TL;DR: Since April 2026, selling IP cameras in India legally requires BIS ER-01 registration (private market) or STQC IoTSCS certification (government tenders) — or both. Certification is locked to a specific model and firmware version. Chipset country of origin directly affects whether a product can clear STQC evaluation. This guide explains both routes and what to verify before importing.
If you sell IP cameras, NVRs, or camera modules into the Indian market, 2026 has brought the compliance conversation to a head. Since April 1, 2026, network-connected CCTV cameras that don’t meet India’s Essential Requirements (ER) can no longer be legally manufactured, imported, or sold — not just for government tenders, but for private-sector deployments too. For overseas suppliers and Indian importers alike, understanding this framework is no longer optional homework; it’s a condition of doing business.
This guide breaks down what STQC and BIS ER-01 actually require, how the two certification routes relate to each other, and what steps a buyer or OEM partner should take before placing an order.
Why India Requires BIS ER-01 and STQC Certification
India’s Ministry of Electronics and Information Technology (MeitY) introduced the Essential Requirements for CCTV camera security — known as ER:01 — under the Compulsory Registration Order, citing national security concerns around remote access vulnerabilities and unauthorized data transmission out of the country. The trigger events that hardened enforcement included high-profile cases where unregistered, internet-connected cameras near sensitive sites were found transmitting live feeds to overseas servers. Whatever one thinks of the politics, the practical result is the same: compliance is now a market-access gate, not a marketing checkbox.
Two Certification Routes — and Why the Difference Matters
This is the part most sourcing teams get wrong, so it’s worth being precise:
BIS ER-01 registration is the compulsory baseline for selling network CCTV cameras in India’s private market. Products are tested in BIS-recognized labs against IS 13252 (Part 1) safety requirements plus the ER:01 security requirements, then registered on the BIS Compulsory Registration Scheme (CRS) portal. Since April 2025 this has applied to essentially all network (IP) CCTV cameras sold in India.
STQC IoTSCS certification (IoT System Certification Scheme, run by the Standardisation Testing and Quality Certification Directorate) is the route tied to government procurement — the Public Procurement Order (PPO) and Public Procurement (Preference to Make in India) Order (PPP-MII). If your product is destined for government tenders, defence, railways, smart-city projects, PSUs, or critical infrastructure, STQC/IoTSCS certification is what’s specified, and NVR/DVR-class SoC-based devices are evaluated at a distinct assessment level under that scheme. As of a February 2026 MeitY clarification, STQC-issued security test reports under the Compulsory Registration Order now also satisfy PPP-MII compliance, which has brought the two regulatory streams closer together — but they remain separate certificates covering separate market segments.
In short: BIS ER-01 = legal floor for any private sale. STQC/IoTSCS = required layer on top for government and public-sector business. A camera can hold one without the other, and buyers frequently confuse the two.
Chipset Origin and STQC Compliance: What Suppliers Must Know
This is the part that matters most for sourcing decisions. As it stands, several well-known global brands using Chinese-origin SoC platforms have not appeared on the STQC IoTSCS certified list, and enforcement of chipset country-of-origin disclosure has made re-certification difficult for that category of hardware. Meanwhile, manufacturers that shifted to Taiwanese, Korean, or other non-Chinese chipset platforms — including several Indian and OEM/ODM brands doing in-house PCB design and firmware engineering — have been the ones actually clearing certification and picking up market share as a result.
The takeaway for module and finished-unit suppliers: the chipset you build on is now a compliance decision, not just a cost or performance decision. If your target customer needs ER-01 or STQC clearance, your SoC roadmap has to be planned around that from the design stage, not patched on afterward.
What to Verify Before Importing CCTV Cameras to India
Before importing or specifying any camera, NVR, or module for the Indian market:
- Ask for the certificate number, not a brochure claim. A genuine BIS registration or STQC certificate (format STQC/IoTSCS/ER/xxx) can be cross-checked on the BIS CRS portal (crsbis.in) or the official STQC certified-products list.
- Match the certificate to the exact model and firmware version. Certification is locked to a specific model number, firmware version, and firmware hash — a different variant or a firmware update can invalidate it. Confirm the certificate actually covers the SKU you’re buying, not just the same product family.
- Clarify which route you need. If your end customer is a government body, PSU, or a tender governed by PPO/PPP-MII, STQC/IoTSCS is required. If you’re supplying private commercial or residential deployments, BIS ER-01 is the mandatory minimum, though STQC is increasingly requested by banks, hospitals, and enterprise procurement teams even where it isn’t legally required.
- Check whether the certificate covers your product category. Analog and HD-CVI cameras fall outside IoTSCS scope since they don’t connect to the network directly; NVR/DVR units are assessed at a different level than standalone IP cameras. A supplier’s certified camera line doesn’t automatically cover their NVR line.
Planning a Certification Path for Your Product Line
For manufacturers and module suppliers looking to get ahead of this rather than reacting to it, the practical sequence looks like:
- Chipset selection first. Confirm your SoC platform’s country of origin and whether other products on that platform have already cleared BIS or STQC evaluation — this de-risks the rest of the process significantly.
- Prioritize your highest-volume India-bound SKUs. Certification is per model/firmware combination, so it makes sense to certify the models carrying the most order volume first, rather than the full catalog at once.
- Prepare the technical construction file early. STQC applications require documentation covering the bill of materials, supply chain, and — for processor-based devices like NVRs — vulnerability assessment and configuration audit records. Assembling this in parallel with product development, rather than after, shortens the timeline meaningfully.
- Treat firmware stability as part of the compliance plan. Since certificates are tied to a specific firmware hash, build a firmware release strategy that accounts for when and how re-validation will be needed.
Frequently Asked Questions
What is the difference between BIS ER-01 and STQC certification?
BIS ER-01 is the legal baseline required to sell any networked IP camera in India’s private market. STQC IoTSCS is an additional certification layer required for government tenders, PSU procurement, and public-sector deployments. A product can hold one without the other.
Does BIS ER-01 certification automatically satisfy STQC requirements?
No. They are separate certificates for separate market segments. As of a February 2026 MeitY clarification, STQC-issued security test reports can satisfy PPP-MII compliance, but a standalone BIS ER-01 registration does not fulfil STQC/IoTSCS requirements for government procurement.
How long does STQC IoTSCS certification take?
The process typically spans one to two quarters minimum — documentation preparation, audit scheduling, and evaluation together. Any supplier claiming a significantly faster turnaround should be questioned.
Can I sell cameras in India without BIS ER-01 registration?
No. Since April 2026, network CCTV cameras without BIS ER-01 registration cannot be legally manufactured, imported, or sold in India.
Where UVISION-TECH Fits In
We work daily with importers and system integrators sourcing NVR/XVR systems and IP camera board modules (including our S series Novatek solution ipc board ) for the Indian market, and we track certification status and chipset sourcing as part of that conversation — not as an afterthought. If you’re evaluating which of your product lines to prioritize for BIS ER-01 or STQC certification, or want to understand how a specific chipset platform affects your compliance timeline, reach out to our team and we’ll walk through your product roadmap with you.
This article reflects the regulatory landscape as of mid-2026. Requirements, certified-product lists, and enforcement dates can change — always verify current status directly on the official BIS CRS portal (crsbis.in) and the STQC website (stqc.gov.in) before making sourcing decisions.