SAP Knowledge Base Article - Public

3445362 - There is any virus scan before the API requests are processed in SuccessFactors?


You wish to know if there is any virus scan before the API requests are processed in SAP SuccessFactors.


To keep our systems safe from harmful software like viruses and Trojans, SAP SuccessFactors has strong protection measures in place.

Firstly, we use anti-virus software that constantly runs in the background. This software scans files and disks whenever they're accessed, reducing the chance of any harmful software slipping through. We've set it up so that it's difficult to turn off this protection, ensuring continuous security.

Whenever files or content are sent to our Data Center through email or SFTP servers, they are automatically scanned for any malware. Additionally, we make sure our anti-virus tools regularly update their virus definitions to stay ahead of new threats.

To detect and eliminate malware, we employ various systems like McAfee, Symantec, Sophos, TrendMicro, and ClamAV.

For modules that involve uploading files, such as Resumes for our Recruiting solution, we use SAP VSI (Virus Scan Interface). This system checks files for viruses using Trend Micro's protection engine before storing them in the database. Only files that are virus-free are accepted.

Furthermore, we offer the option for customers to use multiple virus scanning engines through Multi-Scanning. This feature allows files to be scanned using different engines like TrendMicro and ClamAV, each with its own strengths in detecting threats. By combining these engines, we enhance our ability to catch malicious files and ensure better overall security.

For an official documentation, refer to the latest SuccessFactors SOC2 report:


there is, exist, virus, malware, scan, scanner, scanning, program, antivirus, api, request, call, get, post, upsert, insert, odata, sfapi, ce, before, previous, previously , KBA , LOD-SF-INT , Integrations , How To


SAP SuccessFactors HCM all versions