The Statement on Auditing Standards is an auditing standard issued by the American Institute of Certified Public Accountants (AICPA). The intent of the standard is to provide a guideline to ensure that adequate controls are in place over service organizations and service providers.

SSAE 16, SSAE 18, SOC, SOC 1, and SAS 70 apply to audits of financial statements when an organization uses external services. Sage provides accounting and specialized solutions as packaged software solutions rather than as services. Sage 500 ERP is one such product.

Organizations that use Sage Accounting solutions are always in full control of their data - from establishing access, entering information, and producing reports. Occasionally, organizations provide data or reports to Sage for specific projects, such as Sage Expert Services engagements.  Sage ensures that no data leaves its control. Under no circumstance is Sage represented as a service provider for retrieving, analyzing, and reporting on any organization's information.

--- Therefore if your auditor wants to request specific accounting data, you can provide this from the standard reporting in the product. If they need something that is not a specific report, you can work with your Sage business partner or internal reporting analyst to pull any data from the SQL Server directly or through reporting tools such as Crystal Reports.

The Statement on Auditing Standards is an auditing standard issued by the American Institute of Certified Public Accountants (AICPA). The intent of the standard is to provide a guideline to ensure that adequate controls are in place over service organizations and service providers.

SSAE 16, SSAE 18, SOC, SOC 1, and SAS 70 apply to audits of financial statements when an organization uses external services. Sage provides accounting and specialized solutions as packaged software solutions rather than as services. Sage 500 ERP is one such product.

Organizations that use Sage Accounting solutions are always in full control of their data - from establishing access, entering information, and producing reports. Occasionally, organizations provide data or reports to Sage for specific projects, such as Sage Expert Services engagements.  Sage ensures that no data leaves its control. Under no circumstance is Sage represented as a service provider for retrieving, analyzing, and reporting on any organization's information.

--- Therefore if your auditor wants to request specific accounting data, you can provide this from the standard reporting in the product. If they need something that is not a specific report, you can work with your Sage business partner or internal reporting analyst to pull any data from the SQL Server directly or through reporting tools such as Crystal Reports.