Covid-19 update
The lifting of Covid-19 restrictions means that on-site SAS audits have now resumed.
Sites whose SAS certification remains affected by previous restrictions are highlighted with relevant notes on the SAS accredited sites list. The number of such sites is gradually reducing as on-site renewal audits take place.
During Covid-19 restrictions, some certified sites declared to the GSMA that they had temporarily implemented business continuity measures that affected their compliance with SAS. Compensating controls implemented at those sites, agreed with the SAS auditors, were used as a basis for granting temporary waivers to those sites. Such sites were highlighted on the SAS accredited sites list (with [2]), and most have now reverted to full SAS compliance. The temporary waivers granted by the GSMA to these sites during the pandemic that permitted such measures to be used are being phased out. All sites are expected to revert to fully compliant controls, and these will be validated at each site’s next audit.
SAS for UICC Production (SAS-UP)
The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited
Accreditation scope definitions are provided here.
Key to Entries
| Entry / Symbol | Certification Type | Scope |
| UICC | UICCP | Full | Provisional | Within scope (UICCs) |
| eUICC | eUICCP | Within scope (eUICCs) | |
 |  |
Within scope (2-step personalisation – Perso_SC) | |
 |  |
Within scope (2-step personalisation – Perso_UICC) | |
 |  |
Within scope (card form factor) | |
 |  |
Within scope (embedded form factor) | |
 |  |
Within scope (Wafer Level Chip Scale Packaging) | |
 |
N/A | GSMA PKI Live; site has demonstrated compliant controls with GSMA PKI certificate(s) in use*. |
 |
N/A | GSMA PKI Ready; site has demonstrated compliant controls for PKI certificate management with non-GSMA PKI certificates* |
| – | N/A | Not carried out at this site |
P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
* SAS-UP certificates issued prior to the publication of FS.05 v9.2 (21 Apr 2021) indicate the previous designation (provisional/full) for certification of this activity. Each site’s SAS-UP certificate will be reissued with the new designation following its next successful audit.
SAS-UP Accredited sites.
Supplier |
Site |
Certification Scope |
Valid to: |
Cert. |
|||
Generation of data for personalisation |
Personalisation |
Management of PKI certificates |
Post personalisation packaging |
||||
|
Advanced Semiconductor Engineering Inc. [3] |
Kaohsiung, Taiwan |
– |
|
– |
|
Mar 2024 |
|
|
Amkor Technology Korea, Inc. – K3 |
Incheon, Korea |
– |
|
– |
– |
Jul 2025 |
|
|
Amkor Technology Taiwan, Ltd. – T1 |
Taoyuan City, Taiwan |
– |
|
– |
– |
Apr 2025 |
|
|
Ardentec Corporation |
Hsinchu, Taiwan |
– |
|
– |
– |
May 2025 |
|
|
Ardentec Singapore Pte Ltd |
Singapore |
– |
|
– |
– |
Jul 2024 |
|
|
Beautiful Card Corporation |
