- Deployment
- hosted
- Hq Country
- Germany
- Hq City
- Walldorf
- Ownership
- public
- Founded
- 1972
- Training Default
- never
- Residency Options
- Europe (West Europe), US East, Sydney
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- ISO/IEC 42001, ISO 27001, SOC 1, SOC 2
- DPA available
- yes
- Retention Default
- "Customer data is never shared with third-party vendors for training their large language models." SAP publishes no inference retention window for the hub; models from Azure OpenAI are reached through a private instance of the chat-completions API that is not publicly accessible.
- Retention Exceptions
- SAP AI Core, including the generative AI hub, must not be used to generate synthetic data for training or fine-tuning models — a restriction on the customer, not a commitment by SAP.
- Subprocessors
- Microsoft (Azure OpenAI, US), Google (Vertex AI, US), Amazon Web Services (Bedrock, US), Anthropic (US), Mistral AI (FR)
- Subprocessor Count
- 5
- Transfer Mechanism
- sccs
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- The sharpest illustration in the registry of the difference between a European vendor and a European data path. SAP is German, listed in Frankfurt, ISO 42001-certified for AI management, contractually clear that customer data is never shared for third-party model training — and its Managed Models are Azure OpenAI, Google Gemini and Anthropic Claude on AWS. Applying the same data-path rule that let Cohere North score `none-eu`, jurisdiction here follows the prompt, and the prompt goes to a US hyperscaler under SCCs. The result is C 52: the same band as Hugging Face and Microsoft 365 Copilot, and 38 points below STACKIT, a German competitor selling open weights out of German data centres. Nothing about that is a criticism of SAP's engineering. It is what happens when the governance question is asked about the whole chain rather than the logo on the invoice.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- medium
- Retention Claim Basis
- stated
- Retention Confidence
- medium
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- high
- Residency Class
- eu-selectable
- Portability / Exit Path
- serves-open-models
- Subprocessor Jurisdiction
- non-eu
- Underlying model providers
- Microsoft (Azure OpenAI — GPT-5), Google (Gemini 2.5 Pro via Vertex AI), Anthropic (Claude via AWS Bedrock), Mistral AI, Meta (Llama), SAP (SAP-RPT-1)
