By clicking “Allow all”, you agree to us storing cookies on your device to remember your preferences and analyse site usage, and to measure which of our ads bring enquiries. Nothing optional is set until you choose.“सभी की अनुमति दें” पर क्लिक करके आप सहमत होते हैं कि हम आपकी पसंद याद रखने और साइट के उपयोग का विश्लेषण करने, तथा यह मापने के लिए कि हमारे किन विज्ञापनों से पूछताछ आती है, आपके डिवाइस पर कुकीज़ रखें। आपके चुनने तक कोई वैकल्पिक कुकी नहीं लगाई जाती।Cookie Policyकुकी नीति · Privacy Statementगोपनीयता नीति ·
STQC (Standardisation Testing and Quality Certification) is MeitY’s directorate for testing and certifying IT and electronics products, including CCTV cameras, and for security audits of government websites and applications.
STQC stands for Standardisation Testing and Quality Certification Directorate, an attached office of the Ministry of Electronics and Information Technology (MeitY), Government of India. Established in 1980, it operates through its extensive network of testing laboratories and IT centres across the country.
The Mandate and Mission of STQC
STQC’s core purpose is to promote quality culture and competitiveness in the Indian industry. Services provided include:
Systematic approach to managing sensitive company and client information
ISO 20000-1 ITSM
IT Service Management
Best practices for delivering effective, measurable IT services
ISO 14001 EMS
Environmental Management
Helps organizations manage their environmental responsibilities
What we do for you
Biometric Devices Certification (BDCS) for UIDAI/Aadhaar
Management System Certification (ISO 9001, 27001, 20000-1, 14001)
Product Safety Certification (S-Mark) for electronics
Website Quality Certification (WQC) per GIGW 3.0
Common Criteria (CC) Certification for IT security products
STQC for CCTV cameras: Essential Requirements
CCTV cameras sold in India must meet MeitY’s Essential Requirements for Security of CCTV (ER-01) in addition to the safety standard IS/IEC 62368-1:2023. They were added to the BIS Compulsory Registration Scheme in April 2024, and since 9 April 2025 BIS does not register CCTV models without an ER-01 security test report.
ER-01 testing covers hardware security (secure boot, debug port protection, secure storage), software security (secure code review, software bill of materials, signed and protected firmware updates), communication security, and supply-chain controls. For proprietary network protocols, the lab reviews the source code.
Since February 2026, the STQC security test report issued under the CRS order is also accepted for the Public Procurement (Make in India) order, so one test now serves both. See BIS CRS registration.
STQC testing services
STQC runs labs across India for electronics and IT testing: electrical safety, EMC, environmental and reliability testing, calibration, and IT and software testing. Its schemes include certification of biometric devices used with Aadhaar, IoT device security under the IoT System Certification Scheme, and quality certification of IT products and services. Government buyers often ask for STQC reports in tenders.
STQC security audit for government websites and apps
Government departments usually need a security audit before a website or application goes live, and again after major changes. STQC and other auditors empanelled for government work test the application for vulnerabilities, including the OWASP Top 10, review the hosting and configuration, and issue a “safe to host” certificate once the findings are fixed. STQC also assesses websites against the Guidelines for Indian Government Websites (GIGW).
Overview
Understanding STQC: The Core of Quality Assurance
What is the STQC Full Form?
The stqc full form is the Standardisation Testing and Quality Certification Directorate. It is an attached office of the Ministry of Electronics and Information Technology (MeitY), Government of India. Established in 1980, STQC has grown to become the nation’s premier assurance provider for the Electronics and IT industries. Through its extensive network of testing laboratories and IT centres across the country, STQC is tasked with ensuring that products, systems, and services adhere to both national and international standards.
The Mandate and Mission of STQC
The core mandate of STQC is to promote quality culture and competitiveness in the Indian industry. It achieves this by providing a spectrum of Quality Assurance (QA) services, including:
Testing: Comprehensive testing of products, components, and systems against specified quality and safety standards.
Calibration: Ensuring the accuracy and reliability of measuring instruments across various industries.
Certification: Granting the official STQC certificate to organizations, products, or systems that comply with specific, audited standards.
Training and Capacity Building: Offering specialized training programs in Quality Management, Information Security, and Software Engineering.
IT & e-Governance Services: Providing quality and security audits for government IT projects and services.
