1) How is the probability that also the flash bootloader of a CC01 is lost after 10years? 2) Is there anything that can be done to make this time longer, for example 3) after almost 10years, I reprogram the device, then it will keep its program another 10years, even if the boot loader will be gone.

Werner

PS.
-10years seem to be a long time, but I still have working devices of control boards I built about 15years ago.
-4) Another thing: our assembly partner has parts that are already 3years old.
-5) 10years @ 80°C might give total different results than 10years @ 30°C

1) should be the same as your program (low).
2) the retention is temperature dependent. keepin it cool is the only way I know
3) yes, the retention is "since programmed" not since made.
4) that makes the bootloader guaranteed for 7 years
5) as stated above the retention is temp dependent, there should be a curve or a time at different temps in the datasheet.

As Atmel has the bootloader in flash there must be a means of rewriting it making the 10 years start over. If that require a parallel programmer, program the bootloader in production before inserting the chips, that will guarantee 10+ years of a live loader.

If this is a major concern of yours, switch to Philips where the bootloader is in ROM.

Erik