Skip to main content



Coupa Success Portal

Compliance Documentation

  • Business Continuity Management Summary and Attestation
    This document provides a summary of the business continuity program maintained by Coupa Software for its production Software as a Service products via the Coupa Spend Platform.
  • Compliance Programs
    This page provides a basic description of the compliance programs that Coupa currently supports and those that we do not support. The page also provides information on reporting dates and gap letters.
  • HIPAA Encrypted Fields
    Coupa utilizes AES-256-GCM for database column encryption. All keys are unique to each customer instance. In addition to the standard encrypted fields, the following fields are encrypted in a Coupa HIPAA deployment:

Current Coupa customers can download the following Security and Compliance related documentation from the Security and Compliance page on the Coupa Support portal.

  • Coupa Technical Whitepaper
  • Business Continuity Management Summary and Attestation
  • Contingency Plan Test Results
  • Coupa Cloud Spend Management Encryption
  • Coupa ISO 27001 Surveillance Report
  • Coupa Statement of Applicability
  • Coupa Healthcare Cloud
  • HIPAA Deployment Security
  • Was this article helpful?