The SAP Cloud Platform is a cloud computing platform for developing, deploying, and running applications. It supports the Platform as a Service (PaaS) cloud service model and enables cloud and hybrid operations for its customers. The rapid development and integration of SAP Cloud Platform customer applications is widely supported by the offered platform services developed and operated by SAP. SAP Cloud Platform is available in numerous geographic regions and relies on different operational models for service delivery.
The Cloud Computing Compliance Controls Catalogue (abbreviated “C5”) is intended primarily for cloud service providers as well as their customers and auditors. It is defined which requirements (also referred to as controls in this context) the cloud providers have to comply with or which minimum requirements the cloud providers should be obliged to meet. The catalogue is divided into 17 thematic sections (e.g. organization of information security, physical security). The surrounding parameters provide additional information on the data location, provision of services, place of jurisdiction, certifications and duties of investigation and disclosure towards government agencies and contain a system description.
SAP Cloud Platform has prepared C5 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2019 to 31. October 2020.
The following locations and their IaaS provider are covered:
Location |
IaaS provider |
St. Leon-Rot (Germany) |
SAP |
Colorado Springs (Colorado, USA) |
SAP |
Frankfurt (Germany) |
SAP |
Sydney (Australia) |
SAP |
Ashburn (Virginia, USA) |
SAP |
Sterling (Virginia, USA) |
SAP |
Chandler (Arizona, USA) |
SAP |
Tokyo (Japan) |
SAP |
Toronto (Canada) |
SAP |
Moscow (Russian Federation) |
SAP |
Sao Paulo (Brazil) |
SAP |
Amsterdam (Netherlands) |
SAP |
Dubai (UAE) |
SAP |
Riyadh (Saudi Arabia) |
SAP |
Shanghai (China) |
SAP |
Frankfurt (Germany) |
AWS |
Virginia (US East) |
AWS |
Sao Paulo (Brazil) |
AWS |
Tokyo (Japan) |
AWS |
Montreal (Canada) |
AWS |
Sydney (Australia) |
AWS |
Singapore |
AWS |
Amsterdam (Netherlands) |
Azure |
Washington (US West) |
Azure |
Tokyo (Japan) |
Azure |
Council Bluffs (Iowa, US Central) |
GCP |
Frankfurt (Germany) |
GCP |