SMA Solar Technology AG Press Release Enhanced security for connected energy systems—SMA goes beyond legal standards Niestetal, July 17, 2025—SMA achieves compliance with the European standard ETSI EN 303 645 through its products for the generation, storage, and use of solar power in residential and commercial applications. This standard defines fundamental security requirements for connected devices in the Internet of Things (IoT) domain. Its goal is to strengthen system protection against cyberattacks and ensure user privacy. By certifying its products according to ETSI EN 303 645, SMA is proactively exceeding legal requirements—enhancing data protection and cybersecurity for both homeowners and businesses. In addition to implementing the new requirements of the Radio Equipment Directive (EN 18031), which will take effect on August 1, 2025, SMA has also chosen to comprehensively integrate the extended security requirements into its product portfolio for home and business solutions. "Anyone investing in a PV system wants to be well prepared for the long term—including in terms of IT security," said Marek Seeger, Information Security Manager at SMA. "It’s worth taking a closer look at the security features, as modern protection mechanisms offer both safety and peace of mind in everyday use. IT security and data protection are fundamental components of our system solutions. With the additional certification we are actively protecting our customers against cyberattacks and hacking—offering them genuine security and peace of mind when using connected energy systems in both residential and commercial applications." Overview of ETSI EN 303 645 security requirements: * Security by default: Devices are securely preconfigured, requiring no additional setup. * Secure authentication: Appropriate security mechanisms protect against unauthorized access. * Update management: Regular, automated, and secure software updates address known vulnerabilities. * Communication security: Encrypted data transmission prevents unauthorized external access. * Data protection: Only essential data is securely collected and processed. * Reduced attack surface: Potential attack vectors are minimized. * Secure operation: Systems are designed to prevent insecure operating states. Security at SMA not only goes beyond individual devices but it also includes seamless integration into the SMA Cloud, which is comprehensively protected through ISO/IEC 27001 certification for information security management systems. About SMA As a leading global specialist in photovoltaic and storage system technology, the SMA Group is setting the standards today for the decentralized and renewable energy supply of tomorrow. SMA’s portfolio contains a wide range of efficient PV and battery inverters, holistic system solutions for PV and battery-storage systems of all power classes, intelligent energy management systems and charging solutions for electric vehicles and power-to-gas applications. Digital energy services as well as further comprehensive services round off SMA’s range. SMA solar inverters installed worldwide in the last 20 years, with a total output of around 144 GW, help avoid over 64 million tonnes of CO2 emissions annually. SMA’s multi-award-winning technology is protected by more than 1,600 patents and utility models. Since 2008, the Group’s parent company, SMA Solar Technology AG, has been listed on the Prime Standard of the Frankfurt Stock Exchange (S92) and is listed in the TecDAX and the SDAX index. SMA Solar Technology AG Sonnenallee 1 34266 Niestetal Germany Press Contact: Dagmar Buth-Parvaresh Tel. +49 561 9522-421414 Presse@SMA.de Disclaimer: This press release serves only as information and does not constitute an offer or invitation to subscribe for, acquire, hold or sell any securities of SMA Solar Technology AG (the “Company”) or any present or future subsidiary of the Company (together with the Company, the “SMA Group”) nor should it form the basis of, or be relied upon in connection with, any contract to purchase or subscribe for any securities in the Company or any member of the SMA Group or commitment whatsoever. Securities may not be offered or sold in the United States of America absent registration or an exemption from registration under the U.S. Securities Act of 1933, as amended. This press release can contain future-oriented statements. Future-oriented statements are statements which do not describe facts of the past. They also include statements about our assumptions and expectations. These statements are based on plans, estimations and forecasts which the Managing Board of SMA Solar Technology AG (SMA or company) has available at this time. Future-oriented statements are therefore only valid on the day on which they are made. Future-oriented statements by nature contain risks and elements of uncertainty. Various known and unknown risks, uncertainties and other factors can lead to considerable differences between the actual results, the financial position, the development or the performance of the corporation and the estimates given here. These factors include those which SMA has discussed in published reports. These reports are available on the SMA website at www.SMA.de. The company accepts no obligation whatsoever to update these future-oriented statements or to adjust them to future events or developments.