SAS Accredited Sites
SAS Auditors
The independence and quality of the GSMA Security Accreditation Scheme (SAS) auditors is key to the integrity of the scheme. Their role involves conducting interviews, reviewing documentation and carrying out tests in key areas of the supplier’s’ facilities.
To ensure GSMA works with the best qualified auditing companies, it periodically conducts a competitive tender for the provisioning of SAS auditing services.
The auditing companies currently selected by the GSMA for conducting SAS audits at subscription management service provider sites are:
The auditing companies currently selected by the GSMA for conducting SAS audits at UICC production sites are:
SAS Accredited Sites
SAS for UICC Production (SAS-UP)
The UICC production (SAS-UP) supplier sites in the table below are currently accredited.
Accreditation scope definitions are provided here.
Key to symbols
| Entry / Symbol | Certification Type | Scope |
| UICC | UICCP | Full | Provisional | Within scope (UICCs) |
| eUICC | eUICCP | Within scope (eUICCs) | |
 |  |
Within scope (2-step personalisation – Perso_SC) | |
 |  |
Within scope (2-step personalisation – Perso_UICC) | |
 |  |
Within scope (card form factor) | |
 |  |
Within scope (embedded form factor) | |
 |  |
Within scope (Wafer Level Chip Scale Packaging) | |
 |
N/A | GSMA PKI Live; site has demonstrated compliant controls with GSMA PKI certificate(s) in use. |
 |
N/A | GSMA PKI Ready; site has demonstrated compliant controls for PKI certificate management with non-GSMA PKI certificates* |
| – | N/A | Not carried out at this site |
SAS-UP Accredited Sites
Supplier |
Site |
Certification Scope |
First certified*: |
Valid until end of: |
Certificate |
|||
|---|---|---|---|---|---|---|---|---|
Generation of data for personalisation |
Personalisation |
Management of PKI certificates |
Post personalisation packaging |
|||||
Advanced Semiconductor Engineering Inc. |
Kaohsiung, Taiwan |
|
|
2021 |
Mar 2026 |
|
||
Amkor Technology Korea, Inc. - K3 |
Incheon, Korea |
|
2022 |
Jul 2027 |
|
|||
Amkor Technology Korea, Inc. - K5 |
Incheon, Korea |
|
2026 |
Nov 2026 |
|
|||
Amkor Technology Taiwan, Ltd. - T1 |
Taoyuan City, Taiwan |
|
2021 |
Apr 2027 |
|
|||
Ardentec Corporation |
Hsinchu, Taiwan |
|
2020 |
May 2027 |
|
|||
Ardentec Singapore Pte Ltd |
Singapore |
|
2021 |
Jan 2027 |
|
|||
Beautiful Card Corporation |
Taoyuan, Taiwan |
UICCp |
|
|
2022 |
Jul 2026 |
|
|
Beijing Huahong IC Design Co., Ltd. |
Beijing, China |
UICC, eUICC |
|
|
|
2015 |
Sep 2026 |
|
Beijing Tsingteng MicroSystem Co Ltd |
Shenzhen, China |
eUICCp |
|
|
2026 |
Mar 2028 |
|
|
Beijing Watchdata Co., Ltd. |
Beijing, China |
UICC, eUICC |
|
|
2007 |
Jan 2028 |
|
|
Chengtian Weiye (Ningbo) Chip Technology Co., Ltd. |
Cixi, China |
UICC |
|
|
2023 |
Dec 2027 |
|
|
Chutian Dragon Co., Ltd. |
Dongguan, China |
UICC, eUICC |
|
|
|
2014 |
Feb 2028 |
|
Colorplast Systems Pvt. Ltd. |
Noida, India |
UICC, eUICCp |
|
2024 |
Dec 2027 |
|
||
Doosan Tesna Inc |
Pyeongtaek-si, Republic of Korea |
|
2019 |
Mar 2027 |
|
|||
Eastcompeace Technology Co., Ltd |
Zhuhai, China |
UICC, eUICC |
|
|
|
2002 |
Aug 2026 |
|
Ebtikar Card Systems |
Ajman, UAE |
UICC |
|
2022 |
Jan 2028 |
|
||
E-Kart Elektronik Kart Sistemleri A.Ş |
Istanbul, Turkey |
UICC, eUICCp |
|
|
2004 |
Jun 2026 |
|
|
E7 Security |
Abu Dhabi, United Arab Emirates |
UICC |
|
|
2014 |
Jun 2026 |
|
|
Gemalto Southern Africa (Pty) Ltd |
Gauteng, South Africa |
|
2016 |
Mar 2026 |
|
|||
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
UICC, eUICC |
|
|
|
2016 |
Apr 2027 |
|
Giesecke+Devrient (Jiangxi) Technology Co., Ltd. |
Nanchang, China |
UICC, eUICC |
|
|
|
2007 |
Dec 2027 |
|
Giesecke+Devrient Mobile Security America, Inc. |
Markham, Canada |
UICC, eUICC |
|
2020 |
Jul 2026 |
|
||
Giesecke & Devrient MS India Private Limited |
Chennai, India |
UICC, eUICC |
|
2018 |
Aug 2026 |
|
||
Giesecke+Devrient Secure Data Management GmbH |
Neustadt, Germany |
UICC |
|
|
2016 |
Jul 2027 |
|
|
Golden Chip Company |
Dammam, Saudi Arabia |
|
2025 |
Aug 2026 |
|
|||
Goldpac Limited |
Zhuhai, China |
UICC, eUICCp |
|
|
|
2021 |
Jun 2026 |
|
HB Technologies |
Algiers, Algeria |
UICC |
|
2017 |
Aug 2026 |
|
||
Hengbao Co., Ltd |
Danyang, China |
UICC, eUICC |
|
|
|
2008 |
Dec 2027 |
|
Ho&Bros Information Technology Co Ltd |
Zhuhai, China |
UICC, eUICC |
|
|
2025 |
Jun 2026 |
|
|
IDEMIA (Shenzhen) Technologies Company Limited |
Shenzhen, China |
UICC, eUICC |
|
|
|
2006 |
Aug 2027 |
|
IDEMIA France SAS |
Vitré (VNF), France |
UICC, eUICC |
|
|
|
2024 |
Feb 2028 |
|
IDEMIA SYSCOM India Private Limited |
Noida, India |
UICC, eUICC |
|
|
2008 |
Jan 2027 |
|
|
IDEMIA Colombia SAS |
Yumbo, Colombia |
UICC |
|
|
2023 |
May 2026 |
|
|
IF Weibinnai Technology Co., Ltd. |
Chongqing, China |
UICC, eUICC |
|
|
2025 |
Feb 2027 |
|
|
Infineon Technologies Dresden GmbH |
Dresden, Germany |
|
2020 |
Dec 2026 |
|
|||
Infineon Technologies (Wuxi) Co. Ltd |
Wuxi, China |
|
2025 |
Jun 2026 |
|
|||
Inkript [1] |
Beirut, Lebanon |
UICC |
|
2011 |
Aug 2026 |
|
||
Kigen (UK) Limited |
Dublin, Ireland |
UICC, eUICC |
|
2019 |
Mar 2027 |
|
||
Kigen (India) Private Limited |
Noida, India |
UICC, eUICC |
|
2023 |
Jun 2026 |
|
||
Kona M Co Ltd |
Jincheon-Gun, Korea |
UICC |
|
|
2013 |
Sep 2027 |
|
|
MK Smart Joint Stock Company |
Hanoi, Vietnam |
UICC |
|
|
2010 |
Nov 2027 |
|
|
Mobismart Card Technology Ltd |
Chennai, India |
|
2023 |
Apr 2027 |
|
|||
Nordic eSIM |
Copenhagen, Denmark |
UICC, eUICC |
|
2024 |
Mar 2028 |
|
||
NXP Semiconductors Germany GmbH |
Hamburg, Germany |
UICC, eUICC |
|
2018 |
Oct 2027 |
|
||
NXP Semiconductors Taiwan Ltd |
Kaohsiung, Taiwan |
|
|
2018 |
Oct 2027 |
|
||
NXP Semiconductors (Tianjin) Ltd. [1] |
Tianjin, China |
eUICCp |
|
|
2022 |
Apr 2026 |
|
|
PT. Chengtian Weiye Indonesia |
Bekasi, Indonesia |
|
2019 |
Apr 2027 |
|
|||
Qualcomm Technologies, Inc. |
San Diego, USA |
|
2022 |
Jun 2027 |
|
|||
Rosmerta Technologies Ltd. |
Pune, India |
UICC |
|
2025 |
Apr 2026 |
|
||
Samsung Electronics Co., Ltd. |
Yongin-si, Republic of Korea |
2019 |
Jan 2027 |
|
||||
Saudi Telecom Company |
Riyadh, Saudi Arabia |
UICCp |
- |
Aug 2026 |
|
|||
SecureID Limited |
Lagos, Nigeria |
UICC |
|
2020 |
Sep 2026 |
|
||
Secure Tech Cards (Pvt) Ltd. |
Islamabad, Pakistan |
|
2024 |
Apr 2026 |
|
|||
Seshaasai Technologies Limited |
Bengaluru, India |
UICCp, eUICCp |
|
|
2026 |
Oct 2026 |
|
|
Shenzhen Chengtian Weiye Technology Company Limited |
Shenzhen, China |
UICC |
|
2018 |
Aug 2026 |
|
||
Shenzhen STS Microelectronics Co. Ltd. |
Shenzhen, China |
|
2026 |
Oct 2026 |
|
|||
Siliconware Precision Industries Co. Ltd. |
Taichung, Taiwan |
|
2023 |
Oct 2026 |
|
|||
SINC Novation Falkenstein GmbH |
Falkenstein, Germany |
|
2024 |
Jun 2026 |
|
|||
Sintel Security Print Solutions Limited |
Thika, Kenya |
|
|
2023 |
Jun 2027 |
|
||
STMicroelectronics srl |
Caserta, Italy |
UICC, eUICC |
|
|
|
2002 |
May 2026 |
|
STMicroelectronics |
Rousset, France |
|
2018 |
Jun 2027 |
|
|||
STMicroelectronics |
Toa Payoh, Singapore |
|
2018 |
Jul 2027 |
|
|||
Tata Communications (France) SAS |
Paris, France |
UICC, eUICC |
|
2022 |
Oct 2027 |
|
||
Thales DIS Brasil Cartões e Soluções de Tecnologia LTDA |
Pinhais, Parana, Brasil |
UICC |
|
|
2026 |
Sep 2026 |
|
|
Thales DIS Deutschland GmbH |
Ditzingen, Germany |
UICC |
|
|
2022 |
Jun 2026 |
|
|
Thales DIS France SAS |
Pont Audemer, France |
UICC, eUICC |
|
|
|
- |
Apr 2027 |
|
Thales DIS India Private Limited |
Noida, India |
UICC, eUICC |
|
2014 |
Jan 2027 |
|
||
Thales DIS Mexico S.A. de C.V. |
Cuernavaca, Mexico |
UICC, eUICC |
|
|
|
2012 |
Aug 2027 |
|
Thales DIS (Shanghai) Co., Ltd. |
Shanghai, China |
UICC, eUICC |
|
|
2014 |
Jun 2026 |
|
|
Thales DIS Sp. z o.o. |
Tczew, Poland |
UICC |
|
2019 |
Jun 2027 |
|
||
Thales DIS USA, Inc. |
Montgomeryville, USA |
UICC, eUICC |
|
2006 |
Jun 2027 |
|
||
Tongxin Microelectronics Co.,LTD. |
Wuxi, China |
eUICCp |
|
|
2026 |
Apr 2026 |
|
|
TOPWISE TECHNOLOGY (Shenzhen) Company Limited |
Shenzhen, China |
UICC |
|
|
2025 |
Dec 2026 |
|
|
Trasna Solutions d.o.o. |
Gračanica, Bosnia & Herzegovina |
UICC |
|
|
2016 |
Mar 2026 |
|
|
Trasna Solutions FZ LLC |
Dubai, United Arab Emirates |
UICC, eUICC |
|
|
|
2017 |
Feb 2028 |
|
Valid Card Manufacturing (Suzhou) Co., Ltd |
Suzhou, China |
UICC, eUICC |
|
|
|
2016 |
Aug 2026 |
|
Valid Soluciones Tecnológicas S.A.U. |
Madrid, Spain |
UICC, eUICC |
|
|
|
2012 |
Oct 2026 |
|
Zhejiang Chipadvanced Technology Co., Ltd. |
Jiaxing, China |
eUICC |
|
|
2025 |
Aug 2026 |
|
|
Notes:
[1] Certification for this site is currently based on a Remote Audit or a Temporary Extension Assessment.
SAS for Subscription Management (SAS-SM)
The subscription management (SM) service provider sites and cloud regions in the tables below are currently accredited.
Accreditation scope definitions are provided here.
Key to symbols
| Symbol | Certification Type |
 |
Within scope (full certification; locally hosted) |
 |
Within scope (provisional certification; locally hosted *) |
 |
Within scope (full certification; cloud hosted/hosting) |
 |
Within scope (provisional certification; cloud hosted/hosting *) |
| – | Not carried out at this site |
Provisional certification: The site has a complete set of operational systems, processes and controls in place in all areas of the relevant SAS Standard, and has demonstrated compliance with the security requirements defined in the Standard in the absence of live production. Full certification will be awarded after a successful SAS audit of live production.
SAS-SM Accredited Sites (SM Providers)
Supplier |
Site |
Scope of Certification |
First certified*: |
Valid until end of: |
Certificate |
||||
|---|---|---|---|---|---|---|---|---|---|
M2M (Secure Routing/Data Preparation) |
Data Preparation+ |
Data Centre Operations & Management |
Discovery Service |
eIM |
|||||
1GLOBAL Group BV. |
Amsterdam, The Netherlands |
|
|
|
|
2019 |
Dec 2027 |
|
|
1GLOBAL Group BV. |
London, United Kingdom |
|
|
|
|
2018 |
Dec 2027 |
|
|
1oT |
Tallinn, Estonia |
|
|
|
|
2022 |
Jul 2026 |
|
|
Beijing Watchdata Co., Ltd. |
Beijing, China |
|
2025 |
Mar 2027 |
|
||||
Beijing Watchdata Co., Ltd. |
Beijing, China |
|
|
2023 |
Jun 2027 |
|
|||
Beijing ChinaRainbow Technology Co.,Ltd |
Beijing, China |
|
|
|
2026 |
Sep 2026 |
|
||
Bharti Airtel Ltd |
Noida, India |
|
|
|
2018 |
Nov 2026 |
|
||
Cyshield |
Egypt, Cairo |
|
|
|
2024 |
May 2026 |
|
||
Eastcompeace Technology Co., Ltd |
Zhuhai, China |
|
|
|
|
|
2018 |
Mar 2028 |
|
Etihad Etisalat Company - Mobily |
Riyadh, Saudi Arabia |
|
|
|
|
2024 |
May 2026 |
|
|
Flex Group |
Montreal, Canada |
|
|
|
2024 |
Aug 2026 |
|
||
Giesecke + Devrient Mobile Security Germany GmbH. |
Aschheim, Germany |
|
|
|
|
2017 |
Apr 2027 |
|
|
Giesecke + Devrient Mobile Security America, Inc. |
Atlanta, USA |
|
|
|
|
2017 |
Mar 2027 |
|
|
Giesecke+Devrient Mobile Security TCD Iberia S.L. |
Barcelona, Spain |
|
|
|
2019 |
Jun 2027 |
|
||
Hengbao Co., Ltd |
Danyang, China |
|
|
|
|
|
2020 |
Sep 2026 |
|
Ho&Bros Information Technology Co Ltd |
Zhuhai, China |
|
|
|
|
2025 |
Apr 2026 |
|
|
IDEMIA America Corp. |
Sterling, U.S.A |
|
|
|
|
2017 |
Apr 2026 |
|
|
IDEMIA France SAS |
St.Denis, Paris, France |
|
|
|
|
2026 |
Oct 2026 |
|
|
IDEMIA Technologies Romania S.R.L. |
Bucharest, Romania |
|
|
|
|
2017 |
Jul 2026 |
|
|
IDEMIA Technologies Romania S.R.L. |
Sema Park, Bucharest, Romania |
|
|
|
|
2025 |
Apr 2027 |
|
|
Invigo Limited [1] |
Larnaca, Cyprus |
|
|
|
|
2019 |
Mar 2026 |
|
|
Kigen (UK) Limited |
Dublin, Republic of Ireland |
|
|
|
|
2018 |
Jun 2027 |
|
|
LIMART |
Dubai, United Arab Emirates |
|
|
|
|
2026 |
Oct 2026 |
|
|
Links Field Networks Ltd. |
Shenzhen, China |
|
|
|
2021 |
Nov 2026 |
|
||
MK Smart Joint Stock Company |
Hanoi, Vietnam |
|
|
2025 |
Jun 2026 |
|
|||
Monty UK Global Ltd. [1] |
London, UK |
|
|
2020 |
Feb 2027 |
|
|||
Motive Software Solutions |
Fort Worth, USA |
|
|
2022 |
Dec 2026 |
|
|||
NEWare Info Technology Ltd |
Hong Kong |
|
|
2025 |
Sep 2026 |
|
|||
Nordic eSIM |
Copenhagen, Denmark |
|
|
|
|
2021 |
Jun 2027 |
|
|
Protahub A.Ş. |
Istanbul, Turkey |
|
|
|
2020 |
Nov 2027 |
|
||
Redtea Mobile PTE. LTD. |
Amsterdam, Netherlands |
|
|
|
2021 |
Jun 2027 |
|
||
Reliance Jio Infocomm Ltd |
Mumbai, India |
|
|
|
2018 |
Sep 2026 |
|
||
RiPSIM Technologies, Inc. |
Ashburn, VA, USA |
|
|
2023 |
Apr 2027 |
|
|||
Saudi Telecom Company |
Riyadh, Saudi Arabia |
|
|
|
2020 |
Jan 2028 |
|
||
Simartis Telecom SRL |
Cluj-Napoca, Romania |
|
|
|
2023 |
Nov 2026 |
|
||
Star Solutions International Inc. |
Richmond, Canada |
|
|
2022 |
May 2026 |
|
|||
Tata Communications France SAS |
Paris, France |
|
|
|
|
2020 |
Oct 2027 |
|
|
TATA Communications Collaboration Services Private Limited |
New Delhi, India |
|
|
|
|
2022 |
Jan 2028 |
|
|
Teal Communications, Inc. |
Fort Worth, USA |
|
|
|
|
2022 |
Aug 2027 |
|
|
Thales DIS France SAS |
Tours, France |
|
|
|
2016 |
Jan 2027 |
|
||
Thales DIS France SAS |
La Ciotat, France |
|
|
|
|
|
- |
Jan 2027 |
|
Thales DIS USA, Inc. |
Dallas, USA |
|
|
|
|
2017 |
Mar 2027 |
|
|
Torrion River - FZCO |
Dubai, United Arab Emirates |
|
2024 |
Apr 2026 |
|
||||
Trasna Solutions FZ LLC |
Dubai, United Arab Emirates |
|
|
|
|
|
2019 |
Jul 2027 |
|
Turkcell Iletisim Hizmetleri A.S |
Kocaeli, Turkey |
|
|
2025 |
Aug 2026 |
|
|||
Valid Soluciones Tecnologicas S.A.U. |
Madrid, Spain |
|
|
|
2018 |
Jun 2026 |
|
||
Vodafone Idea Limited NDC3 |
Thane, India |
|
|
|
2019 |
Sep 2027 |
|
||
Xinsheng Technology Co., Ltd. |
Xiongan, China |
|
|
|
|
2026 |
Nov 2026 |
|
|
[1]
Certification for this site is currently based on a Remote Audit or a Temporary Extension Assessment.
SAS-SM Accredited Sites (Cloud Regions)
Supplier |
Cloud Region |
Scope of Certification |
First certified*: |
Valid until end of: |
Certificate |
|
|---|---|---|---|---|---|---|
Data Centre Operations & Management |
HSM Managed Service |
|||||
Amazon Web Services, Inc. |
AWS data centres in US East (Ohio), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Tokyo), Europe (Frankfurt), and Europe (Paris) |
|
2021 |
Oct 2026 |
|
|
Google LLC |
Google Cloud multiple regions globally (see certificate) |
|
|
2022 |
Jun 2026 |
|
Microsoft Corporation |
Azure Cloud multiple regions globally (see certificate) |
|
|
2020 |
Jun 2026 |
|
Oracle Cloud Infrastructure |
OCI multiple regions globally (see certificate) |
|
2023 |
Oct 2026 |
|
|
*First Certified: The year that the site or cloud region first gained SAS provisional or full certification for any scope element within that scheme. More details here.
If you would like to receive an email when the list of accredited sites changes, please provide your details below: