Nothing absolutely precludes malfeasance, but SAP is a European legal entity, answerable ultimately to European law. Microsoft and Oracle also trade in Europe through European legal entities, which are theoretically also bound by European law, but should that law conflict with any US law that binds the parent companies, we would expect the US law to be the stronger influence (likely covertly).