SRC Zert GmbH & Co. KG • Leipziger Straße 35 • D-65191 Wiesbaden • https://src-zert.de * This certificate applies only the specific version and release of the ICT product in its evaluated configuration an in conjunction with the complete Certification Report. ** Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the Council as regards the adoption of the European Common Criteria-based cybersecurity certification scheme (EUCC), last amended by Commission Implementing Regulation (EU) 2025/2462 of 8 December 2025 EUCC - CERTIFICATE granted by SRC Zert GmbH & Co. KG Leipziger Straße 35, D-65191 Wiesbaden, Germany EUCC-3206-2026-0002* Swissbit Cloud SMAERS 1.1.0 Certificate Holder: Swissbit AG, Industriestr. 4, CH-9552 https://www.swissbit.com/.well-known/security.txt ITSEF: SRC Security Research & Consulting GmbH NCCA: Bundesamt für Sicherheit in der Informationstechnik (BSI) EUCC: Commission Implementing Regulation (EU) 2024 / 282** ISO/IEC 15408 (CC:2022) and ISO/IEC 18045 (CEM:2022) Assurance Level: EAL 2 (EUCC substantial with AVA_VAN.2) augmented by ALC_CMS.3 and ALC_LCD.1 PP Conformance: Security Module Application for Electronic Record-keeping Systems, Version 1.0 Certification Report: Certification Report Swissbit Cloud SMAERS 1.1.0, version 1.0 Valid from: 25.09.2026 Valid until: 24.09.2031 Wiesbaden, 25.09.2026 Christoph Sesterhenn SRC Zert GmbH & Co. KG is a Certification Body notified to the EU commission for the certification of ICT products pursuant to the EUCC scheme. ZERTIFIKAT сертификат CERTIFICATE CERTIFICADO 證明書 CERTIFICAT