SAS Accredited Sites

Covid-19 update

Due to the travel and workplace attendance restrictions caused by Covid-19, SAS audit teams continue to have difficulties in performing and planning on-site audits. GSMA and the SAS auditing companies have developed alternative options that some sites can pursue to gain or maintain certification, depending on which scheme they are participating in (SAS-UP, SAS-SM) and where they are in the certification process.

These options include:

  • Temporary extensions of certification (following remote assessment) for sites seeking renewal of existing certification (for SAS-SM and SAS-UP)
  • Remote audits (for SAS-SM initial, renewal and repeat audits)
  • Hybrid audits (for SAS-UP renewal and repeat audits)

Certification for affected sites is highlighted with relevant notes in the tables below. In addition, some sites have declared to GSMA that they have temporarily implemented business continuity measures in response to Covid-19 that affects their compliance with SAS. Details are being reviewed with the SAS auditors to ensure that compensating controls are being applied. These sites are highlighted (with Note #2) in the tables below.

New SAS applicants or participating sites are invited to contact sas@gsma.com with any questions or to pursue the available options.

 

SAS for UICC Production (SAS-UP)

The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited.

Accreditation scope definitions are provided here.

Key to Entries

Entry / Symbol Certification Type Scope
UICC | UICCP Full | Provisional Within scope (UICCs)
eUICC | eUICCP Within scope (eUICCs)
GSMA PKI | PKIP Within scope (GSMA PKI certificates)
Oval:C | Oval: CP Within scope (card form factor)
Oval: E | Oval: EP Within scope (embedded form factor)
WLCSP full | WLCSP provisional Within scope (Wafer Level Chip Scale Packaging)
- N/A Not carried out at this site

P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-UP Accredited sites.

Supplier

Site

Certification Scope

Valid to:

Cert.

Generation of data for personalisation

Personalisation

Management of PKI certificates

Post personalisation packaging

Ardentec Corporation [1]

Hsinchu, Taiwan

-

Oval: E

-

-

May 2021

pdf

Arm Ltd. [1][2]

London, UK

eUICCp, UICCp

-

GSMA PKIp

-

Feb 2021

pdf

Beautiful Card Corporation

Taipei, Taiwan

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

Beijing Huahong IC Design Co., Ltd.[1]

Beijing, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

-

Sep 2021

pdf

Beijing Watchdata Co., Ltd.[1]

Beijing, China

UICC

Oval: C Oval: E

-

-

Jan 2021

pdf

Chutian Dragon Co., Ltd.[1]

Dongguan, China

UICC

Oval: C

-

Oval: C

Feb 2021

pdf

Eastcompeace Technology Co., Ltd [1]

Zhuhai, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Feb 2021

pdf

E-Kart [1]

Istanbul, Turkey

UICC, eUICCP

Oval: C

GSMA PKIP

Oval: C

Dec 2020

pdf

FutureCard Industries LLC

Sharjah, UAE

UICC

Oval: C

-

Oval: C

June 2021

pdf

Gemalto

Pont Audemer, France

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

Gemalto Sp z o. o

Tczew, Poland

UICC

Oval: C

-

-

Dec 2020

pdf

Gemalto Southern Africa (Pty) Ltd

Gauteng, South Africa

-

Oval: C

-

-

Sep 2021

pdf

G & D Mobile Security [1] [2]

Barcelona, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2021

pdf

Giesecke+Devrient (China) Technologies Co., Ltd.

Nanchang, China

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Jun 2021

pdf

Giesecke+Devrient Mobile Security Canada, Inc. [2]

Markham, Canada

UICCp, eUICCp

-

GSMA PKIp

-

Jan 2021

pdf

Giesecke & Devrient MS India Private Limited [2]

Chennai, India

UICC, eUICC

-

GSMA PKI

-

Feb 2022

pdf

Giesecke & Devrient Secure Data Management GmbH

Neustadt, Germany

UICC

Oval: C

-

Oval: C

Jul 2021

pdf

Giesecke y Devrient de Mexico S.A. de C.V.

