SAP Licensing

RISE with SAP: Private vs Public Cloud Which Fits Your Enterprise?

RISE with SAP offers two fundamentally different deployment models. Private cloud gives you a single-tenant, dedicated environment with full customisation control and your own upgrade schedule. Public cloud gives you multi-tenant SaaS with standardised processes and rapid deployment. The choice between them affects your total cost, migration approach, customisation strategy, update cadence, and long-term flexibility. This guide provides a balanced comparison to help CIOs select the right fit.

SAP Licensing / Cloud StrategyBy Fredrik Filipsson20 min read
Private
Single-tenant, full customisation, your upgrade pace.
Public
Multi-tenant SaaS, standardised, rapid deployment.
FUE
Unified user metric across both editions.
3 to 5 yr
Typical RISE minimum contract commitment.
SAP Knowledge Hub RISE with SAP Guide Private vs Public Cloud
01

Understanding RISE with SAP Cloud Options

RISE with SAP offers two primary deployment models within its all-in-one cloud transition offering. Both deliver S/4HANA Cloud, but the architecture, operational model, and commercial implications are fundamentally different. Choosing between them is not a technical decision alone. It is a business decision that affects your total cost of ownership, your customisation strategy, your upgrade cadence, and your negotiating position with SAP for the next 3 to 5 years.

Public Cloud Edition (Multi-Tenant SaaS)

Shared environment with standardised processes. SAP handles all technical operations including infrastructure, patching, and upgrades. Ideal for organisations willing to adopt SAP best practices with minimal deviation. Rapid deployment timelines (typically 4 to 8 months for core modules). Lower per-user cost. Customisation restricted to BTP-based extensions and key user configurations. SAP manages quarterly updates automatically.

Private Cloud Edition (Single-Tenant Managed)

Dedicated system on SAP's cloud infrastructure or a hyperscaler (AWS, Azure, Google Cloud). Full S/4HANA scope including industry-specific solutions. Greater control over configurations, customisations, and upgrade timetable. Existing ABAP code, Z-programmes, and customer modifications carry forward from ECC. Higher cost and implementation effort. Upgrade timing is customer-controlled, typically annually rather than quarterly. See the SAP ERP Private Cloud Licensing Guide.

The Core Distinction

Private cloud is SAP managed on your terms. Public cloud is SAP managed on SAP's terms. The difference affects every downstream decision: how you migrate, what you can customise, how fast you receive updates, and how much control you retain over your ERP environment. Neither is inherently better. The right choice depends on your customisation reality, your change management capacity, and your long-term ERP strategy.

02

Cost and Licensing Considerations

Both editions use FUE-based pricing, where Full Use Equivalents serve as the unified user metric. However, the per-FUE cost, the total cost of ownership, and the commercial structure differ significantly between private and public cloud.

FactorPrivate CloudPublic Cloud
Deployment modelSingle-tenant, dedicated infrastructureMulti-tenant, shared infrastructure
Per-FUE pricingHigher (typically 20 to 40% more than public)Lower baseline per-FUE cost
Infrastructure costsIncluded but sized to your environmentIncluded and shared across tenants
Customisation scopeFull ABAP, Z-code, customer modificationsExtensions via BTP only (clean core)
BTP creditsIncluded in RISE bundleIncluded in RISE bundle
Upgrade managementCustomer-controlled timingSAP-managed, quarterly automatic updates
Contract term3 to 5 years minimum1 to 3 years typical (shorter available)
Best forComplex, heavily customised environmentsStandard processes, rapid deployment
The 20 to 40% Private Cloud Premium

Private cloud typically costs 20 to 40% more per FUE than public cloud. This premium pays for dedicated infrastructure, the ability to maintain custom code, and control over upgrade timing. For organisations with heavy customisations that would require significant re-engineering to move to public cloud, the private cloud premium is often cheaper than the alternative: a multi-year clean core transformation project that can cost $5M to $20M+ depending on complexity.

Hidden Cost Differences

The per-FUE price comparison understates the true cost difference. Private cloud requires more internal resources for upgrade planning, regression testing, and customisation management. Public cloud shifts those costs to SAP but may require investment in BTP development skills and integration architecture. Model the 5-year total cost of ownership including internal labour, BTP development, integration costs, and change management before comparing. See How to Budget for SAP Private Cloud: 5-Year TCO.

Contract Term Matters for Negotiation

Private cloud's longer minimum commitment (3 to 5 years) gives SAP more revenue certainty, which should translate into better per-FUE pricing. Use the commitment length as negotiation leverage. Public cloud's shorter terms give you more flexibility but less leverage. If you are confident in the 5-year direction, a longer private cloud commitment at a negotiated rate can be the better financial outcome.

03

Flexibility vs Standardisation

The customisation question is the single most important factor in the private vs public cloud decision. It determines not just your deployment model but your entire S/4HANA strategy for the next decade.

Private Cloud: Full Customisation Preserved

Private cloud allows full customisation. Existing ABAP code, customer modifications, Z-programmes, and industry-specific solutions carry forward from ECC. This is the pragmatic path for enterprises with decades of accumulated custom development that represents genuine business logic, not just technical debt. The risk: carrying forward customisations without rationalisation perpetuates complexity. The opportunity: you get to modernise on your timeline rather than being forced into a clean-core model before your organisation is ready.

Public Cloud: Clean Core Enforced

Public cloud enforces a "clean core" philosophy. Customisations are restricted to BTP-based extensions and key user configurations. No direct ABAP modifications to the core system. This is SAP's long-term strategic direction and delivers genuine benefits: easier upgrades, faster innovation adoption, lower technical debt. The challenge: organisations with heavy Z-code dependencies face a significant re-engineering effort to move business logic from custom ABAP into BTP extensions or standard configuration.

The Decision Framework

Audit your customisation landscape before choosing. Organisations with fewer than 100 active Z-programmes and limited industry-specific modifications can often move to public cloud with manageable effort. Organisations with 500+ Z-programmes, complex industry solutions, and deep integration dependencies should start with private cloud and plan a phased clean-core journey over 3 to 5 years. The worst outcome is forcing public cloud on an organisation that is not ready, resulting in lost functionality, user resistance, and costly workarounds.

04

Update Cadence and Innovation Pace

How fast your S/4HANA system evolves after go-live is determined by which edition you choose. This affects not just IT operations but your entire change management apparatus.

Public Cloud: Quarterly Automatic Updates

Public cloud receives quarterly updates automatically from SAP. You get new features faster, but must manage compatibility with your extensions and integrations. Each quarterly update requires testing of BTP extensions, validation of integrations, and user communication. Organisations with strong change management and agile IT operations thrive on this cadence. Organisations with complex integration landscapes and limited testing capacity find quarterly updates disruptive.

Private Cloud: Customer-Controlled Updates

Private cloud updates on your schedule, typically annually. You control when new functionality is adopted, giving you time for thorough regression testing, user training, and phased rollout. The trade-off: you receive new features later than public cloud customers, and deferring updates too long creates technical debt that makes future upgrades harder. SAP requires that private cloud customers stay within a defined support window, so unlimited deferral is not an option.

Choose Based on Change Velocity Appetite

If your organisation can absorb quarterly changes with confidence, public cloud accelerates your innovation adoption. If your organisation needs 6 to 12 months to plan, test, and deploy changes across a complex landscape, private cloud gives you that breathing room. The honest answer for most large enterprises is that quarterly updates are too fast for their current operational maturity, making private cloud the safer starting point.

05

Migration and Implementation Approach

The migration path from your current ECC system to S/4HANA Cloud differs fundamentally between private and public cloud. This difference affects timeline, cost, risk, and the degree of business disruption during transition.

Private Cloud: Brownfield Migration

Private cloud supports brownfield migration, converting your existing ECC system to S/4HANA. Your data, configurations, customisations, and business processes carry forward. This is faster (typically 12 to 18 months for a complex landscape) but carries forward technical debt. The advantage: minimal business disruption because users continue working in a system that looks and behaves similarly to what they know. The risk: inherited complexity that should have been cleaned up during the migration.

