SAP Enterprise Management C5 Audit Report 2026

  • SAP Business ByDesign

  • SAP Integrated Business Planning 

  • SAP Marketing Cloud 

  • SAP Project and Resource Management 

  • SAP S/4HANA Cloud Public Edition*

  • SAP S/4HANA Cloud Public Edition, Finance Base

  • SAP S/4HANA Cloud Public Edition, Finance Premium (as part of SAP Finance Premium)

  • SAP S/4HANA Cloud Public Edition, Supply Chain Base (as part of SAP Supply Chain Base)

  • SAP S/4HANA Cloud Public Edition, Supply Chain Premium (as part of SAP Supply Chain Premium)

  • SAP S/4HANA Public Ed, FIN Base (as part SAP Finance Base and Supply Chain Base)

  • SAP S/4HANA Public Ed, SCM Base (as part SAP Finance Base and Supply Chain Base)

  • SAP S/4HANA Cloud Public Ed, operations (as part of SAP Finance and Supply Chain operations)

  • Core S/4HANA Cloud Public Edition tenant (as part of Core: GROW with S/4HANA Public Edition, base)

  • Core S/4HANA Cloud Public Edition tenant (as part of Core: GROW with S/4HANA Public Edition, premium)

  • Core S/4HANA Cloud Public Edition tenant (as part of Core: GROW with S/4HANA Public Edition, base (CN))

  • Core S/4HANA Cloud Public Edition tenant (as part of Core: GROW with S/4HANA Public Edition, premium (CN))

  • Core S/4HANA Cloud Public Edition tenant (as part of Core: RISE with SAP S/4HANA Cloud and experience management)

  • SAP S/4HANA Cloud, Digital Access

  • CPEA Voucher

  • SAP S/4HANA Cloud for cash management

  • SAP S/4HANA Cloud for receivables management

  • SAP S/4HANA Asset management for resource scheduling

  • SAP S/4HANA Cloud for contract accounting and invoicing

  • SAP S/4HANA Cloud for contract and lease management

  • SAP S/4HANA Cloud for treasury and risk management

  • SAP S/4HANA Cloud for financial asset management

  • SAP S/4HANA Cloud for advanced payment management

  • SAP S/4HANA Cloud for advanced variant configuration, standard version

  • SAP S/4HANA Cloud for advanced variant configuration, professional version

  • SAP S/4HANA Cloud for advanced variant configuration, public edition

  • SAP S/4HANA Cloud for group reporting

  • SAP Document and Reporting Compliance for S/4HANA Cloud

  • SAP S/4HANA Cloud for product compliance

  • SAP S/4HANA Cloud for upstream contracts management

  • SAP S4HC upstream oil and gas, ES

  • SAP S/4HANA Cloud for advanced ATP

  • SAP S/4HANA Cloud for enterprise contract management

  • SAP S/4HANA Cloud for central procurement

  • SAP S/4HANA Cloud for intelligent accounting automation

  • SAP S/4HANA Cloud Digital Access

  • SAP S/4HANA Cloud for EHS environment management

  • SAP S/4HANA Cloud for EHS workplace safety

  • SAP S/4HANA Cloud for retail, fashion, and vertical business

  • SAP S/4HANA Cloud for asset retirement obligations

  • SAP S/4HANA Cloud for field equipment and material logistics planning and execution

  • PLMSI for S/4HANA public cloud

  • S4 field equipment cloud

  • SAP S/4HANA Cloud Public Ed, self-serv

  • SAP FIN and SCM, additional data

  • SAP Cloud ERP, group reporting

  • SAP Finance and Supply Chain developer

  • SAP S/4HANA Cloud, test data refresh, 3SL

  • SAP S/4HANA Cloud, test data refresh, 2SL

SAP Enterprise Management cloud services are offered out of below locations and infrastructures. For a detailed listing please refer to section III of the SOC report. Not all SAP Enterprise Management cloud services run in each location.

  • Amsterdam, The Netherlands

  • Colorado Springs, CO, United States

  • Dubai, United Arab Emirates

  • Frankfurt, Germany

  • Northern Virginia, VA, United States

  • Quincy, WA, United States

  • Shanghai, China

  • St. Leon-Rot, Germany

  • Sterling, VA, United States

  • Sydney, Australia

  • Tokyo, Japan

  • Toronto, Canada

  • Walldorf, Germany

Amazon Web Services

  • US East N. Virginia

Google Cloud Platform

  • Council Bluffs, IA, United States

  • Dammam, Saudi Arabia

  • Eemshaven, The Netherlands

  • Mumbai, India

Microsoft Azure

  • Amsterdam, The Netherlands

  • Quincy, WA, United States

  • VA, Unites States

Cloud Computing Compliance Controls Catalogue (C5) reports are prepared in accordance with attestation standards established by the American Institute of Certified Public Accountants (“AICPA”) and in accordance with the International Standard on Assurance Engagements (“ISAE”) 3000 Revised, Assurance Engamenets Other than Audits or Reviews of Historical Financial Information, issued by the International Auditing and Assurance Board (IAASB). C5 outlines minimum security for cloud computing, aimed at cloud providers, auditors, and clients. Introduced in 2016, it helps customers choose a secure cloud provider and tailor a risk management system. C5 assures cloud services security by providing transparency via a standardized examination and reporting system. The 2020 version of C5 includes 125 criteria from 17 areas, based on national and international standards and publications.

 

SAP Enterprise Management has regularly prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. April 2025 to 31. March 2026.

 

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

twitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixel