SAP Business Technology Platform Cloud Computing Compliance Criteria Catalog (C5:2020) Audit Report 2024 H1
SAP Business Technology Platform (SAP BTP) is a technology platform that brings together application development, data and analytics, integration, automation, and AI capabilities in one unified environment. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.
The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, Kyma, and Neo, as well as multiple different regions and a broad choice of programming languages.
SAP BTP C5 Type 2 report covers within audit period the following services:
SAP BTP Runtime:
SAP BTP, Neo runtime
SAP BTP, Cloud Foundry runtime
SAP BTP, Kyma runtime
SAP BTP, ABAP environment
SAP BTP, Kubernetes environment (internal only)
SAP AI Core
SAP AI Launchpad
SAP Alert Notification service for SAP BTP
SAP Analytics Cloud
SAP Application Logging Service for SAP BTP
SAP ASE service
SAP Audit Log service
SAP Authorization and Trust Management service
SAP Automation Pilot
SAP Batch Release Hub for Life Sciences
SAP Build Apps
SAP Build Process Automation
SAP Build Work Zone, advanced edition
SAP Build Work Zone, standard edition
SAP Business Accelerator Hub
SAP Business Application Studio
SAP Business Network Asset Collaboration
SAP Business Network for Logistics, including:
SAP Business Network Freight Collaboration
SAP Business Network Global Track and Trace
SAP Business Network Intelligent Insights
SAP Business Network Material Traceability
SAP Cloud Appliance Library
SAP Cloud for Energy
SAP Cloud Identity Access Governance
SAP Cloud Identity Services - Identity Authentication
SAP Cloud Identity Services - Identity Provisioning
SAP Cloud Integration Automation
SAP Cloud Integration for data services
SAP Cloud Management service for SAP BTP
SAP Cloud Portal service
SAP Cloud Transport Management
SAP Connectivity service
SAP Content Agent service
SAP Content Agent service
SAP Continuous Integration and Delivery
SAP Conversational AI
SAP Credential Store
SAP Custom Domain service
SAP Data Custodian
SAP Data Intelligence Cloud
SAP Data Privacy Integration
SAP Data Quality Management
SAP Data Retention Manager
SAP Datasphere, including SAP BW Bridge
SAP Destination service
SAP Digital Manufacturing
SAP Document Center
SAP Document Management service
SAP Document service
SAP Entitlement Management
SAP Event Mesh
SAP Feature Flags service
SAP Fiori Cloud
SAP Forms service by Adobe
SAP Git service
SAP HANA Cloud, including:
SAP HANA Cloud, data lake
SAP HANA Cloud, SAP HANA database
SAP HANA service for SAP BTP
SAP HANA spatial services
SAP HTML5 Application Repository service for SAP BTP
SAP Information Collaboration Hub
SAP Integration Suite, including:
SAP API Management
Cloud Integration
Graph
Integration Advisor
Open Connectors
SAP Job Scheduling service
SAP Keystore service
SAP Landscape Management Cloud
SAP Leonardo Machine Learning Foundation
SAP Malware Scanning service
SAP Market Communication for Utilities
SAP Market Rates Management
SAP Master Data Governance, cloud edition
SAP Master Data Integration
SAP Mobile Services, including Agentry
SAP Monitoring service for SAP BTP
SAP Multi-Bank Connectivity
SAP OData Provisioning
SAP Personal Data Manager
SAP Platform Identity Provider service for SAP BTP
SAP Private Link service
SAP Profitability and Performance Management Cloud
SAP Secure Login Service for SAP GUI
SAP Service Manager
SAP Software-as-a-Service Provisioning service
SAP Solutions Lifecycle Management service for SAP BTP
SAP Sports One
SAP Subscription Billing
SAP Task Center
SAP Usage Data Management service for SAP BTP
SAP Virtual Machine service
SAP Web IDE
Application Autoscaler
Business Entity Recognition
Cloud Integration Automation
Commercial Infrastructure Service (internal only)
Data Attribute Recommendation
Document Classification
Document Information Extraction
Invoice Object Recommendation
Java Application Lifecycle Management for SAP BTP
Java Debugging for SAP BTP
Java Profiling for SAP BTP
MongoDB on SAP BTP
OAuth 2.0 on SAP BTP
Object Store on SAP BTP
PostgreSQL on SAP BTP / PostgreSQL on SAP BTP, hyperscaler option
RabbitMQ on SAP BTP
Redis on SAP BTP / Redis on SAP BTP, hyperscaler option
Service Ticket Intelligence
UI Theme Designer
UI5 flexibility for key users
Unified Gateway (internal only)
The following locations and their IaaS provider are covered:
Cloud Computing Compliance Controls Catalogue (C5) reports are prepared in accordance with attestation standards established by the American Institute of Certified Public Accountants (“AICPA”) and in accordance with the International Standard on Assurance Engagements (“ISAE”) 3000 Revised, Assurance Engamenets Other than Audits or Reviews of Historical Financial Information, issued by the International Auditing and Assurance Board (IAASB). C5 outlines minimum security for cloud computing, aimed at cloud providers, auditors, and clients. Introduced in 2016, it helps customers choose a secure cloud provider and tailor a risk management system. C5 assures cloud services security by providing transparency via a standardized examination and reporting system. The 2020 version of C5 includes 125 criteria from 17 areas, based on national and international standards and publications.
