SAP Business Technology Platform (SAP BTP) is an integrated offering comprised of four technology portfolios: database and data management, application development and integration, analytics, and intelligent technologies. The platform offers users the ability to turn data into business value, compose end-to-end business processes, and build and extend SAP applications.

The services and solutions of SAP BTP are available on multiple cloud infrastructure providers. The multi-cloud foundation supports different environments, such as Cloud Foundry, ABAP, Kyma, and Neo, as well as multiple different regions and a broad choice of programming languages.

The SOC 1 reports are intended solely for the information and use of existing user entities (for ex. Existing customers of the service organization), their financial statement auditors, and management of the service organization. SOC 1 reports are prepared in accordance with Statement on Standards for Attestation Engagements (SSAE) No.18, a new guidance that the auditors use to conduct a SOC 1 engagement. SOC 1 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.

SAP Business Technology Platform has regularly prepared SOC 1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period May 1, 2021 to October 31, 2021.

The following locations and their IaaS provider are covered:

Location
IaaS provider

St. Leon-Rot (Germany)

SAP

Colorado Springs (Colorado, USA)

SAP

Frankfurt (Germany)

SAP

Sydney (Australia)

SAP

Ashburn (Virginia, USA)

SAP

Sterling (Virginia, USA)

SAP

Chandler (Arizona, USA)

SAP

Tokyo (Japan)

SAP

Osaka (Japan)

SAP

Toronto (Canada)

SAP

Moscow (Russian Federation)

SAP

Sao Paulo (Brazil)

SAP

Amsterdam (Netherlands)

SAP

Dubai (UAE)

SAP

Riyadh (Saudi Arabia)

SAP

Shanghai (China)

SAP

Frankfurt (Germany)

AWS

Virginia (US East)

AWS

Sao Paulo (Brazil)

AWS

Tokyo (Japan)

AWS

Montreal (Canada)

AWS

Sydney (Australia)

AWS

Singapore

AWS

Seoul (South Korea)

AWS

Amsterdam (Netherlands)

Azure

Washington (US West)

Azure

Tokyo (Japan)

Azure

Virginia (US East)

Azure

Singapore

Azure

Sydney (Australia)

Azure

Toronto (Canada)

Azure

Dubai (UAE)

Azure

Council Bluffs (Iowa, US Central)

GCP

Frankfurt (Germany)

GCP

SAP BTP SOC1 Type 2 report covers within audit period the following services:

SAP BTP, Neo Runtime

SAP BTP, Cloud Foundry runtime

SAP BTP, Serverless runtime

SAP BTP, Kyma runtime

SAP BTP, ABAP environment

SAP AI Core

SAP AI Launchpad

SAP Alert Notification service for SAP BTP

SAP Analytics Cloud including SAP Digital Boardroom and SAP Analytics Hub

SAP Application Logging service for SAP BTP

SAP Audit Log service

SAP Authorization and Trust Management service

SAP ASE service

SAP Asset Intelligence Network

SAP Automation Pilot

SAP Business Application Studio

SAP Cloud for Energy

SAP Cloud Identity Access Governance

SAP Cloud Integration for data services

SAP Cloud Portal service

SAP Cloud Transport Management

SAP Connectivity service

SAP Continuous Integration and Delivery

SAP Conversational AI

SAP Credential Store

SAP Custom Domain service

SAP Data Intelligence

SAP Data Privacy Integration

SAP Data Quality Management

SAP Data Retention Manager

SAP Data Warehouse Cloud

SAP Destination service

SAP Digital Manufacturing Cloud

SAP Document Center

SAP Document Management service (incl. integration option and application option)

SAP Document service

SAP Edge Services  

 

SAP Event Mesh

SAP Feature Flags service  

SAP Fiori Cloud

SAP Forms service by Adobe

SAP Git service

SAP HANA Cloud 

• SAP HANA Cloud, SAP HANA database

• SAP HANA Cloud, data lake

SAP HANA service for SAP BTP

SAP HANA spatial services

SAP HTML5 Application Repository service for SAP BTP

SAP Information Collaboration Hub

SAP Integration Suite:

• Cloud Integration

• SAP API Management

• Integration Advisor

• Open Connectors

SAP Intelligent Robotic Process Automation

SAP Internet of Things

SAP Job Scheduling service

SAP Keystore service

SAP Kubernetes Gardener

SAP Launchpad service

SAP Leonardo Machine Learning Foundation

SAP Logistics Business Network:

• SAP Logistics Business Network, freight collaboration option

• SAP Logistics Business Network, global track and trace option

• SAP Logistics Business Network, material traceability option

SAP Market Rates Management (incl. Bring your own rates and Refinitiv data option)

SAP Master Data Governance, cloud edition

SAP Master Data Integration

SAP Mobile services

SAP Monitoring service for SAP BTP

SAP Multi-Bank Connectivity

SAP OData Provisioning

SAP Personal Data Manager

SAP Platform Identity Provider service for SAP BTP

SAP Software-as-a-Service Provisioning service

SAP Solutions Lifecycle Management service for SAP BTP

SAP Sports One

SAP Subscription Billing

SAP Task Center

SAP Usage Data Management service for SAP BTP

SAP Virtual Machine service

SAP Web Analytics

SAP Web IDE

SAP Workflow Management:

• Workflow Service

• SAP Business Rules

• SAP Process Visibility service

SAP Work Zone

Application Autoscaler

Business Entity Recognition

Data Attribute Recommendation

Document Classification

Document Information Extraction

Hyperledger Fabric on SAP BTP

Identity and Authentication

Identity Provisioning

Invoice Object Recommendation

Java Application Lifecycle Management for SAP BTP

Java Debugging for SAP BTP

Java Profiling for SAP BTP

MongoDB on SAP BTP

MultiChain on SAP BTP

OAuth 2.0 on SAP BTP

Object Store on SAP BTP

PostgreSQL on SAP BTP / PostgreSQL on SAP BTP, Hyperscaler Option

RabbitMQ on SAP BTP

Redis on SAP BTP / Redis on BTP, Hyperscaler Option

Service Ticket Intelligence

UI Theme Designer

UI5 flexibility for key users

 

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.