SAP Wins German Data Case as Antitrust Concerns Persist

Aug 5, 2026
Article

The massive digital repositories fueling the modern global economy have become the ultimate battleground for corporate sovereignty as software giants and their clients clash over who truly controls the information generated within enterprise systems. For decades, businesses viewed Enterprise Resource Planning (ERP) systems as foundational infrastructure, much like the plumbing or electricity of a corporate office. However, as data-driven analytics and artificial intelligence have become the primary engines of competitive advantage, the relationship between software providers and their customers has fundamentally shifted from one of service to one of dependency. This evolution has raised a critical question: is the data a company generates its own property, or does it effectively belong to the provider that hosts the database?

The growing tension between vendor lock-in and data portability has reached a boiling point in recent years. Large-scale enterprises now find themselves at a crossroads where the ability to innovate depends entirely on how easily they can move their information between different specialized tools. When a dominant provider controls the gates to that information, they hold the power to dictate the speed of a customer’s digital transformation. This dynamic has transformed technical integration from a back-office IT concern into a high-stakes legal and strategic conflict that determines the future of market competition.

Understanding the Bundeskartellamt Decision and the Gravity of ERP Dominance

The German Federal Cartel Office, known as the Bundeskartellamt, recently delivered a pivotal assessment of this power dynamic by concluding its preliminary investigation into SAP. While the regulator did not find sufficient evidence of illegal conduct to warrant a formal abuse proceeding, the decision arrived with significant caveats that the market remains under close scrutiny. The investigation was born from complaints that SAP was intentionally creating barriers for customers attempting to extract their data for use in third-party process mining tools. By allegedly restricting access, the software giant was accused of unfairly favoring its own internal solutions, such as Signavio, over independent competitors.

Despite the gravity of these claims, the regulator determined that various permissible and viable options for data migration currently exist within the SAP ecosystem. This finding essentially cleared the company of immediate antitrust charges in its home market, yet the Bundeskartellamt explicitly described the enterprise software sector as “dynamic.” This characterization suggests that while the current technical workarounds are sufficient to avoid a legal penalty today, the door remains open for future intervention if the landscape shifts toward more restrictive practices. The decision underscores a narrow legal reality: as long as a path to data extraction exists, regardless of its difficulty, the provider may not be in violation of current competition laws.

Technical Wins vs. Legal Realities: The Widening Rift Between SAP and Celonis

While the German regulatory outcome provided SAP with a moment of reprieve, the legal theater in the United States presented a far more contentious environment. In a California court, a high-stakes legal battle moved toward a trial scheduled for 2027, centered on allegations that SAP used its market dominance to lock customer data within its ecosystem. Celonis, a leader in process mining, argued that SAP imposed exorbitant fees on users who sought to share their information with third-party providers. This lawsuit highlights a clear divergence between the two regions, as American courts appeared more willing to examine whether these technical policies constitute a breach of fair competition and intellectual property rights.

SAP has consistently maintained that its API policies and data access patterns are designed to ensure system stability and security rather than to block competition. Conversely, the arguments presented by Celonis suggested a lack of long-term guarantees for data portability, creating an atmosphere of uncertainty for enterprises. This legal friction is not just about two companies fighting for market share; it is a fundamental disagreement over the “right to access” in a cloud-first world. While the German ruling focused on the current existence of technical paths, the American litigation has delved deeper into the financial and contractual barriers that can be just as restrictive as a hard technical block.

Beyond the Ruling: Why Industry Experts Believe Data Extraction Remains Practically Impossible

Industry analysts often noted that what is legally permissible is not always operationally feasible, creating a significant gap between regulatory compliance and real-world functionality. Even if a software provider offers an API, the friction involved in using that interface can be so high that it renders third-party solutions effectively useless. Experts pointed toward four primary types of friction: financial barriers, technical complexity, moving technical targets, and contractual packaging. When a company is forced to pay high fees for every data replication or deal with performance lags during extraction, the “permissible” option becomes a practical impossibility for most lean organizations.

Furthermore, the strategy of bundling proprietary tools into standard ERP contracts has changed the incentives for corporate decision-makers. By including a “good enough” process mining or analytics tool in the base subscription, a vendor can effectively neutralize the threat of superior third-party competitors without ever having to explicitly block them. This subtle form of lock-in is harder for regulators to police because it looks like a benefit to the customer. However, the long-term result is a stagnant ecosystem where the primary vendor controls the pace of innovation, and the customer loses the ability to choose the best-of-breed tools for their specific industry needs.

Designing a Proactive Roadmap for Data Portability and Vendor Independence

The resolution of the German case served as a catalyst for organizations to reevaluate their long-term architectural strategies and procurement habits. Forward-thinking leadership teams recognized that the true cost of software was no longer found in the initial subscription fee, but in the potential lack of access to the very intelligence that powered their operations. They began to prioritize data sovereignty by demanding explicit “export rights” during the initial contract negotiations, ensuring that the migration of information would not be met with technical or financial roadblocks. This proactive stance allowed businesses to treat their ERP providers as modular components rather than monolithic masters of their digital estates.

IT departments also developed more resilient architectures by implementing vendor-neutral data layers that sat between their core systems of record and their analytical applications. These strategies reduced the dependency on any single provider’s proprietary APIs and created a buffer against future policy changes. Companies realized that maintaining independence required a constant effort to audit their data flows and keep extraction pathways active. By treating data portability as a continuous operational requirement rather than a one-time migration task, they secured their ability to adopt emerging technologies without being held back by the restrictive ecosystems of legacy software giants.

Trending

Subscribe to Newsletter

Stay informed about the latest news, developments, and solutions in data security and management.

Invalid Email Address
Invalid Email Address

We'll Be Sending You Our Best Soon

You’re all set to receive our content directly in your inbox.

Something went wrong, please try again later

Subscribe to Newsletter

Stay informed about the latest news, developments, and solutions in data security and management.

Invalid Email Address
Invalid Email Address

We'll Be Sending You Our Best Soon

You’re all set to receive our content directly in your inbox.

Something went wrong, please try again later