Leaseweb vs SAP

Compare Leaseweb and SAP on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Microsoft Azure

Leaseweb

Netherlands· Cloud Computing

Needs review

Shortlist when you want a Dutch (or other local Leaseweb) B2B contract for dedicated servers, CloudStack public cloud, colo, or regional object storage, and you will pick the DC yourself. Skip when you need EU-only halls with no US affiliate in the group, a hyperscaler-width managed-platform catalog, or self-serve hobby VPS without KYC. Consider Hetzner or OVHcloud for simpler EU-centric IaaS, or AWS if you need the global managed-service surface.

Dutch sales entityDedicated / bare metalCloudStack KVM public cloudS3-compatible object storageColo + global DCsISO 27001 (claimed)

View listing Visit Website

SAP

Germany· Cloud Computing

Needs review

Shortlist SAP when you need S/4HANA-class ERP breadth under a German parent entity and can fund a structured implementation. Skip when you want lightweight self-serve finance SaaS without a transformation partner. Consider Salesforce when CRM is the system of record, or a Microsoft Dynamics / Azure-centric stack when identity and productivity are already standardised on Microsoft.

EU-operatedFull ERP suiteS/4HANA CloudISO 27001 (claimed)B2B DPA published

View listing Visit Website

Highlighted rows differ between the two products.

Leaseweb vs SAP: Snapshot
Feature	Leaseweb	SAP
Country of origin	Netherlands	Germany
Category	Cloud Computing	Cloud Computing
Open source	No	No
Self-hosted	No	Yes
Headquarters	Netherlands	Germany
Legal entity	Leaseweb Netherlands B.V. (KvK 30141839, Amsterdam). Website: Leaseweb Global B.V. (KvK 60593652). Other local sales entities exist.	SAP SE, Dietmar-Hopp-Allee 16, 69190 Walldorf (Mannheim HRB 719915)
Governing law	Not listed	German entity; order forms may name local SAP affiliates
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
EU-hosted status	Not listed	Partial
Hosting / residency	Customer-chosen Leaseweb halls (Amsterdam, Frankfurt, London, plus US, CA, SG, HK, AU). Object storage: nl-01, de-01, uk-01, us-01, ca-01, sg-01. Optional Cloud Connect via Megaport to AWS, Google Cloud, Azure. Public Cloud backup row lists Acronis. NL Feb 2026 terms keep that entity on Dutch DCs unless law, written authorisation, or customer action. Sub-processor list on request.	Mixed: SAP-operated data centers (including Walldorf / St. Leon-Rot, Germany) plus Enterprise Cloud Services documented on AWS, Microsoft Azure, Google Cloud Platform, or customer data centers. Product-specific subprocessor lists are primarily on My Trust Center for customers.
Summary	Dutch B2B IaaS: dedicated servers, CloudStack public cloud, colocation, and S3-compatible object storage on a global hall list under local sales entities.	German-headquartered enterprise ERP suite (SAP Cloud ERP / S/4HANA) for finance, supply chain, procurement, and HR.
Tags	gdpr iaas dedicated-servers bare-metal colocation object-storage cloudstack netherlands b2b	gdpr erp enterprise s4hana cloud

At a glance: Leaseweb vs SAP
At a glance	Leaseweb	SAP
HQ	Amsterdam, Netherlands	Walldorf, Germany
Typical NL contract	Leaseweb Netherlands B.V. (KvK 30141839)	Not listed
Website operator	Leaseweb Global B.V. (KvK 60593652)	Not listed
Founded	1997 (vendor 2022 press)	Not listed
Product type	B2B IaaS (dedicated, cloud, colo, object storage); not self-hosted, not open source	Not listed
Published dedicated DCs	AMS-01/02, FRA-10, LON-01/11, MTL-02, SIN-01, HKG-10, SYD-10, plus nine US halls	Not listed
Object storage regions	nl-01, de-01, uk-01, us-01, ca-01, sg-01	Not listed
Commercial model	B2B contract, monthly or hourly cloud, KYC on first order	Enterprise subscription and licences (quote-based)
Legal entity	Not listed	SAP SE (HRB 719915 Mannheim)
Product focus	Not listed	Cloud ERP / S/4HANA
Open source	Not listed	No
Data residency regions	Not listed	Customer-selectable; Americas, Europe, Asia Pacific (incl. SAP DE sites and hyperscalers)
Compliance certs (claimed)	Not listed	ISO 27001, SOC 1/2, BSI C5, plus regional attestations via Trust Center

