Introducing SAP Trust Center

In the SAP Trust Center, you can access documents detailing SAP security and data protection measures, information about compliance through internal reviews and audits, and the worldwide SAP Cloud services.

Suppose you’re an existing user with a valid S-User ID. In that case, you can access content with more detailed information and resources on SAP My Trust Center in the SAP Support Portal.

The SAP Trust Center is a centralized platform that provides information and resources to help you and other customers understand and manage the security and compliance aspects of SAP products and services. It includes information on security certifications, data protection and privacy, and best practices for securing SAP systems. The SAP Trust Center also provides access to security-related documentation, tools, and resources to help customers ensure the security and compliance of their SAP systems.

Webpage of SAP My Trust Center with navigation to My Support, Products, Tools, Maintenance, and more. Contains links and icons for News, Policies, Sub-processors, Compliance Documents, and Tools & Information.

The Trust Center has the following sections:

Policies, Frameworks, and TOMs

In this section, you can browse documents detailing Technical and Organizational Measures (TOMs) that SAP has implemented to protect data on SAP solutions. You can also find documents describing SAP’s Security Controls and Measures and details about SAP's Global Security Policy.

SAP Support page displaying a list of policies, frameworks, and TOMs, including titles, descriptions, areas, types, dates (December 2022), and notification options with a subscribe button for each item.

Subprocessors

A subprocessor is any SAP affiliate or third party involved with SAP (the contractual party of the service agreement) that processes personal data (as defined in applicable data protection laws) on behalf of SAP and its customers or may have access to systems containing personal data. This section of My Trust Center includes a line of business focused lists of subprocessors, including descriptions of provided services and their ability to deliver under the EU Access Service from the SAP framework. For example, the SAP S/4HANA Cloud subprocessor list contains information about subprocessors in Support, Services, Development, and Infrastructure. In addition, customers can subscribe to notifications by e-mail on subprocessor changes for each list.

SAP Support page showing Subprocessors and Data Transfer Factsheets. Includes info on subprocessors, data transfer impact assessments, and a list of subprocessors with titles, descriptions, areas, types, and dates.

Compliance Documents

Customers can find evidence documents from SAP partners providing services to SAP. These services included Data Center facility service (Co-location) and Infrastructure as a Service (Hyperscaler-Cloud) or Cloud Solution Extension services.

A webpage from SAP Support showing Compliance Documents. The section Evidence from SAP Partners is empty with a search bar, table headings for Title, Description, Provider, Area, Type, Date, and Notifications.

Tools and Documentation

In this section, customers can find reference guides, case studies, white papers, and service and support documents that detail security, data protection, and privacy for SAP products. The documents span various subjects, including Global Security, Cloud Services, and Customer Information.

Screenshot of SAP Support's Tools & Information page featuring a list of documents categorized by title, description, area, type, date, and a column for notifications with Subscribe buttons.

To get started with My Trust Center and find other sources of information like the SAP Help Portal and SAP Community, consult the Cloud Services: Reference Guide.

To read the documents in the previous sections, visit SAP My Trust Center.

Lesson Summary

You now better understand the SAP Trust Center and the SAP My Trust Center.