Clear findings. Practical next steps.

  1. Home
  2. Guides
  3. SAP GRC after 2027

Guide · SAP

SAP GRC after 2027: what the dates mean for you

If you run SAP Access Control 12.0, the end of maintenance is closer than it looks. Here's what has been reported, and what to work out now.

A project timeline of coloured strips on a glass wall, with one block in red

Updated 31 October 2026

SHORT ANSWER

SAP has reported mainstream maintenance for GRC 12.0 to the end of 2027, with an extension until 2030. That gives you time, but not much if the move depends on your S/4HANA project.

What has been reported

ItemAs reported
CoversAccess Control, Process Control and Risk Management 12.0
Mainstream maintenanceTo the end of 2027
Extended maintenanceUntil 2030
After thatCustomer-specific maintenance
Announced successorSAP GRC edition for SAP HANA, planned for the first quarter of 2026

This summarises an SAP Community post, which cites SAP Note 3326989. We haven't read the note itself. Dates can change, so check the note in the SAP Support Portal, and confirm the status of the successor with SAP.

What to work out now

  1. List what you really useAccess risk analysis, access requests, firefighter, role management, access reviews. Many sites only use part of it.
  2. Clean up your rulesetA migration is a poor reason to carry an old, unmaintained ruleset along.
  3. Line it up with S/4HANAYour roles and your GRC platform are likely to change around the same time.
  4. Compare the optionsThe successor, another product, or a simpler set-up.
  5. Ask what the extension costsAnd what exactly it covers for your contract.

Do you still need GRC?

Maybe. For a large system with many users, you need tooling for this. For a smaller set-up, a clear ruleset, good reports and a working review process can go a long way. The honest answer depends on what you use today, so start there.

Questions about SAP GRC after 2027

When does SAP GRC 12.0 maintenance end?

As reported by SAP, citing SAP Note 3326989, mainstream maintenance for Access Control, Process Control and Risk Management 12.0 runs to the end of 2027, with extended maintenance until 2030. Check the note for what applies to you.

Do we have to move right away?

No, but planning takes time, and it is usually tied to your S/4HANA plans. It's worth deciding before the dates force the decision.

Is there a successor?

SAP announced SAP GRC edition for SAP HANA, planned for the first quarter of 2026. Check the current status and its maintenance dates with SAP.

Let's make sense of it

Make your next security decision with evidence. Tell us what you want to understand, and we'll discuss the right scope before any assessment begins.