SAP Trust Center
SAP Business Technology Platform Statement of Applicability and ISO 27001 Certification
SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Business Technology Platform cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.
The ISO 27001 certificate refers to the Information Security Management System for the scope, “Operations of the SAP Business Technology Platform” cloud solution; Following the standard ISO/IEC 27001:2013. In addition to this certification, the organization uses the standards ISO/IEC 27017:2015 and ISO/IEC 27018:2019.