Public Cloud: Greenfield Implementation

Public cloud requires greenfield implementation, building a fresh S/4HANA system from scratch. You redesign business processes to align with SAP standard, configure the system accordingly, and migrate data (but not customisations). This is cleaner but requires more effort (typically 18 to 30 months for a complex landscape) and significant business process re-engineering. The advantage: you start clean with no technical debt. The risk: underestimating the effort required to replicate critical business functionality in the standard system. See Migrating from ECC: Licensing and Cost Implications.

The Staged Approach: Private Cloud as Stepping Stone

Many enterprises use private cloud as a stepping stone. Migrate ECC to private cloud via brownfield first, preserving existing functionality and minimising business disruption. Then gradually clean up customisations, move business logic to BTP extensions, and adopt SAP standard processes over 3 to 5 years. When the clean-core journey is sufficiently advanced, evaluate whether a move to public cloud makes sense. This staged approach manages risk better than a big-bang greenfield transformation.

Migration FactorPrivate Cloud (Brownfield)Public Cloud (Greenfield)
Migration approachConvert existing ECC systemBuild fresh S/4HANA from scratch
Typical timeline12 to 18 months18 to 30 months
CustomisationsCarry forward from ECCMust be rebuilt as BTP extensions
Data migrationFull data conversionSelective data migration
Business process changeMinimal (existing processes preserved)Significant (redesign to SAP standard)
Technical debtCarried forward (clean up later)None (clean start)
Business disruptionLower (familiar system)Higher (new processes, retraining)
Best forComplex landscapes, risk-averse orgsOrganisations ready for process standardisation
06

Security, Compliance, and Governance

For regulated industries, the security and compliance characteristics of each edition can be the deciding factor. Both models meet enterprise security standards, but the level of control and isolation differs.

Private Cloud: Greater Isolation and Control

Private cloud offers dedicated infrastructure, providing more isolation between your environment and other SAP customers. You have greater control over data residency (choosing which hyperscaler region hosts your system), encryption key management, network configuration, and access governance. This level of control is often required by financial services regulators, healthcare compliance frameworks, and government procurement standards. If your compliance team requires dedicated infrastructure or specific data sovereignty guarantees, private cloud is the clearer path.

Public Cloud: SAP's Multi-Tenant Security Model

Public cloud relies on SAP's multi-tenant security model, where your data is logically separated from other tenants on shared infrastructure. SAP invests heavily in multi-tenant security, and the model meets most compliance requirements including SOC 1/2, ISO 27001, and GDPR. However, some regulated industries require physical (not just logical) separation, and some compliance frameworks mandate that the customer retain control over encryption keys and infrastructure configuration. Verify your specific compliance requirements against SAP's public cloud security documentation before committing.

Both Can Meet Most Requirements

For the majority of enterprises, both editions meet compliance requirements. The question is how much effort your compliance team requires to validate and document that compliance. Private cloud is easier to certify for regulated environments because dedicated infrastructure aligns naturally with most compliance frameworks. Public cloud is certifiable but may require more documentation and more detailed review of SAP's multi-tenant controls.

07

Digital Access Implications

Both RISE editions handle Digital Access differently, and the implications for your indirect usage licensing can be significant.

Understanding Digital Access in RISE

Digital Access refers to the licensing model for indirect or digital access to SAP systems, covering scenarios where third-party applications, interfaces, bots, or IoT devices read from or write to SAP. In traditional on-premise licensing, Digital Access documents are priced separately based on document type and volume. In RISE, Digital Access is handled through the FUE model, but the specifics vary between editions and contract structures. Misunderstanding how Digital Access applies to your RISE deployment can result in unexpected compliance exposure.

Evaluate Before You Commit

Before signing a RISE contract, map your current Digital Access footprint: which third-party systems create documents in SAP, what volume of indirect transactions flows through your integrations, and how your current Digital Access licensing (if any) would translate into the RISE model. Negotiate Digital Access terms explicitly in your RISE agreement rather than discovering the implications after go-live. See the SAP Digital Access Advisory Service.

