Skip to Content

SAP Trust Center

SAP Business Technology Platform SOC 2 (ISAE 3000) Audit Report 2022 H1

SAP Business Technology Platform (SAP BTP) is an integrated offering comprised of four technology portfolios: database and data management, application development and integration, analytics, and intelligent technologies. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications. 

The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, Kyma, and Neo, as well as multiple different regions and a broad choice of programming languages.  

The SOC 2 reports fulfill various information and assurance needs of customers and aim to place trust in SAP’s service organization systems, processes, and controls. These narratives are related to the trust principles Security, Availability, Processing Integrity, Confidentiality, and Privacy which must be met to demonstrate a well-designed system. SOC 2 also contains details on performed tests and their results. SOC 2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.  

SAP Business Technology Platform has regularly prepared SOC 2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period November 1, 2021 to March 31, 2022.

 The following locations and their IaaS provider are covered:

 Location  IaaS provider
 St. Leon-Rot (Germany)   SAP
 Colorado Springs (Colorado, USA)  SAP
 Frankfurt (Germany)  SAP
 Sydney (Australia)  SAP
 Ashburn (Virginia, USA)  SAP
 Sterling (Virginia, USA)  SAP
 Chandler (Arizona, USA)   SAP
 Tokyo (Japan)  SAP
 Osaka (Japan)  SAP
 Toronto (Canada)  SAP
 Moscow (Russian Federation)  SAP
 Sao Paulo (Brazil)  SAP
 Amsterdam (Netherlands)  SAP
 Dubai (UAE)  SAP
 Riyadh (Saudi Arabia)  SAP
 Shanghai (China)  SAP
 Frankfurt (Germany)  AWS
 Virginia (US East)  AWS
 Sao Paulo (Brazil)  AWS
 Tokyo (Japan)  AWS
 Montreal (Canada)  AWS
 Sydney (Australia)  AWS
 Singapore  AWS
 Seoul (South Korea)  AWS
 Amsterdam (Netherlands)  Azure
 Washington (US West)  Azure
 Tokyo (Japan)  Azure
 Virginia (US East)  Azure
 Singapore  Azure
 Sydney (Australia)  Azure
 Toronto (Canada)  Azure
 Dubai (UAE)  Azure
 Council Bluffs (Iowa, US Central)  GCP
 Frankfurt (Germany)  GCP

SAP BTP SOC2 Type 2 report covers within audit period the following services:

 SAP BTP, Neo Runtime  SAP BTP, Cloud Foundry runtime SAP BTP, Kyma runtime 
 SAP BTP, ABAP environment  SAP AI Core  SAP AI Launchpad
 SAP Alert Notification service for SAP BTP  SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub  SAP API Business Hub
 SAP Application Logging service for SAP BTP  SAP Audit Log service  SAP Authorization and Trust Management service
 SAP ASE service  SAP Asset Intelligence Network  SAP Automation Pilot
 SAP Business Application Studio  SAP Cloud for Energy  SAP Cloud Identity Access Governance
 SAP Cloud Identity Services - Identity Authentication  SAP Cloud Identity Services - Identity Provisioning  SAP Cloud Integration for data services
 SAP Cloud Management service for SAP BTP  SAP Cloud Portal service  SAP Cloud Transport Management
 SAP Connectivity service  SAP Continuous Integration and Delivery  SAP Conversational AI
 SAP Credential Store  SAP Custom Domain service  SAP Data Intelligence
 SAP Data Privacy Integration  SAP Data Quality Management  SAP Data Retention Manager
 SAP Data Warehouse Cloud  SAP Destination service  SAP Digital Manufacturing Cloud
 SAP Document Center  SAP Document Management service (incl. integration option and application option)  SAP Document service
 SAP Edge Services  SAP Entitlement Management  SAP Event Mesh
 SAP Feature Flags service  SAP Fiori Cloud  SAP Forms service by Adobe
 SAP Git service  SAP HANA Cloud (incl. SAP HANA database, data lake, SAP Adaptive Server Enterprise, SAP Adaptive Server Enterprise replication)  SAP HANA service for SAP BTP
 SAP HANA spatial services  SAP HTML5 Application Repository service for SAP BTP  SAP Information Collaboration Hub
 SAP Integration Suite:
• Cloud Integration
• SAP API Management
• Integration Advisor
• Open Connectors
 SAP Intelligent Robotic Process Automation  SAP Internet of Things
 SAP Job Scheduling service  SAP Keystore service  SAP Kubernetes Gardener (internal only)
 SAP Launchpad service  SAP Leonardo Machine Learning Foundation  SAP Logistics Business Network (incl. freight collaboration option, global track and trace option, intelligent insights option, material traceability option)
 SAP Market Rates Management (incl. Bring your own rates and Refinitiv data option)  SAP Master Data Governance, cloud edition  SAP Master Data Integration
 SAP Mobile services (incl. Agentry)  SAP Monitoring service for SAP BTP  SAP Multi-Bank Connectivity 
 SAP OData Provisioning  SAP Personal Data Manager  SAP Platform Identity Provider service for SAP BTP
 SAP Software-as-a-Service Provisioning service  SAP Solutions Lifecycle Management service for SAP BTP   SAP Sports One
 SAP Subscription Billing  SAP Task Center  SAP Usage Data Management service for SAP BTP
 SAP Virtual Machine service  SAP Web Analytics  SAP Web IDE
 SAP Workflow Management (incl. Workflow Service, SAP Business Rules, SAP Process Visibility service)  SAP Work Zone  Application Autoscaler
 Business Entity Recognition  Commercial Infrastructure Service  Data Attribute Recommendation
 Document Classification  Document Information Extraction  Hyperledger Fabric on SAP BTP
 Invoice Object Recommendation  Java Application Lifecycle Management for SAP BTP  Java Debugging for SAP BTP
 Java Profiling for SAP BTP  MongoDB on SAP BTP  MultiChain on SAP BTP
 OAuth 2.0 on SAP BTP  Object Store on SAP BTP  PostgreSQL on SAP BTP / PostgreSQL on SAP BTP, Hyperscaler Option
 RabbitMQ on SAP BTP  Redis on SAP BTP / Redis on BTP, Hyperscaler Option  Service Ticket Intelligence
 UI Theme Designer  UI5 flexibility for key users  

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

Back to top