SAP Trust Center
SAP Concur SOC 1 (ISAE 3402) Audit Report 2022 H2
SAP Concur’s travel and expense management solutions (SAP Concur solutions) in scope for this SOC 1 Audit are:
- Concur Standard/Professional/Premium Editions, including Travel, Expense, and Invoice
- Concur Small Business Edition (formerly Breeze)
- SAP Concur's mobile app (including both Standard/Professional/Premium and Small Business)
- Concur Supporting Services (Imaging, Analytics and ConcurPay)
These applications consist of services and software for automating the travel and expense management processes. The products are primarily sold as a subscription service. SAP Concur markets and sells Concur Standard/Professional/Premium (including Travel, Expense, and Invoice), Concur Small Business, and Concurs Mobile App solutions worldwide through a direct sales organization and indirect distribution channels such as strategic resellers. SAP Concur has deployed in co-locations Lynnwood, WA (USA) and Paris (EMEA). SAP Concur’s travel and expense management solutions, and supporting services such as Imaging, Analytics, and Concur Pay, automate each step of the travel and expense management process, from travel booking and expense report preparation and approval to business policy compliance, reimbursement, and data analysis.
Concur Standard/Professional/Premium are solutions that include Travel, Expense, and Invoice functions in one which help to reduce errors and improve policy compliance and automatically populates expense reports with key information such as transaction date, type, vendor, location, method of payment, amount, and currency conversion.
Concur Standard/Professional/Premium Travel enables organizations to provide online corporate travel booking capabilities to their employees, tailored specifically to travel policies and preferred vendors.
Concur Small Business is an expense management solution that is designed for the small and medium-sized business market. Concur Small Business is built on the Concur Standard/Professional/Premium hardware and software platform in order to leverage SAP Concur’s expense management technologies.
Concur Standard/Professional/Premium Invoice automates the process of capturing, submitting, approving, and paying vendor invoices. Customers determine how invoices should be processed based on customizable workflow rules, and how to route invoices for approval based on cost center, dollar limit, or other criteria.
SAP Concur Mobile App works with the Concur Standard/Professional/Premium and the Concur Small Business applications to give mobile users convenient functionality through their mobile device.
SOC 1 reports specifically address service organizations internal control over financial reporting and controls specified by the service provider. The SOC 1 reports are intended solely for the information and use of existing user entities (for ex. Existing customers of the service organization), their financial statement auditors and management of the service organization. SOC 1 reports are prepared in accordance with Statement on Standards for Attestation Engagements (SSAE) No.18, a new guidance that the auditors use to conduct a SOC 1 engagement. SOC 1 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.
SAP Concur Solutions has prepared SOC 1 Type 2 audit report by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2021 to 30. September 2022.
The use of these reports is restricted. A copy of this report is available for all SAP Concur customers who had productive and had financially-relevant systems during the audit period covered by the report.