Taoyuan, Taiwan |
UICCp |
|
– |
|
Jul 2024 |
|
|
Beijing Huahong IC Design Co., Ltd. |
Beijing, China |
UICC, eUICC |
|
|
|
Sep 2024 |
|
|
Beijing Watchdata Co., Ltd. [3] |
Beijing, China |
UICC |
|
– |
– |
Jan 2024 |
|
|
Chengtian Weiye (Ningbo) Chip Technology Co., Ltd. [3] |
Cixi, China |
– |
|
– |
– |
Dec 2023 |
|
|
Chutian Dragon Co., Ltd. [3] |
Dongguan, China |
UICC |
|
– |
|
Feb 2024 |
|
|
Eastcompeace Technology Co., Ltd [3] |
Zhuhai, China |
UICC, eUICC |
|
|
|
Aug 2024 |
|
Ajman, UAE |
UICC |
|
– |
– |
Jan 2024 |
|
|
|
E-Kart [3] |
Istanbul, Turkey |
UICC, eUICCp |
|
|
– |
Dec 2023 |
|
|
Gemalto Southern Africa (Pty) Ltd [3] |
Gauteng, South Africa |
– |
|
– |
– |
Sep 2023 |
|
|
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
UICC, eUICC |
|
|
|
Apr 2025 |
|
|
Giesecke+Devrient (Jiangxi) Technology Co.,Ltd., [3] |
Nanchang, China |
UICC, eUICC |
|
|
|
Dec 2023 |
|
|
Giesecke+Devrient Mobile Security America, Inc. |
Markham, Canada |
UICC, eUICC |
– |
|
– |
Jul 2024 |
|
|
Giesecke & Devrient MS India Private Limited [3] |
Chennai, India |
UICC, eUICC |
– |
|
– |
Feb 2024 |
|
|
Giesecke+Devrient Secure Data Management GmbH |
Neustadt, Germany |
UICC |
|
– |
|
Jul 2025 |
|
|
Giesecke y Devrient de México S.A. de C.V. |
Tlalnepantla de Baz, Mexico |
UICC |
– |
– |
– |
Jul 2024 |
|
|
Goldpac Limited [3] |
Zhuhai, China |
UICC |
|
– |
|
Jun 2024 |
|
|
HB Technologies Algiers |
Algiers, Algeria |
UICC |
|
– |
– |
Aug 2024 |
|
|
Hengbao Co., Ltd [3] |
Danyang, China |
UICC, eUICC |
|
|
|
Dec 2023 |
|
|
IDEMIA (Shenzhen) Technologies Company Limited |
Shenzhen, China |
UICC, eUICC |
|
|
|
Aug 2025 |
|
|
Idemia Colombia SAS |
Yumbo, Colombia |
UICC |
|
– |
|
May 2024 |
|
|
IDEMIA FRANCE SAS [3] |
Vitré, France |
UICC, eUICC |
|
|
|
Jan 2024 |
|
|
IDEMIA Germany GmbH [3] |
Flintbek, Germany |
UICC |
|
– |
– |
Sep 2023 |
|
|
Idemia Syscom India Private Limited [3] |
Noida, India |
UICC, eUICC |
|
|
– |
Jan 2025 |
|
|
Infineon Technologies Dresden GmbH |
Dresden, Germany |
– |
|
– |
– |
Jun 2024 |
|
|
Inkript [3] |
Beirut, Lebanon |
UICC |
|
– |
– |
Aug 2023 |
|
|
JSC NovaCard [3] |
Nizhny Novgorod, Russia |
UICC |
|
– |
– |
Dec 2023 |
|
|
Kigen (UK) Limited |
Belfast, United Kingdom |
UICC, eUICC |
– |
|
– |
Sep 2024 |
|
|
Kona M Co., Ltd., [3] |
Jincheon-Gun, South Korea |
UICC |
|
– |
|
Sep 2023 |
|
|
MK Smart Joint Stock Company [3] |
Hanoi, Vietnam |
UICC |
|
– |
– |
Feb 2024 |
|
|
NXP Semiconductors Germany GmbH [3] |
Hamburg, Germany |
UICC, eUICC |
– |
|
– |
Oct 2023 |
|
|
NXP Semiconductors Taiwan Ltd [3] |
Kaohsiung, Taiwan |
– |
|
– |
|
Oct 2023 |
|
|
NXP Semiconductors (Tianjin) Ltd. [1] |
Tianjin, China |
eUICCp |
|
|
– |
Oct 2023 |
|
|
Oasis Smart SIM Europe |
St Germain en Laye, France |
UICC, eUICC |
– |
|
– |
Oct 2023 |
|
|
PT. Chengtian Weiye Indonesia |
Bekasi, Indonesia |
– |
|
– |
– |
Apr 2025 |
|
|
Qualcomm Technologies, Inc. |
San Diego, USA |
|
– |
– |
– |
Jun 2025 |
|
|
Samsung Electronics Co., Ltd |
Yongin-Si, South Korea |
– |
– |
– |
– |
Jan 2025 |
|
|
Secure ID Limited |
Lagos, Nigeria |
UICC |
|
– |
– |
Sep 2024 |
|
|
Shanghai Chengtian Smart Card Co., Ltd. [3] |
Shanghai, China |
– |
|
– |
– |
Feb 2024 |
|
|
Shenzhen Chengtian Weiye Technology Company Limited [3] |
Shenzhen, China |
UICC |
|
– |
– |
Feb 2024 |
|
Shenzhen, China |
– |
|
– |
– |
Jan 2024 |
|
|
|
Siliconware Precision Industries Co. Ltd. |
Taichung, Taiwan |
– |
|
– |
– |
Dec 2023 |
|
|
Sinc Novation d.o.o |
Belgrade, Serbia |
– |
– |
– |
|
Apr 2024 |
|
|
Sintel Security Print Solutions Limited |
Thika, Kenya |
– |
|
– |
|
Dec 2023 |
|
|
STMicroelectronics srl |
Caserta, Italy |
UICC, eUICC |
|
|
|
May 2024 |
|
|
STMicroelectronics [3] |
Rousset, France |
– |
|
– |
– |
Sep 2023 |
|
|
STMicroelectronics |
Toa Payoh, Singapore |
– |
|
– |
– |
Jul 2025 |
|
|
TESNA Inc. [3] |
Pyeongtaek-Si, Korea |
– |
|
– |
– |
Mar 2024 |
|
|
Thales DIS France SAS |
Pont Audemer, France |
UICC, eUICC |
|
|
|
Apr 2025 |
|
Tours, France |
|
|
|
– |
Dec 2023 |
|
|
|
Thales DIS Mexico S.A. de C.V. |
Cuernavaca, Mexico |
UICC, eUICC |
|
|
|
Aug 2025 |
|
|
THALES DIS India Private Limited [3] |
Noida, India |
UICC, eUICC |
– |
|
– |
Jan 2025 |
|
|
Thales DIS (Shanghai) Co., Ltd. [3] |
Shanghai, China |
UICC, eUICC |
|
|
– |
Dec 2023 |
|
|
Thales DIS USA, Inc. |
Montgomeryville, USA |
UICC, eUICC |
– |
|
– |
Jun 2025 |
|
|
Tongxin Microelectronics Co.,LTD. [3] |
Beijing, China |
– |
|
– |
– |
Oct 2023 |
|
|
Trasna Solutions d.o.o. |
Gračanica, Bosnia & Herzegovina |
UICC |
|
– |
|
Mar 2024 |
|
|
United Security Printing [3] |
Abu Dhabi, United Arab Emirates |
UICC |
|
– |
|
Dec 2023 |
|
|
Valid Card Manufacturing (Suzhou) Co., Ltd [3] |
Suzhou, China |
UICC, eUICC |
|
|
|
Feb 2024 |
|
|
Valid Soluciones Tecnológicas S.A.U. |
Madrid, Spain |
UICC, eUICC |
|
|
|
Apr 2024 |
|
Dubai, United Arab Emirates |
UICC, eUICC |
|
|
|
Feb 2024 |
|
|
|
Wuhan Tianyu Information Industry Co., Ltd. – Lefeng Road [3] |
Wuhan, China |
UICC, eUICC |
|
|
|
Feb 2024 |
|
|
XH Smart Tech (China) Co., Ltd. [3] |
Zhuhai, China |
UICC |
|
– |
– |
Oct 2024 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.
SAS for Subscription Management (SAS-SM)
The subscription management service provider and data centre operations and management sites in the table below are currently accredited.
Accreditation scope definitions are provided here.
Key to Symbols
| Symbol | Certification Type |
 |
Within scope (full certification; locally hosted) |
 |
Within scope (provisional certification; locally hosted *) |
 |
Within scope (full certification; cloud hosted/hosting) |
 |
Within scope (provisional certification; cloud hosted/hosting *) |
| – | Not carried out at this site |
* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-SM Accredited sites.