STQC holds accreditations from major national and international bodies, such as the National Accreditation Board for Testing and Calibration Laboratories (NABL), the National Accreditation Board for Certification Bodies (NABCB), and international forums like the Common Criteria Recognition Arrangement (CCRA). This recognition ensures that the stqc certification you achieve is respected globally.
STQC Certification Schemes
Diverse STQC Certification Schemes Explained
STQC provides specialized certification schemes tailored to different aspects of the IT and Electronics lifecycle—from organizational processes to individual product components. Understanding which scheme applies to your business is the critical first step.
Management System Certification
These certifications focus on the organizational processes, ensuring a robust framework for delivering consistent quality and managing risks.
Certification Scheme
Standard (Scope)
Key Benefits
ISO 9001 QMS
Quality Management System
Ensures consistent product/service quality, enhancing customer satisfaction and operational efficiency.
ISO 27001 ISMS
Information Security Management System
Provides a systematic approach to managing sensitive company and client information, ensuring data security and compliance.
ISO 20000-1 ITSM
IT Service Management System
Defines best practices for delivering effective, measurable IT services, aligning IT with business needs.
ISO 14001 EMS
Environmental Management System
Helps organizations manage their environmental responsibilities and reduce waste.
Product Certification Schemes
These schemes focus on the actual physical or digital products, ensuring they meet the prescribed technical and safety standards.
A. Biometric Devices Certification Scheme (BDCS)
This is one of the most crucial STQC certification schemes in India, directly impacting the Aadhaar ecosystem.
Purpose: To ensure that biometric devices (fingerprint scanners, iris scanners, QR code readers, etc.) used for authentication and enrolment are reliable, secure, and compliant with UIDAI (Unique Identification Authority of India) specifications.
Assessment Areas: Physical and dimensional tests, image quality, environmental resilience (durability/climatic), security, functional performance, and interoperability.
Result: A mandatory STQC certificate required for deployment of these devices in government services.
B. Product Safety Certification (S-Mark)
Purpose: To certify the safety of electronic products based on rigorous testing according to IEC (International Electrotechnical Commission) Standards.
Scope: Applied to a range of electronic and electrical equipment, assuring consumers of their safety and performance.
IT and e-Governance Assurance Schemes
With the massive scale of the Digital India initiative, quality and security assurance for government systems is critical. STQC provides:
A. Website Quality Certification (WQC)
Purpose: To certify the quality, usability, security, and accessibility of official websites and web portals, particularly those of government ministries and departments.
Standard: Based on the Guidelines for Indian Government Websites (GIGW 3.0).
Outcome: Websites receive the coveted “Certified Quality Website (CQW)” mark and an STQC certificate, confirming adherence to national and international best practices for citizen service delivery.
B. Common Criteria (CC) Certification
Purpose: To evaluate and certify IT Security Products and Protection Profiles (PP) against the international Common Criteria (ISO/IEC 15408) standards.
Role of STQC: STQC is the Certificate Authorizing Nation for India under the Common Criteria Recognition Arrangement (CCRA), meaning an STQC CC certificate is globally recognized by all signatory nations. This is essential for cybersecurity products.
C. Software and System Certification (e-Procurement, etc.)
Scope: Auditing the functionality, performance, security, and quality of large-scale IT systems and software applications, such as e-Procurement platforms, before they are deployed for public use.
Compliance
Is it mandatory?
STQC certification is mandatory for specific use cases:
Biometric Devices: Mandatory for any device connecting to the UIDAI (Aadhaar) server
Government Websites: Mandatory to be GIGW (Guidelines for Indian Government Websites) compliant
Govt Security Projects: Mandatory for CCTV and IoT devices in sensitive public projects
It is voluntary for general consumer electronics, but provides significant quality differentiation for government procurement under GeM and defence tenders.
Documents Required
Required Documents for STQC Certificate Application
The documentation required for an STQC certificate varies significantly depending on whether you are seeking a Product Certification (like Biometric Devices) or a Management System Certification (like ISO 27001). Our consultants streamline this process, ensuring all documents are technically sound and complete before submission.
A. Documents for Product Certification (e.g., Biometric Devices)
Category
Key Documents Required
Application & Legal
Formal Application Form, Certification Agreement, Certificate of Incorporation/Business Registration, BIS Registration Letter (if applicable).
Product & Technical
Detailed Device Specifications (Device Under Test), Technical Manual/User Manual, Internal Test Reports, Final Release Note, Sample Devices (3 or more) for lab testing.
