Issue No. 21 | June 2026 

Welcome! We are thrilled to highlight the impressive AI product showcase from our latest Platform All Hands, featuring game-changing developments like the Platform AI Kit and a jaw-dropping 30-second app-generation demo with Modus AI. In addition to these exciting AI-native innovations, this issue delivers back-to-back milestone releases of the Admin Console & My Products, an invitation to shape our strategy through the Product Telemetry Survey, and essential security reminders regarding upcoming Trimble ID enhancements.

▶️ Platform All Hands 👀

Check out the May Platform All Hands featuring an inspiring AI product showcase that you won't want to miss, highlighting how Trimble is transforming the Product Development Lifecycle (PDLC) into a fully connected, AI-native ecosystem. The presentation detailed the impressive new Platform AI Kit, which accelerates workflows by automating routine engineering tasks—such as architecture documentation, threat modeling, and PR reviews—empowering teams to dedicate their focus to high-value system design. Viewers will also get an exciting look at the AI Spec-Driven Development framework, which seamlessly maintains context from initial product requirements straight through to deployable code, alongside a powerful demo of Modus AI generating a fully styled, production-ready application from a single prompt in just 30 seconds. Furthermore, the session introduces new Model Context Protocol (MCP) standards for securely connecting AI agents with enterprise data and concludes with a visionary Next Gen Payroll UX showcase built on Modus. Be sure to watch the full video recording to see these groundbreaking tools in action and discover how they can accelerate your team's innovation!

👉👉👉 Take the Product Telemetry Survey 

We are standardizing Product Telemetry to fuel growth, generate valuable insight and help prioritize more effectively. If you are a Product Manager (or telemetry expert), we’d love your feedback on the current telemetry landscape.

🚀 Admin Console releases

Announcing back-to-back milestone releases of the Admin Console & My Products, v5.0 and v5.1! These releases represent a huge internal milestone: The Admin Console is now leveraging IAM, our next-generation suite of central user and account services, aligning with our strategic Customer Master initiative.

Read more on Charlie:

📅 reminders

Trimble ID : HTTP Strict Transport Security (HSTS)

This is a reminder about the upcoming security enhancement for the Trimble ID (TID) Production. As previously communicated, TID will implement HTTP Strict Transport Security (HSTS) headers for all HTTPS responses to further strengthen security.

Production - June 16, 5:30 AM UTC

📅 UPCOMING EVENTS

Trimble ID:  Introduction of TRN Claims for Enhanced Cross-Service Authorization

Trimble ID (TID) is enhancing the JSON Web Tokens (JWT) issued for both User and Service-to-Service authentication flows. As part of this update, JWTs will now include standardized Trimble Resource Name (TRN) claims to enhance cross-service authorization and improve auditability.

Staging - June 18, 5:30 AM UTC

Production - June 23, 5:30 AM UTC

🚨 DISASTER RECOVERY

IAM: Disaster Recovery Drill in Staging - Limited Functionality

Identity and Access Management (IAM)  will conduct a disaster recovery drill in staging.

REQUIRED ACTION - If your team or customers use the IAM staging environment, review the notice for required actions

Staging - June 23 , between 4:00 AM and 10:00 AM UTC

🚀 RELEASE NOTES

🛡️ Trimble Identity

🔐 Security & Compliance Enhancements

• Upgraded Encryption Standards: Boosted cloud infrastructure security by upgrading Amazon CloudFront policies to the latest TLSv1.2_2025 standard.
• Automated Secret & Cert Management: Introduced a new endpoint enabling both manual and scheduled secret rotations for application identities. Additionally, successfully rotated the IAM passthrough gateway certificate for the Staging Disaster Recovery (DR) region.
• Data Residency & MFA Updates: Refined the regional selection labels and helper text during user sign-up to improve data residency compliance. Multi-Factor Authentication (MFA) informational messages were also updated with new localized translations.

👤 Streamlined Authentication & UX

• SSO Lockout Friction Eliminated: Enterprise users locked out by brute-force protections can now successfully authenticate via Federated SSO, eliminating login blockers.
• Graceful API Errors: Refactored the password reset API to handle edge cases smoothly when a user is already in a reset_required state.

