Article · 12 min read

India CCTV Compliance 2026: BIS-ER and STQC Certification Explained

ArcisAI Free Beginner India

This is the most concrete plain-English explainer of the STQC and BIS gate that most local-content writeups skip, and it maps cleanly onto the reality that government and GeM buyers increasingly want BIS registration on the hardware and STQC certification on the software before you can sell. It names the actual portals (crsbis.in for BIS R-numbers, stqc.gov.in for STQC) and the security bar the tests check (encrypted streams, secure boot, vulnerability-disclosure policy), so you can scope timelines instead of discovering the requirement mid-tender.

  • Selling IT hardware plus software to government increasingly means two separate certifications: BIS registration on the device and STQC certification on the software, not one
  • Verify and track certification on the real portals: BIS R-numbers on crsbis.in and STQC on stqc.gov.in, since buyers check these
  • STQC and BIS test concrete security controls (encrypted streams, secure boot, vulnerability-disclosure), so build the certification runway in early because it is a hard gate for government and GeM procurement

The question it answers

  1. Do I need to manufacture in India or hit local-content rules to sell hardware or software to the government?

Read with it

  1. This is the clearest lawyer-grade walkthrough of the PPP-MII order as it actually bites: it defines Class-I (>=50% local... Nishith Desai Associates (Regulatory Hotline) Article · 15 min read Public Procurement Framework for Make in India, Revised to Strengthen Domestic Manufacturing Nishith Desai Associates
  2. Hardware founders have a clear MeitY component-by-component local-content formula; software founders have almost nothing, and... Nishith Desai Associates (Technology Law Hotline) Article · 18 min read Make in India: Demystifying the Applicability of Procurement Orders to Software Products Nishith Desai Associates
eChai Partner Brands The partnership →