SAP Industries and Customer Experience HDS Certificate
The HDS Certificate can be also found on the bsi portal: https://www.bsigroup.com/en-GB/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/HDS%20817871 Download the DocumentCertificate of Registration
Health Data Hosting Provision - Requirements and Controls - HDS:2024
This is to certify that: SAP SE Walldorf Headquarters (Office)
Dietmar-Hopp-Allee 16
Walldorf
69190
Germany
Holds Certificate No: HDS 817871
and operates and Information Security Management System for Health Information Hosting provision which complies
to the requirements of the HDS Certification Standard - Requirements and Controls - rev.2 of April 2024 for the
following scope:
Please see scope page.
For and on behalf of BSI:
David Fardel, Country Manager, EMEA Assurance
Original Registration Date: 2025-01-13 Effective Date: 2026-01-28
Latest Revision Date: 2026-02-20 Expiry Date: 2028-01-12
Page: 1 of 7
This certificate is issued electronically and remains the property of BSI France and is bound by the conditions of contract.
An electronic certificate can be authenticated online.
Printed copies can be validated at www.bsigroup.com/ClientDirectory.
Information and contacts: BSI France, Les Collines de l’Arche - Bâtiment Opéra E, 76 Route de la Demi-Lune, 92057, Paris La Défense CEDEX, France / contact is +
33 01 80 46 17 91.
Health Data Hosting Provision - Requirements and Controls - HDS:2024
This is to certify that: SAP SE Walldorf Headquarters (Office)
Dietmar-Hopp-Allee 16
Walldorf
69190
Germany
Holds Certificate No: HDS 817871
and operates and Information Security Management System for Health Information Hosting provision which complies
to the requirements of the HDS Certification Standard - Requirements and Controls - rev.2 of April 2024 for the
following scope:
Please see scope page.
For and on behalf of BSI:
David Fardel, Country Manager, EMEA Assurance
Original Registration Date: 2025-01-13 Effective Date: 2026-01-28
Latest Revision Date: 2026-02-20 Expiry Date: 2028-01-12
Page: 1 of 7
This certificate is issued electronically and remains the property of BSI France and is bound by the conditions of contract.
An electronic certificate can be authenticated online.
Printed copies can be validated at www.bsigroup.com/ClientDirectory.
Information and contacts: BSI France, Les Collines de l’Arche - Bâtiment Opéra E, 76 Route de la Demi-Lune, 92057, Paris La Défense CEDEX, France / contact is +
33 01 80 46 17 91.
SAP Industries and Customer Experience governs services in conformance with activities #1, #2, #3, #4,
#6 of the French reference system ANS HDS:2024 v2. The scope of data processing locations for personal
health data hosting, including hosting of personal health data is listed in this certificate along with office
locations where operational activities are provided from. SAP’s activities are limited to #3, #4, #6 of the
French reference system ANS HDS:2024 v2 when external infrastructure providers in Vienna, Austria and
Amsterdam, The Netherlands are used. This is in accordance with the ISMS Statement of Applicability of
SAP Customer Experience, version 6.1 as of 04DEC2025 together with the ISO/IEC 27001:2022 certificate
issued by MSECB under IAS and Accredia accreditation number CERT-000812, valid until May 31, 2027.
The organization is certified according to ISO 27001:2022. This HDS Certificate is valid subject to a valid
ISO 27001 certification for the same scope.
Certificate No: HDS 817871
Registered Scope:
Original Registration Date: 2025-01-13 Effective Date: 2026-01-28
Latest Revision Date: 2026-02-20 Expiry Date: 2028-01-12
Page: 2 of 7
This certificate is issued electronically and remains the property of BSI France and is bound by the conditions of contract.
An electronic certificate can be authenticated online.
Printed copies can be validated at www.bsigroup.com/ClientDirectory.
Information and contacts: BSI France, Les Collines de l’Arche - Bâtiment Opéra E, 76 Route de la Demi-Lune, 92057, Paris La Défense CEDEX, France / contact is +
33 01 80 46 17 91.
#6 of the French reference system ANS HDS:2024 v2. The scope of data processing locations for personal
health data hosting, including hosting of personal health data is listed in this certificate along with office
locations where operational activities are provided from. SAP’s activities are limited to #3, #4, #6 of the
French reference system ANS HDS:2024 v2 when external infrastructure providers in Vienna, Austria and
Amsterdam, The Netherlands are used. This is in accordance with the ISMS Statement of Applicability of
SAP Customer Experience, version 6.1 as of 04DEC2025 together with the ISO/IEC 27001:2022 certificate
issued by MSECB under IAS and Accredia accreditation number CERT-000812, valid until May 31, 2027.
The organization is certified according to ISO 27001:2022. This HDS Certificate is valid subject to a valid
ISO 27001 certification for the same scope.
Certificate No: HDS 817871
Registered Scope:
Original Registration Date: 2025-01-13 Effective Date: 2026-01-28
Latest Revision Date: 2026-02-20 Expiry Date: 2028-01-12
Page: 2 of 7
This certificate is issued electronically and remains the property of BSI France and is bound by the conditions of contract.
An electronic certificate can be authenticated online.
Printed copies can be validated at www.bsigroup.com/ClientDirectory.
Information and contacts: BSI France, Les Collines de l’Arche - Bâtiment Opéra E, 76 Route de la Demi-Lune, 92057, Paris La Défense CEDEX, France / contact is +
33 01 80 46 17 91.