Compliance Finder

SAP Field Service Management CSA Star Certificate

Operations of the SAP Field Service Management Solutions, in accordance with the Statement of Applicability (SoA) Version 1.0 dated, January 20th, 2026, and in association with the ISO/IEC 27001 certificate: CERT-001766

SAP Field Service Management ISO 27011 Certificate

Operations of the SAP Field Service Management Solutions, in accordance with the Statement of Applicability (SoA), Version 1.0 dated, January 20th, 2026

SAP Customer Experience CSA Star Certificate

Operations of the SAP Customer Experience (SAP Cloud for Customer, SAP Sales Cloud Version 2, SAP Service Cloud Version 2, SAP Enterprise Service Management, SAP Commerce Cloud, SAP Engagement Cloud) cloud solutions, in accordance with the Statement of Applicability (SoA) Version 6.4 dated, April 23rd, 2026, and in association with the ISO/IEC 27001 certificate: CERT-001806*Originally certified by another certification body since July 2022

SAP Signavio SOC 1 Audit Report 2026 H1

Information about the SAP Signavio SOC 1 Audit Report for the first half of 2026, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Open Payments Framework 2026 PCI DSS AoC Report

Information about the SAP Open Payments Framework 2026 PCI DSS AoC Report. Report available for request on this page.

White Paper - Reap the benefits of AI in GxP environments with Joule

White Paper is addressing the GxP compliance requirements with detailed analysis to instill confidence in our Life Science Customers regarding application of our Joule application in the highly regulated GxP environments.

SAP Central Cloud Services: Certificate of Conformity with the National Security Scheme (ENS) Level HIGH

The information Systems that support SAP Central Cloud Services have been audited and have been verified to fulfill the requirements of Royal Decree 311/2022 of May 3rd, which regulates the National Security Framework (ENS – Esquema Nacional de Seguridad) in the field of Electronic Administration.

SAP Concur: Certificate of Conformity with the National Security Scheme (ENS) Level HIGH

The information Systems that support SAP Concur have been audited and have been verified to fulfill the requirements of Royal Decree 311/2022 of May 3rd, which regulates the National Security Framework (ENS – Esquema Nacional de Seguridad) in the field of Electronic Administration.

SAP Sales Performance Management: Certificate of Conformity with the National Security Scheme (ENS) Level HIGH

The information Systems that support SAP Sales Performance Management products/services have been audited and have been verified to fulfill the requirements of Royal Decree 311/2022 of May 3rd, which regulates the National Security Framework (ENS – Esquema Nacional de Seguridad) in the field of Electronic Administration.

SAP SuccessFactors: Certificate of Conformity with the National Security Scheme (ENS) Level HIGH

The information Systems that support SAP SuccessFactors HCM suite and SAP SuccessFactors Employee Central Payroll products/services have been audited and have been verified to fulfill the requirements of Royal Decree 311/2022 of May 3rd, which regulates the National Security Framework (ENS – Esquema Nacional de Seguridad) in the field of Electronic Administration.

SAP Central Cloud Services HDS Certificate

The HDS Certificate can be also found on the bsi portal: https://www.bsigroup.com/en-GB/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/HDS%20754140

SAP Industries and Customer Experience HDS Certificate

The HDS Certificate can be also found on the bsi portal: https://www.bsigroup.com/en-GB/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/HDS%20817871

SAP Sales Performance Management CSA Star Certificate

Operations and development of the SAP Sales Performance, accordance with with the Statement of Applicability (SoA) Version 1.0, dated 5/22/25, and in association with ISO/IEC 27001 Certificate: CERT-000805.

SAP Sales Performance Management ISO 27017 Certificate

Operations and development of the SAP Sales Performance Management solution, in accordance with the Statement of Applicability (SoA) Version 1.2, dated February 9th, 2026. *Originally certified by another certification body since June 2021

White Paper - Complying with Electronic Records and Electronic Signatures Regulations in the Life Sciences Industry

Learn how your life sciences company can leverage your SAP S/4HANA and SAP S/4HANA Cloud, private edition application infrastructure to improve your level of regulatory compliance and significantly reduce costs. Discover how SAP S/4HANA and SAP S/4HANA Cloud, private edition supports technical compliance with global electronic record and electronic signatures (ERES) regulation.

White Paper - SAP Business Technology Platform services in GxP environments

The goal of this whitepaper is to support life science customers during vendor assessment of SAP Business Technology Platform (SAP BTP), a platform-as-a-service (PaaS) product, and validation of the processes and controls it offers asa cloud service provider.

SAP LeanIX SOC 2 Audit Report 2025

Information about the SAP LeanIX SOC 2 Audit Report 2025. Report available for request on this page.

SAP Enterprise Cloud Services SOC 1 Audit Report 2026 Q1 / 2026 H1

Information about the SAP Enterprise Cloud Services SOC 1 Audit Report for 2026 Q1 / 2026 H1, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Enterprise Cloud Services SOC 1 Audit Report Q4 2025

Information about the SAP Enterprise Cloud Services SOC 1 Audit Report for Q4 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Customer Experience EU Cloud Code of Conduct

The EU Cloud Code of Conduct report can also be found on the EU Cloud CoC public register https://eucoc.cloud/en/public-register/list-of-adherent-services.html, Verification-ID: 2021LVL02SCOPE319.

SAP SE - Support, Services and Engagements ISO 9001 Certificate

Operates a management system in accordance with the requirements of DIN EN ISO 9001:2015and will be assessed for conformity within the 3-year term of validity of the certificate. The scope includes Support, Services and Engagements processes including SAP Private Cloud ERP and BTP maintenance processes.

SAP Controlled Goods Program Certificate

Information about the SAP Controlled Goods Program Certificate. Report available for request on this page.

SAP Sales Performance Management ISO 27001 Certificate

Operations of the SAP Sales Performance Management solution, in accordance with Statement of Applicability (SOA) Version 1.2, dated February 9th, 2026.*Originally certified by another certification body since June 2021

SAP Sovereign Cloud Canada Canadian Centre for Cyber Security (CCCS) PBHVA Cloud Assessment Summary 2025

Information about the SAP Sovereign Cloud PBHVA CCCS Cloud Assessment Summary Report 2025, detailing its purpose, scope, and availability. Document available for request on this page.

SAP Sovereign Cloud CSA Star Certificate

The scope of the CSA STAR certification is limited to the information security management system (ISMS) which provides SAP Sovereign Cloud Delivery Operations and includes the support of confidentiality, integrity, and availability pertaining to all business operations and information assets related to the operation and provisioning of hardened SAP products, as well as the provisioning of related services, for government and public sector customers in Canada, Australia, New Zealand , and the United Kingdom.As part of these actions, SAP Sovereign Cloud Delivery Operations builds Shared Management Services (SMS), which are used in the administration, security, monitoring and automation of SAP products in accordance with the ISO/IEC 27001:2022 Statement of Applicability version 3.0 dated January 30, 2026 and extended to include the ISO/IEC 27017:2015 extended control set for cloud security; and the ISO/IEC 27018:2019 extended control set for PII protection.

SAP Sovereign Cloud Canada Canadian Centre for Cyber Security (CCCS) PBMM Cloud Assessment Summary 2025

Information about the SAP Sovereign Cloud CCCS Cloud Assessment Summary Report 2025, detailing its purpose, scope, and availability. Document available for request on this page.

SAP Sovereign Cloud Services Australia / New Zealand SOC 2 Audit Report 2025

Information about the SAP Sovereign Cloud Australia / New Zealand SOC 2 Audit Report 2025. Report available for request on this page.

SAP Sovereign Cloud Services Australia / New Zealand SOC 2 Audit Report 2026

Information about the SAP Sovereign Cloud Australia / New Zealand SOC 2 Audit Report 2026. Report available for request on this page.

SAP Sovereign Cloud UK SOC 2 Audit Report 2025

Information about the SAP Sovereign Cloud UK SOC 2 Audit Report 2025. Report available for request on this page.

