Data Residency
Multi-Cloud
UAE PDPL
BTP Foundation

BTP Regions

SAP BTP is available in 30+ data centre regions across AWS, Azure, GCP, and Alibaba Cloud. Region selection determines data residency, service availability, and latency. Once set at subaccount creation, the region is immutable.

Understanding BTP Regions

SAP BTP regions are the geographic data centres where BTP services are hosted. Each region is identified by a code that encodes the hyperscaler and geography — for example, eu10 is AWS Frankfurt (Europe, region 10), and ae1 is AWS UAE / Dubai (Arabian Emirates, region 1).

Region selection is the most consequential and irreversible decision when creating a BTP subaccount. Once a subaccount is created in a region, it cannot be migrated. Deleting and recreating the subaccount — with all its service instances and subscriptions — is the only path to changing regions.

Not all BTP services are available in every region. The SAP Discovery Center is the authoritative source for service availability per region — always verify before starting a project.

Quick Facts

Total regions
30+ globally
Hyperscalers
AWS · Azure · GCP · Alibaba
UAE region
ae1 (AWS Dubai) — UAE PDPL
EU GDPR regions
eu10 / eu20 / eu30
Region immutable?
Yes — set at subaccount creation
Multi-region HA
No native — manual failover only
Service check
Discovery Center per-region filter
Private Link
Match BTP region to hyperscaler
SAP BTP Region Portfolio — Hyperscaler Distribution
Rendering diagram…
UAE Region: ae1 (AWS Dubai) — UAE PDPL Compliance

SAP BTP Region ae1 (AWS UAE / Dubai) supports UAE data residency requirements under the UAE Personal Data Protection Law (PDPL). Available since 2023, it is the mandatory region for any UAE government or regulated-sector workload that cannot store personal data outside the UAE.

Services confirmed available in ae1:

Cloud Foundry RuntimeSAP HANA CloudConnectivity ServiceDestination ServiceXSUAA (Authorization)SAP IAS (Identity)SAP BAS (Dev IDE)Event MeshAudit Log Service

Always verify the latest service availability in ae1 on Discovery Center before project kick-off, as new services are continuously added.

Region Reference Table

Region CodeLocationHyperscalerUse CaseData Residency
ae1Dubai, UAEAWSUAE/GCC production workloadsUAE PDPL
sa1Riyadh, Saudi ArabiaAWSSaudi Arabia workloadsKSA NDMO
eu10Frankfurt, GermanyAWSEU production, largest service catalogEU GDPR
eu20NetherlandsAzureEU + Azure Private LinkEU GDPR
eu30Frankfurt, GermanyGCPEU + GCP Private LinkEU GDPR
us10Virginia, USAAWSAmericas AWS productionUS (no specific)
us20Virginia, USAAzureAmericas Azure productionUS (no specific)
us30Iowa, USAGCPAmericas GCP productionUS (no specific)
ap10Sydney, AustraliaAWSAustralia / PacificAU Privacy Act
ap21SingaporeAzureSoutheast AsiaPDPA Singapore
jp10Tokyo, JapanAWSJapan productionAPPI (Japan)
cn40Shanghai, ChinaAlibaba CloudChina data residency requiredChina PIPL

Hyperscaler Matching for Private Link

SAP BTP Private Link Service enables a private network connection between BTP and services running on the same hyperscaler — without traffic traversing the public internet. For Private Link to work, the BTP subaccount region and the connected system must be on the same hyperscaler:

AWS
BTP Regions:
eu10, us10, ap10, ae1, sa1
Connect to:
S/4HANA on AWS, RDS, etc.
Azure
BTP Regions:
eu20, us20, ap21
Connect to:
Azure services, MSFT products
GCP
BTP Regions:
eu30, us30
Connect to:
GCP services, Google Workspace
Private Link vs Cloud Connector
Use Private Link for same-hyperscaler connectivity (encrypted, no public internet, lower latency). Use Cloud Connector for on-premise-to-BTP connectivity or cross-hyperscaler scenarios where Private Link is not applicable.

Enterprise Example — DEWA Region Strategy

As a UAE government entity, DEWA must comply with the UAE Personal Data Protection Law (PDPL), which requires personal data to remain within UAE borders. This mandates region ae1 (AWS Dubai) for all production subaccounts processing personal data.

