Knowledge base / Reference
Frequently asked questions
Does my SAP data leave my computer?
No. Files are read inside your browser. Nothing is uploaded to any server.
Does it replace SAP GRC?
It finds, explains and helps fix conflicts, and proves its results with tests and a reconciliation. Companies that must evidence a tool-based control usually still run GRC at sign-off; the reconciliation makes the two agree. For companies without GRC, or deciding what comes after GRC 12, it is an independent baseline.
Who can do the SAP extraction?
Anyone with display access to SE16N on the tables, usually SAP security or Basis. It takes about 30 minutes.
How large can the data be?
Tens of thousands of users and roles work. Authorization tables with millions of rows take about a minute to load; keep the tab open.
Which SAP releases?
Any release whose authorization tables you can export, from ECC 6 to S/4HANA. Upload TSTCT to make the transaction catalog exact for your release.
Does ClearDuty know every SAP transaction?
It ships a catalog of common standard transactions and infers the module of unknown codes from SAP naming conventions, clearly marked as inferred. Your own TSTCT is the complete list.
How do I share results?
Export the audit pack and send the Excel file. To hide user IDs, pseudonymise first. To let a colleague continue, save a workspace file.
Does it use AI?
The engine is deterministic. The optional Intelligence view uses a local scoring formula shown on screen. No AI provider is involved.
Which browsers?
Current Chrome, Edge, Firefox and Safari on desktop. Phones work for reading results.
Who is behind ClearDuty?
Muzam Consulting, an SAP access and controls practice in Wrocław, Poland. ClearDuty grew out of client work on SAP role redesign and SoD remediation.
Still stuck? Ask us — we answer within one working day.