Privacy and Security Certifications - HUAWEI Global

CSA Security, Trust & Assurance Registry (STAR) is a free, publicly accessible registry jointly launched by the British Standards Institute (BSI) and Cloud Security Alliance (CSA). CSA STAR assesses the security level and addresses issues specific to cloud security. By leveraging the requirements of ISO/IEC 27001 certification and the cloud control matrix (CCM), it applies the maturity model and assessment methodology provided by BSI to comprehensively assess the cloud security management and technical capabilities of organizations.

STAR 637452_Huawei Software Technologies Co., Limited (PDF)
STAR 724092_Aspiegel Limited (PDF)
STAR 724100_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：UK

Issuance Authority：UK BSI
Certified Entity & Object：
Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI Health, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, AI Lens, HiVioce, HUAWEI HiAI, HiKeyboard, HUAWEI GAMECENTER, HUAWEI READER
Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads
Huawei Services (Hong Kong) Co., Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads, HUAWEI HEALTH, HUAWEI WALLET, HUAWEI ASSISTANT

The European Privacy Seal (EuroPriSe) offers a trans-European privacy trust mark issued by an independent third party certifying compliance of IT products and IT-based services with European regulations on privacy and data security.

Certificate_Aspiegel_Huawei ID 2020 (PDF)

Applicable Country/Region：EU/EEA

Country of the Issuance Authority：Germany

Issuance Authority：EuroPriSe GMBH
Certified Entity & Object：
Aspiegel Limited: HUAWEI ID available in the EU/EEA

ISO/IEC 27001 information security management system is internationally accepted and widely applied. It certifies that Huawei Mobile Services has established a scientific and effective information security management system, which aligns the enterprise's development strategy and information security management and ensures information security risks are properly controlled and correctly handled.

IS 637452-ANAB_Huawei Software Technologies Co., Limited (PDF)
IS 637452-UKAS_Huawei Software Technologies Co., Limited (PDF)
IS 724090-ANAB_Aspiegel Limited (PDF)
IS 724090-UKAS_Aspiegel Limited (PDF)
IS 724096-ANAB_Huawei Services (Hong Kong) Co., Limited (PDF)
IS 724096-UKAS_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：UK

Issuance Authority：UK BSI
Certified Entity & Object：
Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI Health, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, AI Lens, HiVioce, HUAWEI HiAI, HiKeyboard, HUAWEI GAMECENTER, HUAWEI READER
Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads
Huawei Services (Hong Kong) Co., Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads, HUAWEI HEALTH, HUAWEI WALLET, HUAWEI ASSISTANT

ISO/IEC 27018 is an international code of conduct that focuses on personal data protection on the cloud. Based on ISO 27002, it provides guidelines for implementing the ISO 27002 control system for personally identifiable information (PII) on the public cloud. This ensures proper PII protection during processing by the cloud-based personal identity information processor, providing a common compliance framework for cloud service providers operating in multinational markets.

PII 714315_Huawei Software Technologies Co., Limited (PDF)
PII 724093_Aspiegel Limited (PDF)
PII 724097_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：UK

Issuance Authority：UK BSI
Certified Entity & Object：
Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI Health, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, AI Lens, HiVioce, HUAWEI HiAI, HiKeyboard, HUAWEI GAMECENTER, HUAWEI READER
Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads
Huawei Services (Hong Kong) Co., Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads, HUAWEI HEALTH, HUAWEI WALLET, HUAWEI ASSISTANT

ISO/IEC 27701 privacy information management system provides a comprehensive set of personal data processing methods and a privacy information management framework from multiple dimensions, such as organizational governance, legal compliance, process specifications, information technology, as well as supervision and audit. It certifies that Huawei Mobile Services has implemented a comprehensive personal information protection management system in design, R&D, operations, and O&M and reached the world leading level in security management, transparency, and privacy compliance of personal information.

PM 719801_Huawei Software Technologies Co., Limited (PDF)
PM 724091_Aspiegel Limited (PDF)
PM 724098_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：UK

Issuance Authority：UK BSI
Certified Entity & Object：
Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, HUAWEI GAMECENTER, HUAWEI READER
Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads
Huawei Services (Hong Kong) Co., Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads, HUAWEI HEALTH, HUAWEI WALLET, HUAWEI ASSISTANT

The Payment Card Industry Data Security Standard (PCI DSS) is a set of global security standards that strictly control data storage to ensure the security of cardholders' online transactions. PCI DSS sets a global baseline of technical and operational requirements for all entities involved in payment card processing. It is widely supported by global card organizations and financial institutions and has become a standard that must be followed by merchants and service providers.

atsec-2020-PCI-DSS-C-01100-33155 (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：China

Issuance Authority：ATSEC
Certified Entity & Object：
Huawei Software Technologies Co., Ltd.: Huawei Wallet
Aspiegel Limited: Huawei Wallet
Huawei Services (Hong Kong) Co., Limited: Huawei Wallet

ePrivacyseal is a well-respected European privacy certification that covers the requirements of the General Data Protection Regulation (GDPR) for digital products. The catalogue of criteria for certification is continuously being adapted to the interpretation of the GDPR and other data protection laws. ePrivacyseal assesses legal and technical aspects to ensure secure and visible compliance with the GDPR, protecting consumer privacy.