Quality Assurance
Manufacturer’s Authorization Letter (if applicable), Proof of established Quality Management System (e.g., ISO 9001 certification) at the manufacturing facility.
B. Documents for Management System Certification (e.g., ISO 27001 ISMS)
Information Security Policy and Objectives, Defined ISMS Scope Document, Risk Assessment Report (identifying threats and vulnerabilities), Risk Treatment Plan, and the mandatory Statement of Applicability (SoA).
InstaCertify’s Guarantee: We provide templates and hands-on support for developing the technical documentation (like the SoA or detailed specifications), ensuring they meet the stringent requirements of the STQC full form mandate.
Procedure to get STQC Certification
1
Scheme Selection
1–3 Days
Identify the applicable STQC certification scheme for your product, biometric device, IT system, website, or electronic equipment.
2
Document Preparation
5–10 Days
Prepare technical specifications, product details, quality documents, and other scheme-specific records.
3
Application Filing
2–3 Days
Submit the application and required documents to the relevant STQC certification unit or designated laboratory.
4
Technical Review
5–10 Days
STQC reviews the application, checks documentation, and determines the applicable assessment or testing requirements.
5
Testing & Assessment
15–45+ Days
Complete the required laboratory tests, security evaluations, or system assessments according to the selected scheme.
6
Final Review & Certification
7–15 Days
Resolve any non-conformities and complete the final review. STQC issues the certificate when all applicable requirements are satisfied.
Process
STQC Certification Process: A Step-by-Step Guide
The journey to obtaining your stqc certificate varies slightly depending on the specific scheme (e.g., product vs. management system), but it generally follows a highly structured methodology to ensure impartiality and thoroughness. Our role at InstaCertify is to prepare, guide, and represent you at every stage, significantly reducing the time and effort required from your internal team.
Step 1: Preliminary Consultation and Scope Definition
Action: You engage with InstaCertify.
Our Role: We analyze your specific product, system, or management process to determine the exact STQC scheme and applicable standards (e.g., UIDAI specifications, ISO 27001, GIGW). We define the scope, identify necessary documentation, and provide an initial, transparent estimate of the stqc certification cost.
Step 2: Documentation Preparation and System Design Review
Action: Your organization prepares the required technical and quality documents (e.g., Quality Manuals, System Architecture, Test Plans).
Our Role: We conduct a gap analysis of your existing documentation and system design against the STQC requirements. We assist in developing, revising, and refining all necessary manuals, policies, and procedural guidelines to ensure 100% compliance before submission.
Step 3: Testing and Pre-Audit Readiness
This is the most critical technical phase, especially for product certifications like Biometric Devices.
Testing: For product certifications, we coordinate the sample submission and rigorous testing at an STQC-accredited lab. We help interpret test reports and troubleshoot any failures.
Internal Audit: For management system certifications, we conduct a comprehensive internal pre-audit to identify non-conformities (NCs) and provide corrective action plans before the official STQC audit.
Step 4: Official Audit and Assessment by STQC
Action: STQC-appointed auditors/assessors visit your site (for management systems) or review the final test results/documentation (for products).
Our Role: We manage the entire interaction with the STQC auditors. We ensure all evidence is presented correctly and professionally, and we assist in immediately addressing any Major or Minor Non-Conformities raised by the STQC assessment team.
Step 5: Grant of STQC Certificate
Action: Upon successful completion of the audit, verification of corrective actions, and final review by the STQC Certification Body, the certificate is granted.
Outcome: You receive the official STQC certificate with a specified validity period (typically three years).
Step 6: Post-Certification Maintenance and Surveillance
Action: The organization maintains the certified system and prepares for renewal.
Our Role: We prepare you for mandatory Surveillance Audits (usually annual) to ensure continuous compliance. We manage the renewal process prior to the certificate’s expiry to ensure your certification remains valid.
Timeline
STQC Certification Timeline: What to Expect
The duration to obtain the STQC certificate is highly variable, largely dependent on the chosen scheme, the initial readiness of your organization, and the time taken for product testing. The total process typically ranges from 8 weeks to 6 months.
Certification Scheme
Phase
Typical Duration
Critical Dependency
Product Certification (BDCS)
Phase 1: Preparation & Submission
2 – 4 Weeks
Completeness of documentation, technical readiness of the device.
Phase 2: Lab Testing & Report
4 – 8 Weeks
The STQC lab’s queue/capacity and the time taken to clear the tests.
Phase 3: Final Certification
1 – 2 Weeks
STQC Certification Committee approval process.
Total Estimated Time
7 to 14 Weeks (If no re-testing is required)
Speed of product compliance.
System Certification (ISO 27001/WQC)
Phase 1: Gap Analysis & Documentation
4 – 8 Weeks
Availability of client management/staff, complexity of the ISMS/QMS scope.
Phase 2: System Implementation
8 – 12 Weeks
Time required to implement and prove the new procedures and controls.
Phase 3: STQC Audit & NC Closure
4 – 8 Weeks
Audit scheduling, and the time taken by your team to fix any Non-Conformities found.
Total Estimated Time
16 to 28 Weeks (Typically 4-6 Months)
Organizational readiness and commitment.
Critical Timeline Notes:
Re-testing: The biggest variable in the timeline for product schemes (like BDCS) is failure during initial testing. Re-testing can add 4 to 8 weeks or more, depending on the nature of the required product modification.
Audit Scheduling: STQC audits are scheduled based on the availability of their assessors. We book these slots well in advance to minimize delays.
Validity: Once granted, the STQC certificate generally has a validity of 3 years, subject to satisfactory annual surveillance audits.
Our project management ensures that every step is executed efficiently, aiming for the shortest possible Timeline without compromising the quality of compliance.
A precise, fixed figure for the stqc certification cost is challenging to provide universally, as the final expenditure is highly dependent on the specific certification scheme, the complexity of the product or system, and the size of your organization. InstaCertify commits to providing a detailed, upfront, and transparent quote, breaking down the costs into the three primary components outlined below.
STQC and Accredited Lab Mandatory Fees (Pass-Through Costs)
These are the fees charged directly by the STQC Directorate or its accredited testing laboratories, and they form the core of the external stqc certification cost.
Fee Component
Typical Applicable Scheme
Details and Examples (Approx. INR)
Application/Registration Fee
All Schemes (Product & System)
A fixed, initial fee paid to STQC upon submission of the formal application. (e.g., ₹20,000 for Biometric Devices).
Testing/Evaluation Fee
Product Schemes (BDCS, S-Mark, etc.)
The major component for product certifications. It covers the cost of rigorous testing against technical standards.
Example: Biometric Device
₹4,00,000 to ₹6,00,000+ depending on device type (e.g., Fingerprint vs. IRIS, L0 vs. L1).
Audit/Assessment Fee
Management System Schemes (ISO 27001, QMS) & IT Systems
Calculated based on Auditor Man-Days, which depend on the organization’s size, complexity, number of sites, and employee count.
Example: e-Procurement System
Can be fixed, e.g., ₹10 Lakhs plus GST (if testing is conducted by STQC).
Evaluation & Certification Fee
All Schemes
A fee for the final administrative review and issuance of the official STQC certificate. (e.g., ₹50,000 for Biometric Devices).
Surveillance Audit Fee
All Schemes (Post-Certification)
Charges for the periodic audits (usually annual) required to maintain the certificate’s validity (e.g., ₹50,000 for 3 years for some product schemes).
Additional Charges
Product Schemes
Fees for testing additional operating systems (e.g., Linux, Android), minor technical changes, or re-testing after initial failure.
Note: All government-mandated fees are subject to prevailing Goods and Services Tax (GST), which must be paid additionally. These figures serve as a reference; we provide the exact, latest schedule of charges upon scope finalization.
Validity & renewal
Validity depends on the scheme: some approvals run for a fixed term and must be renewed before they expire, others stay valid while the product and the applicable standard stay the same.
Changes to the product design, critical components, factory or brand name can need a fresh test or an amendment.
We record your expiry date and remind you well before a renewal or surveillance step is due.
Frequently asked questions
What is the STQC certificate?
STQC (Standardisation Testing and Quality Certification) is a certification issued by the STQC Directorate, an attached office of the Ministry of Electronics and Information Technology (MeitY), Government of India. It certifies that an electronic or IT product meets specific Safety, Security, and Quality standards.
Is STQC certification mandatory for CCTV cameras?
Yes, primarily for Government Procurement. Under the Public Procurement (Preference to Make in India) Order, CCTV cameras used in government projects (Smart Cities, Police surveillance, Railways, etc.) must be STQC certified. For private use, it is not strictly mandatory but highly recommended.
