Skip to Content

SAP Trust Center

SAP Cloud Platform C5 Audit Report 2019

SAP Cloud Platform is the SAP Business Application Platform-as-a-Service (PaaS) offering. As an essential part of SAP’s cloud strategy, it enables SAP and its partners and customers to develop, deploy, run, operate, and use applications in a cloud environment. The cloud platform is built to enable interoperability and at the same time to ensure security and integrity required by applications operating in a distributed network environment.

SAP Cloud Platform is a multitenant public cloud offering which allows application providers, including SAP itself, to build lightweight, collaborative, network-oriented applications to complement and extend existing SAP solutions.

SAP Cloud Platform consists of services that are offered on different infrastructures, leveraging SAP infrastructures or external Infrastructure-as-a-Service (IaaS) provider.  

SAP Cloud Platform is a product implemented by SAP, and as such, it uses the Innovation Cycle framework for product and solution creation, certified with ISO 9001:2015.

The Cloud Computing Compliance Controls Catalogue (abbreviated “C5”) is intended primarily for cloud service providers as well as their customers and auditors. It is defined which requirements (also referred to as controls in this context) the cloud providers have to comply with or which minimum requirements the cloud providers should be obliged to meet. The catalogue is divided into 17 thematic sections (e.g. organization of information security, physical security). The surrounding parameters provide additional information on the data location, provision of services, place of jurisdiction, certifications and duties of investigation and disclosure towards government agencies and contain a system description.

SAP Cloud Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant.

This version of the report covers the audit period 1. November 2018 to 31. October 2019, the location St. Leon–Rot (Germany) as well as in the co-location data centers:

Amsterdam (Netherlands)

Sao Paulo (Brazil)

Ashburn (Virginia, USA)

Shanghai (China)

Colorado Springs (Colorado, USA)


Council Bluffs (Iowa)

Sterling (Virginia, USA)

Dubai (United Arab Emirates)

Sydney (Australia)

Frankfurt (Germany)

Tokyo (Japan)

Montreal (Canada)

Toronto (Canada)

Moscow (Russian Federation)

US East (Virginia, USA)

Phoenix (Arizona, USA)

US West (Washington USA)

Riyadh (Saudi Arabia)


The use of this report is restricted. A copy of this report is available for all SAP Cloud Platform customers with productive systems. This report is also available for prospective customers under the signed non-disclosure agreement.

SAP Cloud Platform C5 Type 2 report covers within audit period the following services:

SAP Cloud Platform Runtime

Profiling Service

Application Autoscaler Service

Authorization & Trust Management Service

OAuth 2.0 Service

Destination Service

Connectivity Service

Keystore Service

SAP Cloud Platform Enhanced Disaster Recovery

SAP Cloud Platform SAP HANA Service

Credential Store

SAP Cloud Platform Virtual Machine

PostgreSQL on SAP Cloud Platform

Monitoring Service

SAP Cloud Platform Git Service

MongoDB on SAP Cloud Platform

SAP Cloud Platform Integration

Job Scheduler

SAP Cloud Platform SAP ASE service

SAP Cloud Platform Integration for data services

Platform Identity Provider

Redis on SAP Cloud Platform

SAP Cloud Platform Portal

SAP Cloud Platform, ABAP environment

Object Store as a Service

SAP Document Center

SAP Fiori Cloud

RabbitMQ on SAP Cloud Platform

SAP Cloud Platform Mobile Services

SAP Fiori Mobile

Custom Domain Service

SAP Cloud Platform Identity Provisioning

UI Theme Designer

Debugging Service

SAP Cloud Platform API Management

Open Connectors

SAP Cloud Platform Document Service

SAP Cloud Platform Identity and Authentication

SAP Cloud Platform OData Provisioning

Java Apps Lifecycle Management

Application Logging Service

SAP Cloud Platform WEB IDE

Solutions Lifecycle Management

Feature Flags Service

SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub



SAP Kubernetes Gardener 

Back to top