ePrivacyseal_certificate_Aspiegel_Ads (PDF)
ePrivacyseal_certificate_Aspiegel_AppGallery Connect (PDF)
ePrivacyseal_certificate_Aspiegel_AppGallery (PDF)
ePrivacyseal_certificate_Aspiegel_Huawei ID (PDF)
ePrivacyseal_certificate_Aspiegel_Petal Search (PDF)

Applicable Country/Region：EEA

Country of the Issuance Authority：Germany

Issuance Authority：ePrivacyseal GmbH
Certified Entity & Object：
Aspiegel Limited: Huawei Ads, Petal Search, AppGallery, Huawei ID, and Huawei AppGallery Connect available in the EEA

This certification is based on the Security Technical Requirements for Operating Systems of Mobile Intelligent Terminals (Evaluation Assurance Level 4 Enhanced), which uses GB/T 18336-2015 Information technology - Security techniques - Evaluation criteria for IT security as the basic framework. GB/T 18336-2015 has the same requirements as the Common Criteria for Information Technology Security Evaluation. Both certifications comprehensively evaluate the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. This certification indicates that EMUI has been comprehensively evaluated and verified to better protect consumers' secure use of Huawei devices.

EMUI 10.1 CCRC EAL4+ (PDF)

Applicable Country/Region：China

Country of the Issuance Authority：China

Issuance Authority：China Cybersecurity Review Technology and Certification Center
Certified Entity & Object：
Smart device OS EMUI 10.1

Object Description：
Smart device OS

The Common Criteria for Information Technology Security Evaluation comprehensively evaluates the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. To date, 31 countries have signed the Common Criteria Recognition Arrangement (CCRA), with 17 authorizing countries, making it a globally recognized security certification.

Huawei iTrustee v2.0 CC EAL2+Certificate (PDF)
iTrustee V5.0 CC EAL2+ Certificate (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：Netherlands

Issuance Authority：Netherlands NSCIB
Certified Entity & Object：
TEE OS iTrustee 5.0

Object Description：
iTrustee is a Trusted Execution Environment (TEE) OS designed by Huawei. It is a hardware isolation-based security system used for core computing and data storage of various Huawei device functions, such as fingerprint unlock, fingerprint payment, secure keys, HUAWEI SkyTone, HUAWEI Pay, and Find My Phone, providing better user privacy and data security.

The Common Criteria for Information Technology Security Evaluation comprehensively evaluates the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. To date, 31 countries have signed the Common Criteria Recognition Arrangement (CCRA), with 17 authorizing countries, making it a globally recognized security certification.

HongMengV1.2 CC EAL 5+ (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：Netherlands

Issuance Authority：Netherlands NSCIB
Certified Entity & Object：
TEE OS microkernel

Object Description：
TEE OS microkernel is a Huawei in-house security microkernel. It uses formal verification and is the fundamental core of TEE OS.

The FIDO Alliance, founded in 2012, provides a unified FIDO account and credentials (such as fingerprint and facial information) for user login, eliminating the need to remember multiple accounts and passwords. The FIDO certification indicates that EMUI complies with FIDO specifications and security requirements.

FIDO UAF Certificate UAF110020190319001 - Huawei (PDF)
FIDO UAF Certificate UAF110020190319002 - Huawei (PDF)
FIDO UAF Certificate UAF110020190319004 - Huawei (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：N/A

Issuance Authority：FIDO Alliance
Certified Entity & Object：
FIDO module

Object Description：
The EMUI Fast Identity Online (FIDO) module provides identity authentication capabilities that comply with the FIDO standard, bringing fast and secure identity authentication experience to app users.

ePrivacyseal is a well-respected European privacy certification that covers the requirements of the General Data Protection Regulation (GDPR) for digital products. The catalogue of criteria for certification is continuously being adapted to the interpretation of the GDPR and other data protection laws. ePrivacyseal assesses legal and technical aspects to ensure secure and visible compliance with the GDPR, protecting consumer privacy.

20190906_eps_certificate_Huawei_Device_HOTA (PDF)
20190917_eps_certificate_Huawei Device_HIVIEW (PDF)
20200311_eps_certificate_Aspiegel_Celia (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：Germany

Issuance Authority：ePrivacyseal GmbH
Certified Entity & Object：
EMUI features: User Experience Improvement Program, HOTA, and AI Voice Celia

Object Description：
User Experience Improvement Program
HOTA
AI Voice Celia

ISO/IEC 27701 privacy information management system provides a comprehensive set of personal data processing methods and a privacy information management framework from multiple dimensions, such as organizational governance, legal compliance, process specifications, information technology, as well as supervision and audit. It certifies that Huawei device software has implemented a comprehensive personal information protection management system in design, R&D, operations, and O&M and reached the world leading level in security management, transparency, and privacy compliance of personal information.

IS 725075 (PDF)
IS 725075-UKAS-20200316 (PDF)
PM 725078_ISO27701 (PDF)

Applicable Country/Region：Global

Country of the Issuance Authority：UK

Issuance Authority：UK BSI
Certified Entity & Object：
Huawei device software

Object Description：
Huawei device software

Mobile Finance Technical Service Certification is targeted at the trusted service manager (TSM), secure element (SE), and embedded application software in mobile financial services. It certifies standards compliance and financial-level security of HiSilicon Kirin 970/980/990 chips.

Applicable Country/Region：China

Country of the Issuance Authority：China

Issuance Authority：China Financial Authentication
Certified Entity & Object：
HiSilicon Kirin 970/980/990 chips

Object Description：
HiSilicon Kirin 970/980/990 chips