Key capabilities: Leaseweb vs SAP
Key capabilities	Leaseweb	SAP
Dutch sales entity	Yes	Not listed
Dedicated / bare metal	Yes	Not listed
CloudStack KVM public cloud	Yes	Not listed
S3-compatible object storage	Yes	Not listed
Colo + global DCs	Yes	Not listed
ISO 27001 (claimed)	Yes	Not listed
EU-operated	Not listed	Yes
Full ERP suite	Not listed	Yes
S/4HANA Cloud	Not listed	Yes
ISO 27001 (claimed)	Not listed	Yes
B2B DPA published	Not listed	Yes

Leaseweb

Dedicated servers with portal, API, and Instant Delivery
Bare metal for databases, analytics, gaming, and e-commerce. The knowledge base lists Windows or Linux images, Volume or Premium transit, interconnects, and Layer 2 private networking. First orders are phone-verified. Instant Delivery SKUs can provision within an hour; custom builds take longer. CPU cannot be upgraded in place.
CloudStack Public Cloud on KVM
Instances run on Leaseweb-owned CloudStack KVM with general-purpose, compute, memory, and GPU-oriented families. Billing is hourly on-demand or monthly. Local NVMe is faster but slower to recover if a hypervisor fails. Central NFS storage is the higher-availability path. Each instance gets one public IPv4. Extra IPv4 is not offered yet.
S3-compatible object storage with named regions
HTTPS/S3 API buckets at nl.object-storage.io, de.object-storage.io, uk.object-storage.io, us.object-storage.io, ca.object-storage.io, and sg.object-storage.io. Leaseweb says objects are stored in three availability zones. The default S3 region name us-east-1 is a compatibility alias, not a geography. Keys are created in the Customer Portal.
Colocation with remote hands
Bring your own servers into Leaseweb halls. Shared 1U to 5U is only in AMS-01 and FR-01. Private racks and cages are for larger or more isolated deployments. Remote hands are 24/7 and included by default, with higher packages available. Colo knowledge base counts six European halls (Netherlands, Germany, UK), seven in Asia-Pacific and Oceania, and twelve in the US and Canada.
Private network and Cloud Connect to hyperscalers
Layer 2 private networking can join dedicated servers, Public Cloud, VMware products, and colo in the same DC (and some metro pairs). Cloud Connect uses Megaport SDN plus a Leaseweb router to reach AWS, Google Cloud, and Azure from selected halls (including AMS-01/02, FRA, London, WDC-02, Singapore, Montreal, Sydney). Redundant paths are Active-Standby. Delivery is quoted in business days via sales.
Customer Portal, REST API, and Terraform
Operators power-cycle, reinstall, rescue, manage IPs, attach private networks, and watch traffic graphs without a ticket for routine work. developer.leaseweb.com documents the REST API, GitHub integrations, a Terraform provider for Leaseweb Cloud, and S3 compatibility. This is not a self-hosted control plane you run yourself.

SAP

SAP S/4HANA Cloud ERP core
Public and private cloud editions cover finance, supply chain, procurement, sales, and related processes on an in-memory data model with role-based UX. Scope and extensibility differ between Public Edition (standardised) and Private Edition (closer to classic on-premises flexibility).
GROW and RISE packaging
SAP GROW targets organisations starting on standardised AI-enabled cloud ERP. RISE with SAP supports existing on-premises customers migrating toward cloud with transformation services. Packaging choice drives implementation shape more than feature marketing slides.
Integration via SAP BTP
SAP Business Technology Platform and Integration Suite provide APIs, iPaaS connectivity, and extension points to link SAP ERP with third-party and legacy systems. Expect integration projects rather than plug-and-play SMB connectors.
Selectable cloud regions and sovereign options
Customers can choose data center regions; SAP documents Americas, Europe, and Asia Pacific availability, including SAP-operated German sites and hyperscaler regions. Sovereign / regulated options (for example German IT-Grundschutz messaging for SAP-owned facilities) exist but must be contracted explicitly.
Trust Center compliance artifacts
SAP publishes ISO 27001, SOC, C5, and other certificates plus DPAs through the Trust Center and customer portals. Audit reports for specific services are often gated to customers rather than fully public PDFs.

