SAP Enterprise Management SOC 1 Audit Report 2024 H1

SAP Enterprise Management solutions in scope of this SOC1 report are:

 

  • SAP Advanced Financial Closing,

  • SAP Asset Performance Management,

  • SAP Business ByDesign,

  • SAP Integrated Business Planning,

  • SAP Marketing Cloud,

  • SAP S/4HANA Cloud for Projects ,

  • SAP S/4HANA Cloud Public Edition.

 

SAP Enterprise Management infrastructure is located at the following data center locations:

DC Locations

Infrastructure

Amsterdam, The Netherlands

SAP Converged Cloud

Ashburn 3, VA, US

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Shanghai, China

SAP Converged Cloud

Dubai, UAE

SAP Converged Cloud

Toronto, Canada

SAP Converged Cloud

Colorado Springs, US

SAP Converged Cloud

Colorado Springs, US

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Toronto, Canada

SAP Converged Cloud

Dubai, United Arab Emirates

SAP Converged Cloud

Frankfurt, Germany

SAP Converged Cloud

Frankfurt, Germany

SAP Converged Cloud

NSQ, PA, US

SAP Converged Cloud

Osaka, Japan

SAP Converged Cloud

Riyadh, Saudi Arabia

SAP Converged Cloud

St. Leon-Rot, Germany

SAP Converged Cloud

Shanghai, China

SAP Converged Cloud

Sterling, US

SAP Converged Cloud

Tokyo, Japan

SAP Converged Cloud

Council Bluffs, US

Google Cloud Platform

Ashburn, VA, US

Google Cloud Platform

Tokyo, Japan

Google Cloud Platform

Sao Paulo, Brazil

Google Cloud Platform

Frankfurt, Germany

Google Cloud Platform

Mumbai, India

Google Cloud Platform

Eemshaven, The Netherlands 

Google Cloud Platform

Amsterdam, The Netherlands

Microsoft Azure

Quincy, US

Microsoft Azure

Ashburn, VA, US

Microsoft .NET

Ashburn, VA, US

Microsoft .NET

Frankfurt, Germany

Microsoft .NET

Singapore

Microsoft .NET

Europe

SAP BTP, Cloud Foundry on AWS

Europe

SAP BTP, Cloud Foundry on AWS

USA

SAP BTP, Cloud Foundry on AWS

Singapore

SAP BTP, Cloud Foundry on AWS

Europe

SAP BTP, Cloud Foundry on MS Azure

USA

SAP BTP, Cloud Foundry on MS Azure

Council Bluffs

SAP BTP, Cloud Foundry on GCP

Canada

SAP BTP, Cloud Foundry on AWS

Walldorf, Germany

SAP Converged Cloud

East US (1)

MS Azure

Germany West Central

MS Azure

Southeast Asia (Singapore)

MS Azure

SOC 1 reports are prepared pursuant to AT-C Section 320 and International Standard on Assurance Engagements No. 3402. SOC 1 reports are specifically intended to meet the needs of the entities that use service organizations (user entities) and the CPAs that audit the user entities’ financial statements (user auditors).  Please note that this examination's scope does not include the controls and related control objectives of any subservice organizations. SOC 1 Type 1 report on the fairness of the presentation of management’s description of the service organization’s system and the suitability of the design of controls to achieve the related control objectives as of a specified date, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls to achieve the related control objectives throughout a specified period.

 

SAP Enterprise Management has regularly prepared SOC 1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. October 2023 to 31. March 2024.

 

The use of these reports is restricted to the management of the service organization, user entities, and user auditors. A copy of this report is available for all SAP Enterprise Management customers who had productive and had financially-relevant systems during the audit period covered by the report.

SAP Enterprise Management solutions in scope of this SOC1 report are:

 

  • SAP Advanced Financial Closing,

  • SAP Asset Performance Management,

  • SAP Business ByDesign,

  • SAP Integrated Business Planning,

  • SAP Marketing Cloud,

  • SAP S/4HANA Cloud for Projects ,

  • SAP S/4HANA Cloud Public Edition.

 

SAP Enterprise Management infrastructure is located at the following data center locations:

DC Locations

Infrastructure

Amsterdam, The Netherlands

SAP Converged Cloud

Ashburn 3, VA, US

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Shanghai, China

SAP Converged Cloud

Dubai, UAE

SAP Converged Cloud

Toronto, Canada

SAP Converged Cloud

Colorado Springs, US

SAP Converged Cloud

Colorado Springs, US

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Sydney, Australia

SAP Converged Cloud

Toronto, Canada

SAP Converged Cloud

Dubai, United Arab Emirates

SAP Converged Cloud

Frankfurt, Germany

SAP Converged Cloud

Frankfurt, Germany

SAP Converged Cloud

NSQ, PA, US

SAP Converged Cloud

Osaka, Japan

SAP Converged Cloud

Riyadh, Saudi Arabia

SAP Converged Cloud

St. Leon-Rot, Germany

SAP Converged Cloud

Shanghai, China

SAP Converged Cloud

Sterling, US

SAP Converged Cloud

Tokyo, Japan

SAP Converged Cloud

Council Bluffs, US

Google Cloud Platform

Ashburn, VA, US

Google Cloud Platform

Tokyo, Japan

Google Cloud Platform

Sao Paulo, Brazil

Google Cloud Platform

Frankfurt, Germany

Google Cloud Platform

Mumbai, India

Google Cloud Platform

Eemshaven, The Netherlands 

Google Cloud Platform

Amsterdam, The Netherlands

Microsoft Azure

Quincy, US

Microsoft Azure

Ashburn, VA, US

Microsoft .NET

Ashburn, VA, US

Microsoft .NET

Frankfurt, Germany

Microsoft .NET

Singapore

Microsoft .NET

Europe

SAP BTP, Cloud Foundry on AWS

Europe

SAP BTP, Cloud Foundry on AWS

USA

SAP BTP, Cloud Foundry on AWS

Singapore

SAP BTP, Cloud Foundry on AWS

Europe

SAP BTP, Cloud Foundry on MS Azure

USA

SAP BTP, Cloud Foundry on MS Azure

Council Bluffs

SAP BTP, Cloud Foundry on GCP

Canada

SAP BTP, Cloud Foundry on AWS

Walldorf, Germany

SAP Converged Cloud

East US (1)

MS Azure

Germany West Central

MS Azure

Southeast Asia (Singapore)

MS Azure

SOC 1 reports are prepared pursuant to AT-C Section 320 and International Standard on Assurance Engagements No. 3402. SOC 1 reports are specifically intended to meet the needs of the entities that use service organizations (user entities) and the CPAs that audit the user entities’ financial statements (user auditors).  Please note that this examination's scope does not include the controls and related control objectives of any subservice organizations. SOC 1 Type 1 report on the fairness of the presentation of management’s description of the service organization’s system and the suitability of the design of controls to achieve the related control objectives as of a specified date, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls to achieve the related control objectives throughout a specified period.

 

SAP Enterprise Management has regularly prepared SOC 1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. October 2023 to 31. March 2024.

 

The use of these reports is restricted to the management of the service organization, user entities, and user auditors. A copy of this report is available for all SAP Enterprise Management customers who had productive and had financially-relevant systems during the audit period covered by the report.