Skip to Content

SAP Ariba Quadrem SOC 2 Audit Report 2015 H2

SAP Ariba is a leading provider of on-demand spend management solutions. SAP Ariba’s mission is to transform the way companies of all sizes, across all industries, and geographies operate by delivering technology, service, and network solutions that enable them to holistically source, contract, procure, pay, manage, and analyze their spend and supplier relationships. SAP Ariba Quadrem is a transaction delivery network that connects more than 90,000 suppliers and 1,500 buyer locations; handles more than $40 billion in order throughput annually. SAP Ariba Quadrem membership includes Global 1000 buyers and suppliers from a variety of industries, as well as suppliers of all sizes located in metropolitan, rural and developing regions around the world. SAP Ariba‘s global offices provide expertise spanning technology, procurement processes and the change management that accompanies e-procurement initiatives. The SAP Ariba Quadrem Production Systems are located in Amsterdam Netherlands. Corporate functions (HR, Finance, IT) are centrally managed from the SAP Ariba offices in Pittsburgh (PA), Alpharetta (GA) and Sunnyvale (CA) USA or regional specific locations.


SOC2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Confidentiality Processing Integrity or Privacy which must be met to demonstrate a well-designed system.  SOC 2 also contains details on performed tests and their results. SOC2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.


SAP Ariba Quadrem has regularly prepared SOC2 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. May 2016 to 31. October2016, the locations North America, Europe and Russia as well as in co-locations Sunnyvale, California (USA) and Pittsburgh, Pennsylvania (USA) and the trust principle Security.


The use of this report is restricted. A copy of this report is available for all SAP Ariba Quadrem customers who had productive systems during the audit period. This report is also available for prospective customers under the signed non-disclosure agreement.

Back to top