Skip to Content

SAP Trust Center

SAP Cloud Platform Big Data Services SOC 2 Audit Report 2018

The scope of this SOC report includes SAP Cloud Platform Big Data Services (SCP-BDS), hosted in SAP SE's data center St. Leon–Rot (Germany) as well as in the co-location data centers in San Jose (California, USA), Santa Clara (California, USA) and Ashburn (Virginia, USA).

SCP-BDS has developed a purpose-built, petabyte-scale infrastructure that delivers Apache Hadoop as a cloud service. We then back this infrastructure with the operational systems to provide enterprise-grade security and availability. The service allows customers to utilize the core Hadoop services of HDFS storage and YARN task scheduling without having to setup, maintain, configure, or tear down clusters. SCP-BDS’ auto-elasticity continuously monitors data and job usage to dynamically add and remove resources as they are needed. 

Additionally, SCP-BDS not only operates the underlying infrastructure, but also monitors jobs, helps with job tuning, and ensures that software is kept up-to-date with the latest in the fast-changing Hadoop ecosystem.

SOC2 reports fulfill various information and assurance needs of customers and aim to place trust in SAPs service organization systems, processes and controls. These narratives are related to the trust principles Security, Availability, Confidentiality Processing Integrity or Privacy which must be met to demonstrate a well-designed system. SOC2 also contains details on performed tests and their results. SOC2 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC2 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.

SAP Cloud Platform Big Data Services has prepared SOC2 Type 2 audit report by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2017 to 31. October 2018 and the location St. Leon–Rot (Germany) as well as in the co-location data centers in San Jose (California, USA), Santa Clara (California, USA) and Ashburn (Virginia, USA) and the trust principles Security and Availability. 

The use of these reports is restricted. A copy of this report is available for all SAP customers and prospects with non-disclosure agreement in place.

Back to top