Suprema Earns CE RED Cybersecurity Certification for Biometric Access Devices

Suprema has announced that it is, according to its own research, the first company in the access control industry to receive CE RED (Radio Equipment Directive) certification under the European Union’s updated cybersecurity requirements, which take effect August 1, 2025. The certification applies to Suprema’s BioStation 3 and BioEntry W3 facial recognition devices, which are used in enterprise access control environments and IoT-integrated security systems.

Cybersecurity Compliance Ahead of EU Deadline

The newly certified devices perform facial authentication locally using deep-learning AI models, processed at the edge. They also support multi-modal access credentials, including Bluetooth, RFID cards, and NFC-based mobile credentials. The company says these capabilities enable secure and flexible identity verification while keeping biometric data on the device, in line with privacy-focused deployment models.

Suprema’s certification aligns with Delegated Regulation (EU) 2022/30, which amends the RED directive to require that wireless-enabled IoT devices meet specific cybersecurity safeguards. These include network protection features, personal data privacy measures, and fraud prevention mechanisms. The regulation becomes mandatory for manufacturers and vendors marketing radio-based IoT equipment in the EU starting August 1, 2025. As regulatory bodies worldwide take similar steps, IoT security standards are becoming increasingly harmonized across jurisdictions.

“We are proud to be the first in the access control industry to achieve CE RED certification under the enhanced cybersecurity requirements,” said Hanchul Kim, CEO of Suprema Inc. “This certification not only confirms that our products meet internationally recognized standards for security, safety, and wireless performance, but also demonstrates our commitment to staying ahead of evolving regulatory requirements.”

Product Expansion and Global Integration

According to Suprema, no other access control company has received the updated CE RED cybersecurity certification to date. The company states it intends to certify additional products, including devices using fingerprint biometrics, RFID technologies, and mobile access methods, ahead of the 2025 deadline.

This announcement comes amid broader global adoption of biometric access control technology. For example, the Council of Europe recently launched a tender for biometric access systems in Armenia, illustrating growing demand for secure identity solutions in public-sector infrastructure. Suprema’s CE-certified devices have also been integrated with Verkada’s cloud-based physical security platform, demonstrating their use in scalable enterprise deployments.

As enforcement of the RED cybersecurity rules approaches, manufacturers across the IoT ecosystem are accelerating their compliance efforts. Suprema’s early certification places it in a favorable position as both the public and private sectors seek to deploy cybersecurity-compliant devices in sensitive and regulated environments.

–

By Cass Kennedy