Skip to Content
Contactez SAP

Concur Services SOC 2 Type 2 Report

Concur Services:

Concur’s travel and expense management solutions (Concur Services) in scope for this SOC 2 Audit are:

  • Concur Standard/Professional/Premium Editions, including Travel, Expense, and Invoice,
  • Concur Small Business Edition (formerly Breeze),
  • Concur’s mobile app (including both Standard/Professional/Premium and Small Business)

These applications consist of services and software for automating the travel and expense management processes. The products are primarily sold as a subscription service. Concur markets and sells Concur Standard/Professional/Premium (including Travel, Expense, and Invoice), Concur Small Business, Concur’s mobile app, TripIt, and UlysseTravel solutions worldwide through a direct sales organization and indirect distribution channels such as strategic resellers. Concur has deployed in co-locations  Lynnwood,WA (USA) and Allen, TX (USA), and Amsterdam (EMEA) and Paris (EMEA).


There are separate SOC 2 reports available for the United States, and for the EMEA region.


Concur’s travel and expense management solutions, and supporting services such as Imaging or Analytics automate each step of the travel and expense management process, from travel booking and expense report preparation and approval to business policy compliance, reimbursement, and data analysis. Concur provides the automation and information for management to reduce manual processing, improve internal controls, increase business policy compliance, speed up reimbursement, and increase expense report accuracy.


Concur Standard/Professional/Premium are solutions that include Travel, Expense, and Invoice functions in one seamless, fully integrated application. The web-based interfaces automate the reconciliation of itinerary and corporate card data with e-receipts from travel suppliers in a seamless process and many other expense reporting tasks.


Concur Standard/Professional/Premium Travel enables organizations to provide online corporate travel booking capabilities to their employees, tailored specifically to travel policies and preferred vendors. Through a single, intuitive, web-based interface, Concur Standard/Professional/Premium Travel presents travelers with inventory options from any of the major GDS, exclusive direct connects, and Internet-only sources, providing unrestricted access to a wide selection of air, hotel, rental car, and rail inventory.


Concur Small Business is an expense management solution that is designed for the small and medium-sized business market. Concur Small Business is built on the Concur Standard/Professional/Premium hardware and software platform in order to leverage Concur’s expense management technologies.


Concur Standard/Professional/Premium Invoice automates the process of capturing, submitting, approving, and paying vendor invoices. Customers determine how invoices should be processed based on customizable workflow rules, and how to route invoices for approval based on cost center, dollar limit, or other criteria.


Concur’s mobile app works with the Concur Standard/Professional/Premium and the Concur Small Business applications to give mobile users convenient functionality through their mobile device.

SOC 2 specific:

SOC2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Confidentiality Processing Integrity or Privacy which must be met to demonstrate a well-designed system.  SOC 2 also contains details on performed tests and their results. SOC2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC2 Type 2 also includes the operating effectiveness of controls for a specified period of time.


Concur Services has regularly prepared SOC2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. October 2016 to 31. March 2017, and the trust principles Security and Availability.


The use of these reports is restricted. A copy of this report is available for all Concur Services customers during the audit period covered by the report.

Back to top