Long-Term Support for Android Devices

Let your devices stay in the field longer

Connected devices stay in the field for many years. Android versions and chip vendor BSPs can move on faster, and every vulnerability that isn't patched stays open. We help you to keep the OS of your devices secure, with an update release process under your full control. Before support for your current Android version ends, we upgrade your devices to a newer version.

At least 5 years of security updates per Android version
Vulnerability monitoring for the OS components of your devices
Kernel and BSP kept close to the latest upstream
Your keys, your release schedule, your devices

Monitor

We watch for vulnerabilities in the OS components of your devices: AOSP, the kernel and the BSP.

Patch

We either keep your OS kernel and BSP close to the latest upstream, or pick relevant fixes for your BSP.

Build

Our OS pipelines build your releases in a traceable way, with an SBOM, and signed with your own keys.

Test

We offer automated OS tests and different release channels for pre-testing updates on a few devices before starting a rollout.

Roll out

Bring the release to your fleet based on your own schedule. If an update fails, the device falls back to its last working state.

Upgrade

Before support for your Android version ends, we upgrade your devices, so your product stays supported longer.

Frequently asked questions

How long do you support an Android version?

At least 5 years of security updates for each major Android version, counted from its release and included in the contract. Before that ends, we upgrade your devices to a newer Android version, so your product stays supported for its whole life.

What happens when the 5 years end?

Ideally, your devices are already on a newer Android version by then, with its own support period. If an upgrade isn't possible on your hardware, longer maintenance of one Android version is possible per contract, depending on the BSP.

How often do our devices get security updates?

On our own BSPs, we raise the security patch level quarterly. For your BSP, we agree on the cadence that fits your requirements and the state of the BSP. We recommend at least two releases per year to your devices, plus urgent fixes for critical vulnerabilities when needed.

How fast do you fix critical vulnerabilities?

We release urgent fixes for critical vulnerabilities outside the regular schedule. If you need fixed response times, we agree on them in your contract.

Do you also maintain the kernel and the BSP?

Yes. We merge upstream changes into our kernels and BSPs, or rebase our changes onto the latest upstream, and stay as recent as compatibility allows. For your vendor's BSP, we use the vendor's patches or upstream changes where available. Where they aren't, we can move your changes onto a kernel with longer support, for example from an open-source project.

What does vulnerability monitoring cover?

The OS components of your devices: AOSP, the kernel and the BSP. Your own apps stay with your team.

Who decides when updates are installed?

You do. We prepare the releases, and you decide what goes to which devices and when, with staged rollouts and separate workspaces for testing and production. Your OS builds and signing keys belong to you.

Do we get an SBOM?

Yes. Our OS pipelines create an SBOM for every OS release, so you know which components and versions run on your devices.

Our devices run an old Android version. Can you still help?

Yes. We assess your hardware and BSP and upgrade your devices to a newer Android version where the SoC allows it. Devices without OTA updates get the new OS once through a one-time installation; after that, every update arrives over the air.

Is long-term support included in the price?

At least 5 years of security updates per major Android version are included in the contract. Longer maintenance of one Android version, or a higher update cadence, is possible as an extension of your contract.

Do you help with the Cyber Resilience Act (CRA)?

Yes. We help device makers meet their CRA obligations on the OS side: vulnerability monitoring, security patch delivery through OTA updates, an SBOM for each OS release, and help with technical documentation and vulnerability reporting. The obligations stay with the manufacturer; we take care of the OS part.

Over 15 years of AOSP experience

Our team of AOSP and embedded engineers has built customized Android systems since Android 1.6. We have built and supported many product builders and OEMs across various hardware platforms.

Serving more than 60 countries

Device makers on six continents use Emteria to build and maintain modern digital products for retail, logistics, kiosks, digital signage, HMI, industrial devices and many other use cases.

You remain in full control

Your OS builds and signing keys belong to you. Your team can build, release and manage on its own, and you choose where the Hub runs: in our European cloud, as a dedicated instance or on your own servers.

Security built into every release

On our own BSPs, we raise the security patch level quarterly. For your BSP, we agree on the cadence that fits your requirements. We recommend at least two releases per year to your devices, plus urgent fixes for critical vulnerabilities when needed.

The Cyber Resilience Act (CRA) makes vulnerability handling and security updates a duty for connected products sold in the EU. We help you meet your obligations on the OS side; the obligations stay with the manufacturer.

Verified boot and signing with your own keys
Rollback protection against older, vulnerable versions
Encrypted connection and validation before every update
An SBOM for every OS release
Automatic fallback if an update fails
Help with CRA documentation and vulnerability reporting

Long-Term Support for Your Android Devices

At least 5 years of security updates for each Android version, and an upgrade path after that. Your devices stay secure for their whole life in the field.