Privacy Disclosure for Ariba Cloud Service

Last updated on 05/25/2023.

Click Here for a printable version of this Privacy Disclosure.

Ariba Inc. (“Ariba”), an SAP company, is a global provider of services facilitating commerce between buyers and sellers. This document describes Ariba's handling, processing, storing, and otherwise treating transactional and other data of Ariba Customers (which may be referred to as “you” or “Buyer” or “Supplier” or “Seller”), and data associated with individual users and employees of the Buyer and Seller organizations, when sent to Ariba as part of your use of the Solution. “Ariba” means Ariba, Inc., its parent companies, and affiliates.

  1. Definitions

    2. “Solution” means the following services to which you have subscribed (provided under terms of an agreement between Ariba Customer and Ariba):

    • SAP Ariba Invoice Management
    • SAP Ariba Catalog
    • SAP Ariba Contracts
    • SAP Ariba Buying
    • SAP Ariba Buying and Invoicing
    • SAP Ariba Sourcing
    • SAP Ariba Spend Analysis
    • SAP Ariba Supplier Information and Performance Management
    • SAP Ariba Supplier Lifecycle and Performance
    • SAP Ariba Supplier Risk
    • SAP Strategic Sourcing Suite

    “Trading Partner” means an entity with which you or your company transacts using a Solution.

  2. Overview

    3. Ariba collects information that you, or a Trading Partner, or other data sources send to the Solution (such as internet-protocol addresses, transaction-related data, and user account information). This data is addressed below in two categories, "Transaction Data" (as defined below) and "Personal Information" (data that can identify an individual or that is associated with the identity of an individual).

    Transaction Data Handling

    Ariba understands the sensitive nature of the transaction data you or your organization may provide while using the Solution. Transaction Data may include information you provide to Ariba or your Trading Partners during the registration, cataloging, sourcing/negotiating, or ordering processes, or through any e-mail or other communication sent by you to the Solution as well as other information that you store within the Solution. It may also include data of transactions sent by your Trading Partners to you via the Solution or by you to your Trading Partners via the Solution. Transaction data may include Personal Information addressed more specifically below. You agree that your Transaction Data will not include information regulated under the International Traffic in Arms Regulations (U.S. government regulations addressing defense-related articles and services) and will not include Sensitive Personal Information as defined in this Privacy Disclosure.

    If you are a Seller who objects to submitting transaction data to your Trading Partner via the Solution, please contact the Trading Partner directly to investigate options (e.g., submitting certain proprietary information outside of the Ariba Solution, using anonymous contact information, etc.).

    Business Contact Information

    When a representative of a Buyer or a Seller creates a business account on the Solution, Ariba asks for the name and contact information for an account administrator. The account administrator's information will be used by Ariba to contact the company with notices, service offerings and Solution administration purposes. The account administrator for your company is given primary control regarding the establishment and maintenance of user accounts and contacts within a Solution. If you so choose, your organization may provide additional contacts. Depending on the Solution and the visibility choices selected by you or your company, your usernames, phone numbers, and email addresses and other profile information may be visible to other Buyers and/or Sellers using the Solution or to a broader audience. Please review the documentation for the Solution for visibility options, notification options and role-based options that affect how a specific user or company contact's business contact information may be used or visible within the Ariba Solutions.

    You should submit only publicly available business contact information. Individual contact information submitted to the Solution should not include private home contact information. You agree not to enter sensitive government identification numbers associated with individual persons into the Solution (e.g., U.S. Social Security Numbers) or to send documents over the Solution containing such identifiers. Individual names and personal information associated with an individual is addressed below as "Personal Information".

    Data Use By Ariba

    • Ariba will treat your Transaction Data as confidential information and will use it only to: facilitate operation of Ariba solution and related services; enhance your use of the Solution and its related web pages; perform internal tracking and Solution improvement; analyze the extent to which you use the Solution (e.g., the volume and history); enable us to contact you regarding the Ariba solutions and related services, as well as new services or pre-qualified offers from Ariba, SAP SE, or affiliates of Ariba under common control of SAP SE; and process your transactions through the Solution. Ariba uses the business contact information you provide for the same purposes, as more fully described in this Privacy Disclosure.

    • SAP Ariba Sourcing Services Note that Ariba is not actively entering into new agreements for Ariba Sourcing Services that are subject to this paragraph. This paragraph is included for historical purposes. Ariba may use the bidding information submitted by Suppliers in the course of Ariba Sourcing Services projects to determine general price trends in various supply industries, to create predictive analyses useful for estimating likely market prices, and to evaluate suppliers appropriate for inclusion in future spend management projects in similar markets. Ariba may also use such bidding information in the publication of ?high level? sourcing project results, provided that such publication (i) does not directly or indirectly identify Supplier or Buyer by name or provide a third party with sufficient information to allow a third party to identify Supplier or Buyer, (ii) is aggregated with data from at least four (4) comparable suppliers from a single project, (iii) does not specifically identify Supplier's products or services, or the prices of those products or services, and (iv) does not identify Supplier as a participant of any specific project.

    • SAP Ariba Sourcing Solution In order to increase a Buyer's visibility to potential suppliers, Ariba may systematically analyze certain sourcing activity of the Buyer in the Ariba Sourcing solutions and anonymously seek to match the Buyer with potential new suppliers or highlight suppliers that may be of interest to the Buyer. It is up to the Buyer to decide whether or not it wants to have contact with, or identify itself to, any potential new supplier. No personal information and only anonymous and high-level information about an opportunity will be exposed using these features.

    Transaction Data and Third Parties

    In using the Solution, you understand that Ariba will send your Transaction Data to your Trading Partners (or others that you or your Trading Partners authorize) and Ariba service providers in order to facilitate your transactions and the services associated with the Solution. Your Trading Partner may access statistical reports on your trading history with that Trading Partner and determine whether you are enabled with other trading organizations.

    Data Analytics and Benchmarking

    Ariba may create high level statistical reports relating to the Solution utilizing Transaction Data, so long as such reports contain only anonymous, aggregated data that does not identify your company or any specific Transaction Data, and such reports may be reported publicly. Ariba offers benchmarking programs to facilitate deeper analysis into spend management practices for companies wishing to participate. Ariba operates the Ariba data analytics and Ariba benchmarking programs according to standards that protect the confidentiality of each customer's information. These programs do enable Ariba to offer valuable reviews with customers demonstrating how that customer uses the Ariba Solutions as compared to typical usage of other customers by industry, company size, region or other factors.

  3. Ariba's Commitment to Data Security

    4. Ariba takes steps to appropriately safeguard credit card and remittance information using recommended industry encryption methods. Ariba services are designed so that these categories of information can only be viewed from within the Solution. You can further limit access to only those users who have a need to see such information.

  4. Information on Cookies

    5. Information gathered by cookies or similar technologies, and any use of such information, is further described in the Cookie Statement in the footer of the Solution. You can exercise your cookie preferences by visiting the Cookie Preferences.

  5. Tracking

    6. Ariba gathers certain information such as metrics, events, logs, sessions automatically and stores it in log files. The purpose is to monitor and retrieve logs for application and infrastructure monitoring of the Solution.