SAS Accredited Sites
SAS Auditors
The independence and quality of the GSMA Security Accreditation Scheme (SAS) auditors is key to the integrity of the scheme. Their role involves conducting interviews, reviewing documentation and carrying out tests in key areas of the supplier’s’ facilities.
To ensure GSMA works with the best qualified auditing companies, it periodically conducts a competitive tender for the provisioning of SAS auditing services.
The auditing companies currently selected by the GSMA for conducting SAS audits at subscription management service provider sites are:
The auditing companies currently selected by the GSMA for conducting SAS audits at UICC production sites are:
SAS Accredited Sites
SAS for UICC Production (SAS-UP)
The UICC production (SAS-UP) supplier sites in the table below are currently accredited.
Accreditation scope definitions are provided here.
Key to symbols
| Entry / Symbol | Certification Type | Scope |
| UICC | UICCP | Full | Provisional | Within scope (UICCs) |
| eUICC | eUICCP | Within scope (eUICCs) | |
 |  |
Within scope (2-step personalisation – Perso_SC) | |
 |  |
Within scope (2-step personalisation – Perso_UICC) | |
 |  |
Within scope (card form factor) | |
 |  |
Within scope (embedded form factor) | |
 |  |
Within scope (Wafer Level Chip Scale Packaging) | |
 |
N/A | GSMA PKI Live; site has demonstrated compliant controls with GSMA PKI certificate(s) in use. |
 |
N/A | GSMA PKI Ready; site has demonstrated compliant controls for PKI certificate management with non-GSMA PKI certificates* |
| – | N/A | Not carried out at this site |
SAS-UP Accredited Sites
Supplier |
Site |
Certification Scope |
First certified*: |
Valid to: |
Certificate |
|||
|---|---|---|---|---|---|---|---|---|
Generation of data for personalisation |
Personalisation |
Management of PKI certificates |
Post personalisation packaging |
|||||
Advanced Semiconductor Engineering Inc. |
Kaohsiung, Taiwan |
|
|
2021 |
Mar 2026 |
|
||
Amkor Technology Korea, Inc. - K3 |
Incheon, Korea |
|
2022 |
Jul 2025 |
|
|||
Amkor Technology Taiwan, Ltd. - T1 |
Taoyuan City, Taiwan |
|
2021 |
Apr 2025 |
|
|||
Ardentec Corporation |
Hsinchu, Taiwan |
|
- |
May 2025 |
|
|||
Ardentec Singapore Pte Ltd |
Singapore |
|
2021 |
Jan 2025 |
|
|||
Beautiful Card Corporation |
Taoyuan, Taiwan |
UICCp |
|
|
2022 |
Jul 2026 |
|
|
Beijing Huahong IC Design Co., Ltd. |
Beijing, China |
UICC, eUICC |
|
|
|
- |
Sep 2026 |
|
Beijing Watchdata Co., Ltd. |
Beijing, China |
UICC, eUICC |
|
|
- |
Jan 2026 |
|
|
Chengtian Weiye (Ningbo) Chip Technology Co., Ltd. |
Cixi, China |
UICCp |
|
|
2023 |
Dec 2025 |
|
|
Chutian Dragon Co., Ltd. |
Dongguan, China |
UICC, eUICCp |
|
|
|
- |
Feb 2026 |
|
Colorplast Systems Pvt. Ltd. |
Noida, India |
UICCp |
|
2024 |
Mar 2025 |
|
||
Doosan Tesna Inc |
Pyeongtaek-si, Korea |
|
2019 |
Mar 2025 |
|
|||
Eastcompeace Technology Co., Ltd |
Zhuhai, China |
UICC, eUICC |
|
|
|
- |
Aug 2026 |
|
Ebtikar Card Systems |
Ajman, UAE |
UICC |
|
2022 |
Jan 2026 |
|
||
E-Kart Elektronik Kart Sistemleri A.Ş |
Istanbul, Turkey |
UICC, eUICCp |
|
|
- |
Jun 2026 |
|
|
E7 Security |
Abu Dhabi, United Arab Emirates |
UICC |
|
|
2014 |
Jun 2026 |
|
|
Gemalto Southern Africa (Pty) Ltd |
Gauteng, South Africa |
|
- |
Mar 2026 |
|
|||
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
UICC, eUICC |
|
|
|
- |
Apr 2025 |
|
Giesecke+Devrient (Jiangxi) Technology Co., Ltd. |
Nanchang, China |
UICC, eUICC |
|
|
|
- |
Dec 2025 |
|
Giesecke+Devrient Mobile Security America, Inc. |
Markham, Canada |
UICC, eUICC |
|
2020 |
Jul 2026 |
|
||
Giesecke & Devrient MS India Private Limited |
Chennai, India |
UICC, eUICC |
|
- |
Aug 2026 |
|
||
Giesecke+Devrient Secure Data Management GmbH |
Neustadt, Germany |
UICC |
|
|
- |
Jul 2025 |
|
|
Goldpac Limited |
Zhuhai, China |
UICC |
|
|
2021 |
Jun 2026 |
|
|
Hengbao Co., Ltd |
Danyang, China |
UICC, eUICC |
|
|
|
- |
Dec 2025 |
|
IDEMIA (Shenzhen) Technologies Company Limited |
Shenzhen, China |
UICC, eUICC |
|
|
|
- |
Aug 2025 |
|
IDEMIA FRANCE SAS [1] |
Vitré, France |
UICC, eUICC |
|
|
|
- |
Jan 2025 |
|
Idemia VNF |
Vitré, France |
UICCp, eUICCp |
|
|
|
- |
Jun 2025 |
|
Idemia Germany GmbH |
Flintbek, Germany |
UICC |
|
|
- |
Sep 2025 |
|
|
Idemia Syscom India Private Limited [1] |
Noida, India |
UICC, eUICC |
|
|
- |
Jan 2025 |
|
|
IDEMIA COLOMBIA SAS |
Yumbo, Colombia |
UICC |
|
|
2023 |
May 2026 |
|
|
Infineon Technologies Dresden GmbH [1] |
Dresden, Germany |
|
2020 |
Dec 2024 |
|
|||
Inkript [1] |
Beirut, Lebanon |
UICC |
|
- |
Feb 2025 |
|
||
Kigen (UK) Limited |
Dublin, Ireland |
UICC, eUICC |
|
2019 |
Mar 2025 |
|
||
Kigen (India) Private Limited |
Noida, India |
UICC, eUICC |
|
2023 |
Jun 2026 |
|
||
Kona M Co Ltd |
Jincheon-Gun, Korea |
UICC |
|
|
- |
Sep 2025 |
|
|
Mobismart Card Technology Private Limited |
Chennai, India |
|
2024 |
Apr 2025 |
|
|||
Nordic eSIM |
Copenhagen, Denmark |
UICCp, eUICCp |
|
2024 |
Mar 2025 |
|
||
NXP Semiconductors Germany GmbH |
Hamburg, Germany |
UICC, eUICC |
|
- |
Oct 2025 |
|
||
NXP Semiconductors Taiwan Ltd |
Kaohsiung, Taiwan |
|
|
- |
Oct 2025 |
|
||
NXP Semiconductors (Tianjin) Ltd. [1] |
Tianjin, China |
eUICCp |
|
|
2022 |
Apr 2025 |
|
|
Oasis Smart SIM Europe |
St Germain en Laye, France |
UICC, eUICC |
|
2022 |
Oct 2025 |
|
||
PT. Chengtian Weiye Indonesia |
Bekasi, Indonesia |
|
2019 |
Apr 2025 |
|
|||
Qualcomm Technologies, Inc. |
San Diego, USA |
|
2022 |
Jun 2025 |
|
|||
Samsung Electronics Co., Ltd |
Yongin-Si, South Korea |
2019 |
Jan 2025 |
|
||||
Secure Tech Cards (Pvt) Ltd. |
Islamabad, Pakistan |
|
2024 |
Apr 2025 |
|
|||
Shenzhen Chengtian Weiye Technology Company Limited |
Shenzhen, China |
UICC |
|
- |
Aug 2026 |
|
||
Shenzhen iGear Technology Inc |
Shenzhen, China |
|
- |
Jan 2026 |
|
|||
Siliconware Precision Industries Co. Ltd. |
Taichung, Taiwan |
|
2023 |
Oct 2026 |
|
|||
Sinc Novation Falkenstein GmbH |
Falkenstein, Germany |
|
2024 |
Jul 2025 |
|
|||
Sintel Security Print Solutions Limited |
Thika, Kenya |
|
|
2023 |
Jun 2025 |
|
||
STMicroelectronics srl |
Caserta, Italy |
UICC, eUICC |
|
|
|
- |
May 2026 |
|
STMicroelectronics |
Rousset, France |
|
- |
Sep 2025 |
|
|||
STMicroelectronics |
Toa Payoh, Singapore |
|
- |
Jul 2025 |
|
|||
Thales DIS Deutschland GmbH |
Ditzingen, Germany |
UICC |
|
|
2022 |
Jun 2026 |
|
|
Thales DIS France SAS |
Pont Audemer, France |
UICC, eUICC |
|
|
|
- |
Apr 2025 |
|
Thales DIS France SAS [1] |
Tours, France |
|
|
|
- |
Dec 2024 |
|
|
Thales DIS Mexico S.A. de C.V. |
Cuernavaca, Mexico |
UICC, eUICC |
|
|
|
- |
Aug 2025 |
|
THALES DIS India Private Limited [1] |
Noida, India |
UICC, eUICC |
|
2022 |
Jan 2025 |
|
||
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
UICC, eUICC |
|
|
- |
Jun 2026 |
|
|
Thales DIS Sp. z o.o. |
Tczew, Poland |
UICC |
|
2019 |
Jun 2025 |
|
||
Thales DIS USA, Inc. |
Montgomeryville, USA |
UICC, eUICC |
|
- |
Jun 2025 |
|
||
Tongxin Microelectronics Co.,LTD. |
Beijing, China |
eUICCp |
|
|
- |
Oct 2025 |
|
|
Trasna Solutions d.o.o. |
Gračanica, Bosnia & Herzegovina |
UICC |
|
|
- |
Mar 2026 |
|
|
Valid Card Manufacturing (Suzhou) Co., Ltd |
Suzhou, China |
UICC, eUICC |
|
|
|
- |
Aug 2025 |
|
Valid Soluciones Tecnológicas S.A.U. |
Madrid, Spain |
UICC, eUICC |
|
|
|
- |
Oct 2026 |
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
UICC, eUICC |
|
|
|
- |
Feb 2026 |
|
Wuhan Tianyu Information Industry Co., Ltd. - Lefeng Road |
Wuhan, China |
UICC, eUICC |
|
|
|
- |
Feb 2026 |
|
Notes:
[1] Certification for this site is currently based on a Remote Audit or a Temporary Extension Assessment.
SAS for Subscription Management (SAS-SM)
The subscription management (SM) service provider sites and cloud regions in the tables below are currently accredited.
Accreditation scope definitions are provided here.
Key to symbols
| Symbol | Certification Type |
 |
Within scope (full certification; locally hosted) |
 |
Within scope (provisional certification; locally hosted *) |
 |
Within scope (full certification; cloud hosted/hosting) |
 |
Within scope (provisional certification; cloud hosted/hosting *) |
| – | Not carried out at this site |
Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-SM Accredited Sites (SM Providers)
Supplier |
Site |
Scope of Certification |
First certified*: |
Valid to: |
Certificate |
||||
|---|---|---|---|---|---|---|---|---|---|
M2M (Secure Routing/Data Preparation) |
Data Preparation+ |
Data Centre Operations & Management |
Discovery Service |
eIM |
|||||
1oT |
Tallinn, Estonia |
|
|
|
|
2022 |
Jul 2026 |
|
|
Beijing Watchdata Co., Ltd. |
Beijing, China |
|
|
2023 |
Jun 2025 |
|
|||
Bharti Airtel Ltd |
Noida, India |
|
|
|
- |
Nov 2026 |
|
||
Cyshield |
Egypt, Cairo |
|
|
2024 |
May 2025 |
|
|||
Eastcompeace Technology Co., Ltd |
Zhuhai, China |
|
|
|
|
|
- |
Mar 2026 |
|
Etihad Etisalat Company - Mobily |
Riyadh, Saudi Arabia |
|
|
|
2024 |
May 2025 |
|
||
Giesecke+Devrient Mobile Security Germany GmbH. |
Aschheim, Germany |
|
|
|
|
- |
Apr 2025 |
|
|
Giesecke + Devrient Mobile Security America, Inc. |
Atlanta, USA |
|
|
|
|
- |
Mar 2025 |
|
|
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
|
|
|
2019 |
Jun 2025 |
|
||
Hengbao Co., Ltd |
Danyang, China |
|
|
|
|
|
2020 |
Sep 2026 |
|
IDEMIA America Corp. |
Sterling, U.S.A |
|
|
|
- |
Jan 2026 |
|
||
IDEMIA Technologies Romania S.R.L. |
Bucharest, Romania |
|
|
|
- |
Jan 2026 |
|
||
Invigo Offshore SAL |
Beirut, Lebanon |
|
|
|
|
2019 |
Sep 2025 |
|
|
Kigen (UK) Limited |
Dublin, Republic of Ireland |
|
|
|
- |
Jun 2025 |
|
||
Links Field Networks Ltd. |
Shenzhen, China |
|
|
|
- |
Nov 2026 |
|
||
Monty UK Global Ltd. [1] |
London, UK |
|
|
2020 |
Feb 2025 |
|
|||
Nokia Solutions and Networks Oy |
Fort Worth, USA |
|
|
2022 |
Apr 2025 |
|
|||
Nordic eSIM |
Copenhagen, Denmark |
|
|
|
2021 |
Jun 2025 |
|
||
Oasis Smart Sim Europe SAS |
Paris, France |
|
|
|
2020 |
Nov 2025 |
|
||
Protahub A.Ş. |
Istanbul, Turkey |
|
|
|
2020 |
Nov 2025 |
|
||
Redtea Mobile PTE. LTD. |
Amsterdam, Netherlands |
|
|
2021 |
Jun 2025 |
|
|||
Reliance Jio Infocomm Ltd |
Mumbai, India |
|
|
|
- |
Sep 2026 |
|
||
RiPSIM Technologies, Inc. |
Ashburn, VA, USA |
|
|
2023 |
Apr 2025 |
|
|||
Saudi Telecom Company |
Riyadh, Saudi Arabia |
|
|
|
2020 |
Jan 2026 |
|
||
Simartis Telecom SRL |
Cluj-Napoca, Romania |
|
|
|
2023 |
Nov 2024 |
|
||
Star Solutions International Inc. |
Richmond, Canada |
|
|
2022 |
May 2026 |
|
|||
TATA Communications Collaboration Services Private Limited |
New Delhi, India |
|
|
|
2022 |
Jan 2026 |
|
||
Teal Communications, Inc. |
Fort Worth, USA |
|
|
|
2022 |
Aug 2025 |
|
||
Thales DIS France SAS |
La Ciotat, France |
|
|
|
|
- |
Jan 2025 |
|
|
Thales DIS France SAS |
Tours, France |
|
|
|
|
- |
Jan 2025 |
|
|
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
|
|
|
- |
Sep 2025 |
|
||
Thales DIS USA, Inc. |
Dallas, USA |
|
|
|
|
- |
Mar 2025 |
|
|
TP Global Operations Limited |
London, United Kingdom |
|
|
|
|
- |
Dec 2025 |
|
|
TP Global Operations Limited |
Amsterdam, The Netherlands |
|
|
|
|
2019 |
Dec 2025 |
|
|
Torrion River - FZCO |
Dubai, United Arab Emirates |
|
2024 |
Jun 2025 |
|
||||
VALID SOLUCIONES TECNOLÓGICAS S.A.U. |
Madrid, Spain |
|
|
|
- |
Jun 2026 |
|
||
Vodafone Idea Limited NDC3 |
Thane, India |
|
|
|
|
2019 |
Sep 2025 |
|
|
Workz Media FZ LLC |
Dubai, United Arab Emirates |
|
|
|
|
2019 |
Jul 2025 |
|
|
Wuhan Tianyu Information Industry Co., Ltd. |
Wuhan, China |
|
|
|
|
- |
Nov 2025 |
|
|
XH Smart Tech (China) Co., Ltd. |
Zhuhai, China |
|
|
|
2022 |
Oct 2025 |
|
||
[1] Certification for this site is currently based on a Remote Audit or a Temporary Extension Assessment.
SAS-SM Accredited Sites (Cloud Regions)
Supplier |
Cloud Region |
Scope of Certification |
First certified*: |
Valid to: |
Certificate |
|
|---|---|---|---|---|---|---|
Data Centre Operations & Management |
HSM Managed Service |
|||||
Amazon Web Services, Inc. |
AWS cloud regions: Europe (Paris) & US East (Ohio) |
|
2021 |
Oct 2025 |
|
|
Google LLC |
Google Cloud regions globally |
|
|
2022 |
Jun 2025 |
|
Microsoft Corporation |
Azure Cloud regions in USA, Europe and Japan |
|
|
2020 |
Jun 2025 |
|
Oracle Cloud Infrastructure |
OCI regions worldwide |
|
2023 |
Oct 2025 |
|
|
*First Certified: The year that the site or cloud region first gained SAS provisional or full certification for any scope element within that scheme. More details here.
If you would like to receive an email when the list of accredited sites changes, please provide your details below: