration metadata | Names of roles, permission groups and rules, which may include usernames where your own configuration includes them | Captured as part of the permission model |
| Group membership | For each capture, the user ID and two initials of each member of each captured permission group | To show who joined or left a group between captures, and who held a permission as of a capture |
| Aggregate counts | Number of active employee records and group member counts at the time of capture | To size the subscription and show trend |
Member lists that an administrator downloads are generated in the browser and are not stored by RBP Advisor. Compliance reports record membership changes as counts, not names. Optimizer findings name roles, groups and rules, never employees.
You decide what goes into justifications and evidence attachments. We ask that you do not upload personal data beyond what your own compliance process requires.
For data held in your RBP Advisor tenancy, your organisation is the controller and TriMundo is a processor. We process that data only to provide the service, and on your instructions.
For our own business contacts generated from enquiries, prospects, billing contacts and website visitors, TriMundo is the controller.
Each customer's captured data is held in a dedicated database container within a regional SAP HANA Cloud instance on SAP Business Technology Platform. The region is fixed per customer at implementation and data is not moved between regions. Data is encrypted in transit and at rest.
| Provider | Purpose |
|---|---|
| SAP SE and affiliates | Platform hosting (SAP BTP), database (SAP HANA Cloud), authentication (SAP Cloud Identity Services), and SAP Store transaction services |
| Stripe, Inc. | Payment processing where a subscription is purchased through the SAP Store |
| Dreamhost | Hosting of this website |
| Microsoft | Business email and support correspondence |
We will tell customers in advance of adding a sub-processor that processes their service data.
Snapshots, group membership, compliance reports and evidence attachments are retained for the duration of your subscription, because their value is precisely that they form a historical record. On termination, access continues for 30 days so that you can download your records. At the end of the 30-day grace period your data, including membership data, is deleted.
On your written instruction, an individual can be erased from the membership record earlier: their user ID is replaced with an erasure token that carries nothing of the original ID and their initials are removed, while counts and history are kept. The individual should first be removed from SAP SuccessFactors, otherwise they are captured again at the next snapshot.
Business contact and billing records are kept for as long as needed for the relationship and for the period required by law.
Access to the service is authenticated through SAP Cloud Identity Services and governed by role assignment. Connections to SAP SuccessFactors use OAuth 2.0 SAML Bearer assertion signed with an X.509 certificate; no password-based API access is used. Customer data is separated at the database level, one container per customer.
Our security and development practices are described in our Security and Data Protection Overview, linked from the RBP Advisor listing on SAP Store and available on request.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability.
If your data is held in an RBP Advisor tenancy — including as a member of a permission group in your employer's SAP SuccessFactors instance — your employer is the controller. Please contact them first; we will assist them in responding, including by erasing your record on their instruction. For data where TriMundo is the controller, contact admin@trimundo.net and we will respond within the period required by applicable law.
Trimundo.net uses no analytics and no non-essential cookies.
If you contact us through this site or by email, we use your details only to respond and to keep a record of the correspondence.
Where personal data is transferred outside the region in which it was collected, we rely on the transfer mechanisms available to us and to our sub-processors, including the European Commission's standard contractual clauses where applicable.
We will post any change to this statement on this page and update the effective date. Where a change materially affects how we process customer data, we will notify affected customers directly.