Security support lifecycle
This page provides information on the security support period for certified product versions
This page fulfills the obligation under Article 55(1)(b) of Regulation (EU) 2019/881 (Cybersecurity Act) to make available information on the period during which security support will be offered to end users, in particular as regards the availability of cybersecurity-related updates.
Support policy
For each certified version of the SimplySign SAM module, we provide security support (vulnerability monitoring and the development and release of patches) for at least 5 years from the issue date of the EUCC certificate or until the certificate expires, whichever is later.
Security updates are released promptly once a vulnerability has been confirmed and a patch has been developed, within the time frames set out in our internal vulnerability management procedure.
Current versions and support dates
| Version | EUCC certificate number | Certificate issue date | Security support until | Status |
|---|---|---|---|---|
| SimplySign Signature Activation Module (SAM), version 6.5.0 | 2/PC1/AC223/2024 | 05.04.2026 | 05.04.2034 | Current |
End of Support notification
We announce the planned end of security support for a given version at least 12 months in advance by:
- updating the table above (changing the status to "EoS scheduled"),
- notifying the Certificate Holder (ADS) and business customers,
- publishing an informational advisory at https://www.certum.eu/en/security-advisories/
After End of Support
After the End of Support date:
- we no longer release security updates for that version,
- we no longer analyze newly reported vulnerabilities affecting that version (except for obligations arising from the continued validity of the EUCC certificate, where applicable),
- we recommend migrating to the latest certified version; migration guidance is provided to customers individually.
Continued use of a product version after its End of Support date should be regarded as an increased risk borne by the deploying organization.