SAP Business Technology Platform (SAP BTP) is a technology platform that brings together application development, data and analytics, integration, automation, and AI capabilities in one unified environment. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.
The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, Kyma, and Neo, as well as multiple different regions and a broad choice of programming languages.
The SOC 2 reports fulfill various information and assurance needs of customers and aim to place trust in SAP’s service organization systems, processes, and controls. These narratives are related to the trust principles Security, Availability, Processing Integrity, Confidentiality, and Privacy which must be met to demonstrate a well-designed system. SOC 2 also contains details on performed tests and their results. SOC 2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.
SAP Business Technology Platform has regularly prepared SOC 2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. April 2022 to 30. September 2022 and the trust principles Security, Confidentiality and Availability.
The following locations and their IaaS provider are covered:
Location |
IaaS provider |
St. Leon-Rot (Germany) |
SAP |
Colorado Springs (Colorado, USA) |
SAP |
Frankfurt (Germany) |
SAP |
Sydney (Australia) |
SAP |
Ashburn (Virginia, USA) |
SAP |
Sterling (Virginia, USA) |
SAP |
Chandler (Arizona, USA) |
SAP |
Tokyo (Japan) |
SAP |
Osaka (Japan) |
SAP |
Toronto (Canada) |
SAP |
Sao Paulo (Brazil) |
SAP |
Amsterdam (Netherlands) |
SAP |
Dubai (UAE) |
SAP |
Riyadh (Saudi Arabia) |
SAP |
Shanghai (China) |
SAP |
Frankfurt (Germany) |
AWS |
Virginia (US East) |
AWS |
Sao Paulo (Brazil) |
AWS |
Tokyo (Japan) |
AWS |
Montreal (Canada) |
AWS |
Sydney (Australia) |
AWS |
Singapore |
AWS |
Seoul (South Korea) |
AWS |
Amsterdam (Netherlands) |
Azure |
Washington (US West) |
Azure |
Tokyo (Japan) |
Azure |
Virginia (US East) |
Azure |
Singapore |
Azure |
Sydney (Australia) |
Azure |
Toronto (Canada) |
Azure |
Dubai (UAE) |
Azure |
Council Bluffs (Iowa, US Central) |
GCP |
Frankfurt (Germany) |
GCP |
SAP BTP SOC 2 Type 2 report covers within audit period the following services:
SAP BTP, Neo Runtime |
SAP BTP, Cloud Foundry runtime |
SAP BTP, Kyma runtime |
SAP BTP, ABAP environment |
SAP AI Core |
SAP AI Launchpad |
SAP Alert Notification service for SAP BTP |
SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub |
SAP API Business Hub |
SAP Application Logging service for SAP BTP |
SAP ASE service |
SAP Asset Intelligence Network |
SAP Audit Log service |
SAP Authorization and Trust Management service |
SAP Automation Pilot |
SAP Business Application Studio |
SAP Cloud Appliance Library |
SAP Cloud for Energy |
SAP Cloud Identity Access Governance |
SAP Cloud Identity Services - Identity Authentication |
SAP Cloud Identity Services - Identity Provisioning |
SAP Cloud Integration for data services |
SAP Cloud Management service for SAP BTP |
SAP Cloud Portal service |
SAP Cloud Transport Management |
SAP Connectivity service |
SAP Content Agent service |
SAP Continuous Integration and Delivery |
SAP Conversational AI |
SAP Credential Store |
SAP Custom Domain service |
SAP Data Intelligence |
SAP Data Privacy Integration |
SAP Data Quality Management |
SAP Data Retention Manager |
SAP Data Warehouse Cloud |
SAP Destination service |
SAP Digital Manufacturing Cloud |
SAP Document Center |
SAP Document Management service (incl. integration option and application option) |
SAP Document service |
SAP Entitlement Management
|
SAP Event Mesh |
SAP Feature Flags service |
SAP Fiori Cloud |
SAP Forms service by Adobe |
SAP Git service |
SAP Graph |
SAP HANA Cloud • SAP HANA Cloud, SAP Adaptive Server Enterprise • SAP HANA Cloud, SAP Adaptive Server Enterprise replication • SAP HANA Cloud, data lake • SAP HANA Cloud, SAP HANA database |
SAP HANA service for SAP BTP |
SAP HANA spatial services |
SAP HTML5 Application Repository service for SAP BTP |
SAP Information Collaboration Hub |
SAP Integration Suite: • SAP API Management • Cloud Integration • Integration Advisor • Open Connectors |
SAP Intelligent Robotic Process Automation |
SAP Job Scheduling service |
SAP Keystore service |
SAP Kubernetes environment (internal only) |
SAP Landscape Management Cloud |
SAP Launchpad service |
SAP Leonardo Machine Learning Foundation |
SAP Logistics Business Network: • SAP Logistics Business Network, freight collaboration option • SAP Logistics Business Network, global track and trace option • SAP Logistics Business Network, intelligent insights option • SAP Logistics Business Network, material traceability option • SAP Logistics Business Network, trade document collaboration option |
SAP Market Rates Management (incl. Bring your own rates and Refinitiv data option) |
SAP Master Data Governance, cloud edition |
SAP Master Data Integration |
SAP Mobile Services (incl. Agentry) |
SAP Monitoring service for SAP BTP |
SAP Multi-Bank Connectivity |
SAP OData Provisioning |
SAP Personal Data Manager |
SAP Platform Identity Provider service for SAP BTP |
SAP Service Manager |
SAP Software-as-a-Service Provisioning service |
SAP Solutions Lifecycle Management service for SAP BTP |
SAP Sports One |
SAP Subscription Billing |
SAP Task Center |
SAP Usage Data Management service for SAP BTP |
SAP Virtual Machine service |
SAP Web IDE |
SAP Workflow Management: • SAP Business Rules • SAP Process Visibility service • Workflow Service |
SAP Work Zone |
Application Autoscaler |
Business Entity Recognition |
Commercial Infrastructure Service |
Data Attribute Recommendation |
Document Classification |
Document Information Extraction |
Invoice Object Recommendation |
Java Application Lifecycle Management for SAP BTP |
Java Debugging for SAP BTP |
Java Profiling for SAP BTP |
MongoDB on SAP BTP |
OAuth 2.0 on SAP BTP |
Object Store on SAP BTP |
PostgreSQL on SAP BTP / PostgreSQL on SAP BTP, Hyperscaler Option |
RabbitMQ on SAP BTP |
Redis on SAP BTP / Redis on BTP, Hyperscaler Option |
Service Ticket Intelligence |
UI Theme Designer |
UI5 flexibility for key users |
Unified Gateway (internal only) |
The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.