RISE with SAP for government agencies, where audit and procurement framework shape every clause.

The standard RISE with SAP contract assumes commercial law, commercial procurement, and commercial audit. None of those assumptions hold for a federal agency, a state government, a defence ministry, or a regional health authority. The contracting framework is statutory. The audit rights are mandatory and non waivable. The data residency obligations sit inside law, not policy. The term length is often capped by appropriation cycles.

Despite all of that, SAP account teams routinely propose the same RISE template to public sector buyers that they propose to commercial enterprises. The clauses on indemnity, governing law, data export, audit, and term length need to be reshaped before the deal can be approved by general counsel and procurement leadership.

Independent advisory work for public sector RISE deals sits at the intersection of three disciplines, which are commercial RISE negotiation, public sector procurement, and the specific framework agreements that apply in the buyer jurisdiction. The contract that emerges looks materially different from a commercial RISE deal.

Federal civilian agencies, defence and intelligence, state and local government, public education systems, regional health authorities, and government owned enterprises all sit within the broad envelope of public sector. Each has its own procurement framework, its own audit regime, and its own statutory term constraints.

Federal civilian agencies in the United States operate under FAR and DFARS, with FedRAMP accreditation required for cloud hosting. United Kingdom central government uses the G Cloud framework with appropriate Crown Commercial Service vehicles. European Union member states apply national procurement law that derives from the EU procurement directives. State and local government in the United States operate under cooperative purchasing vehicles such as OMNIA and Sourcewell.

Defence ministries impose additional security accreditation, sovereign hosting, and personnel clearance requirements. Regional health authorities add patient data protection and clinical safety obligations. Public education systems frequently buy through consortium vehicles that have their own template terms. Each sub sector requires its own variation of the RISE contract.