Supplier |
Site |
Scope of Certification |
Valid to: |
Cert. |
||||
Secure Routing |
Data Preparation |
Data Preparation+ (ref. SGP.22) |
Data Centre Operations & Management |
Discovery Service |
||||
|
1oT |
Tallinn, Estonia |
|
|
|
|
|
Jul 2024 |
|
|
A1 Systems [3] |
Moscow, Russia |
|
|
|
|
– |
Nov 2023 |
|
|
Amazon Web Services, Inc. |
AWS cloud regions: Europe (Paris) & US East (Ohio) |
– |
– |
– |
|
– |
Oct 2023 |
|
|
Bharti Airtel Ltd |
Noida, India |
|
|
|
|
– |
Nov 2024 |
|
|
Eastcompeace Technology Co., Ltd [3] |
Zhuhai, China |
|
|
|
|
– |
Mar 2024 |
|
|
Giesecke+Devrient Mobile Security Germany GmbH. |
Aschheim, Germany |
|
|
|
|
|
Apr 2025 |
|
|
Giesecke + Devrient Mobile Security America, Inc. |
Atlanta, USA |
|
|
|
|
|
Mar 2025 |
|
|
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
– |
– |
|
|
|
Jun 2025 |
|
|
Google LLC |
Sites in Europe cloud region, Europe |
– |
– |
– |
|
– |
Jun 2024 |
|
|
Hengbao Co., Ltd [3] |
Danyang, China |
|
|
|
|
|
Sep 2024 |
|
|
IDEMIA America Corp. [3] |
Sterling, U.S.A |
|
|
|
|
– |
Jan 2024 |
|
|
IDEMIA Technologies Romania S.R.L. [3] |
Bucharest, Romania |
|
|
|
|
– |
Jan 2024 |
|
|
Invigo Offshore SAL |
Beirut, Lebanon |
|
|
|
|
|
Sep 2024 |
|
|
Kigen (UK) Limited |
Dublin, Republic of Ireland |
|
|
|
|
– |
Jun 2025 |
|
|
Links Field Networks Ltd. [3] |
Shenzhen, China |
– |
– |
|
|
– |
Nov 2024 |
|
|
Microsoft Corporation |
Azure Cloud regions in USA, Europe and Japan |
– |
– |
– |
|
– |
Jun 2024 |
|
|
Monty UK Global Ltd. [3] |
London, UK |
– |
– |
|
|
– |
Feb 2024 |
|
|
Nokia Solutions and Networks Oy |
Fort Worth, USA |
|
|
|
– |
– |
Apr 2025 |
|
|
Nordic eSIM |
Copenhagen, Denmark |
|
|
|
|
– |
Jun 2025 |
|
|
NovaCard JSC [3] |
Nizhny Novgorod, Russia |
|
|
|
|
– |
Sep 2024 |
|
|
Oasis Smart Sim Europe SAS |
Paris, France |
|
|
|
|
– |
Nov 2023 |
|
|
Oracle Cloud Infrastructure |
OCI regions in Germany, USA & Singapore |
– |
– |
– |
|
– |
Aug 2024 |
|
|
Protahub A.Ş. |
Istanbul, Turkey |
|
|
|
|
– |
Nov 2023 |
|
|
Redtea Mobile PTE. LTD. |
Amsterdam, Netherlands |
– |
– |
|
|
– |
Jun 2025 |
|
|
Reliance Jio Infocomm Ltd |
Mumbai, India |
|
|
|
|
– |
Sep 2024 |
|
|
RiPSIM Technologies, Inc. |
Ashburn, VA, USA |
– |
– |
|
|
– |
May 2024 |
|
|
Saudi Telecom Company |
Riyadh, Saudi Arabia |
|
|
|
|
– |
Jan 2024 |
|
|
Simartis Telecom SRL |
Cluj-Napoca, Romania |
– |
– |
|
|
|
Feb 2024 |
|
|
Star Solutions International Inc. |
Richmond, Canada |
– |
– |
|
|
– |
May 2024 |
|
|
TATA Communications Collaboration Services Private Limited |
New Delhi, India |
|
|
|
|
– |
Jan 2024 |
|
|
Teal Communications, Inc. |
Fort Worth, USA |
|
|
|
|
– |
Aug 2025 |
|
|
Thales DIS France SAS |
La Ciotat, France |
– |
– |
|
|
|
Jan 2025 |
|
|
Thales DIS France SAS |
Tours, France |
|
|
|
|
|
Jan 2025 |
|
|
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
|
|
|
|
– |
Sep 2025 |
|
|
Thales DIS USA, Inc. |
Dallas, USA |
|
|
|
|
|
Mar 2025 |
|
|
TP Global Operations Limited |
London, United Kingdom |
|
|
|
|
|
Dec 2023 |
|
|
TP Global Operations Limited |
Amsterdam, The Netherlands |
|
|
|
|
|
Dec 2023 |
|
|
VALID SOLUCIONES TECNOLÓGICAS S.A.U. |
Madrid, Spain |
|
|
|
|
– |
Jun 2024 |
|
Thane, India |
|
|
|
|
– |
Sep 2023 |
|
|
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
|
|
|
|
|
Jul 2025 |
|
|
Wuhan Tianyu Information Industry Co., Ltd. [3] |
Wuhan, China |
|
|
|
|
|
Nov 2023 |
|
|
XH Smart Tech (China) Co., Ltd. |
Zhuhai, China |
|
|
|
|
– |
Oct 2025 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.
If you would like to receive an email when the list of accredited sites changes, please provide your details below: