SAP
Enterprise ERP, finance and supply chain software including S/4HANA Cloud, SAP Business Technology Platform and Concur.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | Accredited third-party certification body | SAP cloud services and supporting ISMS | — | — | Current |
| ISO/IEC 27017:2015, ISO/IEC 27018:2019 and ISO/IEC 27701:2019 | Accredited third-party certification body | Cloud security, PII protection and privacy information management for SAP cloud services | — | — | Current |
| ISO 22301:2019 | Accredited third-party certification body | Business continuity management system covering in-scope SAP cloud services | — | — | Current |
| SOC 1 Type II and SOC 2 Type II | Independent third-party auditor | In-scope SAP cloud services; reports available to customers under NDA | — | — | Current |
| BSI C5 | Independent auditor under the BSI C5 catalogue | German cloud computing compliance criteria attestation for in-scope SAP services | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
Scope varies by SAP cloud service - check the SAP Trust Center certificate list
SOC 2 Type 2
Full
BSI C5
Full
BSI C5 attestation available for in-scope services
ISO 22301:2019
Full
GDPR 2016/679
Full
EU-headquartered; processor under the SAP DPA with EU data centre options
Copyright © 2026 SnapGRC