Covid-19 update
Audit travel and workplace attendance restrictions caused by the Covid-19 outbreak are preventing SAS audit teams from visiting and auditing some sites participating in the scheme. Renewal of certification for affected sites may be delayed beyond the expiry date of their current SAS certificates and remain outstanding. An audit to reconfirm affected sites’ SAS-compliance will be scheduled as soon as possible once restrictions are lifted.
GSMA is asking affected sites to extend their commitments and arrangements to maintain SAS-compliant controls during this period of disruption. Certification for affected sites is highlighted (with Note #1) in the tables below.
In addition, some sites have declared to GSMA that they have temporarily implemented business continuity measures in response to Covid-19 that affects their compliance with SAS. Details are being reviewed with the SAS auditors to ensure that compensating controls are being applied. These sites are highlighted (with Note #2) in the tables below.
SAS for UICC Production (SAS-UP)
The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited.
Accreditation scope definitions are provided here.
Key to Entries
| Entry / Symbol | Certification Type | Scope |
| UICC | UICCP | Full | Provisional | Within scope (UICCs) |
| eUICC | eUICCP | Within scope (eUICCs) | |
| GSMA PKI | PKIP | Within scope (GSMA PKI certificates) | |
 |  |
Within scope (card form factor) | |
 |  |
Within scope (embedded form factor) | |
 |  |
Within scope (Wafer Level Chip Scale Packaging) | |
| - | N/A | Not carried out at this site |
P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-UP Accredited sites.
Supplier |
Site |
Certification Scope |
Valid to: |
Cert. |
|||
Generation of data for personalisation |
Personalisation |
Management of PKI certificates |
Post personalisation packaging |
||||
Ardentec Corporation |
Hsinchu, Taiwan |
- |
|
- |
- |
Nov 2020 |
|
Arm Ltd. [2] |
London, UK |
eUICCp, UICCp |
- |
GSMA PKIp |
- |
Aug 2020 |
|
Beautiful Card Corporation |
Taipei, Taiwan |
UICC |
|
- |
|
Jul 2021 |
|
Beijing Huahong IC Design Co., Ltd. |
Beijing, China |
UICC, eUICCp |
|
GSMA PKIp |
- |
Sep 2021 |
|
Beijing Watchdata Co., Ltd. |
Beijing, China |
UICC |
|
- |
- |
Jul 2020 |
|
Chutian Dragon Co., Ltd. |
Dongguan, China |
UICC |
|
- |
|
Aug 2020 |
|
DZ Card (Thailand) Ltd |
Bangkok, Thailand |
UICC |
|
- |
|
Jul 2020 |
|
Eastcompeace Technology Co., Ltd [1] |
Zhuhai, China |
UICC, eUICCp |
|
GSMA PKIp |
|
Aug 2020 |
|
Ebtikar Card Systems LLC |
Ajman, UAE |
UICC |
|
- |
|
Jun 2020 |
|
E-Kart |
Istanbul, Turkey |
UICC, eUICCP |
|
GSMA PKIP |
|
Aug 2020 |
|
FutureCard Industries LLC |
Sharjah, UAE |
UICC |
|
- |
|
June 2021 |
|
Gemalto |
Montgomeryville, USA |
UICC, eUICC |
- |
GSMA PKI |
- |
Jun 2020 |
|
Gemalto |
Pont Audemer, France |
UICC, eUICC |
|
GSMA PKI |
|
Apr 2021 |
|
Gemalto Sp z o. o |
Tczew, Poland |
UICC |
|
- |
- |
Dec 2020 |
|
Gemalto Southern Africa (Pty) Ltd |
Gauteng, South Africa |
- |
|
- |
- |
Sep 2021 |
|
Barcelona, Spain |
UICC, eUICC |
|
GSMA PKI |
|
Apr 2021 |
|
|
Giesecke+Devrient (China) Technologies Co., Ltd. |
Nanchang, China |
UICC, eUICC |
|
GSMA PKI |
|
Jun 2021 |
|
Giesecke+Devrient Mobile Security Canada, Inc. |
Markham, Canada |
UICCp, eUICCp |
- |
GSMA PKIp |
- |
Jan 2021 |
|
Giesecke & Devrient MS India Private Limited [2] |
Chennai, India |
UICC, eUICC |
- |
GSMA PKI |
- |
Feb 2022 |
|
