Report on the Fulfillment of the Due Diligence Obligations Anchored in the LkSG (Supply Chain Due Diligence Act)
This is the English translation of SAP's Report on the Fulfillment of the Due Diligence Obligations Anchored in the LkSG (Supply Chain Due Diligence Act). The official and legally binding report in German as submitted to the German authorities (BAFA) is accessible here: https://www.sap.com/germany/documents/2024/04/3a7eb31a-b97e-0010-bca6-c68f7e60039b.html Lae alla documentReport on the Fulfillment of the Due Diligence Obligations Anchored in the Act on Corporate Due Diligence Obligations in Supply Chains
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 44
Report on the Fulfillment of the Due Diligence Obligations Anchored in
the LkSG
(Supply Chain Due Diligence Act)
Reporting period from 1/1/2023 to 12/31/2023
Name of the organization: SAP SE
Address: Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany
Table of Contents
A. Strategy and organizational responsibilities .............................................................................. 3
A1. Risk management monitoring and management responsibility .............................................................................. 3
A2. Policy statement on the human rights strategy................................................................................................................... 5
A3. Anchoring the human rights strategy within own organization ................................................................................ 9
B. Risk analysis and preventive measures ...................................................................................... 13
B1. Execution, procedure and results of the risk analysis ................................................................................................ 13
B2. Preventive measures in own business area ....................................................................................................................... 21
B3. Preventive measures at direct suppliers .............................................................................................................................. 24
B4. Preventive measures at indirect suppliers .......................................................................................................................... 26
B5. Communicating the results............................................................................................................................................................. 28
B6. Changes in risk disposition ............................................................................................................................................................. 29
C. Identification of violations and remedial measures ............................................................. 30
C1. Identification of violations and remedial measures in respective own business area ........................ 30
C2. Identification of violations and remedial measures at direct suppliers ......................................................... 32
C3. Identification of violations and remedial measures at indirect suppliers ..................................................... 33
D. Complaints procedure ......................................................................................................................... 35
D1. Establishing or participating in a complaints procedure .......................................................................................... 35
D2. Requirements for the complaints procedure ................................................................................................................... 38
D3. Implementation of the complaints procedure................................................................................................................. 40
E. Review of risk management ............................................................................................................... 42
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 44
Report on the Fulfillment of the Due Diligence Obligations Anchored in
the LkSG
(Supply Chain Due Diligence Act)
Reporting period from 1/1/2023 to 12/31/2023
Name of the organization: SAP SE
Address: Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany
Table of Contents
A. Strategy and organizational responsibilities .............................................................................. 3
A1. Risk management monitoring and management responsibility .............................................................................. 3
A2. Policy statement on the human rights strategy................................................................................................................... 5
A3. Anchoring the human rights strategy within own organization ................................................................................ 9
B. Risk analysis and preventive measures ...................................................................................... 13
B1. Execution, procedure and results of the risk analysis ................................................................................................ 13
B2. Preventive measures in own business area ....................................................................................................................... 21
B3. Preventive measures at direct suppliers .............................................................................................................................. 24
B4. Preventive measures at indirect suppliers .......................................................................................................................... 26
B5. Communicating the results............................................................................................................................................................. 28
B6. Changes in risk disposition ............................................................................................................................................................. 29
C. Identification of violations and remedial measures ............................................................. 30
C1. Identification of violations and remedial measures in respective own business area ........................ 30
C2. Identification of violations and remedial measures at direct suppliers ......................................................... 32
C3. Identification of violations and remedial measures at indirect suppliers ..................................................... 33
D. Complaints procedure ......................................................................................................................... 35
D1. Establishing or participating in a complaints procedure .......................................................................................... 35
D2. Requirements for the complaints procedure ................................................................................................................... 38
D3. Implementation of the complaints procedure................................................................................................................. 40
E. Review of risk management ............................................................................................................... 42
Report on the Fulfillment of the Due Diligence Obligations Anchored in the Act on Corporate Due Diligence Obligations in Supply Chains
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 3 / 44
A. Strategy and organizational responsibilities
A1. Risk management monitoring and management responsibility
1. What responsibilities for monitoring risk management were defined during the reporting
period?
On January 1, 2023, SAP appointed a Human Rights Officer and her deputy. These two employees are
part of the Corporate Sustainability team and work closely with a steering committee, which supports
the integration of the due diligence obligations into their respective processes with resources and
strategic links.
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 3 / 44
A. Strategy and organizational responsibilities
A1. Risk management monitoring and management responsibility
1. What responsibilities for monitoring risk management were defined during the reporting
period?
On January 1, 2023, SAP appointed a Human Rights Officer and her deputy. These two employees are
part of the Corporate Sustainability team and work closely with a steering committee, which supports
the integration of the due diligence obligations into their respective processes with resources and
strategic links.
Report on the Fulfillment of the Due Diligence Obligations Anchored in the Act on Corporate Due Diligence Obligations in Supply Chains
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 4 / 44
A. Strategy and organizational responsibilities
A1. Risk management monitoring and management responsibility
2. Has senior management established a reporting process to ensure that it is regularly – at
least once a year – informed about the work of the person responsible for monitoring risk
management?
2.1. It is confirmed that senior management has established a reporting process which, within
the meaning of Section 4 (3) LkSG, ensures that it is regularly – at least once a year –
informed about the work of the person responsible for monitoring risk management.
Confirmed
2.1.1. Describe the process that ensures reporting to senior management at least annually or
on a regular basis with respect to risk management.
The entire Executive Board of SAP SE receives a written report from the Human Rights Officer at least
once a year, which provides information about the implementation of risk management and other
requirements from the LkSG. Individual Executive Board members are also in contact with the Human
Rights Officer about specific matters.
(Lieferkettensorgfaltspflichtengesetz - LkSG) for SAP SE
English translation - official and legally binding report in German available here
© 2024 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 4 / 44
A. Strategy and organizational responsibilities
A1. Risk management monitoring and management responsibility
2. Has senior management established a reporting process to ensure that it is regularly – at
least once a year – informed about the work of the person responsible for monitoring risk
management?
2.1. It is confirmed that senior management has established a reporting process which, within
the meaning of Section 4 (3) LkSG, ensures that it is regularly – at least once a year –
informed about the work of the person responsible for monitoring risk management.
Confirmed
2.1.1. Describe the process that ensures reporting to senior management at least annually or
on a regular basis with respect to risk management.
The entire Executive Board of SAP SE receives a written report from the Human Rights Officer at least
once a year, which provides information about the implementation of risk management and other
requirements from the LkSG. Individual Executive Board members are also in contact with the Human
Rights Officer about specific matters.