How do you get STQC certified?
Submit an application to the STQC Directorate, STQC engineers review your circuit diagrams and software details, submit product samples for safety/environmental/security testing, undergo factory visit if required, and certificate is issued upon passing all tests.
Which companies have STQC certification?
Examples include: Surveillance – Hikvision India, Prama India, CP Plus, Aditya Infotech; Biometrics – Idemia, Mantra Softech, Precision Biometric, Thales; IT Services – TCS, Wipro. Note: Certification is granted to specific product models, not the entire company.
Which certification is best for QA?
For Electronics/Manufacturing: ISO 9001 is the gold standard. For Software Testing Professionals: ISTQB is the leading individual certification. For Indian Govt IT Projects: STQC certification is the ‘best’ and often ‘only’ accepted QA standard.
Is STQC mandatory?
It is mandatory for specific use cases: Biometric Devices (mandatory for UIDAI/Aadhaar), Government Websites (mandatory GIGW compliance), Govt Security Projects (mandatory for CCTV and IoT). It is voluntary for general consumer electronics.
What is the cost of STQC certification for CCTV?
Testing Charges: ₹2,00,000 to ₹5,00,000+ per series. Certification Fee: ₹25,000–₹50,000 (Application & Processing). Consultant Fees: ₹1,00,000–₹3,00,000 additional.
How long is the STQC certification valid for?
Typically 3 years. You usually need an annual ‘Surveillance Audit’ to keep the certificate active. After 3 years, you must apply for renewal.
Is Hikvision STQC certified?
Hikvision India has obtained STQC certification for specific models of their cameras (‘Make in India’ series) to comply with government tender requirements. Not every Hikvision camera is STQC certified – check the datasheet of the specific model.
What is STQC in Aadhaar?
In the Aadhaar ecosystem, STQC is the Gatekeeper of Trust. UIDAI does not allow any fingerprint or iris scanner to connect to its database unless it has a valid STQC Certificate. If a device loses its STQC certification, it stops working with Aadhaar immediately.
Is STQC recognized internationally?
Yes, for specific schemes. STQC is a signatory to the CCRA (Common Criteria Recognition Arrangement), meaning IT security certificates issued by STQC (up to EAL2 level) are recognized by 30+ countries including the USA, UK, and Canada.
Is a 2K or 4K camera better?
4K is better for detail; 2K is better for storage. 4K (8MP): Best for large areas (parking lots, stadiums) where you need to zoom in to read a number plate or see a face clearly. Downside: Uses huge bandwidth and storage. 2K (4MP): A “sweet spot” for homes and offices. It offers much better clarity than 1080p but doesn’t fill up your hard drive as fast as 4K.
Is Hikvision a STQC certificate?
Hikvision India has obtained STQC certification for specific models of their cameras (“Make in India” series) to comply with government tender requirements. Important: Not every Hikvision camera is STQC certified. You must check the datasheet of the specific model number you are buying to see if it carries the certification.
What is the full form of STQC?
STQC stands for Standardisation Testing and Quality Certification. It is a directorate of the Ministry of Electronics and Information Technology (MeitY).
How long does STQC certification take?
Product certification usually takes about two to three and a half months when no retesting is needed, and system certifications take longer. The timeline depends mainly on lab queues and how ready the product and documents are.
What is an STQC security audit?
It is a security assessment of a government website, application or IT system by STQC or another approved auditor. The application is tested for vulnerabilities and a “safe to host” certificate is issued once they are fixed.
What our clients say
“Instacertify helped us get BIS CRS certification for our entire product range within just 6 weeks. Their team handled everything from documentation to lab coordination. Highly professional service.”
AGAkash GuptaBIS CRS · Electronics brand
“They handled complete certification for us, from ISO 9001 to BIS for PVC cables and plugs. Thorough, professional and always available — they knew what needed to be done and when.”
SVShivank VishnoiISO 9001 & BIS · Cables
“Getting TEC approvals for our access-control products seemed confusing and complex, but Instacertify made it simple.”
JSJiten ShahTEC approval · Access control
“”
Not sure which certification you need?
Send us the product name and the countries you sell in. A specialist replies with the standards that apply, the documents to prepare, the lab cost and the timeline. The assessment is free.
The list of approvals comes to you in writing
Get Started with the Right Expert
Testing, certification and registrations handled by one team