Assurance & compliance: Leaseweb vs SAP
Assurance & compliance	Leaseweb	SAP
Independent security / no-logs audit	Not found IaaS provider, not a no-logs VPN. No public independent audit of logging practices found beyond the named ISO/SOC/PCI reports.	Not applicable ERP suite; not a no-logs privacy network product. Rely on SOC/ISO/C5 attestations instead.
ISO 27001	Vendor claimed Vendor: ISO 27001:2022 via EY CertifyPoint for Leaseweb Global B.V., Netherlands B.V., USA, Deutschland, UK, Singapore, Canada, Network B.V. Services listed: corporate infrastructure, bare metal, VPS, private/hybrid cloud, colo, web hosting, domains. Certificate download promised on the marketing security page (SPA). Independent register entry not retrieved in this pass.	Vendor claimed Trust Center lists ISO 27001 certificates for cloud services and publishes certificate finder entries (e.g. Central / Enterprise Cloud Services).
SOC 2 / SOC 3	Partial SOC 2 published for Leaseweb Canada, Inc. colocation (Security and Availability, UHY Forbes Andersen). Several entities have SOC 1 Type II (EY / ISAE 3402) covering cloud, dedicated, colo, and web hosting.	Vendor claimed SOC 1 and SOC 2 reports described on Trust Center; many reports customer-gated via SAP for Me / My Trust Center.
GDPR / EU data protection	Vendor claimed NL entity; Clause 8 cites GDPR and the Dutch UAVG. Transfers outside the EEA only with safeguards. Global catalog still includes non-EU regions.	Vendor claimed EU parent entity; Trust Center privacy pages and DPAs reference GDPR processing terms.
US CLOUD Act exposure (indicative)	Partial Dutch group, no known US parent, but the catalog includes US halls, Leaseweb USA, Inc., us-01 object storage, and optional Cloud Connect to AWS/GCP/Azure. NL Clause 8.3 can keep a Netherlands contract on Dutch DCs if you do not choose otherwise. Assessment row, not a vendor claim. Not legal advice.	Partial German SAP SE parent with no known US parent, but Enterprise Cloud Services explicitly include AWS, Azure, and GCP paths. Medium exposure for hyperscaler-backed tenants. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Privacy page (search snippet) and NL/DE sales terms: processor language in Clause 8; standalone DPA on request in older DE terms. Sub-processor list on request (NL 8.4).	Vendor claimed SAP states it signs DPAs; Trust Center hosts Data Processing Agreement documents for cloud, support, and professional services.
EU AI Act	Not applicable IaaS compute, storage, colo, and network. Public Cloud lists small-scale GPU/inference instance types, but the offering is not an AI system product.	Partial SAP publishes EU AI Act governance materials for Joule Agents and AI features; customer still must assess in-scope AI uses.
PCI DSS	Partial Vendor: PCI DSS 4.0 scoped to physical security at named DCs (AMS-01, FRA-01, LON-01, SIN-01, WDC-02, MTL-01/02/03). Services are not meant to process card data by default.	Not listed
NEN 7510	Vendor claimed Vendor: EY statement for Leaseweb Netherlands B.V. at AMS-01 (physical security, IS policy, risk, resilience, incidents, service deployment). Not inherited by the customer.	Not listed
CISPE IaaS Code of Conduct	Vendor claimed Historical CISPE member listing and lobbyfacts affiliation. Current CISPE public register was not confirmed to contain a live Leaseweb service declaration in this pass.	Not listed
BSI C5	Not listed	Vendor claimed Trust Center lists Cloud Computing Compliance Controls Catalogue (C5) audit reports among EU regional offerings.

Considerations & known limitations: Leaseweb vs SAP
Considerations & known limitations	Leaseweb	SAP
Global catalog includes US halls and a US affiliate	Medium Even with a Dutch contractor and NL Clause 8.3, the product menu includes US dedicated halls, us-01 object storage, and Leaseweb USA, Inc. Buyers with a residency ban must lock region and entity in the order, not rely on the brand name.	Not listed
No public IaaS subprocessor register	Medium NL terms authorise EEA affiliates and other third parties as sub-processors, with the actual list on request. Known optional paths: Megaport plus AWS/GCP/Azure (Cloud Connect) and Acronis (Public Cloud backup row). Website marketing also uses US SaaS (outside the IaaS path).	Not listed
Certification scope is entity- and service-specific	Low ISO is claimed for listed IaaS services, not automatically for every SKU. SOC 2 is Canada colo. PCI is physical security only. Customers are not certified by association.	Not listed
Public Cloud / VPS IPv4 and Elastic Compute end of sale	Low Docs: one public IPv4 on Public Cloud and VPS, extras not yet available. Elastic Compute is end of sale. Dedicated CPU cannot be upgraded without a new server.	Not listed
Hyperscaler hosting is common	Not listed	Medium Even with a German parent, many cloud tenants run on AWS, Azure, or GCP. EU region selection does not remove US-group infrastructure operators from the path. Confirm contracted region and subprocessors.
Heavy implementation programmes	Not listed	Medium S/4HANA and RISE projects typically need partners, data migration, and process redesign. Poor fit if you expected self-serve SaaS onboarding.
Detailed subprocessor lists often customer-gated	Not listed	Low Public pages confirm lists exist on My Trust Center, but a full anonymous dump was not available in this research pass. Request the list for your exact cloud service before security sign-off.
Catalog category is Cloud Computing, not ERP	Not listed	Low EuropeanStack has no dedicated ERP category yet. This entry is filed under Cloud Computing as the closest existing slug.

