Privacy and Security Certifications

HMS

CSA STAR

CSA Security, Trust & Assurance Registry (STAR) is a free, publicly accessible registry jointly launched by the British Standards Institute (BSI) and Cloud Security Alliance (CSA). CSA STAR assesses the security level and addresses issues specific to cloud security. By leveraging the requirements of ISO/IEC 27001 certification and the cloud control matrix (CCM), it applies the maturity model and assessment methodology provided by BSI to comprehensively assess the cloud security management and technical capabilities of organizations.

MoreLess

Download the attachment
EuroPrise Seal

The European Privacy Seal (EuroPriSe) offers a trans-European privacy trust mark issued by an independent third party certifying compliance of IT products and IT-based services with European regulations on privacy and data security.

MoreLess
ISO/IEC 27001

ISO/IEC 27001 information security management system is internationally accepted and widely applied. It certifies that Huawei Mobile Services has established a scientific and effective information security management system, which aligns the enterprise's development strategy and information security management and ensures information security risks are properly controlled and correctly handled.

MoreLess

Download the attachment
ISO/IEC 27018

ISO/IEC 27018 is an international code of conduct that focuses on personal data protection on the cloud. Based on ISO 27002, it provides guidelines for implementing the ISO 27002 control system for personally identifiable information (PII) on the public cloud. This ensures proper PII protection during processing by the cloud-based personal identity information processor, providing a common compliance framework for cloud service providers operating in multinational markets.

MoreLess

Download the attachment
ISO/IEC 27701

ISO/IEC 27701 privacy information management system provides a comprehensive set of personal data processing methods and a privacy information management framework from multiple dimensions, such as organizational governance, legal compliance, process specifications, information technology, as well as supervision and audit. It certifies that Huawei Mobile Services has implemented a comprehensive personal information protection management system in design, R&D, operations, and O&M and reached the world leading level in security management, transparency, and privacy compliance of personal information.

MoreLess

Download the attachment
PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) is a set of global security standards that strictly control data storage to ensure the security of cardholders' online transactions. PCI DSS sets a global baseline of technical and operational requirements for all entities involved in payment card processing. It is widely supported by global card organizations and financial institutions and has become a standard that must be followed by merchants and service providers.

MoreLess

Download the attachment
ePrivacyseal

ePrivacyseal is a well-respected European privacy certification that covers the requirements of the General Data Protection Regulation (GDPR) for digital products. The catalogue of criteria for certification is continuously being adapted to the interpretation of the GDPR and other data protection laws. ePrivacyseal assesses legal and technical aspects to ensure secure and visible compliance with the GDPR, protecting consumer privacy.

MoreLess

EMUI

EAL4+information security certification for IT products

This certification is based on the Security Technical Requirements for Operating Systems of Mobile Intelligent Terminals (Evaluation Assurance Level 4 Enhanced), which uses GB/T 18336-2015 Information technology - Security techniques - Evaluation criteria for IT security as the basic framework. GB/T 18336-2015 has the same requirements as the Common Criteria for Information Technology Security Evaluation. Both certifications comprehensively evaluate the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. This certification indicates that EMUI has been comprehensively evaluated and verified to better protect consumers' secure use of Huawei devices.

MoreLess

Download the attachment
CC EAL2+

The Common Criteria for Information Technology Security Evaluation comprehensively evaluates the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. To date, 31 countries have signed the Common Criteria Recognition Arrangement (CCRA), with 17 authorizing countries, making it a globally recognized security certification.

MoreLess

Download the attachment
CC EAL5+

The Common Criteria for Information Technology Security Evaluation comprehensively evaluates the security functions and assurance capabilities of IT products, covering product design and development, security functions, and delivery management. To date, 31 countries have signed the Common Criteria Recognition Arrangement (CCRA), with 17 authorizing countries, making it a globally recognized security certification.

MoreLess

Download the attachment
FIDO

The FIDO Alliance, founded in 2012, provides a unified FIDO account and credentials (such as fingerprint and facial information) for user login, eliminating the need to remember multiple accounts and passwords. The FIDO certification indicates that EMUI complies with FIDO specifications and security requirements.

MoreLess

Download the attachment
ePrivacyseal

ePrivacyseal is a well-respected European privacy certification that covers the requirements of the General Data Protection Regulation (GDPR) for digital products. The catalogue of criteria for certification is continuously being adapted to the interpretation of the GDPR and other data protection laws. ePrivacyseal assesses legal and technical aspects to ensure secure and visible compliance with the GDPR, protecting consumer privacy.

MoreLess

Download the attachment
ISO/IEC 27701

ISO/IEC 27701 privacy information management system provides a comprehensive set of personal data processing methods and a privacy information management framework from multiple dimensions, such as organizational governance, legal compliance, process specifications, information technology, as well as supervision and audit. It certifies that Huawei device software has implemented a comprehensive personal information protection management system in design, R&D, operations, and O&M and reached the world leading level in security management, transparency, and privacy compliance of personal information.

MoreLess

Download the attachment

STAR 637452_Huawei Software Technologies Co., Limited (PDF)

STAR 724092_Aspiegel Limited（PDF）

STAR 724100_Huawei Services (Hong Kong) Co., Limited（PDF）

Applicable Country/Region: Global

Country of the Issuance Authority: UK

Issuance Authority: UK BSI

Certified Entity & Object:

Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI Health, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, AI Lens, HiVioce, HUAWEI HiAI, HiKeyboard, HUAWEI GAMECENTER, HUAWEI READER

Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads

Huawei Services (Hong Kong) Co., Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads, HUAWEI HEALTH, HUAWEI WALLET, HUAWEI ASSISTANT

Certificate_Aspiegel_Huawei ID 2020 (PDF)

Applicable Country/Region: EU/EEA

Country of the Issuance Authority: Germany

Issuance Authority: EuroPriSe GMBH

Certified Entity & Object:

Aspiegel Limited: HUAWEI ID available in the EU/EEA

IS 637452-ANAB_Huawei Software Technologies Co., Limited (PDF)

IS 637452-UKAS_Huawei Software Technologies Co., Limited (PDF)

IS 724090-ANAB_Aspiegel Limited (PDF)

IS 724090-UKAS_Aspiegel Limited (PDF)

IS 724096-ANAB_Huawei Services (Hong Kong) Co., Limited (PDF)

IS 724096-UKAS_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: UK

Issuance Authority: UK BSI

Certified Entity & Object:

Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads

PII 714315_Huawei Software Technologies Co., Limited (PDF)

PII 724093_Aspiegel Limited (PDF)

PII 724097_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: UK

Issuance Authority: UK BSI

Certified Entity & Object:

Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads

PM 719801_Huawei Software Technologies Co., Limited (PDF)

PM 724091_Aspiegel Limited (PDF)

PM 724098_Huawei Services (Hong Kong) Co., Limited (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: UK

Issuance Authority: UK BSI

Certified Entity & Object:

Huawei Software Technologies Co., Ltd.: HUAWEI MOBILE CLOUD, HMS CORE (include HUAWEI ID, HUAWEI PUSH), HUAWEI OTA, HUAWEI THEMES, HUAWEI APPGALLERY, HUAWEI VIDEO, HUAWEI MUSIC, HUAWEI APPADVISOR, HUAWEI WALLET, HUAWEI SKYTONE, HUAWEI BROWSER, HUAWEI ASSISTANT, HUAWEI GAMECENTER, HUAWEI READER

Aspiegel Limited: HUAWEI ID, HUAWEI MOBILE CLOUD, HUAWEI AppGallery, HUAWEI AppGallery Connect, HUAWEI THEMES, HUAWEI APPADVISOR, HUAWEI IAP, HUAWEI BROWSER, HUAWEI Ads

ASPIEGEL-PCIAttestation-atsec-PCI-DSS-C-01100-57 (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: China

Issuance Authority: ATSEC

Certified Entity & Object:

Huawei Software Technologies Co., Ltd.: Huawei Wallet

Aspiegel Limited: Huawei Wallet

Huawei Services (Hong Kong) Co., Limited: Huawei Wallet

ePrivacyseal_certificate_Aspiegel_Ads（PDF）

ePrivacyseal_certificate_Aspiegel_AppGallery Connect（PDF）

Applicable Country/Region: EEA

Country of the Issuance Authority: Germany

Issuance Authority: ePrivacyseal GmbH

Certified Entity & Object:

Aspiegel Limited: Huawei Ads, Petal Search, AppGallery, and Huawei AppGallery Connect available in the EEA

EMUI 10.1 CCRC EAL4+ (PDF)

Applicable Country/Region: China

Country of the Issuance Authority: China

Issuance Authority: China Cybersecurity Review Technology and Certification Center

Certified Entity & Object:

Smart device OS EMUI 10.1

Object Description:

Smart device OS

Huawei iTrustee v2.0 CC EAL2+Certificate (PDF)

iTrustee V5.0 CC EAL2+ Certificate (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: Netherlands

Issuance Authority: Netherlands NSCIB

Certified Entity & Object:

TEE OS iTrustee 5.0

Object Description:

iTrustee is a Trusted Execution Environment (TEE) OS designed by Huawei. It is a hardware isolation-based security system used for core computing and data storage of various Huawei device functions, such as fingerprint unlock, fingerprint payment, secure keys, HUAWEI SkyTone, HUAWEI Pay, and Find My Phone, providing better user privacy and data security.

HongMengV1.2 CC EAL 5+ (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: Netherlands

Issuance Authority: Netherlands NSCIB

Certified Entity & Object:

TEE OS microkernel

Object Description:

TEE OS microkernel is a Huawei in-house security microkernel. It uses formal verification and is the fundamental core of TEE OS.

FIDO UAF Certificate UAF110020190319001 - Huawei (PDF)

FIDO UAF Certificate UAF110020190319002 - Huawei (PDF)

FIDO UAF Certificate UAF110020190319004 - Huawei (PDF)

Applicable Country/Region: Global

Country of the Issuance Authority: N/A

Issuance Authority: FIDO Alliance

Certified Entity & Object:

FIDO module

Object Description:

The EMUI Fast Identity Online (FIDO) module provides identity authentication capabilities that comply with the FIDO standard, bringing fast and secure identity authentication experience to app users.