08

Recommendations and Decision Framework

Start with Your Customisation Reality

If you have significant Z-code, industry-specific modifications, or deep ABAP customisations that represent genuine business logic, private cloud is the pragmatic path. Forcing these into a clean-core public cloud model before your organisation is ready creates risk and cost that outweigh the per-FUE savings.

Model TCO for Both Options

Compare 5-year costs including per-FUE pricing, migration costs, internal labour for upgrade management, BTP development investment, integration rework, change management, and renewal escalation. The per-FUE comparison alone is misleading. Include the cost of customisation re-engineering for public cloud or the cost of ongoing customisation management for private cloud.

Consider a Staged Approach

Start with private cloud to preserve existing functionality and minimise migration risk. Plan a 3 to 5 year clean-core journey that gradually moves customisations to BTP extensions and adopts SAP standard processes. Evaluate the move to public cloud once your customisation landscape is sufficiently rationalised. This staged approach manages risk better than a big-bang transformation.

Negotiate Flexibility Clauses

Include the right to switch editions mid-term without penalty. If you start with private cloud and achieve your clean-core objectives ahead of schedule, you should be able to move to public cloud without renegotiating the entire contract. Similarly, negotiate the right to adjust FUE volumes, add BTP credits, and modify hyperscaler region placement during the contract term.

Evaluate Digital Access Implications

Both editions handle Digital Access differently. Map your indirect usage landscape before committing. Negotiate Digital Access terms explicitly rather than discovering the implications after go-live. The financial exposure from unaddressed Digital Access can exceed the difference in per-FUE pricing between editions.

Decision FactorChoose Private Cloud If...Choose Public Cloud If...
Customisation500+ Z-programmes, deep industry solutionsFewer than 100 Z-programmes, standard processes
Change managementOrganisation needs 6 to 12 months per change cycleOrganisation can absorb quarterly updates
Migration preferenceBrownfield (convert existing ECC)Greenfield (fresh start, process redesign)
ComplianceRegulated industry requiring dedicated infrastructureStandard compliance, multi-tenant acceptable
TimelineNeed to be live in 12 to 18 monthsCan invest 18 to 30 months in implementation
Long-term strategyGradual clean-core journey over 3 to 5 yearsReady for clean core now
Budget priorityLower migration risk, higher ongoing costLower per-FUE cost, higher upfront investment
09

Checklist: 5 Actions to Take Now

1. Audit Your Customisation Landscape

Quantify your ABAP/Z-code dependencies. Classify each customisation as critical business logic (must preserve), optimisation candidate (could replace with SAP standard), or technical debt (should retire). This classification drives the private vs public cloud decision more than any other factor.

2. Build Parallel 5-Year TCO Models

Model both private and public cloud total cost of ownership for 5 years. Include per-FUE costs, migration implementation costs, internal labour, BTP development, integration rework, training, change management, and projected renewal escalation. Compare the total, not just the subscription line item.

3. Assess Change Management Capacity

Honestly evaluate your organisation's ability to absorb quarterly updates (public cloud) versus annual updates (private cloud). Consider your IT testing resources, business user training capacity, integration complexity, and executive appetite for change velocity. Overestimating your change management capacity leads to failed public cloud deployments.

4. Review Compliance and Data Residency Requirements

Map your regulatory obligations against both deployment models. If your compliance framework requires dedicated infrastructure, private cloud is the path. If multi-tenant security with logical separation is acceptable, public cloud remains viable. Document this analysis for procurement and legal review.

5. Engage an Independent RISE Advisor

SAP's sales team will recommend whichever edition generates the most revenue for SAP. An independent advisor benchmarks pricing against peer organisations, evaluates your customisation landscape objectively, models the true TCO difference, and negotiates optimal contract terms including edition-switching flexibility. See the RISE with SAP Advisory service.

10

Frequently Asked Questions

Private cloud is a single-tenant, dedicated environment where you retain full customisation control (ABAP, Z-code, industry solutions) and manage upgrade timing on your schedule. Public cloud is a multi-tenant SaaS environment where SAP manages everything including quarterly updates, and customisations are restricted to BTP-based extensions. Private cloud costs 20 to 40% more per FUE but preserves existing business logic. Public cloud is cheaper per FUE but requires clean-core alignment.

