SAP SE

Germany · owned by Independent (Germany) · sap.com · 44 vendors

SAP is a German multinational software corporation that develops enterprise software to manage business operations and customer relations. The company is best known for its ERP software and cloud-based solutions for businesses of all sizes.

Resilience scores

Disruption prediction

SAP SE has a 30% probability of disruption in the next 6 months.

20 of SAP SE's 44 vendors monitored for disruptions.

Technology vendors

Services catalogue

75 services in catalogue across 10 categories; runs on 44 sub-vendors.

Insights

Last updated 2026-09-13 · revision 16

44 direct vendors, 315 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Migration readiness is strong technically but constrained by regulatory and architectural complexity. The company's tech stack is highly conducive to migration, featuring containerization (Docker, K8s), microservices, and open-source standards (PostgreSQL, Kafka, Redis), reducing technical lock-in compared to purely proprietary legacy systems. The established use of a multi-cloud strategy (AWS, Azure, GCP) proves the ability to operate across environments. However, readiness is impacted by the 'High' regulatory risk (GDPR) and strict data residency requirements inherent to a German-headquartered global enterprise, which creates 'data gravity' and complicates cross-border migrations. Additionally, the reliance on proprietary legacy languages like ABAP alongside modern stacks creates integration challenges. The consumption of 148 distinct external services adds dependency layers that must be mapped during any migration effort.

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

As a major cloud services provider (SAP Cloud Platform, SuccessFactors, Ariba, etc.), SOC2 compliance is critical for customer trust and competitive positioning.

As a major cloud services provider (SAP Cloud Platform, SuccessFactors, Ariba, etc.), SOC2 compliance is critical for customer trust and competitive positioning. While not legally mandated, lack of SOC2 certification could result in significant business impact and customer loss in the enterprise market.

HIPAA (source) — Assessment Required

SAP provides healthcare industry solutions and may process PHI through its healthcare customers in the US.

SAP provides healthcare industry solutions and may process PHI through its healthcare customers in the US. If acting as a business associate, HIPAA compliance is required. Violations can result in significant fines and criminal penalties. Risk level is medium as it depends on specific customer implementations and data handling practices.

ISO 27001 (source) — Assessment Required

Information security management is critical for enterprise software companies handling sensitive business data.

Information security management is critical for enterprise software companies handling sensitive business data. ISO 27001 certification is often required by enterprise customers and regulatory frameworks. While not legally mandated, lack of certification could impact business competitiveness and customer trust.

Financials

Three-year financials

Financial Resilience Score: 8/10

SAP SE demonstrates strong financial resilience as it successfully navigates a multi-year transition from traditional on-premise licensing to a cloud-based Software-as-a-Service (SaaS) model. A key pillar of this resilience is the 'more predictable revenue' stream, which consists of cloud and software support revenue, accounting for approximately 83% of total revenue in 2024. This recurring revenue base provides a substantial buffer against macroeconomic volatility. Furthermore, the company maintains a massive cloud backlog, which reached €63.3 billion by the end of 2024, representing a 43% year-over-year increase and ensuring a strong future revenue pipeline. While IFRS operating profit (EBIT) saw a temporary 20% decline in 2024 due to significant one-time restructuring expenses (€3.1 billion) related to its transformation program, non-IFRS operating profit grew by 25%. This indicates that the underlying business operations are becoming more efficient and profitable. SAP maintains a solid balance sheet with a substantial equity base and high liquidity. The primary risks remain the intense competition in the cloud ERP market and the inherent execution risks associated with its ongoing 2024/2025 company-wide restructuring program.

Key strengths: High share of predictable recurring revenue (83%), Massive cloud backlog of €63.3B providing future visibility, Strong growth in Cloud ERP Suite revenue, Disciplined cost management through transformation programs

Risk factors: Significant restructuring costs impacting short-term IFRS profitability, Intense competition from cloud-native software providers, Geopolitical and macroeconomic risks affecting global IT spending

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report