From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
Every source, what it says and when it was read.
...C5 Performance Calendar FY2025-2026 SAP is committed to timely and transparent reporting. SOC 1 reports are targeted for publication within 90 days after each performance period. SOC 2 reports follow a 12-month...
...SOC 1 reports are targeted for publication within 90 days after each performance period. SOC 2 reports follow a 12-month audit cycle, with the next release scheduled for the first half of 2026. For any questions,...
...(such as strong customer focus) that involve top SAP management. Find an ISO 9001 certificate ISO 27001 Security Management System ISO/IEC 27001 provides a holistic, risked-based approach to security and a comprehensive...
...controls for protecting personal data in the public cloud. Find an ISO 27018 certificate ISO 27017 Code of Practice for Cloud Service Information Security ISO/IEC 27001 provides information security controls for...
...awareness training, risk assessments, data retention, and disposal. Find a BS 10012 certificate ISO 27018 Code of Practice for Personally Identifiable information ISO/IEC 27018 sets guidance for cloud service providers...
...customer success partner is ready to assist. Sign in to My Trust Center to learn more NEW ISO/IEC 42001 for AI management systems SAP has achieved certification for ISO/IEC 42001, the first global standard for AI management...
DoD Cloud Intelligent Enterprise – DD-CIE
FedRAMP Authorized, Moderate impact; authorized 2017-06-13 (Agency); assessor Fortreum, LLC; 1 agency authorization
SAP NS2 Cloud Intelligent Enterprise
FedRAMP Authorized, Moderate impact; authorized 2017-11-13 (JAB); assessor Fortreum, LLC; 24 agency authorizations
...packages See the SOC 2 bridge letter packages Payment Card Industry Data Security Standard (PCI DSS) This global data security standard is adopted by the payment card brands for all entities that process, store,...
Partner entry in the STAR Registry
Listed as SAP since 2016-06-25; EU Cloud Code of Conduct entry
...financial entities (2024) See DORA mapping of the SAP agreement for financial entities (2025) EU EU Cloud Code of Conduct Endorsed by the European Data Protection Board and approved by the Belgian Data Protection Authority, the EU Cloud...
CAIQ, certification
Listed as SAP since 2016-06-25; Level 2 (third-party audit)
...certification body. Find Cyber Essentials certificates AUSTRALIA Cloud Security Assessment (IRAP-CSA) The Australian government’s Cloud Security Assessment and Authorization Framework defines a means for an...
...Access SAP for Me SAP Central Cloud Services Reports SAP will release new SOC 1, SOC 2, and C5 reports as SAP Central Cloud Services. These reports replace the previous SOC 1 SAP Business Technology Platform, SAP...
...CCPS certifications JAPAN Information System Security Management and Assessment Program (ISMAP) ISMAP is Japan’s information system security management and assessment program that enables governments to assess...
...storage, and distribution. See GxP documents Trusted Information Security Assessment Exchange (TISAX) TISAX enables mutual acceptance of information security assessments in the automotive industry and provides a...
Weekly: vendors that gained or lost a certification, Wednesdays.
SAP vs ServiceNow
SAP vs Slack
SAP vs Workday
SAP vs Figma
SAP vs Dropbox
SAP vs Asana