Skip to Content

SAP Cloud Platform SOC 2 Audit Report 2020 H2

The SAP Cloud Platform is a cloud computing platform for developing, deploying, and running applications. It supports the Platform as a Service (PaaS) cloud service model and enables cloud and hybrid operations for its customers. The rapid development and integration of SAP Cloud Platform customer applications is widely supported by the offered platform services developed and operated by SAP. SAP Cloud Platform is available in numerous geographic regions and relies on different operational models for service delivery.

SOC2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Processing Integrity, Confidentiality, and Privacy which must be met to demonstrate a well-designed system. SOC2 also contains details on performed tests and their results. SOC2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.

SAP Cloud Platform has regularly prepared SOC2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. May 2020 to 31. October 2020 and the trust principles Security, Confidentiality and Availability. The following locations and their IaaS provider are covered:

Location
IaaS provider

St. Leon-Rot (Germany)

SAP

Colorado Springs (Colorado, USA)

SAP

Frankfurt (Germany)

SAP

Sydney (Australia)

SAP

Ashburn (Virginia, USA)

SAP

Sterling (Virginia, USA)

SAP

Chandler (Arizona, USA)

SAP

Tokyo (Japan)

SAP

Toronto (Canada)

SAP

Moscow (Russian Federation)

SAP

Sao Paulo (Brazil)

SAP

Amsterdam (Netherlands)

SAP

Dubai (UAE)

SAP

Riyadh (Saudi Arabia)

SAP

Shanghai (China)

SAP

Frankfurt (Germany)

AWS

Virginia (US East)

AWS

Sao Paulo (Brazil)

AWS

Tokyo (Japan)

AWS

Montreal (Canada)

AWS

Sydney (Australia)

AWS

Singapore

AWS

Amsterdam (Netherlands)

Azure

Washington (US West)

Azure

Tokyo (Japan)

Azure

Council Bluffs (Iowa, US Central)

GCP

Frankfurt (Germany)

GCP

SAP Cloud Platform SOC2 Type 2 report covers within audit period the following services:

SAP Cloud Platform Runtime

Keystore Service

SAP Cloud Platform Git Service

Authorization & Trust Management Service

Credential Store

Job Scheduler

Connectivity Service

Monitoring Service

Platform Identity Provider

SAP Cloud Platform, SAP HANA Service

SAP Cloud Platform Integration for data services

SAP Cloud Platform, ABAP environment

PostgreSQL on SAP Cloud Platform

SAP Cloud Platform Portal

SAP Fiori Cloud

MongoDB on SAP Cloud Platform

SAP Document Center

SAP Fiori Mobile

SAP Cloud Platform, SAP ASE service

SAP Cloud Platform Mobile Services

UI Theme Designer

Redis on SAP Cloud Platform

SAP Cloud Platform Identity Provisioning

SAP Cloud Platform OData Provisioning

Object Store as a Service

SAP Cloud Platform Identity and Authentication

SAP Cloud Platform WEB IDE

RabbitMQ on SAP Cloud Platform

Application Logging Service

Workflow Service

Custom Domain Service

Feature Flags Service

SAP Cloud Platform Forms by Adobe

Debugging Service

Application Autoscaler Service

SAP Digital Manufacturing Cloud

SAP Cloud Platform Document Service

Destination Service

Enterprise Messaging

Java Apps Lifecycle Management

Solutions Lifecycle Management

Profiling Service

OAuth 2.0 Service

SAP Cloud Platform Enhanced Disaster Recovery

Redis on SAP Cloud Platform, Hyperscaler Option

PostgreSQL on SAP Cloud Platform, Hyperscaler Option

SAP Cloud Platform Virtual Machine

SAP Web Analytics

SAP Cloud Platform Extension Factory, serverless runtime

SAP Cloud Platform Business Rules

SAP Cloud Platform Process Visibility

Data Attribute Recommendation

Document Classification

Document Information Extraction

Invoice Object Recommendation

Service Ticket Intelligence

SAP Leonardo Machine Learning Foundation

SAP Business Application Studio

SAP Subscription Billing

SAP Cloud for Energy

SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub

SAP Kubernetes Gardener 

SAP Logistics Business Network:

• SAP Global Track and Trace

• SAP Freight Collaboration

SAP Cloud Platform Integration Suite:

• SAP Cloud Platform Process Integration

• SAP Cloud Platform API Management

• SAP API Business Hub

• Integration Advisor

• Open Connectors

 

 

 

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

Back to top