
The Shared Responsibility Model between your company and SAP defines how responsibilities are divided. SAP manages the platform, whereas your company develops and manages applications and the corresponding data. SAP is responsible for the infrastructure, including the physical security of data centers, network controls, and operational security including monitoring. Based on this, SAP is responsible for:
- SAP HANA Service Management
- Runtimes and Services Management
- Resource and Account Provisioning
- Operating System (OS) Maintenance
- Infrastructure Maintenance
- Hardware Components including Setup
- Provision of Data Center Facility
Customers are responsible for their data, access management, and applications and their security. This model ensures that both parties contribute to maintaining a secure environment, with SAP handling the underlying platform, in this case SAP BTP, and users managing their specific configurations.
Product Documentation: Shared Responsibility Model Between You and SAP