CERPASS
by CERPASS (CompliantERP) · Access Controls & SoD
SAP-native simpleGRC suite for SoD access risk, emergency access and license optimization.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Works with
SAP- Deployment
- Cloud
- Pricing
- Quote-based
- Headquarters
- Spring Hill, Queensland, Australia
Overview
CERPASS, marketed by its maker as "simpleGRC," is a SAP-native governance, risk and compliance suite built on SAP Business Technology Platform (BTP) for SAP ECC6, S/4HANA and RISE with SAP customers. It focuses on segregation-of-duties (SoD) access risk analysis, emergency/firefighter access management, periodic user access review, and Full Use Equivalent (FUE) license optimization, and is pitched at business users rather than SAP Basis specialists.
The platform is built by CompliantERP, an Australia-headquartered SAP partner, and is listed on SAP Store as an SAP-certified BTP application. The vendor advertises plug-and-play deployment in days rather than months, working with existing SAP versions with no upgrade required, and reports an average 85% access-risk reduction within six months of go-live across its customer base.
CERPASS is delivered as six modules that can be adopted individually or together: Access Risk Management, Access Risk Simulations, FUE Licence Optimization, Emergency Access Management, User Access Review, and Business Controls.
Modules & capabilities
CERPASS covers 25 of 51 capabilities we track in this category (+2 partial)
49%- Segregation-of-duties conflict detectionContinuous scanning of users/roles/authorizations with visual risk reportingCore strength
- Critical / sensitive access detectionEmergency-access module flags sensitive transactions; no standalone critical-access scan describedPartial
- Risk scoring and prioritizationConflict ranking by business impact rather than raw violation countsSupported
- Prebuilt risk rule libraryConfigurable rulesetsSupported
- Custom rule authoringRulesets described as configurableSupported
- Cross-system risk analysisNot evidenced
- Organizational-scope violation detectionNot evidenced
- Usage-based risk prioritizationNot evidenced
“Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
Common use cases
- Running continuous SAP SoD scans and routing conflicts to business owners for remediation
- Simulating a proposed role change to see its SoD impact before it goes into production
- Managing time-boxed SAP firefighter/emergency access with full audit logging
- Running delta-based periodic access certification campaigns in plain-English descriptions
- Right-sizing RISE with SAP licensing costs by comparing authorized vs. actual usage
- Proving that documented mitigating controls are actually operating, with daily automated checks
Strengths & considerations
Strengths
- Built natively on SAP BTP with no external middleware, aimed at deployment in days rather than months
- Presents access risk in business-friendly, plain-English dashboards rather than SAP Basis-level detail
- Bundles SoD risk management with FUE license optimization specific to RISE with SAP's authorization-based licensing model
Used CERPASS with your ERP? Rate it in 30 seconds — it helps every buyer after you.
Rate itERP integrations
Listed on the SAP Store, built on SAP Business Technology Platform; works with SAP ECC6, S/4HANA and RISE with SAP without requiring a version upgrade.
Connector details independently verified against vendor marketplaces and documentation; last checked 2026-08-20.
Pricing
Full CERPASS pricing breakdown — cost at 25/100/500 seats, competitor rates & FAQs
Pricing not publicly disclosed; a free demo can be scheduled via the vendor's site. Get an independent shortlist with pricing guidance below.
What does CERPASS cost?
CERPASS prices by quote, like most of this category. Here is what actually drives your number — and what to ask before you get one.
4 of the 9 vendors we track in this category publish no list price at all.
Technical & security
- Hosting
- SAP Business Technology Platform (BTP)
About the vendor
- Headquarters
- Spring Hill, Queensland, Australia
- Notable customers
- Sunwater
Alternatives to CERPASS in Access Controls & SoD
CERPASS — frequently asked questions
What SAP environments does CERPASS support?
CERPASS works with SAP ECC6, S/4HANA and RISE with SAP, and the vendor says no SAP version upgrade is required to adopt it.
Is CERPASS built on SAP's own platform?
Yes. CERPASS is built natively on SAP Business Technology Platform (BTP) with no external middleware, and is available on SAP Store as an SAP-certified BTP application.
Can CERPASS manage SAP emergency or firefighter access?
Yes. Its Emergency Access Management module provides time-boxed, business-justified elevated access with automatic revocation and full session logging.
Does CERPASS help with SAP license costs?
Yes. Its FUE Licence Optimization module compares authorized capability to actual usage to right-size RISE with SAP's authorization-based licensing.
How is CERPASS priced?
Pricing is quote-based and not publicly disclosed; the vendor offers a free demo on request.
Compare CERPASS head-to-head
The Access Controls & SoD Buyer's Guide
Before you commit to CERPASS, see how it sits against the 9 access controls & SoD systems we track — on capability, ERP integration depth and what each one actually charges for.
Access Controls & SoD Buyer's Guide
9 systems compared · 2026
ERP Research
- CERPASS compared side-by-side with 8 alternatives
- ERP integration checklist — what to verify before you shortlist
- The pricing questions that change the quote
- A CERPASS evaluation brief, included with the guide
Access Controls & SoD Buyer's Guide
Get pricing for CERPASS
CERPASS doesn't publish a price. Tell us your ERP, seat count and must-haves and we'll come back with an independent view of what it should cost you — and which alternatives are worth quoting alongside it.