View and shield data exports automatically from SAP S/4HANA
Automatically monitors and safeguards every data export from SAP S/4HANA by applying pre‑configured policies enriched with business context, while Microsoft Purview Information Protection enforces consistent access and usage controls through existing protection profiles.
Benefits
Maximize return on investment by using single solution for total SAP landscape
Safeguard your most critical business information and trade secrets, which will cost a vast fortune if they fall into the wrong hands by means of losing customers. Ensure that your crucial data stored in SAP S/4HANA can be used safely even beyond the boundaries of its inbuilt authorization system by using a single solution for the entire SAP landscape.
Secure your business processes to comply with the regional compliance laws
Securely manage your critical data assets in various business processes according to compliance mandates such as GDPR, CMMC, PDP, and ensure that these compliance mandates are followed even beyond the boundaries of SAP S/4HANA when the PII is exported.
Gain visibility into all your SAP S/4HANA data downloads
Obtain complete visibility by monitoring all data egress and providing rich classification metadata tags based on the contextual parameters during download. These classification tags can be added to the downloaded files and subsequently visualized in downstream applications. (e.g., Data Loss Prevention, Security Information and Event Management)
Features
Get automated business context classification for all SAP S/4HANA data exports
Automatically classify all downloads and egress data streams from SAP S/4HANA using ABAC (Attribute Based Access Control) with the available metadata fetched from your business-process context.

Prevent data from being lost from SAP with policy-based data loss prevention
Automatically block all unauthorized data exports or copy-and-paste activities to prevent valuable data from being exported, as the business users might have access to critical and sensitive data.

Integrate Microsoft Purview Information Protection (MPIP) into SAP S/4HANA
Protect the exported file based on ABAC and other business-process metadata using the determined classification by automatically applying the appropriate MPIP template, ensuring the exported data has the same security profile applied as how it was within SAP S/4HANA.

Plans and pricing
SecurityHub Pilot
SecurityHub Monitor: Monitor all SAP S/4HANA data exports and downloads
SecurityHub Block: Block downloads wherever the data must not leave SAP S/4HANA
SecurityHub Protect: Protect authorized SAP S/4HANA downloads with Microsoft Purview Information Protection
Discovering the customer's data egress/ingress patterns by implementing the solution to arrive on classifying and taking appropriate action on the events.
SecurityHub Monitor: Monitor all SAP S/4HANA data exports and downloads
SecurityHub Block: Block downloads wherever the data must not leave SAP S/4HANA
SecurityHub Protect: Protect authorized SAP S/4HANA downloads with Microsoft Purview Information Protection
Discovering the customer's data egress/ingress patterns by implementing the solution to arrive on classifying and taking appropriate action on the events.