Skip to content
logo Knowledgebase

Statement of Auditing Standards SSAE 16 and SOC certification

Created on  | Last modified on 

Summary

Sage Products are packaged software solutions rather than a service. Therefore, SSAE 16, SSAE 17, and SOC 1 certification don’t apply to certain Sage products.

Description

The Statement on Auditing Standards is an auditing standard issued by the American Institute of Certified Public Accountants (AICPA). The intent of the standard is to provide a guideline to ensure that adequate controls are in place over service organizations and service providers.

SSAE 16, SSAE 18, SOC, SOC 1, and SAS 70 apply to audits of financial statements when an organization uses external services. Sage provides accounting and specialized solutions as packaged software solutions rather than as services. For example:

  • Sage X3 ERP
  • Sage 100 ERP
  • Sage 50
  • Sage 500 ERP
  • Sage Fixed Assets
  • Sage 300
  • Sage Pro
  • Sage BusinessVision
  • Sage BusinessWorks
  • Sage HRMS

Organizations that use Sage Accounting solutions are always in full control of their data - from establishing access, entering information, and producing reports. Occasionally, organizations provide data or reports to Sage for specific projects, such as Sage Expert Services engagements.  Sage ensures that no data leaves its control. Under no circumstance is Sage represented as a service provider for retrieving, analyzing, and reporting on any organization's information.

 NOTE: SSAE 16 and SSAE 18 effectively replaced SAS 70 as the standard for reporting on service organizations. 

Link to further information: SSAE Group on LinkedIn