Giesecke & Devrient Secure Data Management GmbH |
Neustadt, Germany |
UICC |
|
- |
|
Jul 2021 |
|
Hengbao Co., Ltd |
Danyang, China |
UICC, eUICCp |
|
GSMA PKIp |
|
Dec 2021 |
|
HB Technologies Algiers |
Algiers, Algeria |
UICC |
|
- |
- |
Feb 2021 |
|
IDEMIA (Shenzhen) Technologies Company Limited [1] |
Shenzhen, China |
UICC, eUICC |
|
GSMA PKI |
- |
Oct 2020 |
|
IDEMIA FRANCE SAS |
Vitré, France |
UICC, eUICC |
|
GSMA PKI |
|
Jan 2022 |
|
IDEMIA Germany GmbH |
Flintbek, Germany |
UICC, eUICC |
|
GSMA PKI |
|
Sep 2021 |
|
Idemia Syscom India Private Limited |
Noida, India |
UICC |
|
- |
- |
Jul 2020 |
|
Infineon Technologies Dresden GmbH |
Dresden, Germany |
- |
|
- |
- |
Dec 2020 |
|
Inkript |
Beirut, Lebanon |
UICC |
|
- |
|
Mar 2021 |
|
JSC NovaCard |
Nizhny Novgorod, Russia |
UICC |
|
- |
- |
Dec 2021 |
|
KONA M Co., Ltd. |
Jincheon-Gun, South Korea |
UICC |
|
- |
|
Sep 2020 |
|
MK Smart Joint Stock Company |
Hanoi, Vietnam |
UICC |
|
- |
- |
Aug 2021 |
|
NXP Semiconductors Germany GmbH |
Hamburg, Germany |
UICC, eUICC |
- |
GSMA PKI |
- |
Oct 2021 |
|
NXP Semiconductors Kaohsiung |
Kaohsiung, Taiwan |
- |
|
- |
|
Oct 2021 |
|
PT. Chengtian Weiye Indonesia |
Bekasi, Indonesia |
- |
|
- |
- |
Oct 2020 |
|
Samsung Electronics Co., Ltd. |
Yongin, South Korea |
Check certificate for scope. |
Jan 2021 |
|
|||
SecureID Limited |
Lagos, Nigeria |
- |
|
- |
- |
Dec 2020 |
|
Shanghai Chengtian Smart Card Co., Ltd |
Shanghai, China |
- |
|
- |
- |
Aug 2021 |
|
Shenzhen iGear Technology Inc |
Shenzhen, China |
- |
|
- |
- |
Jul 2021 |
|
Shenzhen Chengtian Weiye Technology Company Limited |
Shenzhen, China |
UICC |
|
- |
- |
Aug 2021 |
|
STMicroelectronics srl |
Caserta, Italy |
UICC, eUICC |
|
GSMA PKI |
|
Nov 2020 |
|
STMicroelectronics [2] |
Rousset, France |
- |
|
- |
- |
Mar 2021 |
|
STMicroelectronics [2] |
Toa Payoh, Singapore |
- |
|
- |
- |
Jul 2021 |
|
TESNA Inc. [1] |
Pyeongtaek-si, South Korea |
- |
|
- |
- |
Sep 2020 |
|
Thales DIS Deutschland GmbH. |
Filderstadt, Germany |
UICC |
|
- |
|
Nov 2020 |
|
Thales DIS Mexico S.A. de C.V. |
Cuernavaca, Mexico |
UICC, eUICC |
|
GSMA PKI |
|
Aug 2021 |
|
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
UICC, eUICC |
|
GSMA PKI |
- |
Dec 2021 |
|
United Security Printing |
Abu Dhabi, UAE |
UICC |
|
- |
|
Dec 2021 |
|
Valid Card Manufacturing (Suzhou) Co., Ltd |
Suzhou, China |
UICC, eUICC |
|
Non-GSMA PKI |
|
Dec 2020 |
|
Valid Soluciones Tecnológicas S.A.U. |
Madrid, Spain |
UICC, eUICC |
|
GSMA PKI |
|
May 2020 |
|
Workz Group Technology d.o.o. |
Gračanica, Bosnia & Herzegovina |
UICC |
|
- |
- |
Sep 2021 |
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
UICC, eUICC |
|
GSMA PKI |
- |
Aug 2020 |
|
Wuhan Tianyu Information Industry Co., Ltd. |
Wuhan, China (Huazhong Univ. Pk.) |
UICC |
|
- |
|
Oct 2020 |
|
Wuhan Tianyu Information Industry Co., Ltd. |
Wuhan, China (Lefeng Rd.) |
UICC, eUICCp |
|
GSMA PKIp |
|
Aug 2020 |
|
XH Smart Tech (China) Co., Ltd. |
Zhuhai, China |
UICC |
|
- |
- |
Jan 2021 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
SAS for Subscription Management (SAS-SM)
The following subscription management service provider sites are currently accredited.Key to Symbols
| Symbol | Certification Type |
 |
Within scope (full certification) |
 |
Within scope (provisional certification*) |
| - | Not carried out at this site |
* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-SM Accredited sites.
