Core Strategy
S/4HANA
Upgrade Safe
ABAP Cloud

Clean Core Principles

The foundational philosophy behind SAP's approach to S/4HANA extensibility — keep the core clean, extend through released APIs, and ensure every customisation survives the next upgrade.

Three-Tier Extensibility Model

SAP's clean core extensibility model separates standard SAP code (Tier 1 — read-only) from in-system extensions (Tier 2 — released extension points) and side-by-side extensions (Tier 3 — BTP, released APIs only). Each tier has a strict API contract.

Clean Core Compliance Principles
Rendering diagram…

Executive Summary

What is Clean Core?
Clean Core is the contractual and technical foundation for RISE with SAP. SAP defines "clean core" across five dimensions: Processes, Data, Integrations, Extensions, and Operations. All five dimensions must be clean for a successful cloud migration and a sustainable upgrade lifecycle.

Every S/4HANA system accumulates customisations over time. Without governance, those customisations use undocumented SAP internals that break during upgrades. Clean Core replaces ad-hoc customisation with a governed, API-first extensibility model backed by SAP's 10-year API stability contracts (C1 release). The result: upgrades become routine operations, not multi-year projects.

The 5 Dimensions of Clean Core

All five dimensions must be addressed. Cleaning only extensions while leaving RFC-based integrations in place is not clean core — it is partial compliance that will still cause upgrade failures.

Processes

Use SAP Best Practice processes. Avoid "shadow IT" workarounds. Map custom processes to available SAP standard processes before building extensions.

Data

Clean master data (no duplicate Business Partners, consistent material master). Data quality gates before migration. SAP Migration Cockpit compliance.

Integrations

Replace all point-to-point RFC/IDoc with released APIs and Integration Suite. Retire all ALEREMOTE user destinations. Use event-driven integration (Business Events).

Extensions

Only Tier 1/2/3 extensibility model. Zero modifications to SAP standard objects. ATC (ABAP Test Cockpit) CI/CD gate enforces this.

Operations

SAP Cloud ALM for change management. No manual transport editing. Automated testing via ABAP Unit and OPA5 (Fiori tests).

SAP API Release Contracts

Every SAP API, class, method, and CDS view is assigned a release contract. The contract determines whether customer code may use it. Only C1-released APIs are permitted in clean core extensions.

ContractCodeDescriptionSafe to Use
ReleasedC1SAP guarantees this API for 10+ yearsYes — Tier 1
System-internalC0SAP internal only — not for customer useNever
DeprecatedXWill be removed in a future releaseMigrate away
Not released(none)No contract — can change anytimeNever
ABAP Cloud compiler enforcement
When the ABAP language version is set to "ABAP for Cloud Development", the compiler rejects any access to C0 or unreleased APIs at activation time. Example error: "Use in Cloud Development Programs Only: Not Permitted". This makes compliance automatic — not just a policy.

Enterprise Example: DEWA Clean Core Journey

Total custom ABAP objects assessed
8,000
Already clean (C1 API usage)
23%
In-system extensions (released BAdIs)
51%
Tier 3 candidates (move to BTP)
26%
Assessment tool used
SAP Clean Core Assessment
S/4HANA version
2023 OP

DEWA's roadmap migrates the 26% Tier 3 candidates to CAP over three release cycles (2023 OP → 2025 OP → 2027 OP). Each cycle targets the highest-complexity extensions first, using fit-to-standard workshops to eliminate extensions where SAP standard now covers the requirement.

Best Practices

Run Clean Core Assessment before every upgrade

Run Clean Core Assessment before every S/4HANA upgrade project to establish a compliance baseline.

ATC as mandatory CI/CD gate

Set ATC (ABAP Test Cockpit) as mandatory CI/CD gate in ADT and transport management — block transports on BLOCKER findings.

Clean Core governance board

Create a Clean Core governance board with SAP Basis + Development + Architecture representation.

Technical vs business clean core

Distinguish between "technical" clean core (API compliance) and "business" clean core (process standardisation) — both matter.

Use SAP Activate methodology

SAP Activate embeds clean core checks at every phase gate — do not skip fit-to-standard workshops.

No SE80 modification access

Never grant SE80 modification access to developers in production-ready landscapes.

Common Pitfalls

"No customisation allowed" misconception
Clean Core allows extensive extensibility — just through the right channels (Tier 2 BAdIs, Tier 3 CAP). It is not a ban on all customisation.
ATC only at go-live
Running ATC only at go-live is too late. ATC should run continuously throughout development on every ABAP activation.
Migrating to RISE without assessment
Migrating to RISE without first assessing clean core compliance leads to failed upgrades and costly rework.
Confusing modification with extension
"Modification" (changing SAP standard code) is forbidden. "Extension" (implementing released extension points) is fully supported.

Security Considerations

Clean core and security go hand in hand
Clean core has direct security implications. No SAP standard code modifications means no accidental bypass of SAP's built-in authorisation checks. Common risk: using SE16N to bypass authorisation (a frequent modification pattern) is prevented by clean core governance. ABAP Cloud language version further prevents misuse of system-internal security APIs (C0 contract) that could be used to escalate privileges.