SAS Accredited Sites

Covid-19 update

Due to the travel and workplace attendance restrictions caused by Covid-19, SAS audit teams continue to have difficulties in performing and planning on-site audits. GSMA and the SAS auditing companies have developed alternative options that some sites can pursue to gain or maintain certification, depending on which scheme they are participating in (SAS-UP, SAS-SM) and where they are in the certification process.

These options include:

  • Temporary extensions of certification (following remote assessment) for sites seeking renewal of existing certification (for SAS-SM and SAS-UP)
  • Remote audits (for SAS-SM audits and some SAS-UP site and activity types)
  • Hybrid audits (for SAS-UP renewal and repeat audits)

Details are available in the SAS Covid-19 Policy and Methodology Variation documents here.

Certification for affected sites is highlighted with relevant notes in the tables below. In addition, some sites have declared to GSMA that they have temporarily implemented business continuity measures in response to Covid-19 that affects their compliance with SAS. Details are being reviewed with the SAS auditors to ensure that compensating controls are being applied. These sites are highlighted (with Note #2) in the tables below.

New SAS applicants or participating sites are invited to contact sas@gsma.com with any questions or to pursue the available options.

SAS for UICC Production (SAS-UP)

The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited

Accreditation scope definitions are provided here.

Key to Entries

Entry / Symbol Certification Type Scope
UICC | UICCP Full | Provisional Within scope (UICCs)
eUICC | eUICCP Within scope (eUICCs)
Oval:C | Oval: CP Within scope (card form factor)
Oval: E | Oval: EP Within scope (embedded form factor)
WLCSP full | WLCSP provisional Within scope (Wafer Level Chip Scale Packaging)
GSMA PKI Live N/A GSMA PKI Live; site has demonstrated compliant controls with GSMA PKI certificate(s) in use*.
GSMA PKI Ready N/A GSMA PKI Ready; site has demonstrated compliant controls for PKI certificate management with non-GSMA PKI certificates*
N/A Not carried out at this site

P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

* SAS-UP certificates issued prior to the publication of FS.05 v9.2 (21 Apr 2021) indicate the previous designation (provisional/full) for certification of this activity. Each site’s SAS-UP certificate will be reissued with the new designation following its next successful audit.

SAS-UP Accredited sites.

Supplier

Site

Certification Scope

Valid to:

Cert.

Generation of data for personalisation

Personalisation

Management of PKI certificates

Post personalisation packaging

Ardentec Corporation [1]

Hsinchu, Taiwan

Oval:w 

May 2021

pdf

Beautiful Card Corporation

Taipei, Taiwan

UICC

Oval:c 

Oval:c 

Jul 2021

pdf

Beijing Huahong IC Design Co., Ltd. [1]

Beijing, China

UICC, eUICCp

Oval:c Oval:e 

GSMA PKI Ready

Sep 2021

pdf

Beijing Watchdata Co., Ltd. [1]

Beijing, China

UICC

Oval:c Oval:e 

Jul 2021

pdf

Chutian Dragon Co., Ltd. [3]

Dongguan, China

UICC

Oval:c 

Oval:c 

Feb 2023

pdf

Eastcompeace Technology Co., Ltd [3]

Zhuhai, China

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Aug 2022

pdf

E-Kart [1]

Istanbul, Turkey

UICC, eUICCp

Oval:c 

GSMA PKI Ready

Jun 2021

pdf

FutureCard Industries LLC

Sharjah, UAE

UICC

Oval:c 

Oval:c 

Jun 2021

pdf

Gemalto Southern Africa (Pty) Ltd [1]

Gauteng, South Africa

Oval:c 

Sep 2021

pdf

G & D Mobile Security [2][3]

Barcelona, Spain

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Apr 2023

pdf

Giesecke+Devrient (China) Technologies Co., Ltd.

Nanchang, China

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Jun 2021

pdf

Giesecke+Devrient Mobile Security Canada, Inc. [1][2]

Markham, Canada

UICCp, eUICCp

GSMA PKI Ready

Jul 2021

pdf

Giesecke & Devrient MS India Private Limited [2]

Chennai, India

UICC, eUICC

GSMA PKI Live

Feb 2022

pdf

Giesecke & Devrient Secure Data Management GmbH

Neustadt, Germany

UICC

Oval:c 

Oval:c 

Jul 2021

pdf

Giesecke y Devrient de Mexico S.A. de C.V.

Tlalnepantla de Baz, Mexico

UICC

Jan 2022

pdf

Hengbao Co., Ltd [1]

Danyang, China

UICC, eUICCp

Oval:c Oval:e 

GSMA PKI Ready

Oval:c 

Dec 2021

pdf

HB Technologies Algiers [1]

Algiers, Algeria

UICC

Oval:c 

Aug 2021

pdf

IDEMIA (Shenzhen) Technologies Company Limited [3]

Shenzhen, China

UICCp, eUICCp

Oval:cp Oval:ep 

GSMA PKI Ready

Aug 2021

pdf

IDEMIA FRANCE SAS

Vitré, France

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Jan 2022

pdf

IDEMIA Germany GmbH

Flintbek, Germany

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Sep 2021

pdf

Idemia Syscom India Private Limited [3]

Noida, India

UICC, eUICCp

Oval:c Oval:e 

Jan 2023

pdf

Infineon Technologies Dresden GmbH [1]

Dresden, Germany

Oval:wp 

Jun 2021

pdf

JSC NovaCard

Nizhny Novgorod, Russia

UICC

Oval:c 

Dec 2021

pdf

Kigen (UK) Limited [1][2]

London, UK

UICCp, eUICCp

GSMA PKI Ready

Aug 2021

pdf

KONA M Co., Ltd. [1]

Jincheon-Gun, South Korea

UICC

Oval:c 

Oval:c 

Sep 2021

pdf

MK Smart Joint Stock Company

Hanoi, Vietnam

UICC

Oval:c 

Aug 2021

pdf

NXP Semiconductors Germany GmbH [2][3]

Hamburg, Germany

UICC, eUICC

GSMA PKI Live

Oct 2021

pdf

NXP Semiconductors Kaohsiung

Kaohsiung, Taiwan

Oval:w 

Oval:w 

Oct 2021

pdf

Samsung Electronics Co., Ltd. [1]

Yongin, South Korea

Jul 2021

pdf

SecureID Limited [3]

Lagos, Nigeria

Oval:c 

Jun 2021

pdf

Shanghai Chengtian Smart Card Co., Ltd

Shanghai, China

Oval:c 

Aug 2021

pdf

Shenzhen iGear Technology Inc

Shenzhen, China

Oval:c Oval:e 

Jul 2021

pdf

Shenzhen Chengtian Weiye Technology Company Limited

Shenzhen, China

UICC

Oval:c 

Aug 2021

pdf

Sichuan Keydom Smart Technology Co.,Ltd [3]

Chengdu, China

Oval:c 

Jan 2021

pdf

STMicroelectronics srl [1]

Caserta, Italy

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

May 2021

pdf

STMicroelectronics [1][2]

Rousset, France

Oval:w 

Sep 2021

pdf

STMicroelectronics [2]

Toa Payoh, Singapore

Oval:w 

Jul 2021

pdf

Thales DIS France [1]

Pont Audemer, France

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Apr 2021

pdf

Thales DIS Mexico S.A. de C.V. [1]

Cuernavaca, Mexico

UICC, eUICC

Oval:c 

GSMA PKI Live

Oval:c 

Aug 2021

pdf

Thales DIS (Shanghai) Co., Ltd. [1]

Shanghai, China

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Dec 2021

pdf

Thales DIS Sp. z o. o [1]

Tczew, Poland

UICC

Oval:c 

Jun 2021

pdf

Thales DIS USA, Inc. [1]

Montgomeryville, USA

UICC, eUICC

GSMA PKI Live

Jun 2021

pdf

Trasna Solutions d.o.o.

Gračanica, Bosnia & Herzegovina

UICC

Oval:c 

Oval:c 

Sep 2021

pdf

United Security Printing

Abu Dhabi, UAE

UICC

Oval:c 

Oval:c 

Dec 2021

pdf

Valid Card Manufacturing (Suzhou) Co., Ltd [3]

Suzhou, China

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Ready

Oval:c 

Feb 2022

pdf

Valid Soluciones Tecnológicas S.A.U.

Madrid, Spain

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Oval:c 

Apr 2022

pdf

Workz Media FZ LLC [1]

Dubai, United Arab Emirates

UICC, eUICC

Oval:c Oval:e 

GSMA PKI Live

Aug 2021

pdf

XH Smart Tech (China) Co., Ltd. [3]

Zhuhai, China

UICC

Oval:c Oval:ep 

Jan 2023

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.

 

SAS for Subscription Management (SAS-SM)

The subscription management service provider and data centre operations and management sites in the table below are currently accredited.

Accreditation scope definitions are provided here.

Key to Symbols

Symbol Certification Type
Oval: P Within scope (full certification; locally hosted)
Oval: P Within scope (provisional certification; locally hosted *)
Oval: P Within scope (full certification; cloud hosted/hosting)
Oval: P Within scope (provisional certification; cloud hosted/hosting *)
Not carried out at this site

* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.

SAS-SM Accredited sites.

Supplier

Site

Scope of Certification

Valid to:

Cert.

Secure Routing

Data Preparation

Data Preparation+ (ref. SGP.22)

Data Centre Operations & Management

Discovery Service

A1 Systems [3]

Moscow, Russia

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2022

pdf

Arm Inc. [2][3]

Austin, USA

Oval: P

Oval: P

Oval: P

Aug 2021

pdf

Bharti Airtel Ltd [1][3]

Noida, India

Oval: P

Oval: P

Oval: P

Oval: P

Nov 2022

pdf

Eastcompeace Technology Co., Ltd [3]

Zhuhai, China

Oval: P

Oval: P

Oval: P

Oval: P

Feb 2022

pdf

Ericsson AB [2][3]

Kista, Sweden

Oval: P

Oval: P

Jul 2021

pdf

Giesecke+Devrient Mobile Security Germany GmbH. [3]

Munich, Germany

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Apr 2023

pdf

Giesecke+Devrient (China) Technologies Co., Ltd. (Shanghai) [3]

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2022

pdf

Giesecke & Devrient Mobile Security America, Inc. [3]

Atlanta, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2023

pdf

Giesecke & Devrient Mobile Security Iberia, SAU [1]

Barcelona, Spain

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jun 2021

pdf

Hengbao Co., Ltd [1][3]

Danyang, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

IDEMIA America Corp.

Sterling, U.S.A

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2022

pdf

IDEMIA Technologies Romania S.R.L. [3]

Bucharest, Romania

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2022

pdf

Invigo Offshore SAL [3]

Beirut, Lebanon

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2023

pdf

Kigen (UK) Limited [1][2]

London, UK

Oval: P

Oval: P

Oval: P

May 2021

pdf

Links Field Networks Ltd. [3]

Shenzhen, China

Oval: P

Oval: P

Dec 2021

pdf

Microsoft Corporation [3]

Cloud region comprising sites PAR20, PAR21, PAR22, MRS20; France

Oval: P

Jun 2021

pdf

Monty Mobile UK [3]

London, UK

Oval: P

Oval: P

Feb 2022

pdf

NovaCard JSC [3]

Nizhny Novgorod, Russia

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

Oasis Smart Sim Europe SAS [2][3]

Paris, France

Oval: P

Oval: P

Oval: P

Oval: P

Aug 2021

pdf

Protahub A.Ş. [1]

Istanbul, Turkey

Oval: P

Oval: P

Oval: P

Oval: P

May 2021

pdf

Reliance Jio Infocomm Ltd

Mumbai, India

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2022

pdf

Saudi Telecom Company [2][3]

Riyadh, Saudi Arabia

Oval: P

Oval: P

Oval: P

Oval: P

Oct 2021

pdf

Tele2 [3]

Rostov-on-Don, Russia

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2022

pdf

Telenor Group [3]

Oslo, Norway

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2022

pdf

Thales DIS France SA [3]

Tours, France

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2023

pdf

Thales DIS (Shanghai) Co., Ltd. [1]

Shanghai, China

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

Thales DIS USA, Inc. [1]

Dallas, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

Truphone Limited

London, United Kingdom

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Dec 2021

pdf

Truphone Limited [3]

Amsterdam, The Netherlands

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

VALID SOLUCIONES TECNOLÓGICAS S.A.U. [1]

Madrid, Spain

Oval: P

Oval: P

Oval: P

Oval: P

Mar 2022

pdf

Valid USA Inc [3]

Chicago, USA

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Jan 2022

pdf

Vodafone Idea Limited NDC3 [2][3]

Thane, India

Oval: P

Oval: P

Oval: P

Oval: P

Sep 2021

pdf

Workz Media FZ LLC [3]

Dubai, United Arab Emirates

Oval: P

Oval: P

Oval: P

Oval: P

Jul 2021

pdf

Wuhan Tianyu Information Industry Co., Ltd. [3]

Wuhan, China

Oval: P

Oval: P

Oval: P

Oval: P

Oval: P

Nov 2021

pdf

Notes:

[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.

[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.

[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.

 

If you would like to receive an email when the list of accredited sites changes, please provide your details below: