SAP Indirect Access and Digital Access: Enterprise Risk Guide and Negotiation Playbook

The Indirect Access Problem Has Not Gone Away

SAP indirect access arises whenever a third-party system, integration layer or external-facing application reads from or writes to SAP data without the end user logging directly into SAP. This includes Salesforce CRM calling SAP order data, e-commerce platforms triggering SAP fulfilment transactions, IoT devices updating SAP inventory records, and RPA bots processing SAP workflows. Under SAP's traditional named user licensing model, every individual accessing SAP data — directly or indirectly — technically required a named user licence. In practice, this created unlimited liability for any enterprise running SAP integrations at scale.

The risk crystallised publicly in a landmark UK High Court ruling in which a major retailer was found to have created indirect access liability of approximately £54 million through its use of Salesforce connected to SAP. That ruling — and the wave of SAP audit notices that followed — prompted SAP to introduce the Digital Access model in 2018 as a document-based alternative to named user charging for indirect scenarios. The Digital Access model licenses the outputs of SAP processing (sales orders, purchase orders, invoices, goods movements and similar documents) rather than the users or systems that generate them.

Digital Access resolved the theoretical ambiguity. It did not resolve the commercial risk — it reconfigured it. Enterprises migrating from indirect access exposure to Digital Access licensing face the challenge of accurately measuring their document volumes, understanding SAP's document type definitions, negotiating appropriate pricing and securing amnesty for past unlicensed use through SAP's Digital Access Adoption Programme (DAAP).

Digital Access Licensing: What Enterprises Need to Understand

Document Types and Scope

SAP Digital Access licenses five core document types: sales orders, purchase orders, supplier invoices, goods movements, and production orders. These are the documents most frequently generated by third-party systems integrating with SAP. Understanding precisely which document types your integrations generate — and in what volumes — is the essential first step in any Digital Access assessment. Organisations that accept SAP's initial document count estimates without independent verification consistently overpay; SAP's counting methodology can include test transactions, cancelled documents and duplicates that inflate the volume baseline.

DAAP: Use It Before SAP Uses It Against You

SAP's Digital Access Adoption Programme offers enterprises the opportunity to transition to Digital Access licensing with retrospective amnesty for past indirect use. Under DAAP, SAP agrees not to pursue back-charges for historical unlicensed indirect access in exchange for the customer signing a Digital Access subscription. DAAP pricing is typically more favourable than the rates SAP offers outside the programme — and far more favourable than the exposure that materialises when SAP raises indirect access in an audit context. The window for using DAAP to its full commercial advantage closes the moment SAP initiates an audit or formal indirect access assessment. Organisations that engage proactively secure materially better outcomes than those that wait.

Negotiating Digital Access Pricing

Digital Access is priced per document, and SAP's initial quotes range from several dollars per document at lower volumes to below $1 per document at enterprise scale. The price per document drops significantly at volume thresholds, and the most effective negotiation strategy is to negotiate a flat-fee unlimited licence rather than a per-document volume pack — particularly for organisations with high or growing document volumes. Unlimited Digital Access licences exist; SAP does not volunteer them. Hybrid structures — named user licences for internal human users combined with Digital Access for integration scenarios — can significantly reduce total licensing cost versus either model in isolation.

What This Guide Covers

The SAP Indirect Access and Digital Access Guide provides a structured risk assessment and negotiation framework for enterprise SAP customers. It covers: indirect access exposure assessment methodology; Digital Access document type classification and counting; DAAP programme terms, timing and negotiation approach; per-document pricing benchmarks and unlimited licence structures; hybrid named user and Digital Access modelling; and an integration audit checklist for identifying and quantifying indirect access scenarios. It is written for SAP Basis teams, IT procurement leads, CIOs and General Counsels managing SAP audit risk.