SOX requires that the data used to generate the financial statements is created and modified only by approved and documented processes. Any details relating to SQL Server (or any other software) are inferred, and as such are open to interpretation.