What Is Required
As an SAP Partner, Eclectic is required to adopt or establish a Compliance Management System (CMS) whose scope covers the content of the SAP Partner Code of Conduct. Partners must provide information and evidence tied to their CMS to SAP whenever requested as part of SAP's diligence processes or Partner audits.
What the CMS Must Ensure
The compliance management system must be designed to ensure:
- Compliance with applicable laws, rules, regulations, policies, and customer requirements related to the Partner's operations and products
- Conformance with the SAP Partner Code of Conduct
- Identification and mitigation of operational risks related to the Code
- Documentation of the CMS for auditing purposes
Consequences of Non-Compliance
Failure to maintain a compliant CMS may result in:
- Clawbacks
- Suspension of SAP Partner status
- Termination of the partnership
Responsibility for SAP Resources
Partners are expected to safeguard SAP resources while performing work for SAP. These include property, assets, intellectual property, company technology assets (network, phone, internet, software, email), trade secrets, and other confidential information. Use of SAP resources without proper approval or for non-SAP work is strictly prohibited.
Confidential Information
SAP confidential or sensitive information must be protected. Partners may possess only the information they need to perform work activities. It must never be used for personal gain or shared without appropriate SAP approval. SAP may require Partners to sign non-disclosure agreements (NDAs) for specific projects.
Data Privacy
Partners must observe applicable data privacy standards. Materials containing confidential information should be stored securely and shared internally only with employees who have a "need to know."
Trademarks and Communication
Partners granted permission to use the SAP logo must use it exclusively in SAP's interest. Partners must not commit SAP to future functionality toward third parties or speak on behalf of SAP unless explicitly authorized to do so.