SAP Business Technology Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. April 2023 to 31. March 2024.
The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.
SAP Business Technology Platform (SAP BTP) is a technology platform that brings together application development, data and analytics, integration, automation, and AI capabilities in one unified environment. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.
The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, Kyma, and Neo, as well as multiple different regions and a broad choice of programming languages.
SAP BTP C5 Type 2 report covers within audit period the following services:
SAP BTP Runtime:
SAP BTP, Neo runtime
SAP BTP, Cloud Foundry runtime
SAP BTP, Kyma runtime
SAP BTP, ABAP environment
SAP BTP, Kubernetes environment (internal only)
SAP AI Core
SAP AI Launchpad
SAP Alert Notification service for SAP BTP
SAP Analytics Cloud
SAP Application Logging Service for SAP BTP
SAP ASE service
SAP Audit Log service
SAP Authorization and Trust Management service
SAP Automation Pilot
SAP Batch Release Hub for Life Sciences
SAP Build Apps
SAP Build Process Automation
SAP Build Work Zone, advanced edition
SAP Build Work Zone, standard edition
SAP Business Accelerator Hub
SAP Business Application Studio
SAP Business Network Asset Collaboration
SAP Business Network for Logistics, including:
SAP Business Network Freight Collaboration
SAP Business Network Global Track and Trace
SAP Business Network Intelligent Insights
SAP Business Network Material Traceability
SAP Cloud Appliance Library
SAP Cloud for Energy
SAP Cloud Identity Access Governance
SAP Cloud Identity Services - Identity Authentication
SAP Cloud Identity Services - Identity Provisioning
SAP Cloud Integration Automation
SAP Cloud Integration for data services
SAP Cloud Management service for SAP BTP
SAP Cloud Portal service
SAP Cloud Transport Management
SAP Connectivity service
SAP Content Agent service
SAP Content Agent service
SAP Continuous Integration and Delivery
SAP Conversational AI
SAP Credential Store
SAP Custom Domain service
SAP Data Custodian
SAP Data Intelligence Cloud
SAP Data Privacy Integration
SAP Data Quality Management
SAP Data Retention Manager
SAP Datasphere, including SAP BW Bridge
SAP Destination service
SAP Digital Manufacturing
SAP Document Center
SAP Document Management service
SAP Document service
SAP Entitlement Management
SAP Event Mesh
SAP Feature Flags service
SAP Fiori Cloud
SAP Forms service by Adobe
SAP Git service
SAP HANA Cloud, including:
SAP HANA Cloud, data lake
SAP HANA Cloud, SAP HANA database
SAP HANA service for SAP BTP
SAP HANA spatial services
SAP HTML5 Application Repository service for SAP BTP
SAP Information Collaboration Hub
SAP Integration Suite, including:
SAP API Management
Cloud Integration
Graph
Integration Advisor
Open Connectors
SAP Job Scheduling service
SAP Keystore service
SAP Landscape Management Cloud
SAP Leonardo Machine Learning Foundation
SAP Malware Scanning service
SAP Market Communication for Utilities
SAP Market Rates Management
SAP Master Data Governance, cloud edition
SAP Master Data Integration
SAP Mobile Services, including Agentry
SAP Monitoring service for SAP BTP
SAP Multi-Bank Connectivity
SAP OData Provisioning
SAP Personal Data Manager
SAP Platform Identity Provider service for SAP BTP
SAP Private Link service
SAP Profitability and Performance Management Cloud
SAP Secure Login Service for SAP GUI
SAP Service Manager
SAP Software-as-a-Service Provisioning service
SAP Solutions Lifecycle Management service for SAP BTP
SAP Sports One
SAP Subscription Billing
SAP Task Center
SAP Usage Data Management service for SAP BTP
SAP Virtual Machine service
SAP Web IDE
Application Autoscaler
Business Entity Recognition
Cloud Integration Automation
Commercial Infrastructure Service (internal only)
Data Attribute Recommendation
Document Classification
Document Information Extraction
Invoice Object Recommendation
Java Application Lifecycle Management for SAP BTP
Java Debugging for SAP BTP
Java Profiling for SAP BTP
MongoDB on SAP BTP
OAuth 2.0 on SAP BTP
Object Store on SAP BTP
PostgreSQL on SAP BTP / PostgreSQL on SAP BTP, hyperscaler option
RabbitMQ on SAP BTP
Redis on SAP BTP / Redis on SAP BTP, hyperscaler option
Service Ticket Intelligence
UI Theme Designer
UI5 flexibility for key users
Unified Gateway (internal only)
The following locations and their IaaS provider are covered:
Cloud Computing Compliance Controls Catalogue (C5) reports are prepared in accordance with attestation standards established by the American Institute of Certified Public Accountants (“AICPA”) and in accordance with the International Standard on Assurance Engagements (“ISAE”) 3000 Revised, Assurance Engamenets Other than Audits or Reviews of Historical Financial Information, issued by the International Auditing and Assurance Board (IAASB). C5 outlines minimum security for cloud computing, aimed at cloud providers, auditors, and clients. Introduced in 2016, it helps customers choose a secure cloud provider and tailor a risk management system. C5 assures cloud services security by providing transparency via a standardized examination and reporting system. The 2020 version of C5 includes 125 criteria from 17 areas, based on national and international standards and publications.
SAP Business Technology Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. April 2023 to 31. March 2024.
The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.