What’s Real, What’s Risky, and What Actually Works in IoT
If you work with IoT, you’ve probably heard these terms flying around:
- eSIM
- iSIM
- SoftSIM
They are often presented as the future of IoT connectivity — cheaper, simpler, more flexible.
But here’s the uncomfortable truth:
Not everything that sounds innovative is ready for enterprise IoT.
In this article, we separate hype from reality and explain what these SIM technologies actually mean for real-world IoT deployments.
Why SIM Technology Matters More Than You Think
In IoT, the SIM is not “just connectivity.”
It is:
- the identity of the device
- the security anchor of the connection
- the key to network access and control
Once a device is deployed in the field, the SIM choice is often locked in for 10–15 years.
That makes this decision far more strategic than it appears.
eSIM: Proven, Mature, and Widely Used in IoT
An eSIM (embedded SIM) is a secure element soldered into the device.
For IoT, eSIM usually means M2M eSIM based on GSMA SGP.02.
Why eSIM works so well for IoT
- Remote provisioning of operator profiles
- Central lifecycle management
- No physical SIM handling
- Designed for unattended devices
This technology is:
- widely deployed
- globally interoperable
- supported by major mobile networks
For most enterprise IoT deployments today, eSIM is the safest and most mature option.
iSIM: Interesting, but Still Emerging
An iSIM (integrated SIM) moves SIM functionality into the device’s main chipset.
This can:
- reduce component count
- lower power consumption
- save space
Sounds great — and technically it is.
The reality today
- Limited ecosystem maturity
- Fewer certified implementations
- Strong dependency on chipset vendors
iSIM is promising, but for large-scale, long-lifecycle IoT deployments, it is not yet mainstream.
SoftSIM: Cheap on Paper, Risky in Practice
SoftSIM replaces the secure hardware SIM with a software-based implementation.
This often triggers interest because:
- it looks cheaper
- it removes hardware components
- it promises flexibility
However, this is where caution is required.
The core problem with SoftSIM
SoftSIM does not provide the same hardware-based security as SIM or eSIM.
This concern is not theoretical.
The GSMA has publicly stated that SoftSIM does not meet the security requirements for trusted mobile network authentication in many IoT use cases.
Why this matters
- SIM security is rooted in tamper-resistant hardware
- Software-only solutions increase attack surface
- Large-scale IoT deployments amplify risk
For consumer or experimental use cases, SoftSIM may be acceptable.
For enterprise or mission-critical IoT, it is generally not recommended.
GSMA Standards: The Difference Between “Possible” and “Deployable”
The GSMA defines global standards that make IoT connectivity interoperable and secure.
Key specifications include:
- SGP.02 – the current, proven standard for IoT eSIM
- SGP.32 – the upcoming next-generation IoT eSIM architecture
Important reality check
SGP.32 is promising — but not yet widely deployed.
Most serious IoT programs:
- rely on SGP.02 today
- design architectures that can evolve toward SGP.32 later
This avoids unnecessary risk while staying future-ready.
So… What Should You Choose Today?
For most IoT deployments in Europe and beyond:
- eSIM (SGP.02)
→ Proven, secure, scalable - iSIM
→ Interesting for the future, limited today - SoftSIM
→ Cheap, but often risky and not GSMA-compliant
The key takeaway
In IoT, reliability and security always beat novelty.
Choosing a SIM technology is not about being trendy — it’s about protecting your product, your customers, and your business for the next decade.
Final Thought
IoT connectivity decisions are easy to underestimate.
But once devices are deployed, reversing a poor choice can be extremely expensive — or impossible.
Understanding the difference between what sounds good and what actually works is one of the most important steps toward successful IoT at scale.