Not automatically. Edition switching mid-term requires negotiation with SAP and is not guaranteed under standard RISE contract terms. This is why we recommend negotiating an explicit edition-switching clause into your RISE agreement before signing. If you plan a staged approach (start private, move to public after clean-core rationalisation), document this intent in the contract with agreed commercial terms for the switch.

Both editions use Full Use Equivalent (FUE) as the user metric. However, the per-FUE cost is typically 20 to 40% higher for private cloud than public cloud. This premium reflects the dedicated infrastructure, customisation support, and customer-controlled upgrade model. FUE optimisation strategies (right-sizing user classifications, consolidating roles) apply equally to both editions and should be completed before contract negotiation to ensure you are not over-provisioning.

Private cloud. It supports brownfield migration that preserves your existing ABAP code, Z-programmes, and industry-specific modifications. Forcing a heavily customised ECC environment into public cloud's clean-core model requires significant re-engineering that can cost $5M to $20M+ and take 18 to 30 months. Private cloud lets you migrate first and rationalise customisations gradually over 3 to 5 years.

Private cloud typically requires a 3 to 5 year minimum commitment. Public cloud offers shorter terms, typically 1 to 3 years. The longer private cloud commitment gives SAP more revenue certainty and should translate into better per-FUE pricing. Use commitment length as negotiation leverage. If you are confident in the direction, a longer commitment at a negotiated rate can produce a better financial outcome than a shorter term at list price.

Digital Access (indirect access licensing) is handled through the FUE model in RISE, but the specifics vary between editions and contract structures. Map your current Digital Access footprint before signing: which third-party systems create documents in SAP, what volume of indirect transactions flows through your integrations, and how your current licensing translates into the RISE model. Negotiate Digital Access terms explicitly in the contract.

It can be, but it does not have to be. Many enterprises use private cloud as a long-term deployment model, particularly those in regulated industries or with complex customisation requirements that justify ongoing dedicated infrastructure. The staged approach (start private, move toward public cloud standards over 3 to 5 years) is a valid strategy, but so is remaining on private cloud indefinitely. The decision should be driven by your business requirements, not by SAP's preference for multi-tenant adoption.

Need Independent SAP Licensing Advisory?

Redress Compliance provides vendor-independent SAP licence assessments, RISE advisory, Digital Access evaluations, contract negotiation support, and audit defence for Fortune 500 organisations. We benchmark RISE pricing against peer organisations, evaluate your customisation landscape objectively, and negotiate optimal contract terms. Complete vendor independence. No SAP partnerships, no resale commissions.

SAP Advisory Services

Related Resources

FF

Fredrik Filipsson

Co-Founder, Redress Compliance

Fredrik Filipsson brings over 20 years of experience in enterprise software licensing and contract negotiations. His expertise spans Oracle, Microsoft, SAP, Salesforce, IBM, ServiceNow, Workday, and Broadcom, helping global enterprises navigate complex licensing structures and achieve measurable cost reductions through data-driven optimisation.

← Back to SAP Knowledge Hub

Optimise Your SAP RISE Deployment Strategy

Independent SAP advisory helping enterprises evaluate RISE with SAP private vs public cloud editions, benchmark FUE pricing, and negotiate optimal contract terms. Fixed-fee engagement models.

SAP Advisory Services Book a Consultation
Always-On Advisory

🛡️ Vendor Shield — Subscription Advisory

Continuous, always-on advisory coverage across Oracle, Microsoft, SAP, Salesforce, IBM, Broadcom, and more. One subscription. Every vendor. Always prepared, never outmanoeuvred.

Learn About Vendor Shield Multi-vendor protection
Licensing Intelligence

Stay Ahead of Vendor Moves

Monthly licensing intelligence, audit alerts, and negotiation tactics from our advisory team. Trusted by 1,000+ enterprise leaders.

Subscribe Free No spam. Unsubscribe anytime.
Explore All Vendor Hubs