SAP NEWSBYTE – June 9, 2026 – SAP SE (NYSE: SAP) has completed the SAP Cloud Infrastructure in Walldorf/St. Leon-Rot received approval from the Federal Office for Information Security (BSI) for the processing of classified information with the security level “For official use only” (VS-NfD) as part of a component approval. SAP is thereby strengthening its sovereign cloud portfolio for authorities and regulated industries and enabling the secure operation of security-critical SAP and customer applications in the cloud.
SAP is therefore one of the few providers in Germany that has a cloud offering whose essential security components have a corresponding use permit from the BSI – and is currently the only provider on whose platform SAP applications and customer-specific applications can be operated in a timely, efficient and VS-NfD-compliant manner.
The use permit applies to SAP Cloud Infrastructure workloads in SAP’s own data centers in the Walldorf/St region. Leon‑Rot, which are operated exclusively by security-cleared personnel. It represents an important intermediate step and forms the basis for the subsequent full BSI approval, including the recertification of the SAP Cloud Infrastructure according to ISO 27001 based on IT-Grundschutz.
“The VS-NfD use permit confirms the performance and security of our SAP Cloud Infrastructure even for the most demanding regulatory requirements. It shows that sovereign cloud innovations and maximum security are not mutually exclusive, but can be brought together in a targeted manner and enables our customers to operate even highly sensitive applications flexibly and efficiently in the cloud.” explains Martin Merz, President SAP Sovereign Cloud.
The evaluation process was completed in just around twelve months and was characterized by close, constructive cooperation between the BSI and SAP – a sign of the growing cooperation between authorities and industry in the area of IT security.
SAP Cloud Infrastructure: Full ssovereign cloud infrastructure from Germany
SAP Cloud Infrastructure is an infrastructure-as-a-service (IaaS) platform fully developed and operated by SAP based on open source technologies.
It is designed to serve customers digital sovereignty along four dimensions to enable data, operational, technical and legal sovereignty.
The basis is a fully sovereign cloud region of the SAP Cloud Infrastructure with three independent availability zones in spatially separate data centers in Walldorf/St. Leon Red. This sovereign cloud platform is complemented by a comprehensive security and compliance basisevidenced, among other things, by certifications such as ISO/IEC 27001 based on IT-Grundschutz for the data centers, EN 50600/ISO/IEC 22237 as well as TSI Level 3+ and C5 Type II. In addition, the SAP Cloud Infrastructure has carried out a self-assessment according to the BSI criteria catalog C3A (Criteria enabling Cloud Computing Autonomy), which confirms the fulfillment of all requirements for digital sovereignty.
The VS-NfD use permit complements this approach with an important component for safety-critical use cases with the highest requirements.
The SAP Cloud Infrastructure is an operating option SAP Sovereign Cloud an integral part of the SAP portfolio for digital sovereignty. Together with SAP Sovereign Cloud On-Site and Delos Cloud, SAP offers freedom of choice, control and resilient security for customers with demanding regulatory requirements.
Further press information can be found in the SAP News Center. Get SAP news on LinkedIn and Bluesky.
Contact person for the press:
Dana Rösiger, +49 6227 7 63900, dana.roesiger@sap.com, CET
SAP press area; press@sap.com
# # #
This document contains forward-looking statements, that is, predictions, forecasts or other statements about future events. These statements are based on current expectations, projections and assumptions that are subject to risks and uncertainties, which could cause actual outcomes and results to differ materially. Additional information regarding these risks and uncertainties can be found in our filings with the U.S. Securities and Exchange Commission (SEC), including, but not limited to, the risk factors section of SAP's 2025 Annual Report on Form 20-F.
© 2026 SAP SE. All rights reserved.
SAP and other SAP products and services mentioned in this document as well as the associated logos are trademarks or registered trademarks of SAP SE in Germany and other countries. Additional brand information and endorsements can be found on the page http://www.sap.de/copyright.
