SAP Trust Center
SAP SuccessFactors SOC 1 (ISAE 3402) Audit Report 2022 H2
The scope of this report includes the SAP SuccessFactors as offered in the data center St. Leon-Rot (Germany) as well as the co-locations Amsterdam (Netherlands), Chandler (Arizona, US), Ashburn (Arizona, US), Sydney (Australia), Shanghai (China), Toronto (Canada), Moscow (Russia), Sao Paolo (Brazil), Dubai (UAE), Riyadh (Saudi Arabia), Dammam (Saudi Arabia), Singapore (Singapore), and Grove Village (Illinois, US), our hyperscaler Microsoft Azure in Sao Paolo (Brazil), Virgina (USA), Quebec (Canada), Qincy (WA, USA), and Toronto (Canada), and our hyperscaler Google Cloud Platform in Frankfurt (Europe West3), Tokyo (Japan), Eemshaven, Netherlands (Europe West4), and Osaka (Japan).
The SAP SuccessFactors solutions include a complete set of tightly integrated talent management solutions, robust workforce analytics and planning, as well as a next generation core HR solution.
The SAP SuccessFactors solutions is comprehensive, engaging and flexible enough to start with any product and expand to every product in the suite. SAP SuccessFactors ties people strategy to business strategy with workflows, content, insights and expertise that directly impacts business results and drives company success.
As SAP SuccessFactors expands the Company continues to optimize its use of data center hosting facilities. Services may be relocated as business needs change.
SOC 1 reports specifically address service organizations internal control over financial reporting and controls specified by the service provider. The SOC 1 reports are intended solely for the information and use of existing user entities (for ex. Existing customers of the service organization), their financial statement auditors and management of the service organization. SOC 1 reports are prepared in accordance with Statement on Standards for Attestation Engagements (SSAE) No.18, a new guidance that the auditors use to conduct a SOC 1 engagement. SOC 1 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC 1 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.
SAP SuccessFactors as regularly prepared SOC 1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. November 2021 to 30. September 2022, offered in the data center St. Leon-Rot (Germany) as well as the co-locations Amsterdam (Netherlands), Chandler (Arizona, US), Ashburn (Arizona, US), Sydney (Australia), Shanghai (China), Toronto (Canada), Moscow (Russia), Sao Paolo (Brazil), Dubai (UAE), Riyadh (Saudi Arabia), Dammam (Saudi Arabia), Singapore (Singapore), and Grove Village (Illinois, US), our hyperscaler Microsoft Azure in Sao Paolo (Brazil), Virgina (USA), Quebec (Canada), Qincy (WA, USA), and Toronto (Canada), and our hyperscaler Google Cloud Platform in Frankfurt (Europe West3), Tokyo (Japan), Eemshaven, Netherlands (Europe West4), and Osaka (Japan).
The use of these reports is restricted. A copy of this report is available for all SAP SuccessFactors customers who had productive and had financially-relevant systems during the audit period covered by the report.