SAS Accredited Sites

Covid-19 update

Audit travel and workplace attendance restrictions caused by the Covid-19 outbreak are preventing SAS audit teams from visiting and auditing some sites participating in the scheme. Renewal of certification for affected sites may be delayed beyond the expiry date of their current SAS certificates and remain outstanding. An audit to reconfirm affected sites’ SAS-compliance will be scheduled as soon as possible once restrictions are lifted.

GSMA is asking affected sites to extend their commitments and arrangements to maintain SAS-compliant controls during this period of disruption. Certification for affected sites is highlighted (with Note #1) in the tables below.

In addition, some sites have declared to GSMA that they have temporarily implemented business continuity measures in response to Covid-19 that affects their compliance with SAS. Details are being reviewed with the SAS auditors to ensure that compensating controls are being applied. These sites are highlighted (with Note #2) in the tables below.

SAS for UICC Production (SAS-UP)

The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited.

Accreditation scope definitions are provided here.

Key to Entries

Entry / Symbol Certification Type Scope
UICC | UICCP Full | Provisional Within scope (UICCs)
eUICC | eUICCP Within scope (eUICCs)
GSMA PKI | PKIP Within scope (GSMA PKI certificates)
Oval:C | Oval: CP Within scope (card form factor)
Oval: E | Oval: EP Within scope (embedded form factor)
WLCSP full | WLCSP provisional Within scope (Wafer Level Chip Scale Packaging)
- N/A Not carried out at this site

P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-UP Accredited sites.

Supplier

Site

Certification Scope

Valid to:

Cert.

Generation of data for personalisation

Personalisation

Management of PKI certificates

Post personalisation packaging

Ardentec Corporation

Hsinchu, Taiwan

-

Oval: E

-

-

Nov 2020

pdf

Arm Ltd. [2]

London, UK

eUICCp, UICCp

-

GSMA PKIp

-

Aug 2020

pdf

Beautiful Card Corporation

Taipei, Taiwan

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

Beijing Huahong IC Design Co., Ltd.

Beijing, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

-

Sep 2021

pdf

Beijing Watchdata Co., Ltd.

Beijing, China

UICC

Oval: C Oval: E

-

-

Jul 2020

pdf

Chutian Dragon Co., Ltd.

Dongguan, China

UICC

Oval: C

-

Oval: C

Aug 2020

pdf

DZ Card (Thailand) Ltd

Bangkok, Thailand

UICC

Oval: C

-

Oval: C

Jul 2020

pdf

Eastcompeace Technology Co., Ltd [1]

Zhuhai, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Aug 2020

pdf

Ebtikar Card Systems LLC

Ajman, UAE

UICC

Oval: C

-

Oval: C

Jun 2020

pdf

E-Kart

Istanbul, Turkey

UICC, eUICCP

Oval: C

GSMA PKIP

Oval: C

Aug 2020

pdf

FutureCard Industries LLC

Sharjah, UAE

UICC

Oval: C

-

Oval: C

June 2021

pdf

Gemalto

Montgomeryville, USA

UICC, eUICC

-

GSMA PKI

-

Jun 2020

pdf

Gemalto

Pont Audemer, France

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

Gemalto Sp z o. o

Tczew, Poland

UICC

Oval: C

-

-

Dec 2020

pdf

Gemalto Southern Africa (Pty) Ltd

Gauteng, South Africa

-

Oval: C

-

-

Sep 2021

pdf

G & D Mobile Security [1] [2]

Barcelona, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

Giesecke+Devrient (China) Technologies Co., Ltd.

Nanchang, China

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Jun 2021

pdf

Giesecke+Devrient Mobile Security Canada, Inc.

Markham, Canada

UICCp, eUICCp

-

GSMA PKIp

-

Jan 2021

pdf

Giesecke & Devrient MS India Private Limited [2]

Chennai, India

UICC, eUICC

-

GSMA PKI

-

Feb 2022

pdf

Giesecke & Devrient Secure Data Management GmbH

Neustadt, Germany

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

Hengbao Co., Ltd

Danyang, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Dec 2021

pdf

HB Technologies Algiers

Algiers, Algeria

UICC

Oval: C

-

-

Feb 2021

pdf

IDEMIA (Shenzhen) Technologies Company Limited [1]

Shenzhen, China

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

-

Oct 2020

pdf

IDEMIA FRANCE SAS

Vitré, France

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Jan 2022

pdf

IDEMIA Germany GmbH

Flintbek, Germany

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Sep 2021

pdf

Idemia Syscom India Private Limited

Noida, India

UICC

Oval: C

-

-

Jul 2020

pdf

Infineon Technologies Dresden GmbH

Dresden, Germany

-

Oval: E

-

-

Dec 2020

pdf

Inkript

Beirut, Lebanon

UICC

Oval: C

-

Oval: C

Mar 2021

pdf

JSC NovaCard

Nizhny Novgorod, Russia

UICC

Oval: C

-

-

Dec 2021

pdf

KONA M Co., Ltd.

Jincheon-Gun, South Korea

UICC

Oval: C

-

Oval: C

Sep 2020

pdf

MK Smart Joint Stock Company

Hanoi, Vietnam

UICC

Oval: C

-

-

Aug 2021

pdf

NXP Semiconductors Germany GmbH

Hamburg, Germany

UICC, eUICC

-

GSMA PKI

-

Oct 2021

pdf

NXP Semiconductors Kaohsiung

Kaohsiung, Taiwan

-

Oval: E

-

Oval: C

Oct 2021

pdf

PT. Chengtian Weiye Indonesia

Bekasi, Indonesia

-

Oval: C

-

-

Oct 2020

pdf

Samsung Electronics Co., Ltd.

Yongin, South Korea

Check certificate for scope.

Jan 2021

pdf

SecureID Limited

Lagos, Nigeria

-

Oval: C

-

-

Dec 2020

pdf

Shanghai Chengtian Smart Card Co., Ltd

Shanghai, China

-

Oval: C

-

-

Aug 2021

pdf

Shenzhen iGear Technology Inc

Shenzhen, China

-

Oval: C Oval: EP

-

-

Jul 2021

pdf

Shenzhen Chengtian Weiye Technology Company Limited

Shenzhen, China

UICC

Oval: C

-

-

Aug 2021

pdf

STMicroelectronics srl

Caserta, Italy

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Nov 2020

pdf

STMicroelectronics [2]

Rousset, France

-

WLCSP full

-

-

Mar 2021

pdf

STMicroelectronics [2]

Toa Payoh, Singapore

-

WLCSP full

-

-

Jul 2021

pdf

TESNA Inc. [1]

Pyeongtaek-si, South Korea

-

WLCSP full

-

-

Sep 2020

pdf

Thales DIS Deutschland GmbH.

Filderstadt, Germany

UICC

Oval: C

-

Oval: C

Nov 2020

pdf

Thales DIS Mexico S.A. de C.V.

Cuernavaca, Mexico

UICC, eUICC

Oval: C

GSMA PKI

Oval: C

Aug 2021

pdf

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

UICC, eUICC

Oval: COval: E

GSMA PKI

-

Dec 2021

pdf

United Security Printing

Abu Dhabi, UAE

UICC

Oval: C

-

Oval: C

Dec 2021

pdf

Valid Card Manufacturing (Suzhou) Co., Ltd

Suzhou, China

UICC, eUICC

Oval: C Oval: E

Non-GSMA PKI

Oval: C

Dec 2020

pdf

Valid Soluciones Tecnológicas S.A.U.

Madrid, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

May 2020

pdf

Workz Group Technology d.o.o.

Gračanica, Bosnia & Herzegovina

UICC

Oval: C

-

-

Sep 2021

pdf

Workz Media FZ LLC

Dubai, United Arab Emirates

UICC, eUICC

Oval: C Oval: E

GSMA PKI

-

Aug 2020

pdf

Wuhan Tianyu Information Industry Co., Ltd.

Wuhan, China (Huazhong Univ. Pk.)

UICC

Oval: C

-

Oval: C

Oct 2020

pdf

Wuhan Tianyu Information Industry Co., Ltd.

Wuhan, China (Lefeng Rd.)

UICC, eUICCp

Oval: C

GSMA PKIp

Oval: C

Aug 2020

pdf

XH Smart Tech (China) Co., Ltd.

Zhuhai, China

UICC

Oval: C

-

-

Jan 2021

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

 

SAS for Subscription Management (SAS-SM)

The following subscription management service provider sites are currently accredited.

Key to Symbols

Symbol Certification Type
Oval: P Within scope (full certification)
Oval: P Within scope (provisional certification*)
- Not carried out at this site

* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-SM Accredited sites.

Supplier

Site

Scope of Certification

Valid to:

Cert.

Secure Routing

Data Preparation

Data Preparation+ (ref. SGP.22)

Data Centre Operations & Management

Discovery Service

Arm Inc. [2]

Austin, USA

Oval: P

Oval: P

-

Oval: P

-

Feb 2021

pdf

Arm Limited [2]

London, UK

Oval: P

Oval: P

-

Oval: P

-

May 2020

pdf

Bharti Airtel Ltd

Noida, India

Oval: P

Oval: P

Oval: P

Oval: P

-

May 2020

pdf

Eastcompeace Technology Co., Ltd

Zhuhai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Feb 2022

pdf

Ericsson AB [2]

Kista, Sweden

-

-

Oval: P

Oval: P

-

Jul 2020

pdf

Giesecke & Devrient Professional Services GmbH

Munich, Germany

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Apr 2021

pdf

Giesecke+Devrient (China) Technologies Co., Ltd. (Shanghai) [1]

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

Giesecke & Devrient Mobile Security America, Inc.

Atlanta, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Giesecke & Devrient Mobile Security Iberia, SAU

Barcelona, Spain

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Hengbao Co., Ltd

Danyang, China

Oval: P

Oval: P

-

Oval: P

-

Dec 2020

pdf

IDEMIA America Corp.

Sterling, U.S.A

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

IDEMIA Technologies Romania S.R.L.

Bucharest, Romania

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

Invigo Offshore SAL

Beirut, Lebanon

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

Oasis Smart Sim Europe SAS

Paris, France

Oval: P

Oval: P

-

Oval: P

-

Nov 2020

pdf

Protahub A.Ş.

Istanbul, Turkey

Oval: P

Oval: P

Oval: P

Oval: P

-

Nov 2020

pdf

Reliance Jio Infocomm Ltd

Mumbai, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

Saudi Telecom Company [2]

Riyadh, Saudi Arabia

-

-

Oval: P

Oval: P

-

Oct 2020

pdf

Telenor Group

Oslo, Norway

Oval: P

Oval: P

Oval: P

Oval: P

-

Jul 2020

pdf

Thales DIS France SA

Tours, France

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jul 2020

pdf

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2021

pdf

Thales DIS USA, Inc.

Dallas, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Truphone Limited

London, United Kingdom

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Dec 2021

pdf

Truphone Limited

Amsterdam, The Netherlands

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2020

pdf

Valid Spain

Madrid, Spain

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

Valid USA Inc

Chicago, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

July 2020

pdf

Vodafone Idea Limited NDC3

Thane, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2020

pdf

Workz Media FZ LLC

Dubai, United Arab Emirates

Oval: P

Oval: P

-

Oval: P

-

Jun 2020

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

 

If you would like to receive an email when the list of accredited sites changes, please provide your details below: