Covid-19 update
The lifting of Covid-19 restrictions means that on-site SAS audits have resumed everywhere except in China. Remote audits (eligibility details here) continue to be used to grant or renew certification at eligible sites in China until the GSMA and the SAS auditors consider that conditions are suitable for on-site audits to resume there.
Sites whose SAS certification remains affected by restrictions are highlighted with relevant notes on the SAS accredited sites list. The number of such sites is gradually reducing as on-site renewal audits take place.
During Covid-19 restrictions, some certified sites declared to the GSMA that they had temporarily implemented business continuity measures that affected their compliance with SAS. Compensating controls implemented at those sites, agreed with the SAS auditors, were used as a basis for granting temporary waivers to those sites. Such sites were highlighted on the SAS accredited sites list (with [2]), and most have now reverted to full SAS compliance. The temporary waivers granted by the GSMA to these sites during the pandemic that permitted such measures to be used are being phased out. All sites are expected to revert to fully compliant controls, and these will be validated at each site’s next audit.
SAS for UICC Production (SAS-UP)
The Universal Integrated Circuit Card (UICC) production (SAS-UP) supplier sites in the table below are currently accredited
Accreditation scope definitions are provided here.
Key to Entries
| Entry / Symbol | Certification Type | Scope |
| UICC | UICCP | Full | Provisional | Within scope (UICCs) |
| eUICC | eUICCP | Within scope (eUICCs) | |
 |  |
Within scope (2-step personalisation – Perso_SC) | |
 |  |
Within scope (2-step personalisation – Perso_UICC) | |
 |  |
Within scope (card form factor) | |
 |  |
Within scope (embedded form factor) | |
 |  |
Within scope (Wafer Level Chip Scale Packaging) | |
 |
N/A | GSMA PKI Live; site has demonstrated compliant controls with GSMA PKI certificate(s) in use*. |
 |
N/A | GSMA PKI Ready; site has demonstrated compliant controls for PKI certificate management with non-GSMA PKI certificates* |
| – | N/A | Not carried out at this site |
P: Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
* SAS-UP certificates issued prior to the publication of FS.05 v9.2 (21 Apr 2021) indicate the previous designation (provisional/full) for certification of this activity. Each site’s SAS-UP certificate will be reissued with the new designation following its next successful audit.
SAS-UP Accredited sites.
Supplier |
Site |
Certification Scope |
Valid to: |
Cert. |
|||
Generation of data for personalisation |
Personalisation |
Management of PKI certificates |
Post personalisation packaging |
||||
|
Advanced Semiconductor Engineering Inc. [3] |
Kaohsiung, Taiwan |
– |
|
– |
|
Mar 2024 |
|
|
Amkor Technology Korea, Inc. – K3 [3] |
Incheon, Korea |
– |
|
– |
– |
Jul 2023 |
|
|
Amkor Technology Taiwan, Ltd. – T1 [3] |
Taoyuan City, Taiwan |
– |
|
– |
– |
Apr 2023 |
|
|
Ardentec Corporation [3] |
Hsinchu, Taiwan |
– |
|
– |
– |
May 2023 |
|
|
Ardentec Singapore Pte Ltd [3] |
Singapore |
– |
|
– |
– |
Jul 2024 |
|
|
Beautiful Card Corporation [3] |
Taoyuan, Taiwan |
UICCp |
|
– |
|
Jul 2023 |
|
|
Beijing Huahong IC Design Co., Ltd. [3] |
Beijing, China |
UICC, eUICC |
|
|
– |
Sep 2023 |
|
|
Beijing Watchdata Co., Ltd. [3] |
Beijing, China |
UICC |
|
– |
– |
Jan 2024 |
|
|
Chengtian Weiye (Ningbo) Chip Technology Co., Ltd. [3] |
Cixi, China |
– |
|
– |
– |
Dec 2023 |
|
|
Chutian Dragon Co., Ltd. [3] |
Dongguan, China |
UICC |
|
– |
|
Feb 2024 |
|
|
Eastcompeace Technology Co., Ltd [3] |
Zhuhai, China |
UICC, eUICC |
|
|
|
Aug 2024 |
|
|
Ebtikar Card Systems [3] |
Ajman, UAE |
UICC |
|
– |
– |
Jul 2023 |
|
|
E-Kart [3] |
Istanbul, Turkey |
UICC, eUICCp |
|
|
– |
Dec 2023 |
|
|
Gemalto Southern Africa (Pty) Ltd [3] |
Gauteng, South Africa |
– |
|
– |
– |
Sep 2023 |
|
Barcelona, Spain |
UICC, eUICC |
|
|
|
Apr 2023 |
|
|
|
Giesecke+Devrient (China) Technologies Co., Ltd. [3] |
Nanchang, China |
UICC, eUICC |
|
|
|
Dec 2023 |
|
|
Giesecke+Devrient Mobile Security America, Inc. |
Markham, Canada |
UICC, eUICC |
– |
|
– |
Jul 2024 |
|
|
Giesecke & Devrient MS India Private Limited [3] |
Chennai, India |
UICC, eUICC |
– |
|
– |
Feb 2024 |
|
|
Giesecke+Devrient Secure Data Management GmbH [3] |
Neustadt, Germany |
UICC |
|
– |
|
Jul 2023 |
|
|
Giesecke y Devrient de México S.A. de C.V. |
Tlalnepantla de Baz, Mexico |
UICC |
– |
– |
– |
Jul 2024 |
|
|
Goldpac Limited [3] |
Zhuhai, China |
UICC |
|
– |
|
Jun 2024 |
|
|
HB Technologies Algiers |
Algiers, Algeria |
UICC |
|
– |
– |
Aug 2024 |
|
|
Hengbao Co., Ltd [3] |
Danyang, China |
UICC, eUICC |
|
|
|
Dec 2023 |
|
|
IDEMIA (Shenzhen) Technologies Company Limited [3] |
Shenzhen, China |
UICC, eUICC |
|
|
– |
Aug 2023 |
|
|
IDEMIA FRANCE SAS [3] |
Vitré, France |
UICC, eUICC |
|
|
|
Jan 2024 |
|
|
IDEMIA Germany GmbH [3] |
Flintbek, Germany |
UICC |
|
– |
– |
Sep 2023 |
|
|
Idemia Syscom India Private Limited [3] |
Noida, India |
UICC, eUICC |
|
|
– |
Jan 2025 |
|
|
Infineon Technologies Dresden GmbH |
Dresden, Germany |
– |
|
– |
– |
Jun 2024 |
|
|
Inkript [3] |
Beirut, Lebanon |
UICC |
|
– |
– |
Aug 2023 |
|
|
JSC NovaCard [3] |
Nizhny Novgorod, Russia |
UICC |
|
– |
– |
Dec 2023 |
|
|
Kigen (UK) Limited |
Belfast, United Kingdom |
UICC, eUICC |
– |
|
– |
Sep 2024 |
|
|
Kona M Co., Ltd., [3] |
Jincheon-Gun, South Korea |
UICC |
|
– |
|
Sep 2023 |
|
|
MK Smart Joint Stock Company [3] |
Hanoi, Vietnam |
UICC |
|
– |
– |
Feb 2024 |
|
|
NXP Semiconductors Germany GmbH [3] |
Hamburg, Germany |
UICC, eUICC |
– |
|
– |
Oct 2023 |
|
|
NXP Semiconductors Taiwan Ltd [3] |
Kaohsiung, Taiwan |
– |
|
– |
|
Oct 2023 |
|
|
NXP Semiconductors (Tianjin) Ltd. [1] |
Tianjin, China |
eUICCp |
|
|
– |
Apr 2023 |
|
|
Oasis Smart SIM Europe |
St Germain en Laye, France |
UICC, eUICC |
– |
|
– |
Oct 2023 |
|
|
PT. Chengtian Weiye Indonesia [3] |
Bekasi, Indonesia |
– |
|
– |
– |
Apr 2023 |
|
|
Qualcomm Technologies, Inc. |
San Diego, USA |
|
– |
– |
– |
Jun 2023 |
|
|
Secure ID Limited |
Lagos, Nigeria |
UICC |
|
– |
– |
Sep 2024 |
|
|
Shanghai Chengtian Smart Card Co., Ltd. [3] |
Shanghai, China |
– |
|
– |
– |
Feb 2024 |
|
|
Shenzhen Chengtian Weiye Technology Company Limited [3] |
Shenzhen, China |
UICC |
|
– |
– |
Feb 2024 |
|
|
Shenzhen iGear Technology Inc [3] |
Shenzhen, China |
– |
|
– |
– |
Jul 2023 |
|
|
Sichuan Keydom Smart Technology Co.,Ltd [3] |
Chengdu, China |
UICCp |
|
– |
– |
Mar 2023 |
|
|
Sinc Novation d.o.o |
Belgrade, Serbia |
– |
– |
– |
|
Apr 2024 |
|
|
STMicroelectronics srl [3] |
Caserta, Italy |
UICC, eUICC |
|
|
|
May 2023 |
|
|
STMicroelectronics [3] |
Rousset, France |
– |
|
– |
– |
Sep 2023 |
|
|
STMicroelectronics [3] |
Toa Payoh, Singapore |
– |
|
– |
– |
Jul 2023 |
|
|
TESNA Inc. [3] |
Pyeongtaek-Si, Korea |
– |
|
– |
– |
Mar 2024 |
|
|
THALES DIS Deutschland GmbH. [3] |
Ditzingen, Germany |
UICC |
|
– |
|
Mar 2023 |
|
|
Thales DIS France SAS [3] |
Pont Audemer, France |
UICC, eUICC |
|
|
|
Apr 2023 |
|
Tours, France |
|
|
|
– |
Jun 2023 |
|
|
|
Thales DIS Mexico S.A. de C.V. [3] |
Cuernavaca, Mexico |
UICC, eUICC |
|
|
|
Aug 2023 |
|
|
THALES DIS India Private Limited [3] |
Noida, India |
UICC, eUICC |
– |
|
– |
Jan 2024 |
|
|
Thales DIS (Shanghai) Co., Ltd. [3] |
Shanghai, China |
UICC, eUICC |
|
|
– |
Dec 2023 |
|
|
Thales DIS Sp. z o.o. [3] |
Tczew, Poland |
UICC |
|
– |
– |
Jun 2023 |
|
|
Thales DIS USA, Inc. [3] |
Montgomeryville, USA |
UICC, eUICC |
– |
|
– |
Jun 2023 |
|
|
Tongxin Microelectronics Co.,LTD. [3] |
Beijing, China |
– |
|
– |
– |
Oct 2023 |
|
|
Trasna Solutions d.o.o. |
Gračanica, Bosnia & Herzegovina |
UICC |
|
– |
|
Mar 2024 |
|
|
United Security Printing [3] |
Abu Dhabi, United Arab Emirates |
UICC |
|
– |
|
Dec 2023 |
|
|
Valid Card Manufacturing (Suzhou) Co., Ltd [3] |
Suzhou, China |
UICC, eUICC |
|
|
|
Feb 2024 |
|
|
Valid Soluciones Tecnológicas S.A.U. |
Madrid, Spain |
UICC, eUICC |
|
|
|
Apr 2024 |
|
|
Workz Media FZ LLC [3] |
Dubai, United Arab Emirates |
UICC, eUICC |
|
|
|
Aug 2023 |
|
|
Wuhan Tianyu Information Industry Co., Ltd. – Lefeng Road [3] |
Wuhan, China |
UICC, eUICC |
|
|
|
Feb 2024 |
|
|
XH Smart Tech (China) Co., Ltd. [3] |
Zhuhai, China |
UICC |
|
– |
– |
Oct 2024 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.
SAS for Subscription Management (SAS-SM)
The subscription management service provider and data centre operations and management sites in the table below are currently accredited.
Accreditation scope definitions are provided here.
Key to Symbols
| Symbol | Certification Type |
 |
Within scope (full certification; locally hosted) |
 |
Within scope (provisional certification; locally hosted *) |
 |
Within scope (full certification; cloud hosted/hosting) |
 |
Within scope (provisional certification; cloud hosted/hosting *) |
| – | Not carried out at this site |
* Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-SM Accredited sites.
Supplier |
Site |
Scope of Certification |
Valid to: |
Cert. |
||||
Secure Routing |
Data Preparation |
Data Preparation+ (ref. SGP.22) |
Data Centre Operations & Management |
Discovery Service |
||||
|
1oT |
Tallinn, Estonia |
|
|
– |
|
– |
Jul 2023 |
|
|
A1 Systems [3] |
Moscow, Russia |
|
|
|
|
– |
Nov 2023 |
|
|
Amazon Web Services, Inc. |
AWS cloud regions: Europe (Paris) & US East (Ohio) |
– |
– |
– |
|
– |
Oct 2023 |
|
|
Bharti Airtel Ltd [2] |
Noida, India |
|
|
|
|
– |
Nov 2024 |
|
|
Eastcompeace Technology Co., Ltd [3] |
Zhuhai, China |
|
|
|
|
– |
Mar 2024 |
|
|
Giesecke+Devrient Mobile Security Germany GmbH. [3] |
Aschheim, Germany |
|
|
|
|
|
Apr 2023 |
|
|
Giesecke+Devrient Mobile Security Germany GmbH. [3] |
Munich, Germany |
|
|
|
|
|
Apr 2023 |
|
|
Giesecke + Devrient Mobile Security America, Inc. |
Atlanta, USA |
|
|
|
|
|
Mar 2025 |
|
|
Giesecke & Devrient Mobile Security Iberia, SAU [3] |
Barcelona, Spain |
– |
– |
|
|
|
Jun 2023 |
|
|
Google LLC |
Sites in Europe cloud region, Europe |
– |
– |
– |
|
– |
Jun 2023 |
|
|
Hengbao Co., Ltd [3] |
Danyang, China |
|
|
|
|
|
Sep 2024 |
|
|
IDEMIA America Corp. [3] |
Sterling, U.S.A |
|
|
|
|
– |
Jan 2024 |
|
|
IDEMIA Technologies Romania S.R.L. [3] |
Bucharest, Romania |
|
|
|
|
– |
Jan 2024 |
|
|
Invigo Offshore SAL |
Beirut, Lebanon |
|
|
|
|
|
Sep 2024 |
|
|
Kigen (UK) Limited [2] |
Dublin, Republic of Ireland |
|
|
|
|
|
Jun 2023 |
|
|
Links Field Networks Ltd. [3] |
Shenzhen, China |
– |
– |
|
|
– |
Nov 2024 |
|
|
Microsoft Corporation [3] |
Azure Cloud regions in USA, Europe and Japan |
– |
– |
– |
|
– |
Jun 2023 |
|
|
Monty UK Global Ltd. [3] |
London, UK |
– |
– |
|
|
– |
Feb 2024 |
|
|
Nokia Solutions and Networks Oy |
Fort Worth, USA |
|
|
|
– |
– |
Apr 2023 |
|
|
Nordic eSIM |
Copenhagen, Denmark |
|
|
|
|
– |
Jun 2023 |
|
|
NovaCard JSC [3] |
Nizhny Novgorod, Russia |
|
|
|
|
– |
Sep 2024 |
|
|
Oasis Smart Sim Europe SAS |
Paris, France |
|
|
|
|
– |
Nov 2023 |
|
|
Protahub A.Ş. |
Istanbul, Turkey |
|
|
|
|
– |
Nov 2023 |
|
|
Redtea Mobile PTE. LTD. |
Amsterdam, The Netherlands |
– |
– |
|
|
– |
Jun 2023 |
|
|
Reliance Jio Infocomm Ltd [2] |
Mumbai, India |
|
|
|
|
– |
Jun 2023 |
|
|
Saudi Telecom Company |
Riyadh, Saudi Arabia |
|
|
|
|
– |
Jan 2024 |
|
|
Star Solutions International Inc. |
Richmond, Canada |
– |
– |
|
|
– |
May 2023 |
|
|
TATA Communications Collaboration Services Private Limited |
New Delhi, India |
|
|
|
|
– |
Jan 2024 |
|
|
Teal Communications, Inc. |
Fort Worth, USA |
|
|
|
|
– |
Aug 2023 |
|
|
Thales DIS France SAS |
La Ciotat, France |
– |
– |
|
|
|
Jan 2025 |
|
|
Thales DIS France SAS |
Tours, France |
|
|
|
|
|
Jan 2025 |
|
|
Thales DIS (Shanghai) Co., Ltd. [3] |
Shanghai, China |
|
|
|
|
– |
Sep 2023 |
|
|
Thales DIS USA, Inc. [3] |
Dallas, USA |
|
|
|
|
|
Sep 2023 |
|
|
Truphone Limited |
London, United Kingdom |
|
|
|
|
|
Dec 2023 |
|
|
Truphone Limited |
Amsterdam, The Netherlands |
|
|
|
|
|
Dec 2023 |
|
|
VALID SOLUCIONES TECNOLÓGICAS S.A.U. |
Madrid, Spain |
|
|
|
|
– |
Mar 2024 |
|
|
Valid USA Inc |
Chicago, USA |
|
|
|
|
– |
Jan 2024 |
|
Thane, India |
|
|
|
|
– |
Sep 2023 |
|
|
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
|
|
|
|
|
Jul 2023 |
|
|
Wuhan Tianyu Information Industry Co., Ltd. [3] |
Wuhan, China |
|
|
|
|
|
Nov 2023 |
|
|
XH Smart Tech (China) Co., Ltd. [3] |
Zhuhai, China |
|
|
|
|
– |
Oct 2023 |
|
Notes:
[1] Renewal of SAS certification for this site is delayed due to Covid-19 related restrictions. Some or all aspects of this site’s certification that would normally expire have been temporarily extended due to these exceptional circumstances. An audit to reconfirm the site’s SAS-compliance in the relevant areas will be scheduled as soon as possible once restrictions are lifted.
[2] The site has declared to GSMA that it has temporarily implemented business continuity measures in response to Covid-19 that affects its compliance with SAS. See details on individual certificates. Interested parties are invited to contact the site directly for more details.
[3] Certification for this site has been issued following a Remote Audit, which is a temporary measure implemented by GSMA while Covid-19 restrictions are in place. See details on individual certificates.
If you would like to receive an email when the list of accredited sites changes, please provide your details below: