Data Protection
For SAP to achieve and maintain high levels of protection and to ensure that we comply with data protection legislations we developed a set of policies called Data Protection Management System (DPMS).
When a customer enters into a Cloud agreement with SAP, the terms of how customers Personal Data will be processed by SAP, including Security of Processing are outlined in the Data Processing Agreement for Cloud Services.
Encryption
Data-in-Transit Encryption protects your data if communications are intercepted while data is being transferred between your site and the cloud provider, or between two services. This protection is achieved by encrypting the data before transmission, authenticating the endpoints, and then decrypting the data upon arrival while verifying that it has not been modified.
SAP protects Data-in-Transit using the Transport Layer Security (TLS 1.2) protocol. Additionally, SAP also secures Data-at-Rest through encryption with the Advanced Encryption Standard (AES-256).
Accessibility
SAP's internal Accessibility Development Guidelines are oriented on WCAG 2.1 Level AA. SAP provides Accessibility Status Documents (VPAT®) for S/4HANA Cloud that reflect the status of conformance to the corresponding WCAG version at that time. VPATs referenced are WCAG 2.1 Level AA and EN 301 549.
SAP Fiori is the design system for all SAP products and accessibility is an integral part of it.
Performance
With SAP S/4HANA Cloud, public edition SAP is providing a true web-based Software as a Service model that is only consumable via Internet and HTTPS traffic. SAP’s teams ensure the best performance of the cloud systems, so they are optimised for consumption via the internet. SAP has a dedicated Cloud Delivery Performance team that is continually monitoring all systems within SAP to proactively identify and fix issues that are within our responsibility and reach.
SAP Cloud ALM for Operations offers a portal for monitoring.