Skip to Content

SAP Trust Center

SAP HANA Enterprise Cloud C5 Audit Report 2020

SAP HANA Enterprise Cloud is a fully scalable and secure private managed cloud solution available only from SAP and helps organizations to drive IT and business transformation, quickly delivering business outcomes, and reducing risk. The SAP HANA Enterprise Cloud reference architecture helps the customer to use flexible services for modular and rapid deployment. 

The SAP HANA Enterprise Cloud drives: Innovation at your own pace; An adaptive, scalable operating model; Reduced time and cost to go-live; Comprehensive SLAs coordinated across solution landscape.

The Cloud Computing Compliance Controls Catalogue (abbreviated “C5”) is intended primarily for cloud service providers as well as their customers and auditors. It is defined which requirements (also referred to as controls in this context) the cloud providers have to comply with or which minimum requirements the cloud providers should be obliged to meet. The catalogue is divided into 17 thematic sections (e.g. organization of information security, physical security). The surrounding parameters provide additional information on the data location, provision of services, place of jurisdiction, certifications and duties of investigation and disclosure towards government agencies and contain a system description.

SAP HANA Enterprise Cloud has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2019 to 31. October 2020.

The following locations and their IaaS provider are covered:

Location
Ownership

Colorado, US

SAP

St. Leon–Rot, Germany

SAP

Walldorf, Germany (productive since February 2020)

SAP

Amsterdam, Netherlands

Co-location

Frankfurt, Germany

Co-location

Moscow, Russia

Co-location

Osaka, Japan

Co-location

Santa Clara, US

Co-location

Sterling, US

Co-location

Sydney, Australia

Co-location

Tokyo, Japan

Co-location

Toronto, Canada

Co-location

Ashburn, US

Co-location

Asia-Pacific, Seoul

Amazon Web Service (AWS)

Asia-Pacific, Singapore

Amazon Web Service (AWS)

Asia-Pacific, Sydney

Amazon Web Service (AWS)

Asia-Pacific, Tokyo

Amazon Web Service (AWS)

EU, Frankfurt

Amazon Web Service (AWS)

EU, Ireland

Amazon Web Service (AWS)

Middle East, Bahrain

Amazon Web Service (AWS)

South America, Sao-Paulo

Amazon Web Service (AWS)

US East, North Virginia

Amazon Web Service (AWS)

US West, Oregon

Amazon Web Service (AWS)

Australia East, Sydney

Microsoft Azure

Canada Central, Toronto

Microsoft Azure

East Asia, Hongkong

Microsoft Azure

Germany Central, Frankfurt

Microsoft Azure

Ireland, Dublin

Microsoft Azure

Japan East, Tokyo

Microsoft Azure

Japan West, Osaka

Microsoft Azure

Korea Central, Seoul

Microsoft Azure

South Africa North, Johannesburg

Microsoft Azure

South East Asia, Singapore

Microsoft Azure

US East, Virginia

Microsoft Azure

US West, Washington

Microsoft Azure

West Europe, Amsterdam

Microsoft Azure

Australia, Southeast

Google Cloud Platform

Belgium, West Europe (productive since September 2020)

Google Cloud Platform

Iowa, US Central

Google Cloud Platform

London, West Europe

Google Cloud Platform

Northern Virginia, US East

Google Cloud Platform

The use of this report is restricted. A copy of this report is available for all SAP HANA Enterprise Cloud customers with productive systems. This report is also available for prospective customers under the signed non-disclosure agreement.

Back to top