SAP API Policy and AI employees: what is allowed.

Section 2.2.2 of the SAP API Policy (version 4.2026a) prohibits using SAP APIs to interact or integrate with (semi-)autonomous or generative AI systems that plan, select or execute sequences of API calls. SAP-endorsed architectures and pathways are excepted. Systematic or large-scale data extraction is also prohibited.

What is meant is an AI that decides on its own which SAP interface to call, when and in what order.

• Fixed workflows: SAP's FAQ on the policy explicitly excludes fixed call sequences without AI decision-making (question 40).
• Outbound interfaces: According to the FAQ, data that SAP itself sends out through its interfaces is not affected either (question 12).

• Data exchange with SAP runs through fixed, programmed workflows, not through decisions by the AI.
• The AI works on the data these workflows deliver: it reads documents, checks and prepares.
• The AI never decides on an SAP call itself.
• It places documents in SAP as parked documents, and your team posts them.

This is how our document processing with SAP works in live operation today.

The policy neither names SAP Business One nor excludes it. Our setup is compliant in both cases: fixed workflows, no AI decisions about SAP calls, posting by your team.