SAP Trust Center
SAP Concur Statement of Applicability and ISO 27001 Certificate
SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Concur cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.
The ISO 27001 certificate applies to the Information Security Management System for the scope "Support, Operations and Development of the Information Security Management System for SAP Concur service offerings to commercial customers"; Following the standard ISO/IEC 27001:2013.