SAP Business Technology Platform (SAP BTP) is an integrated offering comprised of four technology portfolios: database and data management, application development and integration, analytics, and intelligent technologies. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.
The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, and Kyma, as well as multiple different regions, and a broad choice of programming languages.
The SOC 2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Processing Integrity, Confidentiality, and Privacy which must be met to demonstrate a well-designed system. SOC 2 also contains details on performed tests and their results. SOC 2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.
SAP Business Technology Platform has regularly prepared SOC 2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1 November 2020 to 30 April 2021 and the trust principles Security, Confidentiality and Availability. The following locations and their IaaS provider are covered:
Location |
IaaS provider |
St. Leon-Rot (Germany) |
SAP |
Colorado Springs (Colorado, USA) |
SAP |
Frankfurt (Germany) |
SAP |
Sydney (Australia) |
SAP |
Ashburn (Virginia, USA) |
SAP |
Sterling (Virginia, USA) |
SAP |
Chandler (Arizona, USA) |
SAP |
St. Leon-Rot (Germany) |
SAP |
Tokyo (Japan) |
SAP |
Toronto (Canada) |
SAP |
Moscow (Russian Federation) |
SAP |
Sao Paulo (Brazil) |
SAP |
Amsterdam (Netherlands) |
SAP |
Dubai (UAE) |
SAP |
Riyadh (Saudi Arabia) |
SAP |
Shanghai (China) |
SAP |
Frankfurt (Germany) |
AWS |
Virginia (US East) |
AWS |
Sao Paulo (Brazil) |
AWS |
Tokyo (Japan) |
AWS |
Montreal (Canada) |
AWS |
Sydney (Australia) |
AWS |
Singapore |
AWS |
Amsterdam (Netherlands) |
Azure |
Washington (US West) |
Azure |
Tokyo (Japan) |
Azure |
Virginia (US East) |
Azure |
Singapore |
Azure |
St. Leon-Rot (Germany) |
SAP |
Council Bluffs (Iowa, US Central) |
GCP |
Frankfurt (Germany) |
GCP |
The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.
SAP BTP SOC 2 Type 2 report covers within audit period the following services:
.SAP BTP, Neo Runtime |
SAP BTP, Cloud Foundry runtime |
SAP BTP, Serverless runtime |
SAP BTP, Kyma runtime |
SAP BTP, ABAP environment |
SAP Kubernetes Gardener (internal consumption only) |
SAP Alert Notification service for SAP BTP |
SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub |
SAP Application Logging Service for SAP BTP |
SAP Audit Log service |
SAP Authorization and Trust Management service |
SAP ASE service |
SAP Business Application Studio |
SAP Cloud for Energy |
SAP Cloud Identity Access Governance |
SAP Cloud Integration for data services |
SAP Cloud Portal service |
SAP Connectivity service |
SAP Continuous Integration and Delivery |
SAP Credential Store |
SAP Custom Domain service |
SAP Data Privacy Integration |
SAP Data Quality Management |
SAP Data Retention Manager |
SAP Data Warehouse Cloud |
SAP Destination service |
SAP Digital Manufacturing Cloud |
SAP Document Center |
SAP Document Management service (incl. integration option and application option) |
SAP Document service |
SAP BTP, Neo Runtime |
SAP BTP, Cloud Foundry runtime |
SAP BTP, Serverless runtime |
SAP Edge Services |
SAP Event Mesh |
SAP Feature Flags service |
SAP Fiori Cloud |
SAP Fiori Mobile |
SAP Forms service by Adobe |
SAP Git service |
SAP HANA Cloud • SAP HANA Cloud, SAP HANA database • SAP HANA Cloud, data lake |
SAP HANA service for SAP BTP
|
SAP HANA Spatial Services |
SAP HTML5 Application Repository service for SAP BTP
|
SAP Information Collaboration Hub |
SAP Integration Suite: • Cloud Integration • SAP API Management • Integration Advisor • Open Connectors |
SAP Intelligent Robotic Process Automation |
SAP Internet of Things |
SAP Job Scheduling service |
SAP Keystore service |
SAP Launchpad service |
SAP Leonardo Machine Learning Foundation
|
SAP Logistics Business Network: • SAP Logistics Business Network, freight collaboration option • SAP Logistics Business Network, global track and trace option • SAP Logistics Business Network, material traceability option |
SAP Market Rates Management (incl. Bring your own rates and Refinitiv data option) |
SAP Mobile services
|
SAP Monitoring service for SAP BTP |
SAP OData Provisioning |
SAP BTP, Neo Runtime |
SAP BTP, Cloud Foundry runtime |
SAP BTP, Serverless runtime |
SAP Platform Identity Provider service for SAP BTP |
SAP Software-as-a-Service Provisioning service |
SAP Solutions Lifecycle Management service for SAP BTP |
SAP Sports One |
SAP Subscription Billing |
SAP Cloud Transport Management |
SAP Virtual Machine service |
SAP Web Analytics |
SAP Web IDE |
SAP Workflow Management: • Workflow Service • SAP Business Rules • SAP Process Visibility service |
Application Autoscaler Service
|
Business Entity Recognition |
Data Attribute Recommendation |
Document Classification |
Document Information Extraction |
Hyperledger Fabric on SAP BTP |
Identity and Authentication |
Identity Provisioning |
Invoice Object Recommendation |
Java Application Lifecycle Management for SAP BTP |
Java Debugging for SAP BTP |
Java Profiling for SAP BTP |
MongoDB on SAP BTP
|
MultiChain on SAP BTP
|
OAuth 2.0 on SAP BTP
|
Object Store on SAP BTP
|
PostgreSQL on SAP BTP
|
SAP BTP, Neo Runtime |
SAP BTP, Cloud Foundry runtime |
SAP BTP, Serverless runtime |
PostgreSQL on SAP BTP, hyperscaler option |
RabbitMQ on SAP BTP |
Redis on SAP BTP
|
Redis on BTP, hyperscaler option
|
Service Ticket Intelligence |
UI Theme Designer |
UI5 flexibility for key users |
|
|