CERPASS
by CERPASS (CompliantERP) · Access Controls & SoD
SAP-native simpleGRC suite for SoD access risk, emergency access and license optimization.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Works with
SAP- Deployment
- Cloud
- Pricing
- Quote-based
- Headquarters
- Spring Hill, Queensland, Australia
Overview
CERPASS, marketed by its maker as "simpleGRC," is a SAP-native governance, risk and compliance suite built on SAP Business Technology Platform (BTP) for SAP ECC6, S/4HANA and RISE with SAP customers. It focuses on segregation-of-duties (SoD) access risk analysis, emergency/firefighter access management, periodic user access review, and Full Use Equivalent (FUE) license optimization, and is pitched at business users rather than SAP Basis specialists.
The platform is built by CompliantERP, an Australia-headquartered SAP partner, and is listed on SAP Store as an SAP-certified BTP application. The vendor advertises plug-and-play deployment in days rather than months, working with existing SAP versions with no upgrade required, and reports an average 85% access-risk reduction within six months of go-live across its customer base.
CERPASS is delivered as six modules that can be adopted individually or together: Access Risk Management, Access Risk Simulations, FUE Licence Optimization, Emergency Access Management, User Access Review, and Business Controls.
Features & capabilities
Access Risk Management
Continuous SoD scanning and remediation routing.
- Continuous scanning of users, roles and authorizations against configurable rulesets
- SoD detection with visual risk reporting
- Conflict ranking by business impact rather than raw violation counts
- Routing of risks to business owners with remediation tracking
- Audit-ready evidence documentation
Access Risk Simulations
Pre-deployment testing of proposed access changes.
- Pre-approval simulation of proposed role/access changes
- Shows resulting SoD conflicts and sensitive-access exposure before deployment
- Simulation results delivered in seconds
Emergency Access Management
Time-boxed elevated access with full audit trail.
- Time-boxed elevated/firefighter access requests with business justification
- Automatic revocation when the time window closes
- Fully logged session monitoring
- Flags critical changes and sensitive transactions for review
User Access Review
Business-friendly periodic access certification.
- Business-language descriptions of what users can do
- Risk-flagged items prioritized for review
- Delta reviews that certify only changed access
- Automatic removal of decertified access
FUE Licence Optimization & Business Controls
Right-sizes RISE with SAP licensing and verifies mitigating controls.
- Compares authorized capability against actual usage
- Identifies unnecessary authorizations to remove before renegotiating SAP licensing
- Automated daily monitoring of mitigating controls against live SAP data
- Exception reporting with evidence attachment
Common use cases
- Running continuous SAP SoD scans and routing conflicts to business owners for remediation
- Simulating a proposed role change to see its SoD impact before it goes into production
- Managing time-boxed SAP firefighter/emergency access with full audit logging
- Running delta-based periodic access certification campaigns in plain-English descriptions
- Right-sizing RISE with SAP licensing costs by comparing authorized vs. actual usage
- Proving that documented mitigating controls are actually operating, with daily automated checks
Strengths & considerations
Strengths
- Built natively on SAP BTP with no external middleware, aimed at deployment in days rather than months
- Presents access risk in business-friendly, plain-English dashboards rather than SAP Basis-level detail
- Bundles SoD risk management with FUE license optimization specific to RISE with SAP's authorization-based licensing model
ERP integrations
Works with SAP ECC6, S/4HANA and RISE with SAP without requiring an SAP version upgrade
Pricing
Pricing not publicly disclosed; a free demo can be scheduled via the vendor's site. Get an independent shortlist with pricing guidance below.
Technical & security
- Hosting
- SAP Business Technology Platform (BTP)
About the vendor
- Headquarters
- Spring Hill, Queensland, Australia
- Notable customers
- Sunwater
Alternatives to CERPASS in Access Controls & SoD
CERPASS — frequently asked questions
What SAP environments does CERPASS support?
CERPASS works with SAP ECC6, S/4HANA and RISE with SAP, and the vendor says no SAP version upgrade is required to adopt it.
Is CERPASS built on SAP's own platform?
Yes. CERPASS is built natively on SAP Business Technology Platform (BTP) with no external middleware, and is available on SAP Store as an SAP-certified BTP application.
Can CERPASS manage SAP emergency or firefighter access?
Yes. Its Emergency Access Management module provides time-boxed, business-justified elevated access with automatic revocation and full session logging.
Does CERPASS help with SAP license costs?
Yes. Its FUE Licence Optimization module compares authorized capability to actual usage to right-size RISE with SAP's authorization-based licensing.
How is CERPASS priced?
Pricing is quote-based and not publicly disclosed; the vendor offers a free demo on request.
Evaluating Access Controls & SoD?
Tell us your ERP and requirements and we'll send an independent shortlist — including CERPASS and the best-fit alternatives — with honest pros and cons.