Skip to Content

SAP Business Technology Platform SOC 2 Audit Report 2021 H1

SAP Business Technology Platform (SAP BTP) is an integrated offering comprised of four technology portfolios: database and data management, application development and integration, analytics, and intelligent technologies. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.

The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, and Kyma, as well as multiple different regions, and a broad choice of programming languages.

The SOC 2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Processing Integrity, Confidentiality, and Privacy which must be met to demonstrate a well-designed system. SOC 2 also contains details on performed tests and their results. SOC 2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.

SAP Business Technology Platform has regularly prepared SOC 2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1 November 2020 to 30 April 2021 and the trust principles Security, Confidentiality and Availability. The following locations and their IaaS provider are covered:

Location

IaaS provider

St. Leon-Rot (Germany)

SAP

Colorado Springs (Colorado, USA)

SAP

Frankfurt (Germany)

SAP

Sydney (Australia)

SAP

Ashburn (Virginia, USA)

SAP

Sterling (Virginia, USA)

SAP

Chandler (Arizona, USA)

SAP

St. Leon-Rot (Germany)

SAP

Tokyo (Japan)

SAP

Toronto (Canada)

SAP

Moscow (Russian Federation)

SAP

Sao Paulo (Brazil)

SAP

Amsterdam (Netherlands)

SAP

Dubai (UAE)

SAP

Riyadh (Saudi Arabia)

SAP

Shanghai (China)

SAP

Frankfurt (Germany)

AWS

Virginia (US East)

AWS

Sao Paulo (Brazil)

AWS

Tokyo (Japan)

AWS

Montreal (Canada)

AWS

Sydney (Australia)

AWS

Singapore

AWS

Amsterdam (Netherlands)

Azure

Washington (US West)

Azure

Tokyo (Japan)

Azure

Virginia (US East)

Azure

Singapore

Azure

St. Leon-Rot (Germany)

SAP

Council Bluffs (Iowa, US Central)

GCP

Frankfurt (Germany)

GCP

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

SAP BTP SOC 2 Type 2 report covers within audit period the following services:

.SAP BTP, Neo Runtime

SAP BTP, Cloud Foundry runtime

SAP BTP, Serverless runtime

SAP BTP, Kyma runtime

SAP BTP, ABAP environment

SAP Kubernetes Gardener

(internal consumption only)

SAP Alert Notification service for SAP BTP

SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub

SAP Application Logging Service for SAP BTP  

SAP Audit Log service  

SAP Authorization and Trust Management service

SAP ASE service  

SAP Business Application Studio  

SAP Cloud for Energy

SAP Cloud Identity Access Governance  

SAP Cloud Integration for data services

SAP Cloud Portal service

SAP Connectivity service  

SAP Continuous Integration and Delivery  

SAP Credential Store

SAP Custom Domain service 

SAP Data Privacy Integration  

SAP Data Quality Management

SAP Data Retention Manager

SAP Data Warehouse Cloud  

SAP Destination service  

SAP Digital Manufacturing Cloud  

SAP Document Center  

SAP Document Management service (incl. integration option and application option)

SAP Document service  

SAP BTP, Neo Runtime

SAP BTP, Cloud Foundry runtime

SAP BTP, Serverless runtime

SAP Edge Services  

SAP Event Mesh

SAP Feature Flags service  

SAP Fiori Cloud  

SAP Fiori Mobile  

SAP Forms service by Adobe

SAP Git service

SAP HANA Cloud 

• SAP HANA Cloud, SAP HANA database

• SAP HANA Cloud, data lake

SAP HANA service for SAP BTP  

 

SAP HANA Spatial Services  

SAP HTML5 Application Repository service for SAP BTP  

 

SAP Information Collaboration Hub  

SAP Integration Suite:

• Cloud Integration

• SAP API Management

• Integration Advisor

• Open Connectors

SAP Intelligent Robotic Process Automation  

SAP Internet of Things  

SAP Job Scheduling service  

SAP Keystore service  

SAP Launchpad service 

SAP Leonardo Machine Learning Foundation  

 

SAP Logistics Business Network:

• SAP Logistics Business Network, freight collaboration option

• SAP Logistics Business Network, global track and trace option

• SAP Logistics Business Network, material traceability option

SAP Market Rates Management (incl. Bring your own rates and Refinitiv data option)

SAP Mobile services 

 

SAP Monitoring service for SAP BTP 

SAP OData Provisioning  

SAP BTP, Neo Runtime

SAP BTP, Cloud Foundry runtime

SAP BTP, Serverless runtime

SAP Platform Identity Provider service for SAP BTP  

SAP Software-as-a-Service Provisioning service  

SAP Solutions Lifecycle Management service for SAP BTP  

SAP Sports One  

SAP Subscription Billing  

SAP Cloud Transport Management

SAP Virtual Machine service  

SAP Web Analytics  

SAP Web IDE  

SAP Workflow Management:

• Workflow Service

• SAP Business Rules

• SAP Process Visibility service

Application Autoscaler Service

 

Business Entity Recognition 

Data Attribute Recommendation  

Document Classification 

Document Information Extraction  

Hyperledger Fabric on SAP BTP  

Identity and Authentication  

Identity Provisioning  

Invoice Object Recommendation  

Java Application Lifecycle Management for SAP BTP  

Java Debugging for SAP BTP

Java Profiling for SAP BTP  

MongoDB on SAP BTP  

 

MultiChain on SAP BTP  

 

OAuth 2.0 on SAP BTP  

 

Object Store on SAP BTP  

 

PostgreSQL on SAP BTP

 

SAP BTP, Neo Runtime

SAP BTP, Cloud Foundry runtime

SAP BTP, Serverless runtime

PostgreSQL on SAP BTP, hyperscaler option

RabbitMQ on SAP BTP

Redis on SAP BTP  

 

Redis on BTP, hyperscaler option

 

Service Ticket Intelligence  

UI Theme Designer  

UI5 flexibility for key users  

 

 

Back to top