Production — ae1 (AWS Dubai / UAE)
  • All 6 production subaccounts hosted in ae1
  • UAE data residency for all customer data
  • HANA Cloud, CF, Kyma all confirmed in ae1
  • S/4HANA on-premise connects via Cloud Connector to ae1
  • Fulfils UAE PDPL and internal DEWA data governance policy
Development — eu10 (AWS Frankfurt)
  • All development subaccounts use eu10 for cost reasons
  • Larger HANA Cloud instance selection in eu10
  • No personal data in development environments
  • Anonymised/synthetic data for dev testing
  • Explicit data classification policy enforces no real data in dev

Region Selection Decision Framework

  1. 1
    1. Data Residency Requirement
    Does your workload have a legal or regulatory requirement to keep data within a specific geography? UAE PDPL → ae1. EU GDPR → eu10/eu20/eu30. Saudi NCA → sa1. China PIPL → cn40. If no requirement, proceed to step 2.
  2. 2
    2. Hyperscaler Alignment
    Is your SAP S/4HANA or other backend running on a specific hyperscaler? Use the matching BTP region for Private Link connectivity. AWS → eu10/us10/ae1/ap10. Azure → eu20/us20/ap21. GCP → eu30/us30.
  3. 3
    3. Service Availability Check
    Verify all required BTP services are available in the candidate region using the Discovery Center service catalog filter. Some services (e.g., newer AI services) may only be in eu10 or us10.
  4. 4
    4. Latency to End Users
    If residency and hyperscaler don't constrain you, choose the region geographically closest to your primary end-user population for best Fiori/UI5 app responsiveness.
  5. 5
    5. Contractual Confirmation
    Confirm your chosen region is covered by your SAP BTP contract. Some regions require explicit contract addenda. Obtain a Data Processing Agreement (DPA) for regulated workloads.

Best Practices

Data residency first, then latency

Always resolve legal and regulatory data residency requirements before optimising for latency or cost. Getting this wrong post-go-live is extremely costly to fix.

Verify service availability before project start

Check all required BTP services are available in the target region on Discovery Center before starting development. Discovering a missing service late in a project is a critical risk.

Use ae1 for UAE compliance

For UAE government and regulated-sector workloads, ae1 (AWS Dubai) is the only BTP region that satisfies UAE PDPL data residency requirements as of 2025.

Match BTP region to S/4HANA hyperscaler for Private Link

If S/4HANA RISE is on AWS, use an AWS BTP region. Private Link only works within the same hyperscaler — mismatching forces Cloud Connector usage instead.

Document region selection in Architecture Decision Records

Record the rationale (legal requirement, hyperscaler match, service availability) in an ADR. Future architects must understand why a specific region was chosen.

Common Pitfalls

Selecting a region that doesn't have all required services
ae1 (UAE) has growing but not complete service coverage. Discovering that a critical service (e.g., a specific AI service) is only available in eu10 after creating production subaccounts forces costly architectural compromises.
Ignoring latency between BTP and on-premise S/4HANA
If S/4HANA is on-premise in Dubai and BTP is in eu10 (Frankfurt), Cloud Connector tunnel latency (100–150ms round-trip) significantly degrades synchronous OData call performance.
Forgetting that region is immutable after creation
The BTP region cannot be changed after a subaccount is created. All service instances, subscriptions, and deployed applications must be recreated in a new subaccount in the correct region.
Using a trial region for production workloads requiring data sovereignty
Trial subaccounts are typically only available in eu10 or us10. Building a proof-of-concept in a trial region and then migrating to ae1 for production requires a complete rebuild.

Security & Compliance Considerations

Data residency is a contractual, not just a technical, concern
Confirm with SAP in writing that your chosen BTP region is covered by a Data Processing Agreement (DPA) that specifies the geographic boundary. Technical configuration alone does not satisfy regulatory audit requirements — a signed DPA is required.
For UAE PDPL compliance, obtain a DPA addendum from SAP specifying that data processed in ae1 remains within the UAE geographic boundary.
For EU GDPR compliance, use eu10, eu20, or eu30 exclusively — do not use us10 or other non-EU regions for EU personal data.
Enable SAP Data Retention Manager (DRM) for GDPR/PDPL erasure request compliance — available in select regions including eu10 and ae1.
Verify that SAP's subprocessors for the chosen region are acceptable under your data protection impact assessment (DPIA).
For government workloads, check if the region holds any government-specific certifications (FedRAMP for US, ISO 27001 for others).

References