diff --git a/README.md b/README.md
index 02be90b..246c5d6 100644
--- a/README.md
+++ b/README.md
@@ -236,7 +236,7 @@ The iOS podspec URL is derived from the native SDK version this package pins (`d
 [
   "@didit-protocol/sdk-react-native",
   {
-    "iosPodspecUrl": "https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.2/DiditSDK.podspec"
+    "iosPodspecUrl": "https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.3/DiditSDK.podspec"
   }
 ]
 ```
@@ -277,7 +277,7 @@ didit_sdk_subspec = case $DiditSdkIosVariant
                     else
                       raise "Invalid $DiditSdkIosVariant '#{$DiditSdkIosVariant}'. Supported values: all, core, autodetection, nfc."
                     end
-pod didit_sdk_subspec, :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.2/DiditSDK.podspec'
+pod didit_sdk_subspec, :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.3/DiditSDK.podspec'
 ```
 
 ##### Swift Package Manager (optional)
diff --git a/example-expo/ios/Podfile b/example-expo/ios/Podfile
index 6dd5738..b333b2f 100644
--- a/example-expo/ios/Podfile
+++ b/example-expo/ios/Podfile
@@ -33,7 +33,7 @@ target 'DiditExpoExample' do
                       else
                         raise "Invalid $DiditSdkIosVariant '#{$DiditSdkIosVariant}'. Supported values: all, core, autodetection, nfc."
                       end
-  pod didit_sdk_subspec, :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.2/DiditSDK.podspec'
+  pod didit_sdk_subspec, :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.3/DiditSDK.podspec'
 # @generated end didit-sdk-react-native-pod
   use_expo_modules!
 
diff --git a/package.json b/package.json
index fd74a09..43fea89 100644
--- a/package.json
+++ b/package.json
@@ -1,9 +1,9 @@
 {
   "name": "@didit-protocol/sdk-react-native",
-  "version": "4.14.2",
+  "version": "4.14.3",
   "diditNativeSdkVersions": {
-    "ios": "4.14.2",
-    "android": "4.14.2"
+    "ios": "4.14.3",
+    "android": "4.14.3"
   },
   "description": "React Native wrapper for Didit Identity Verification SDK",
   "main": "./lib/commonjs/index.js",
diff --git a/packages/auth-react-native/README.md b/packages/auth-react-native/README.md
index 2354115..cd3f2b2 100644
--- a/packages/auth-react-native/README.md
+++ b/packages/auth-react-native/README.md
@@ -7,7 +7,7 @@ sessions in the Keychain or Android Keystore, sign-out and step-ups before
 sensitive actions. Every request carries the device signals of DiditSignals.
 
 **Not published yet.** The package is private and pins the native SDK release in
-`diditNativeSdkVersions` in its `package.json` (4.14.2), which includes DiditAuth.
+`diditNativeSdkVersions` in its `package.json` (4.14.3), which includes DiditAuth.
 
 ## Requirements
 
@@ -76,7 +76,7 @@ On iOS, CocoaPods is the default. DiditSDK is not on the CocoaPods trunk, so the
 Podfile names its podspec at the pinned version:
 
 ```ruby
-pod 'DiditSDK/Auth', :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.2/DiditSDK.podspec'
+pod 'DiditSDK/Auth', :podspec => 'https://raw.githubusercontent.com/didit-protocol/sdk-ios/4.14.3/DiditSDK.podspec'
 ```
 
 To resolve it with Swift Package Manager instead, set `$DiditSdkIosLinkage = 'spm'`
diff --git a/packages/auth-react-native/package.json b/packages/auth-react-native/package.json
index 9b22b64..84ba1e3 100644
--- a/packages/auth-react-native/package.json
+++ b/packages/auth-react-native/package.json
@@ -3,8 +3,8 @@
   "version": "0.0.0",
   "private": true,
   "diditNativeSdkVersions": {
-    "ios": "4.14.2",
-    "android": "4.14.2"
+    "ios": "4.14.3",
+    "android": "4.14.3"
   },
   "description": "React Native wrapper for Didit Authentication (native DiditAuth)",
   "main": "./lib/commonjs/index.js",
diff --git a/release-notes/4.14.3.md b/release-notes/4.14.3.md
new file mode 100644
index 0000000..cc5fec6
--- /dev/null
+++ b/release-notes/4.14.3.md
@@ -0,0 +1,5 @@
+Pins the iOS and Android native SDKs exactly to 4.14.3.
+
+No JavaScript / TypeScript API changes. The native change below runs inside `startVerification()` / `startVerificationWithWorkflow()` and returns the same `VerificationResult`.
+
+- iOS: the selfie result screens show the sandbox banner only for sandbox sessions. Live sessions showed "SANDBOX · Test data only" there. Android has no functional change; the version stays aligned.