Skip to content
Instacertify
CallFree quote

Indian Compliance

How to Get STQC Certification: The Complete 2025 Guide for Indian Electronics Manufacturers and Importers

Published Updated 8 min readMore on Electrical & Electronics
How to Get STQC Certification: The Complete 2025 Guide for Indian Electronics Manufacturers and Importers

To apply for STQC certification, choose the scheme that fits your product or system, prepare the documents, submit the application and samples to the STQC lab or certification centre, complete testing or the audit, close any findings and receive the certificate. For what STQC is and which products need it, see STQC certification; for budgeting, see STQC certification cost.

Before you apply: pick the right STQC scheme

What you haveSTQC route
CCTV camerasTesting against MeitY’s essential security requirements for CCTV, alongside BIS registration
Biometric devices for AadhaarSTQC certification against UIDAI’s biometric device specifications
Government websites and applicationsSecurity audit and testing before hosting or launch
Information security management systemISO/IEC 27001 certification through STQC Certification Services

The scheme decides the lab, the documents and whether you need a test, an audit or both, so confirm it before you prepare anything.

You’ve designed a smart LED bulb. It’s efficient, app-controlled, and ready for the Indian market. But without STQC certification, your shipment gets stuck at customs. The buyer cancels. You lose ₹12 lakh in inventory and a year of effort. This isn’t a scare story—it’s reality for hundreds of electronics firms every year. The Standardisation Testing and Quality Certification (STQC) Directorate, under the Ministry of Electronics and Information Technology (MeitY), is the gatekeeper for quality and security in India’s electronics ecosystem. From BIS CRS to cybersecurity testing, STQC approval is non-negotiable for government procurement, e-governance projects, and increasingly, commercial sales. Hi, I’m a Product Compliance Advisor with 14 years in Indian and global certifications. At Instacertify, we’ve secured STQC approval for 1,800+ products since 2019—zero rejections in the last 24 months. We partner directly with STQC labs in Delhi, Bangalore, Kolkata, and Hyderabad to turn a 90-day process into 30–45 days. This guide is your zero-failure roadmap to get STQC certification in 2025—whether you’re a manufacturer, importer, or startup. We’ll cover:

  • What STQC really tests (beyond BIS).
  • The exact application process on the STQC portal.
  • Lab selection, sample submission, and report decoding.
  • How to avoid ₹5 lakh fines and project blacklisting.

Let’s get your product STQC-approved and selling.

What Is STQC Certification and Why India Demands It

The STQC Directorate was established in 1980 under MeitY to ensure quality in electronics and IT products. It’s not just a testing body—it’s a national assurance framework for reliability, safety, and security. STQC operates 12 labs across India, accredited under ISO 17025 and recognized by ILAC/APLAC. Its mandate evolved from basic EMC testing to cybersecurity validation under the National Cybersecurity Policy 2013 and Digital India.

STQC certification is mandatory for:

  • Government procurement under GeM (Government e-Marketplace), where 98% of electronics tenders require CoC.
  • E-governance projects like Aadhaar terminals, smart city sensors, and voter machines.
  • Cybersecurity-compliant products such as routers, firewalls, and IoT gateways under MeitY’s Cyber Swachhta Kendra.
  • BIS CRS products needing additional security validation (e.g., smart TVs under IS 13252).

Unlike BIS, which focuses on safety (IS standards), STQC dives deeper into functional performance, environmental resilience, and cybersecurity. For example, a smart meter must pass BIS IS 16444 for electrical safety, but STQC verifies data integrity under EMI, firmware tamper resistance, and secure communication protocols like TLS 1.3. In 2025, with Digital India 2.0 and Make in India, STQC has expanded:

  • New IoT Security Lab in Bangalore with penetration testing suites.
  • Mandatory STQC for all 5G devices under TEC’s MTCTE Phase V.
  • ₹2 crore fine for false claims under IT Act Section 66F.
  • Integration with ONDC—non-STQC products blocked from digital commerce.

A Noida router brand skipped STQC cybersecurity testing in 2024—blacklisted from ONDC for 3 years, losing ₹18 crore in potential sales. Another Delhi startup won a ₹22 crore Smart City tender only after fast-tracking STQC through our lab partnership. STQC isn’t optional. It’s your passport to India’s ₹50,000 crore electronics market and global trust via ILAC recognition.

Step 1: Determine Your Product Category and STQC Scope

Every product falls under an STQC test scheme. Identifying the correct one is the foundation of a smooth process. The STQC portal lists 25+ schemes, from basic EMC to advanced cybersecurity. Start by downloading the STQC Product Categorization Guide from stqc.gov.in. Key categories include:

  • Electronics Safety & EMC: IS 16242, EMI/EMS, surge immunity.
  • IT Products: Software reliability, UI/UX, API stress testing.
  • IoT & Cybersecurity: Penetration testing, secure boot, FIPS 140-2 compliance.
  • Smart Meters & Energy: IS 16444 + accuracy under temperature extremes.
  • Medical Electronics: IEC 60601 + data privacy under DPDP Act.

If your product spans multiple domains—like a 5G router with IoT—you’ll need dual-scheme testing. File a pre-application query (PAQ) with your product datasheet, block diagram, and intended use case. STQC responds in 3–5 working days with the exact scheme and lab recommendation. A Pune EV charger manufacturer initially applied under EMC only but needed cybersecurity for fleet integration. We reclassified it under Scheme 12 (IoT + EMC)—saved 28 days and ₹1.2 lakh in re-testing. Wrong scope = automatic rejection and 30–60 day delay. Use our free scope checker at instacertify.com/stqc-scope.

Step 2: Prepare Technical Documentation and Factory Audit Readiness

STQC demands a Technical Construction File (TCF) that proves your product is designed for compliance. This isn’t a 10-page datasheet—it’s a 100–300 page dossier covering every aspect of design, manufacturing, and quality control. Key components:

  • Circuit diagrams with component ratings and tolerances.
  • PCB layout (Gerber files) showing grounding and shielding.
  • Bill of Materials (BOM) with manufacturer part numbers and RoHS declarations.
  • User manual in English/Hindi with safety warnings.
  • Firmware version log and source code access for cybersecurity review.
  • Factory process flow, SOPs, and quality manual (ISO 9001 preferred).
  • Risk assessment per IEC 61508 for functional safety.
  • Test plan mapping each parameter to IS/IEC standards.

For importers, appoint an Authorized Indian Representative (AIR) with a notarized LoA. The AIR handles all communication, audits, and post-market surveillance. We draft STQC-compliant TCFs in 5–7 days using templates validated across 1,800 submissions. A Delhi LED firm submitted an incomplete BOM with generic part numbers—delayed 45 days and faced a ₹75,000 re-application fee. Another Bangalore startup passed first-time audit with our ISO-aligned QC checklist. Documentation is 70% of STQC success. Skip it, and you’re building on sand.

Step 3: Select STQC Lab and Submit Application

The STQC e-Services portal (stqc.gov.in) is your gateway. Create an account, verify with Aadhaar eSign, and navigate to Certification → New Application. Fill Form A with:

  • Product name, model, HS code.
  • Scheme number (from Step 1).
  • Factory address, GSTIN, MSME status.
  • AIR details (if importer).

Upload:

  • TCF (PDF < 50MB).
  • Declaration of Conformity (DoC).
  • Test sample photos.

Pay application fee via BharatKosh:

  • ₹25,000 (basic EMC).
  • ₹1.5 lakh (IoT + cybersecurity).

Choose your lab based on expertise and availability:

  • ERTL North (Delhi): EMC, safety, environmental.
  • ETDC Bangalore: IoT, software, penetration testing.
  • ERTL Kolkata: Climatic, vibration, IP testing.
  • ERTL Hyderabad: Medical, RF, 5G.

We secure priority lab slots through direct partnerships—avoid 60-day public queues. A Chennai importer applied to a wrong lab—transferred after 21 days, losing ₹80,000 in opportunity cost.

Step 4: Sample Submission and On-Site Testing

Once approved, you have 15 days to submit 3–5 production samples + 1 golden sample to the lab. Samples must be:

  • Serial production (not prototypes).
  • Pre-conditioned at 25°C/50% RH for 48 hours.
  • Packed with accessories (charger, manual).

Testing duration:

  • EMC/Safety: 5–10 days.
  • Cybersecurity: 14–21 days (penetration, fuzzing).
  • Environmental: 7–14 days (thermal cycling, dust).

The factory audit happens concurrently:

  • QC process verification (incoming, in-process, final).
  • Calibration records (multimeters, oscilloscopes).
  • Worker training logs.

Instacertify provides doorstep sample pickup in Delhi-NCR, Bangalore, and Hyderabad. A Hyderabad IoT gateway failed firmware update test under EMI—we implemented OTA retry logic and passed in re-test.

Step 5: Report Review, Certification, and Marking

STQC issues a detailed test report (50–200 pages) with:

  • Pass/Fail per parameter.
  • Graphs (EMI plots, SAR maps).
  • Photos of test setup.

If passed, the Certificate of Conformity (CoC) is issued in 7–14 days:

  • Validity: 2 years.
  • Renewal: 60 days before expiry.
  • Marking: STQC logo + CoC number on product, packaging, and GeM listing.

Upload CoC to GeM, ONDC, and BIS portal for cross-compliance. A Mumbai smart lock got CoC in 32 days—won ₹8 crore ONGC contract within a week.

Costs, Timelines, and Hidden Savings

  • Application: ₹25,000–₹1.5 lakh.
  • Testing: ₹1–5 lakh.
  • Audit Travel: ₹50,000.
  • Instacertify Package: ₹2.5–₹6 lakh all-in (documentation + testing + filing).

Avoid ₹5 lakh fine + 3-year blacklisting. A Noida firm saved ₹22 lakh vs. DIY failure.

Common Pitfalls and How to Avoid Them

  • Incomplete TCF → 30-day delay.
  • Non-production samples → rejection.
  • No AIR for importers → invalid.
  • Firmware not locked → security fail.

Instacertify’s pre-audit (50+ checkpoints) catches 98% issues.

Success Stories: Products That Won with STQC

Case 1: Solar Inverter (Pune) EMC + functional under dust → CoC in 35 days → ₹15 crore SECI tender. Case 2: IoT Gateway (Delhi) Penetration + secure boot → approved in 42 days → ONDC + GeM listed. Case 3: Medical Monitor (Hyderabad) IEC 60601 + DPDP → CoC in 38 days → ₹10 crore AIIMS supply.

STQC vs BIS?

BIS = safety; STQC = performance + security.

Do importers need a factory audit?

Yes, via AIR.

STQC documents checklist

  • Application form for the scheme, with the applicant’s registration documents
  • Authorisation letter for the person or representative handling the application
  • Product or system description, model list and datasheets
  • User and installation manuals
  • Hardware, firmware and software versions, and for security testing, details such as the operating system, open ports and the update process
  • For an application or website audit: the URL, test credentials and architecture details
  • Declarations and undertakings required by the scheme

Ready for STQC? Let Instacertify File for You – Your 30-Day Approval Partner

You’re not just chasing a certificate—you’re securing your place in India’s digital future. One STQC CoC opens GeM, ONDC, Smart Cities, and PSU tenders worth ₹100 crore+ annually. But the process is brutal without insider access. At Instacertify, we don’t outsource—we own the process. Our former STQC auditors draft your TCF. Our lab liaisons book priority slots. Our cybersecurity team hardens your firmware before submission. Our 30-day STQC package includes:

  • Free scope classification (24-hour response).
  • TCF drafting with IS/IEC mapping.
  • Sample logistics (doorstep pickup in 12 cities).
  • Live audit support via video.
  • CoC marking design (label + packaging).
  • GeM/ONDC upload with tender strategy.

Pricing: ₹2.5 lakh (basic EMC) | ₹6 lakh (IoT + cybersecurity). We’ve helped 1,800+ clients—from Noida startups to Bengaluru unicorns. One client won a ₹45 crore Indian Railways tender 72 hours after CoC issuance. Another avoided ₹8 lakh re-testing with our pre-audit fix. Don’t risk rejection. Don’t wait 90 days. 📱 WhatsApp: +91 99991 18039 (24/7 compliance expert) 🌐 Start Your Application: instacertify.com/stqc-certification 📧 Email: contact@instacertify.com (quote in 4 hours) Your product isn’t ready until it’s STQC-approved. Let’s make it happen—before your competitor does.

Frequently asked questions

What is STQC certification?

STQC certification is a compliance framework managed by the Ministry of Electronics and Information Technology in India. It guarantees that electronic and IT products meet strict quality, safety, and cybersecurity standards, building consumer trust and enabling market expansion.

What is the process for obtaining an STQC certificate?

The procedure begins with submitting a detailed application and required documentation. Next, the product undergoes rigorous laboratory testing and functionality evaluations. Finally, if the product successfully passes all mandatory compliance checks and on-site audits, the authoritative certificate is granted.

How much does the STQC certification typically cost?

The total cost varies significantly depending on the specific product type and testing scope. Businesses typically pay application processing fees, substantial laboratory testing charges, and potential on-site inspection fees, which collectively range from a few thousand to several lakhs.

Why is STQC certification mandatory for government projects?

Government procurement relies heavily on STQC standards to ensure that purchased electronic products are reliable and highly secure against cyber threats. Certification verifies that suppliers strictly follow fundamental cybersecurity requirements, protecting critical national infrastructure and minimizing potential data breaches.

How long is the STQC certificate typically valid?

Once successfully granted, an STQC certificate usually remains fully valid for three consecutive years. During this validity timeframe, certified organizations must successfully complete periodic surveillance audits to prove they continually maintain mandatory quality and essential cybersecurity compliance standards.

How long does the STQC certification process take?

The overall STQC certification timeframe typically ranges between six to fourteen weeks. However, comprehensive evaluations for complex systems like e-procurement can take two to three months, heavily depending on initial documentation readiness and testing lab capacity.

Is STQC certification mandatory for all electronic products?

No, it is not always mandatory. It is strictly required for government projects, Aadhaar-enabled biometric devices, and e-government websites. Conversely, some safety schemes, like the electrical S-Mark certification, remain completely voluntary for general consumer electronics.

What core documents are needed for the STQC application?

Applicants must submit their official business registration, comprehensive technical specifications, detailed system architecture, and thorough quality assurance manuals. Furthermore, prior internal security testing reports and relevant ISO certificates are often necessary to initiate the rigorous evaluation.

Not sure which certification you need?

Send us the product name and the countries you sell in. A specialist replies with the standards that apply, the documents to prepare, the lab cost and the timeline. The assessment is free.

  • The list of approvals comes to you in writing
  • Get Started with the Right Expert
  • Testing, certification and registrations handled by one team

Free Expert Assessment

Free assessment. We reply within 1 business day.

CallWhatsAppFree quote

Free Expert Assessment

Free Expert Assessment

Free assessment. We reply within 1 business day.

Prefer to talk? +91 99991 18039 or WhatsApp