Tlalnepantla de Baz, Mexico

UICC

-

-

-

Jan 2022

pdf

Hengbao Co., Ltd

Danyang, China

UICC, eUICCp

Oval: C Oval: E

GSMA PKIp

Oval: C

Dec 2021

pdf

HB Technologies Algiers

Algiers, Algeria

UICC

Oval: C

-

-

Feb 2021

pdf

IDEMIA (Shenzhen) Technologies Company Limited [1]

Shenzhen, China

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

-

Oct 2020

pdf

IDEMIA FRANCE SAS

Vitré, France

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Jan 2022

pdf

IDEMIA Germany GmbH

Flintbek, Germany

UICC, eUICC

Oval: C Oval: EP

GSMA PKI

Oval: C

Sep 2021

pdf

Idemia Syscom India Private Limited [1]

Noida, India

UICC

Oval: C

-

-

Jan 2021

pdf

Infineon Technologies Dresden GmbH

Dresden, Germany

-

Oval: E

-

-

Dec 2020

pdf

Inkript

Beirut, Lebanon

UICC

Oval: C

-

Oval: C

Mar 2021

pdf

JSC NovaCard

Nizhny Novgorod, Russia

UICC

Oval: C

-

-

Dec 2021

pdf

KONA M Co., Ltd. [1]

Jincheon-Gun, South Korea

UICC

Oval: C

-

Oval: C

Mar 2021

pdf

MK Smart Joint Stock Company

Hanoi, Vietnam

UICC

Oval: C

-

-

Aug 2021

pdf

NXP Semiconductors Germany GmbH

Hamburg, Germany

UICC, eUICC

-

GSMA PKI

-

Oct 2021

pdf

NXP Semiconductors Kaohsiung

Kaohsiung, Taiwan

-

Oval: E

-

Oval: C

Oct 2021

pdf

PT. Chengtian Weiye Indonesia

Bekasi, Indonesia

-

Oval: C

-

-

Oct 2020

pdf

Samsung Electronics Co., Ltd.

Yongin, South Korea

Check certificate for scope.

Jan 2021

pdf

SecureID Limited

Lagos, Nigeria

-

Oval: C

-

-

Dec 2020

pdf

Shanghai Chengtian Smart Card Co., Ltd

Shanghai, China

-

Oval: C

-

-

Aug 2021

pdf

Shenzhen iGear Technology Inc

Shenzhen, China

-

Oval: C Oval: EP

-

-

Jul 2021

pdf

Shenzhen Chengtian Weiye Technology Company Limited

Shenzhen, China

UICC

Oval: C

-

-

Aug 2021

pdf

STMicroelectronics srl

Caserta, Italy

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Nov 2020

pdf

STMicroelectronics [2]

Rousset, France

-

WLCSP full

-

-

Mar 2021

pdf

STMicroelectronics [2]

Toa Payoh, Singapore

-

WLCSP full

-

-

Jul 2021

pdf

TESNA Inc. [1]

Pyeongtaek-si, South Korea

-

WLCSP full

-

-

March 2021

pdf

Thales DIS Deutschland GmbH.

Filderstadt, Germany

UICC

Oval: C

-

Oval: C

Nov 2020

pdf

Thales DIS Mexico S.A. de C.V.

Cuernavaca, Mexico

UICC, eUICC

Oval: C

GSMA PKI

Oval: C

Aug 2021

pdf

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

UICC, eUICC

Oval: COval: E

GSMA PKI

-

Dec 2021

pdf

Thales DIS USA, Inc. [1]

Montgomeryville, USA

UICC, eUICC

-

GSMA PKI

-

Dec 2020

pdf

United Security Printing

Abu Dhabi, UAE

UICC

Oval: C

-

Oval: C

Dec 2021

pdf

Valid Card Manufacturing (Suzhou) Co., Ltd

Suzhou, China

UICC, eUICC

Oval: C Oval: E

Non-GSMA PKI

Oval: C

Dec 2020

pdf

Valid Soluciones Tecnológicas S.A.U.

Madrid, Spain

UICC, eUICC

Oval: C Oval: E

GSMA PKI

Oval: C

Apr 2022

pdf

Workz Group Technology d.o.o.

Gračanica, Bosnia & Herzegovina

UICC

Oval: C

-

-

Sep 2021

pdf

Workz Media FZ LLC [1]

Dubai, United Arab Emirates

UICC, eUICC

Oval: C Oval: E

GSMA PKI

-

Feb 2021

pdf

Wuhan Tianyu Information Industry Co., Ltd.

Wuhan, China (Huazhong Univ. Pk.)

UICC

Oval: C

-

Oval: C

Oct 2020

pdf

Wuhan Tianyu Information Industry Co., Ltd. [1]

Wuhan, China (Lefeng Rd.)

UICC, eUICCp

Oval: C

GSMA PKIp

Oval: C

Feb 2021

pdf

XH Smart Tech (China) Co., Ltd.

Zhuhai, China

UICC

Oval: C

-

-

Jan 2021

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

 

SAS for Subscription Management (SAS-SM)

The subscription management service provider and data centre operations and management sites in the table below are currently accredited.

Accreditation scope definitions are provided here.

Key to Symbols

Symbol Certification Type
Oval: P Within scope (full certification; locally hosted)
Oval: P Within scope (provisional certification; locally hosted *)
Oval: P Within scope (full certification; cloud hosted/hosting)
Oval: P Within scope (provisional certification; cloud hosted/hosting *)
- Not carried out at this site

* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-SM Accredited sites.

Supplier

Site

Scope of Certification

Valid to:

Cert.

Secure Routing

Data Preparation

Data Preparation+ (ref. SGP.22)

Data Centre Operations & Management

Discovery Service

A1 Systems [3]

Moscow, Russia

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2021

pdf

Arm Inc. [2]

Austin, USA

Oval: P

Oval: P

-

Oval: P

-

Feb 2021

pdf

Arm Limited [1][2]

London, UK

Oval: P

Oval: P

-

Oval: P

-

Nov 2020

pdf

Bharti Airtel Ltd[1]

Noida, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Nov 2020

pdf

Eastcompeace Technology Co., Ltd[3]

Zhuhai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Feb 2022

pdf

Ericsson AB [2][3]

Kista, Sweden

-

-

Oval: P

Oval: P

-

Jul 2021

pdf

Giesecke & Devrient Professional Services GmbH

Munich, Germany

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Apr 2021

pdf

Giesecke+Devrient (China) Technologies Co., Ltd. (Shanghai) [3]

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2022

pdf

Giesecke & Devrient Mobile Security America, Inc.

Atlanta, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Giesecke & Devrient Mobile Security Iberia, SAU

Barcelona, Spain

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Hengbao Co., Ltd

Danyang, China

Oval: P

Oval: P

-

Oval: P

-

Dec 2020

pdf

IDEMIA America Corp.

Sterling, U.S.A

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

IDEMIA Technologies Romania S.R.L. [3]

Bucharest, Romania

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2022

pdf

Invigo Offshore SAL [1]

Beirut, Lebanon

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Microsoft Corporation [3]

Cloud region comprising sites PAR20, PAR21, PAR22, MRS20; France

-

-

-

Oval: P

-

Jun 2021

pdf

Monty UK Global Ltd [3]

London, UK

-

-

Oval: P

Oval: P

-

Apr 2021

pdf

Oasis Smart Sim Europe SAS [3]

Paris, France

Oval: P

Oval: P

Oval: P

Oval: P

-

Aug 2021

pdf

Protahub A.Ş.

Istanbul, Turkey

Oval: P

Oval: P

Oval: P

Oval: P

-

Nov 2020

pdf

Reliance Jio Infocomm Ltd

Mumbai, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

Saudi Telecom Company [2]

Riyadh, Saudi Arabia

-

-

Oval: P

Oval: P

-

Oct 2020

pdf

Telenor Group [1]

Oslo, Norway

Oval: P

Oval: P

Oval: P

Oval: P

-

Jan 2021

pdf

Thales DIS France SA[1]

Tours, France

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2021

pdf

Thales DIS (Shanghai) Co., Ltd.

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2021

pdf

Thales DIS USA, Inc.

Dallas, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2021

pdf

Truphone Limited

London, United Kingdom

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Dec 2021

pdf

Truphone Limited [3]

Amsterdam, The Netherlands

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

Valid Spain

Madrid, Spain

Oval: P

Oval: P

Oval: P

Oval: P

-

Mar 2022

pdf

Valid USA Inc [1]

Chicago, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2021

pdf

Vodafone Idea Limited NDC3

Thane, India

Oval: P

Oval: P

Oval: P

Oval: P

-

Sep 2020

pdf

Workz Media FZ LLC [3]

Dubai, United Arab Emirates

Oval: P

Oval: P

Oval: P

Oval: P

-

Jul 2021

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.

 

If you would like to receive an email when the list of accredited sites changes, please provide your details below: