R
Certificate No: ID-SN-UP-0420
Certificate
This is to certify that
IDEMIA (Shenzhen) Technologies Company Limited, Shenzhen, China
has participated in the GSM Association Security Accreditation Scheme for
UICC Production (SAS-UP) and satisfied the scheme’s requirements.
This certificate remains valid until the end of April 2020.
Alex Sinclair
Chief Technology Officer
GSMA
Check certificate validity: A list of accredited sites is published on the GSM Association website at www.gsma.com/sas/
s
Scope of Certification
To be viewed as part of Security Accreditation Scheme Certificate No: ID-SN-UP-0420
Production Site: IDEMIA (Shenzhen) Technologies Company Limited
East of 3rd floor, Great Wall Technology Building 1#, No. 3 Kefa Road, Science and
Site Address:
Technology Park, Nanshan District, Shenzhen, GuangDong, 518057, China
Supporting site(s) details:
The auditors were provided with appropriate evidence that the processes and controls on the audit dates were consistent with those required by the SAS-UP Standard v8.0 and the SAS
Consolidated Security Requirements v2.0, with the following scope:
Generation of data for personalisation: UICC, eUICC Personalisation: Card, Embedded
Management of PKI certificates: GSMA PKI Post-personalisation packaging: Not carried out at this site
Outsourcing: No activities are outsourced for this site Notes & Exclusions: There are no exclusions defined for this site.
These activities were
outsourced and not subject
to review by the auditors
For and on behalf of FML For and on behalf of ChaseWaterford
(James Messham) (Max Kennett)
SAS certification is awarded based on an assessment by the audit team that the site met the requirements of the SAS Standard during the audit, and that it demonstrated an ability and intent to sustain compliance during the certification period. Continued site
compliance with the SAS Standard during the certification period, including the implementation of SAS-compliant controls following any changes to the certified environment, is the responsibility of the site. This certificate cannot guarantee that the above
organisation is invulnerable to attack or breaches of security. GSMA, FML and ChaseWaterford exclude all liability for loss or damage of any description caused by any failure or breach of the above organisation’s security save as may be required by law.