SAP Trust Center

SAP Commerce Cloud is a digital commerce platform offering a software-as-a-service (SaaS) model in the public cloud. Customers extend and build their own environment on top of the SAP Commerce Cloud core codebase to achieve the desired e-commerce solution. All solutions run within the dedicated hyperscaler subscription of each customer. Customers can perform several self-service tasks through Cloud Portal.

SOC 1 reports specifically address service organizations internal control over financial reporting and controls specified by the service provider. The SOC 1 reports are intended solely for the information and use of existing user entities (for ex. existing customers of the service organization), their financial statement auditors and management of the service organization. SOC 1 reports are prepared in accordance with Statement on Standards for Attestation Engagements (SSAE) No.16, a new guidance that the auditors use to conduct a SOC 1 engagement. SOC 1 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls for a dedicated period. 

SAP Commerce Cloud has regularly prepared SOC 1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2021 to 31. March 2022 in data centers in Virginia (US East), Osaka (Japan), Sydney (Australia East), Melbourne (Australia Southeast), Sao Paolo (Brazil South), Toronto (Canada Central), Quebec City (Canada East), Hong Kong (East Asia), Tokyo (Japan), Dublin (Ireland), San Antonio (Texas), Singapore (Southeast Asia), Amsterdam (West Europe), California (West US), London (South UK), Cardiff (West UK), Pune (India Central), Chennai (India South), Shanghai (China East 2), Beijing (China North 2), Dubai (UAE North), Abu Dhabi (UAE Central), and Mumbai (India West).

The use of these reports is restricted. A copy of this report is available for all SAP Commerce Cloud customers who had productive and had financially-relevant systems during the audit period covered by the report.