SAS Accredited Sites

Covid-19 update

Audit travel and workplace attendance restrictions caused by the Covid-19 outbreak are preventing SAS audit teams from visiting and auditing some sites participating in the scheme. Renewal of certification for affected sites may be delayed beyond the expiry date of their current SAS certificates and remain outstanding. An audit to reconfirm affected sites’ SAS-compliance will be scheduled as soon as possible once restrictions are lifted.

GSMA is asking affected sites to extend their commitments and arrangements to maintain SAS-compliant controls during this period of disruption. Certification for affected sites is highlighted (with Note #1) in the tables below.

In addition, some sites have declared to GSMA that they have temporarily implemented business continuity measures in response to Covid-19 that affects their compliance with SAS. Details are being reviewed with the SAS auditors to ensure that compensating controls are being applied. These sites are highlighted (with Note #2) in the tables below.

SAS for UICC Production (SAS-UP)

The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited.

Accreditation scope definitions are provided here.

Key to Entries

Entry / Symbol Certification Type Scope
UICC | UICCP Full | Provisional Within scope (UICCs)
eUICC | eUICCP Within scope (eUICCs)
GSMA PKI | PKIP Within scope (GSMA PKI certificates)
Oval:C | Oval: CP Within scope (card form factor)
Oval: E | Oval: EP Within scope (embedded form factor)
WLCSP full | WLCSP provisional Within scope (Wafer Level Chip Scale Packaging)
- N/A Not carried out at this site

P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-UP Accredited sites.

Supplier

Site

Certification Scope

Valid to:

Cert.

Notes

Generation of data for personalisation

Personalisation

Management of PKI certificates

Post personalisation packaging

Ardentec Corporation

Hsinchu, Taiwan

-

Oval: E

-

-

Nov 2020

pdf

-

Arm Ltd.

London, UK

eUICCp, UICCp

-

GSMA PKIp

-

Aug 2020

pdf

2

Beautiful Card Corporation

Taipei, Taiwan

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

-

Beijing Huahong IC Design Co., Ltd.

Beijing, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

-

Sep 2021

pdf

-

Beijing Watchdata Co., Ltd.

Beijing, China

UICC

Oval: C Oval: E

-

-

Jul 2020

pdf

-

Chutian Dragon Co., Ltd.

Dongguan, China

UICC

Oval: C

-

Oval: C

Aug 2020

pdf

-

DZ Card (Thailand) Ltd

Bangkok, Thailand

UICC

Oval: C

-

Oval: C

Jul 2020

pdf

-

Eastcompeace Technology Co., Ltd

Zhuhai, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Aug 2020

pdf

1

Ebtikar Card Systems LLC

Ajman, UAE

UICC

Oval: C

-

Oval: C

Jun 2020

pdf

-

E-Kart

Istanbul, Turkey

UICC, eUICCP

Oval: C

GSMA PKIP

Oval: C

Aug 2020

pdf

-

FutureCard Industries LLC

Sharjah, UAE

UICC

Oval: C

-

Oval: C

June 2021

pdf

-

Gemalto

Montgomeryville, USA

UICC, eUICC

-

GSMA PKI

-

Jun 2020

pdf

-

Gemalto

Pont Audemer, France

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

-

Gemalto Sp z o. o

Tczew, Poland

UICC

Oval: C

-

-

Dec 2020

pdf

-

Gemalto Southern Africa (Pty) Ltd

Gauteng, South Africa

-

Oval: C

-

-

Sep 2021

pdf

-

G & D Mobile Security

Barcelona, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

-

Giesecke+Devrient (China) Technologies Co., Ltd.

Nanchang, China

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Jun 2021

pdf

-

Giesecke & Devrient MS India Private Limited

Chennai, India

UICC, eUICC

-

GSMA PKI

-

Feb 2022

pdf

-

Giesecke & Devrient Secure Data Management GmbH

Neustadt, Germany

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

-

Hengbao Co., Ltd

Danyang, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Dec 2021

pdf

-

HB Technologies Algiers

Algiers, Algeria

UICC

Oval: C

-

-

Feb 2021

pdf

-

IDEMIA (Shenzhen) Technologies Company Limited

Shenzhen, China

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

-

Apr 2020

pdf

-

IDEMIA FRANCE SAS

Vitré, France

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Jan 2022

pdf

-

IDEMIA Germany GmbH

Flintbek, Germany

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Sep 2021

pdf

-

Idemia Syscom India Private Limited

Noida, India

UICC

Oval: C

-

-

Jul 2020

pdf

-

Inkript

Beirut, Lebanon

UICC

Oval: C

-

Oval: C

Mar 2021

pdf

-

JSC NovaCard

Nizhny Novgorod, Russia

UICC

Oval: C

-

-

Dec 2021

pdf

-

KONA M Co., Ltd.

Jincheon-Gun, South Korea

UICC

Oval: C

-

Oval: C

Sep 2020

pdf

-

MK Smart Joint Stock Company

Hanoi, Vietnam

UICC

Oval: C

-

-

Aug 2021

pdf

-

NXP Semiconductors Germany GmbH

Hamburg, Germany

UICC, eUICC

-

GSMA PKI

-

Oct 2021

pdf

-

NXP Semiconductors Kaohsiung

Kaohsiung, Taiwan

-

Oval: E

-

Oval: C

Oct 2021

pdf

-

PT. Chengtian Weiye Indonesia

Bekasi, Indonesia

-

Oval: C

-

-

Oct 2020

pdf

-

Samsung Electronics Co., Ltd.

Yongin, South Korea

Check certificate for scope.

Jan 2021

pdf

-

Shanghai Chengtian Smart Card Co., Ltd

Shanghai, China

-

Oval: C

-

-

Aug 2021

pdf

-

Shenzhen iGear Technology Inc

Shenzhen, China

-

Oval: C Oval: EP

-

-

Jul 2021

pdf

-

Shenzhen Chengtian Weiye Technology Company Limited

Shenzhen, China

UICC

Oval: C

-

-

Aug 2021

pdf

-

STMicroelectronics srl

Caserta, Italy

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Nov 2020

pdf

-

STMicroelectronics

Rousset, France

-

WLCSP full

-

-

Mar 2021

pdf

-

STMicroelectronics

Toa Payoh, Singapore

-

WLCSP full

-

-

Jul 2021

pdf

-

TESNA Inc.

Pyeongtaek-si, South Korea

-

WLCSP full

-

-

Sep 2020

pdf

1

Thales DIS Deutschland GmbH.

Filderstadt, Germany

UICC

Oval: C

-

Oval: C

Nov 2020

pdf

-

Thales DIS Mexico S.A. de C.V.

Cuernavaca, Mexico

UICC, eUICC

Oval: C

GSMA PKI

Oval: C

Aug 2021

pdf

-

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

UICC, eUICC

Oval: COval: E

GSMA PKI

-

Dec 2021

pdf

-

United Security Printing

Abu Dhabi, UAE

UICC

Oval: C

-

Oval: C

Dec 2021

pdf

-

Valid Card Manufacturing (Suzhou) Co., Ltd

Suzhou, China

UICC, eUICC

Oval: C Oval: E

Non-GSMA PKI

Oval: C

Dec 2020

pdf

-

Valid Soluciones Tecnológicas S.A.U.

Madrid, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2020

pdf

-

Workz Group Technology d.o.o.

Gračanica, Bosnia & Herzegovina

UICC

Oval: C

-

-

Sep 2021

pdf

-

Workz Media FZ LLC

Dubai, United Arab Emirates

UICC, eUICC

Oval: C Oval: E

GSMA PKI

-

Aug 2020

pdf

-

Wuhan Tianyu Information Industry Co., Ltd.

Wuhan, China (Huazhong Univ. Pk.)

UICC

Oval: C

-

Oval: C

Oct 2020

pdf

-

Wuhan Tianyu Information Industry Co., Ltd.

Wuhan, China (Lefeng Rd.)

UICC, eUICCp

Oval: C

GSMA PKIp

Oval: C

Aug 2020

pdf

-

XH Smart Tech (China) Co., Ltd.

Zhuhai, China

UICC

Oval: C

-

-

Jan 2021

pdf

-

Notes:

1. Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

2. The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

 

SAS for Subscription Management (SAS-SM)

The following subscription management service provider sites are currently accredited.

Key to Symbols

Symbol Certification Type
Oval: P Within scope (full certification)
Oval: P Within scope (provisional certification*)
- Not carried out at this site

* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-SM Accredited sites.

Supplier

Site

Scope of Certification

Valid to:

Cert.

Notes

Secure Routing

Data Preparation

Data Preparation+ (ref. SGP.22)

Data Centre Operations & Management

Discovery Service

Arm Inc.

Austin, USA

Oval: P

Oval: P

-

Oval: P

-

Feb 2021

pdf

2

Arm Limited

London, UK

Oval: P

Oval: P

-

Oval: P

-

May 2020

pdf

2

Bharti Airtel Ltd

Noida, India

Oval: P

Oval: P

Oval: P

Oval: P

-

May 2020

pdf

-

Eastcompeace Technology Co., Ltd

Zhuhai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Feb 2022

pdf

-

Ericsson AB

Kista, Sweden

-

-

Oval: P

Oval: P

-

Jul 2020

pdf

-

Gemalto Inc

Dallas, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

-

Giesecke & Devrient Professional Services GmbH

Munich, Germany

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Apr 2021

pdf

-

Giesecke+Devrient (China) Technologies Co., Ltd. (Shanghai)

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

1

Giesecke & Devrient Mobile Security America, Inc.

Atlanta, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

-

Giesecke & Devrient Mobile Security Iberia, SAU

Barcelona, Spain

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

-

Hengbao Co., Ltd

Danyang, China

Oval: P

Oval: P

-

Oval: P

-

Dec 2020

pdf

-

IDEMIA America Corp.

Sterling, U.S.A

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

-

IDEMIA Technologies Romania S.R.L.

Bucharest, Romania

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

-

Invigo Offshore SAL

Beirut, Lebanon

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

-

Oasis Smart Sim Europe SAS

Paris, France

Oval: P

Oval: P

-

Oval: P

-

Nov 2020

pdf

-

Protahub A.Ş.

Istanbul, Turkey

Oval: P

Oval: P

Oval: P

Oval: P

-

Nov 2020

pdf

-

Reliance Jio Infocomm Ltd

Mumbai, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

-

Saudi Telecom Company

Riyadh, Saudi Arabia

-

-

Oval: P

Oval: P

-

Oct 2020

pdf

2

Telenor Group

Oslo, Norway

Oval: P

Oval: P

Oval: P

Oval: P

-

Jul 2020

pdf

-

Thales DIS France SA

Tours, France

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jul 2020

pdf

-

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2021

pdf

-

Truphone Limited

London, United Kingdom

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Dec 2021

pdf

-

Truphone Limited

Amsterdam, The Netherlands

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

-

Valid Spain

Madrid, Spain

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

-

Valid USA Inc

Chicago, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

July 2020

pdf

-

Vodafone Idea Limited NDC3

Thane, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2020

pdf

-

Workz Media FZ LLC

Dubai, United Arab Emirates

Oval: P

Oval: P

-

Oval: P

-

Jun 2020

pdf

-

Notes:

1. Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

2. The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

 

If you would like to receive an email when the list of accredited sites changes, please provide your details below: