Data Processing Annex User Guide
This document a detailed user guide to help SAP supplier to navigate through the Data Processing Annex process Download the DocumentPUBLIC
Supplier Management Program @ SAP
Supplier Data Protection Compliance
Version: 1.0
Supplier Management Program @ SAP
Supplier Data Protection Compliance
Version: 1.0
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material.
Supplier Management Program @ SAP
Supplier Data Protection Compliance
Dear Contractor,
SAP has the obligation to comply with the EU General Data Protection Regulation (GDPR) and various other
statutory and contractual commitments. This includes ensuring that a Data Processing Annex (DPA) to a
Contractor Data Processing Agreement is signed between SAP and the service providing entity.
Moreover, if applicable, we request your cooperation in compiling a thorough list of your subprocessors, as this is
a key component in maintaining consistent data processes and adhering to stringent compliance standards.
Please follow these instructions to ensure strict compliance with the aforementioned regulations:
1. You will receive an email notification from SAP_DataComplianceEnablementTeam@mail.sap.com ,
requesting that you sign the DP Annex (in Word document) and complete the Subprocessor
Questionnaire (in Excel). A sample email is provided below.
2. In the DocuSign email you received, please review the document and its content carefully .
3. Add all the required information on the signature page.
a. Signature
b. Print Name
c. Job Title
d. Date
Supplier Management Program @ SAP
Supplier Data Protection Compliance
Dear Contractor,
SAP has the obligation to comply with the EU General Data Protection Regulation (GDPR) and various other
statutory and contractual commitments. This includes ensuring that a Data Processing Annex (DPA) to a
Contractor Data Processing Agreement is signed between SAP and the service providing entity.
Moreover, if applicable, we request your cooperation in compiling a thorough list of your subprocessors, as this is
a key component in maintaining consistent data processes and adhering to stringent compliance standards.
Please follow these instructions to ensure strict compliance with the aforementioned regulations:
1. You will receive an email notification from SAP_DataComplianceEnablementTeam@mail.sap.com ,
requesting that you sign the DP Annex (in Word document) and complete the Subprocessor
Questionnaire (in Excel). A sample email is provided below.
2. In the DocuSign email you received, please review the document and its content carefully .
3. Add all the required information on the signature page.
a. Signature
b. Print Name
c. Job Title
d. Date
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material.
➢ If you wish to change the signer, please follow the steps below:
o Click on OTHER ACTIONS and select “Assign to Someone Else”.
o Enter the email address and full name of the new signer, then click the "ASSIGN TO SOMEONE ELSE"
button to submit.
4. If electronic signatures are not recognized or enforceable in your locale, you have the option to:
a. Download the document
b. Sign it physically
c. Scan and send it back to SAP Data Processing Enablement (DPE) team
For processing purposes, please ensure the cover page is attached when returning the document.
➢ If you wish to change the signer, please follow the steps below:
o Click on OTHER ACTIONS and select “Assign to Someone Else”.
o Enter the email address and full name of the new signer, then click the "ASSIGN TO SOMEONE ELSE"
button to submit.
4. If electronic signatures are not recognized or enforceable in your locale, you have the option to:
a. Download the document
b. Sign it physically
c. Scan and send it back to SAP Data Processing Enablement (DPE) team
For processing purposes, please ensure the cover page is attached when returning the document.
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material.
5. If subprocessors are involved in your service provisioning, please provide the subprocessor chains
including more detailed information per direct and indirect subprocessor in the attached Excel file.
Note: The two columns (in blue) for the Supplier details will be completed by the SAP Data Processing
Enablement (DPE) team. For more detailed explanation how to fill the subprocessor questionnaire, please
refer to SCPT_DPA_Supplier_FAQ.docx.
6. Once the subprocessors list is complete, kindly send it to SAP Data Processing Enablement (DPE) team.
7. If you have any questions or require any clarifications, please use the contact details below:
SAP Data Processing Enablement Team
Email: sap_data_protection_enablement_team@sap.com
5. If subprocessors are involved in your service provisioning, please provide the subprocessor chains
including more detailed information per direct and indirect subprocessor in the attached Excel file.
Note: The two columns (in blue) for the Supplier details will be completed by the SAP Data Processing
Enablement (DPE) team. For more detailed explanation how to fill the subprocessor questionnaire, please
refer to SCPT_DPA_Supplier_FAQ.docx.
6. Once the subprocessors list is complete, kindly send it to SAP Data Processing Enablement (DPE) team.
7. If you have any questions or require any clarifications, please use the contact details below:
SAP Data Processing Enablement Team
Email: sap_data_protection_enablement_team@sap.com