generated: '2026-07-20' method: searched source: https://www.propelsoftware.com/trust ; https://developer.propelplm.com/docs/authentication/ standards: - id: oauth2 conforms: true evidence: Salesforce OAuth 2.0 authorization-code flow; bearer token required on all requests - id: openid-connect conforms: true evidence: Identity via Salesforce OIDC (login.salesforce.com/.well-known/openid-configuration) - id: rest conforms: true evidence: Resource-based JSON REST endpoints over Salesforce Apex REST - id: soc2-type-ii conforms: true evidence: SOC 2 Type II report (available on request) — trust center - id: iso-27001 conforms: true evidence: ISO 27001 (inherited Salesforce Platform) — trust center - id: iso-9001 conforms: true evidence: ISO 9001 quality management — trust center - id: iso-13485 conforms: true evidence: ISO 13485 medical-device QMS — trust center - id: fda-21-cfr-part-11 conforms: true evidence: FDA 21 CFR Part 11 electronic records/signatures — trust center - id: fedramp conforms: true evidence: Runs on Salesforce Government Cloud (FedRAMP High / DoD IL) — trust center - id: gdpr conforms: true evidence: GDPR/BCR and CCPA frameworks — trust center - id: rfc9457-problem-details conforms: false evidence: Errors returned as Salesforce Apex REST JSON, not application/problem+json - id: fhir-r4 conforms: false - id: scim conforms: false