The SAP Cloud Platform is a cloud computing platform for developing, deploying, and running applications. It supports the Platform as a Service (PaaS) cloud service model and enables cloud and hybrid operations for its customers. The rapid development and integration of SAP Cloud Platform customer applications is widely supported by the offered platform services developed and operated by SAP. SAP Cloud Platform is available in numerous geographic regions and relies on different operational models for service delivery.
The Cloud Computing Compliance Controls Catalogue (abbreviated “C5”) is intended primarily for cloud service providers as well as their customers and auditors. It is defined which requirements (also referred to as controls in this context) the cloud providers have to comply with or which minimum requirements the cloud providers should be obliged to meet. The catalogue is divided into 17 thematic sections (e.g. organization of information security, physical security). The surrounding parameters provide additional information on the data location, provision of services, place of jurisdiction, certifications and duties of investigation and disclosure towards government agencies and contain a system description.
SAP Cloud Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2019 to 31. October 2020.
The following locations and their IaaS provider are covered:
Location |
IaaS provider |
St. Leon-Rot (Germany) |
SAP |
Colorado Springs (Colorado, USA) |
SAP |
Frankfurt (Germany) |
SAP |
Sydney (Australia) |
SAP |
Ashburn (Virginia, USA) |
SAP |
Sterling (Virginia, USA) |
SAP |
Chandler (Arizona, USA) |
SAP |
Tokyo (Japan) |
SAP |
Toronto (Canada) |
SAP |
Moscow (Russian Federation) |
SAP |
Sao Paulo (Brazil) |
SAP |
Amsterdam (Netherlands) |
SAP |
Dubai (UAE) |
SAP |
Riyadh (Saudi Arabia) |
SAP |
Shanghai (China) |
SAP |
Frankfurt (Germany) |
AWS |
Virginia (US East) |
AWS |
Sao Paulo (Brazil) |
AWS |
Tokyo (Japan) |
AWS |
Montreal (Canada) |
AWS |
Sydney (Australia) |
AWS |
Singapore |
AWS |
Amsterdam (Netherlands) |
Azure |
Washington (US West) |
Azure |
Tokyo (Japan) |
Azure |
Council Bluffs (Iowa, US Central) |
GCP |
Frankfurt (Germany) |
GCP |
The SAP Cloud Platform Services hereinafter are in place since November 1, 2019:
SAP Cloud Platform Runtime |
Keystore Service |
SAP Cloud Platform Git Service |
Authorization & Trust Management Service |
Credential Store |
Job Scheduler |
Connectivity Service |
Monitoring Service |
Platform Identity Provider |
SAP Cloud Platform, SAP HANA Service |
SAP Cloud Platform Integration for data services |
SAP Cloud Platform, ABAP environment |
PostgreSQL on SAP Cloud Platform |
SAP Cloud Platform Portal |
SAP Fiori Cloud |
MongoDB on SAP Cloud Platform |
SAP Document Center |
SAP Fiori Mobile |
SAP Cloud Platform, SAP ASE service |
SAP Cloud Platform Mobile Services |
UI Theme Designer |
Redis on SAP Cloud Platform |
SAP Cloud Platform Identity Provisioning |
SAP Cloud Platform OData Provisioning |
Object Store as a Service |
SAP Cloud Platform Identity and Authentication |
SAP Cloud Platform WEB IDE |
RabbitMQ on SAP Cloud Platform |
Application Logging Service |
Workflow Service |
Custom Domain Service |
Feature Flags Service |
SAP Cloud Platform Forms by Adobe |
Debugging Service |
Application Autoscaler Service |
SAP Digital Manufacturing Cloud |
SAP Cloud Platform Document Service |
Destination Service |
Enterprise Messaging |
Java Apps Lifecycle Management |
Solutions Lifecycle Management |
Profiling Service |
OAuth 2.0 Service |
SAP Cloud Platform Enhanced Disaster Recovery |
SAP Cloud Platform Virtual Machine |
SAP Cloud Platform Integration Suite: • SAP Cloud Platform Process Integration • SAP Cloud Platform API Management • SAP API Business Hub • Integration Advisor • Open Connectors
|
SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub |
SAP Kubernetes Gardener |
The SAP Cloud Platform services introduced hereinafter are in place since May 1, 2020:
PostgreSQL on SAP Cloud Platform, Hyperscaler Option |
Redis on SAP Cloud Platform, Hyperscaler Option |
SAP Web Analytics |
SAP Cloud Platform Extension Factory, serverless runtime |
SAP Cloud Platform Business Rules |
SAP Cloud Platform Process Visibility |
Data Attribute Recommendation |
Document Classification |
Document Information Extraction |
Invoice Object Recommendation |
Service Ticket Intelligence |
SAP Leonardo Machine Learning Foundation |
SAP Business Application Studio |
SAP Subscription Billing |
SAP Cloud for Energy |
SAP Logistics Business Network: • SAP Global Track and Trace • SAP Freight Collaboration |
|
|
The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.