Supplier |
Site |
Scope of Certification |
Valid to: |
Cert. |
||||
Secure Routing |
Data Preparation |
Data Preparation+ (ref. SGP.22) |
Data Centre Operations & Management |
Discovery Service |
||||
Arm Inc. [2] |
Austin, USA |
|
|
- |
|
- |
Feb 2021 |
|
Arm Limited [2] |
London, UK |
|
|
- |
|
- |
May 2020 |
|
Bharti Airtel Ltd |
Noida, India |
|
|
|
|
- |
May 2020 |
|
Eastcompeace Technology Co., Ltd |
Zhuhai, China |
|
|
|
|
- |
Feb 2022 |
|
Ericsson AB [2] |
Kista, Sweden |
- |
- |
|
|
- |
Jul 2020 |
|
Giesecke & Devrient Professional Services GmbH |
Munich, Germany |
|
|
|
|
|
Apr 2021 |
|
Giesecke+Devrient (China) Technologies Co., Ltd. (Shanghai) [1] |
Shanghai, China |
|
|
|
|
|
Sep 2020 |
|
Giesecke & Devrient Mobile Security America, Inc. |
Atlanta, USA |
|
|
|
|
|
Mar 2021 |
|
Giesecke & Devrient Mobile Security Iberia, SAU |
Barcelona, Spain |
|
|
|
|
|
Mar 2021 |
|
Hengbao Co., Ltd |
Danyang, China |
|
|
- |
|
- |
Dec 2020 |
|
IDEMIA America Corp. |
Sterling, U.S.A |
|
|
|
|
- |
Jan 2022 |
|
IDEMIA Technologies Romania S.R.L. |
Bucharest, Romania |
|
|
|
|
- |
Jan 2022 |
|
Invigo Offshore SAL |
Beirut, Lebanon |
|
|
|
|
|
Sep 2020 |
|
Oasis Smart Sim Europe SAS |
Paris, France |
|
|
- |
|
- |
Nov 2020 |
|
Protahub A.Ş. |
Istanbul, Turkey |
|
|
|
|
- |
Nov 2020 |
|
Reliance Jio Infocomm Ltd |
Mumbai, India |
|
|
|
|
- |
Mar 2022 |
|
Saudi Telecom Company [2] |
Riyadh, Saudi Arabia |
- |
- |
|
|
- |
Oct 2020 |
|
Telenor Group |
Oslo, Norway |
|
|
|
|
- |
Jul 2020 |
|
Thales DIS France SA |
Tours, France |
|
|
|
|
|
Jul 2020 |
|
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
|
|
|
|
- |
Sep 2021 |
|
Thales DIS USA, Inc. |
Dallas, USA |
|
|
|
|
|
Mar 2021 |
|
Truphone Limited |
London, United Kingdom |
|
|
|
|
|
Dec 2021 |
|
Truphone Limited |
Amsterdam, The Netherlands |
|
|
|
|
|
Sep 2020 |
|
Valid Spain |
Madrid, Spain |
|
|
|
|
- |
Mar 2022 |
|
Valid USA Inc |
Chicago, USA |
|
|
|
|
|
July 2020 |
|
Vodafone Idea Limited NDC3 |
Thane, India |
|
|
|
|
- |
Sep 2020 |
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
|
|
- |
|
- |
Jun 2020 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
If you would like to receive an email when the list of accredited sites changes, please provide your details below: