Every SI deck shows you the six-box Activate diagram. Almost none tell you what each phase demands of your people, where programs predictably lose time, or how clean core is actually enforced. Here is the operational version — governance first, diagram second.
Most sponsors arrive at the board table with a transition path already picked — by a partner, or by habit — and cannot defend why it beats the other two. Here is SAP’s actual three-path map, what each road really costs in redesign and downtime, and the four criteria that make the choice defensible.
RISE with SAP puts ERP, infrastructure and managed services into one contract — and that single line item is exactly why CFOs misjudge it. Here is what SAP says is in the bundle, what independent analysts say stays with you, and where the negotiation leverage actually sits.
Saudi Arabia at 15% with real-time invoice clearance, the UAE at 5% on periodic returns, Bahrain at 10%: “GCC VAT” is three regimes wearing one name. Here is where they diverge — and where a single SAP template quietly breaks if the differences are treated as afterthoughts.
The UAE now runs two corporate tax regimes side by side: the 9% federal Corporate Tax from 2023, and — for large multinationals — a 15% Domestic Minimum Top-up Tax from 2025. Here is what each demands, and how the requirements land in an S/4HANA landscape.
“PDPL means everything must stay in Saudi Arabia” is the most common — and most expensive — misreading of the Kingdom’s data protection law. Here is what Article 29 actually permits, what audit controls it demands, and a precise map of which hyperscaler regions genuinely run in-Kingdom today.
There is no announced “Phase 3” of ZATCA e-invoicing — and planning around one is a mistake. The real roadmap is the continued wave-by-wave expansion of Phase 2 to ever-smaller taxpayers, and the sensible SAP response is an architecture that absorbs each wave as configuration.
When an AI agent acts inside your ERP, the accountability does not move to the model — it stays with you. What GDPR, the EU AI Act and Saudi Arabia’s PDPL actually require, what SAP’s own AI ethics governance looks like, and how to design escalation and audit before the first agent goes live.
SAP says it in its own words: “AI is only as reliable as the data and processes it operates on.” Before your agent program, there is a master data program — Business Partner, clean core, MDG, harmonization. Here is why, and the order to do it in.