🛠️ Admin & Developer Tools

• Centralized App Management: Launched a new IAM endpoint allowing Account Administrators to install, deauthorize, and pre-consent to scopes for applications on behalf of all users in their account.
• Jira Integration Support: Enhanced the Third-Party Token Store service to securely manage and support authentication tokens specifically for Jira.
• Staging Environment Expansion: Added support for Developer Applications within the TID Stage environment via updated configurations.

☁️ API Cloud

🚀 Developer & Publisher Console Enhancements

• Application Throttling Re-enabled: Following successful performance and latency-based testing, application throttling is back in the V2 Console UI, now supporting up to 50 applications per API.
• Streamlined Subscriptions: Public product subscriptions no longer require mandatory mapping to a usage plan, simplifying the signup flow in the Developer Console.
• UI Refresh: The Publisher Console UI has been updated to align with the latest R2026.1 version standards, featuring updated UX color patterns.
• Flexible Product Creation: The product creation workflow now includes an application types feature toggler, along with a direct link to request custom application types.

🛠️ Infrastructure & Security Maintenance

• Quarterly Image Rotation: Completed the routine quarterly rotation of Amazon Machine Images (AMIs) across all ECS clusters (Stage, Prod, and Disaster Recovery environments) and APIX EC2 machines.
• Tightened Documentation Security: Removed public S3 ACL dependencies for APIX Docs to ensure more secure file handling.
• Azure Gateway Cleanup: Streamlined the Azure Instance by removing legacy product dependencies and dismantling deprecated products within the Azure Gateway Instance.

🐛 Stability & Fixes

• Deployment Consumption Fix: Resolved an issue that was causing regional deployment consumption to fail for specific client applications.

🔑 IAM

🏢 Advanced Organization Management

• New Organization APIs: Launched a comprehensive suite of endpoints to add, list, remove, and update the verification status of customer accounts and users directly within organizations.
• Streamlined Admin Approvals: Introduced a GraphQL API allowing administrators to list and manage team join requests across all groups and accounts from a single interface.

📱 Enhanced Device Security & Syncing

• Robust Threat Management: Added a dedicated API to mark devices as blocklisted or stolen, automatically restricting downstream API operations on compromised hardware.
• Improved Tracking & Compatibility: Device applications now include account IDs upon creation for tighter tracking. Additionally, reverse sync was implemented for specific models to maintain compatibility with legacy systems like WorksManager.

🌐 Data Mobility & Regional Operations

• Seamless Regional Switching: Addressed data region switch edge cases for user migrations, refining event filtering and data porting across regions.
• mTLS Bulk-Fetch: Enabled efficient region-based user listing by securely aggregating multi-region data via mTLS endpoints.
• Data Product Optimizations: Configured incremental account capturing for the EDW Data Product and generated a baseline static dataset of all existing accounts for analytics.

⚙️ Backend & Performance Upgrades

• Production-Ready Lambdas: Deployed Apollo lambdas in production mode to maximize operational performance and reliability.
• Data Integrity Checks: Added strict validation mechanisms for cross-account GraphQL changes and expanded group service layer methods.

🌐 IoT

🚀 New Features & Capabilities

• ArrowHead Device Traceability: Enabled automated shipment event processing via middleware. ArrowHead devices can now be automatically registered and transferred into dealer accounts while securely saving critical data like SKUs, Purchase Orders, and Sales Order numbers for precise tracking.
• Account-Level Authorization: Enhanced device security and privacy by restricting IoT device access and control exclusively to authorized accounts and groups.

⚙️ Processing Framework

🏗️ Infrastructure & Performance Boosts

• Windows Nodepool Expansion: Increased operational capacity on Windows Nodepools to handle larger workloads efficiently.
• Async Optimization: Implemented asynchronous design enhancements between the API and backend components to improve communication speed and processing flow.
• Secure Redis Configuration: Updated Idle Redis to securely pull credentials directly from the environment.
• Resource Optimization: Continued scheduled resource-trimming and scale-down efforts for legacy ECS-based engines.

🚀 New Features

• 90-Day Execution Retention: Enabled a new data policy feature within the API service, automatically retaining execution records for 90 days.

Need to join the mailing list for this newsletter or know someone who does? Let us know by filling out this very short form: