Skip to Content

SAP Cloud Platform C5 Audit Report 2020

The SAP Cloud Platform is a cloud computing platform for developing, deploying, and running applications. It supports the Platform as a Service (PaaS) cloud service model and enables cloud and hybrid operations for its customers. The rapid development and integration of SAP Cloud Platform customer applications is widely supported by the offered platform services developed and operated by SAP. SAP Cloud Platform is available in numerous geographic regions and relies on different operational models for service delivery.

The Cloud Computing Compliance Controls Catalogue (abbreviated “C5”) is intended primarily for cloud service providers as well as their customers and auditors. It is defined which requirements (also referred to as controls in this context) the cloud providers have to comply with or which minimum requirements the cloud providers should be obliged to meet. The catalogue is divided into 17 thematic sections (e.g. organization of information security, physical security). The surrounding parameters provide additional information on the data location, provision of services, place of jurisdiction, certifications and duties of investigation and disclosure towards government agencies and contain a system description.

SAP Cloud Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2019 to 31. October 2020.

The following locations and their IaaS provider are covered:

Location
IaaS provider

St. Leon-Rot (Germany)

SAP

Colorado Springs (Colorado, USA)

SAP

Frankfurt (Germany)

SAP

Sydney (Australia)

SAP

Ashburn (Virginia, USA)

SAP

Sterling (Virginia, USA)

SAP

Chandler (Arizona, USA)

SAP

Tokyo (Japan)

SAP

Toronto (Canada)

SAP

Moscow (Russian Federation)

SAP

Sao Paulo (Brazil)

SAP

Amsterdam (Netherlands)

SAP

Dubai (UAE)

SAP

Riyadh (Saudi Arabia)

SAP

Shanghai (China)

SAP

Frankfurt (Germany)

AWS

Virginia (US East)

AWS

Sao Paulo (Brazil)

AWS

Tokyo (Japan)

AWS

Montreal (Canada)

AWS

Sydney (Australia)

AWS

Singapore

AWS

Amsterdam (Netherlands)

Azure

Washington (US West)

Azure

Tokyo (Japan)

Azure

Council Bluffs (Iowa, US Central)

GCP

Frankfurt (Germany)

GCP

The SAP Cloud Platform Services hereinafter are in place since November 1, 2019:

SAP Cloud Platform Runtime

Keystore Service

SAP Cloud Platform Git Service

Authorization & Trust Management Service

Credential Store

Job Scheduler

Connectivity Service

Monitoring Service

Platform Identity Provider

SAP Cloud Platform, SAP HANA Service

SAP Cloud Platform Integration for data services

SAP Cloud Platform, ABAP environment

PostgreSQL on SAP Cloud Platform

SAP Cloud Platform Portal

SAP Fiori Cloud

MongoDB on SAP Cloud Platform

SAP Document Center

SAP Fiori Mobile

SAP Cloud Platform, SAP ASE service

SAP Cloud Platform Mobile Services

UI Theme Designer

Redis on SAP Cloud Platform

SAP Cloud Platform Identity Provisioning

SAP Cloud Platform OData Provisioning

Object Store as a Service

SAP Cloud Platform Identity and Authentication

SAP Cloud Platform WEB IDE

RabbitMQ on SAP Cloud Platform

Application Logging Service

Workflow Service

Custom Domain Service

Feature Flags Service

SAP Cloud Platform Forms by Adobe

Debugging Service

Application Autoscaler Service

SAP Digital Manufacturing Cloud

SAP Cloud Platform Document Service

Destination Service

Enterprise Messaging

Java Apps Lifecycle Management

Solutions Lifecycle Management

Profiling Service

OAuth 2.0 Service

SAP Cloud Platform Enhanced Disaster Recovery

SAP Cloud Platform Virtual Machine

SAP Cloud Platform Integration Suite:

• SAP Cloud Platform Process Integration

• SAP Cloud Platform API Management

• SAP API Business Hub

• Integration Advisor

• Open Connectors

 

SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub

SAP Kubernetes Gardener 

The SAP Cloud Platform services introduced hereinafter are in place since May 1, 2020: 

PostgreSQL on SAP Cloud Platform, Hyperscaler Option

Redis on SAP Cloud Platform, Hyperscaler Option

SAP Web Analytics

SAP Cloud Platform Extension Factory, serverless runtime

SAP Cloud Platform Business Rules

SAP Cloud Platform Process Visibility

Data Attribute Recommendation

Document Classification

Document Information Extraction

Invoice Object Recommendation

Service Ticket Intelligence

SAP Leonardo Machine Learning Foundation

SAP Business Application Studio

SAP Subscription Billing

SAP Cloud for Energy

SAP Logistics Business Network:

• SAP Global Track and Trace

• SAP Freight Collaboration

 

 

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

Back to top