Fit

Leaseweb

Best fit when

Teams that want a KvK-identifiable Dutch contractor (Leaseweb Netherlands B.V.) for IaaS, not a US parent
Operators placing dedicated servers or colo in named halls (Amsterdam, Frankfurt, London, plus optional non-EU cities)
Workloads that need CloudStack KVM or S3-compatible buckets with an explicit nl-01 / de-01 / uk-01 endpoint
Hybrid designs that keep origin on Leaseweb metal and optionally Cloud-Connect to AWS, Google Cloud, or Azure
Buyers who will use the Customer Portal, REST API, or Terraform rather than a fully managed PaaS

Poor fit when

Organisations that forbid any US group company, US datacentre option, or US-region object storage in the same vendor catalog
Teams that need extra public IPv4 on Public Cloud or VPS (docs: one IPv4, extras not yet available)
Buyers looking for a self-hosted control plane or an open-source product they operate themselves
People who actually wanted Leaseweb Multi-CDN rather than compute and colo
Hobby or consumer hosting: NL terms state B2B only, with KYC on first order

Consider instead when

When: You want a larger managed-cloud catalog (IAM, managed databases, serverless) and accept a US parent
Consider: Amazon Web Services (AWS) or Google Cloud Platform
Different jurisdiction and product surface. Leaseweb stays IaaS-classic.
When: You want European IaaS with a simpler EU-centric hall list and strong self-serve dedicated servers
Consider: Hetzner or OVHcloud
Still diligence their own non-EU options. Neither is a Leaseweb contract.
When: You want French public cloud with object storage and more developer-cloud SKUs
Consider: Scaleway
Different product mix. Confirm current regions on Scaleway's site.
When: You mainly need a German-group host with a broad SMB catalog
Consider: IONOS
Different ownership and SKU mix than Leaseweb's local-entity IaaS model.
When: You actually needed global content delivery, not origin compute
Consider: Leaseweb CDN
Same group, different data path (partner CDNs and a Washington D.C. shield).

SAP

Best fit when

Midsize to large enterprises consolidating finance, supply chain, and procurement on one ERP
Organisations that need deep industry process templates and multi-country localisation
Buyers that require a German / EU parent contracting entity plus formal Trust Center attestations
Existing SAP ECC customers planning a RISE or S/4HANA transformation
Teams with budget for partner-led implementation rather than pure self-serve SaaS

Poor fit when

Startups or SMBs needing only simple invoicing without ERP programme overhead
Buyers that require a guaranteed EU-only, non-hyperscaler hosting path without reading the contract region
Teams seeking an open-source ERP they can fork and fully self-operate without vendor lock-in
CRM-first organisations where Salesforce-class customer platforms are the real system of record

Consider instead when

When: Your primary system of record is CRM and revenue operations, not manufacturing or complex finance
Consider: Salesforce
Stronger CRM depth; US parent and different compliance posture.
When: You already standardise on Microsoft identity, M365, and Azure and want ERP in that estate
Consider: Microsoft 365 / Azure-centric Dynamics stacks
Compare total cost of identity + productivity + ERP under one US vendor.
When: You need a smaller European mid-market ERP without S/4HANA transformation scope
Consider: Evaluate EU mid-market ERP vendors outside this catalog (no peer ERP slug listed yet)
Catalog currently lacks a direct European ERP alternative entry.

Open questions for due diligence

Leaseweb

For the SKUs we will buy, what is the current ISO 27001 statement of applicability (and is object storage in scope)?
Will Leaseweb issue the current sub-processor list for this order, including Acronis and Megaport if used?
Can the contract freeze region to named EU halls and forbid US-affiliate access except as Clause 8.3 allows?
What is the current Instant Delivery dedicated inventory in AMS/FRA versus US halls?
Is there a live CISPE public-register declaration for these IaaS services?

SAP

Which exact cloud service and region would this buyer contract (Public Edition vs Private Edition vs RISE on which hyperscaler)?
Will the order form be with SAP SE or a local affiliate, and which governing law clause applies?
Can the vendor provide the current subprocessor list and SOC/C5 reports for the specific service code without an existing customer login?