SAP Sovereign Cloud UK SOC 2 Audit Report 2026

Information about the SAP Sovereign Cloud UK SOC 2 Audit Report 2026. Report available for request on this page.

SAP Sovereign Cloud Services Canada SOC 2 Audit Report 2026

Information about the SAP Sovereign Cloud Canada SOC 2 Audit Report 2026. Report available for request on this page.

SAP Sovereign Cloud Services Canada SOC 2 Audit Report 2025

Information about the SAP Sovereign Cloud Canada SOC 2 Audit Report 2025. Report available for request on this page.

SAP Sovereign Cloud ISO 22301 Certificate

The scope of the ISO 22301:2019 certification is limited to the Business Continuity Management System (BCMS) supporting the SAP Sovereign Cloud Delivery Operations and includes the support of confidentiality, integrity, and availability pertaining to all business operations and information assets related to the operation and provisioning of hardened SAP products, as well as the provisioning of related services, for government and public sector customers in Canada, Australia, New Zealand, and the United Kingdom. As part of these actions, SAP Sovereign Cloud Delivery Operations builds Shared Management Services (SMS), which are used in the administration, security, monitoring and automation of SAP products.

White Paper - SAP Digital Manufacturing in Regulated Environments; Quality & Compliance

This whitepaper provides information on how SAP approaches GxP-related compliance for SAP Digital Manufacturing and provides customers guidance on using SAP Digital Manufacturing in a GxP context.

White Paper - SAP Cloud ALM in Regulated Environment

This white paper outlines practices that life science customers use, including internal quality and development practices critical for GxP compliance.

SAP Signavio EU Cloud Code of Conduct

The EU Cloud Code of Conduct report can also be found on the EU Cloud CoC public register: https://eucoc.cloud/en/public-register, Verification-ID: 2025LVL02SCOPE5430

SAP Signavio SOC 1 Audit Report 2025 H2

Information about the SAP Signavio SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP SE ISO 42001 Statement of Applicability

Information about the SAP SE ISO 42001 Statement of Applicability. Report available for request on this page.

SAP Concur SOC 1 Audit Report 2025 H2

Information about the SAP Concur SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Configure Price Quote SOC 1 Audit Report 2025 H2

Information about the SAP Configure Price Quote SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Fieldglass SOC 1 Audit Report 2025 H2

Information about the SAP Fieldglass SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Customer Experience (SAP Cloud for Customer, SAP Sales Cloud and SAP Service Cloud Version 2 and SAP Commerce Cloud) SOC 1 Audit Report 2025 H2

Information about the SAP Customer Experience (SAP Cloud for Customer, SAP Sales Cloud and SAP Service Cloud Version 2 and SAP Commerce Cloud) SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Cloud Application Services SOC 1 Audit Report 2025 H2

Information about the SAP Cloud Application Services SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Sales Performance Management SOC 1 Audit Report 2025 H2

Information about the SAP Sales Performance Management SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP SuccessFactors Employee Central Payroll SOC 1 Audit Report 2025 H2

Information about the SAP SuccessFactors Employee Central Payroll SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP SuccessFactors Human Capital Management SOC 1 Audit Report 2025 H2

Information about the SAP SuccessFactors Human Capital Management SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Business Technology Platform Kyma Runtime 2025 PCI DSS AoC Report

SAP Business Technology Platform Kyma Runtime 2025 PCI DSS AoC Report. Report available for request on this page.

SAP Ariba and SAP Business Network SOC 1 Audit Report 2025 H2

Information about the SAP Ariba and SAP Business Network SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Enterprise Management SOC 1 Audit Report 2025 H2

Information about the SAP Enterprise Management SOC 1 Audit Report for the second half of 2025, detailing its purpose, scope, and availability. Report available for request on this page.

SAP Enterprise Cloud Services SOC 1 Audit Report Q3 2025

Information about the SAP Enterprise Cloud Services SOC 1 Audit Report for Q3 2025, detailing its purpose, scope, and availability. Report available for request on this page.