Suprema leads access control sector with EU CE RED certification

Suprema has obtained CE RED cybersecurity certification for its AI-based facial authentication access control devices, becoming the first company in the access control industry to meet the European Union's updated requirements under the Radio Equipment Directive.

The CE RED certification applies to wireless devices sold in the European market and covers strict new requirements related to cybersecurity, data protection, and prevention of fraudulent access. The European Union will begin enforcing the revised Radio Equipment Directive (Delegated Regulation (EU) 2022/30) from 1 August 2025, introducing mandatory cybersecurity compliance for a broad range of connected and wireless IoT products.

Suprema's certification applies specifically to its BioStation 3 and BioEntry W3 devices. Both products feature AI-powered facial authentication and utilise deep learning algorithms that are processed directly on the device. These models also support various authentication methods, including Bluetooth, NFC mobile credentials, and RFID cards, for flexible security implementation. According to information from Suprema and public sources, no other access control company has yet achieved CE RED cybersecurity certification under the updated EU requirements.

The revised CE RED standard is designed to address the growing need for enhanced wireless security and personal data protection within the rapidly expanding IoT and access control industries. The regulations will impact manufacturers of devices that utilise wireless technologies, including Wi-Fi, Bluetooth, and smart door locks. The updated requirements include standards for protecting network communications, safeguards for personal data and privacy, and measures to prevent fraud related to device access and operation.

Certification process

Suprema's recently certified devices run deep-learning facial authentication algorithms locally, which is intended to enhance security by reducing the need to transmit sensitive data over networks. The company has indicated that this approach helps its devices meet the new requirements for network and data protection set by the CE RED update.

In addition to BioStation 3 and BioEntry W3, Suprema stated that it expects its full range of access authentication devices - including those supporting fingerprint recognition, mobile access, and RFID - will have completed certification under the revised CE RED standard by August. This suggests a broader commitment to compliance ahead of the EU's official regulatory deadline.

Industry implications

The move by Suprema comes as global regulations around wireless device security become increasingly strict. Many nations are introducing or updating security requirements for products that collect or transmit personal information and may connect with broader IT infrastructure.

By obtaining CE RED certification under the European Union's updated standards, Suprema positions its products as compliant with next-generation demands for cybersecurity in wireless access control systems, ahead of scheduled enforcement. The company suggests that this will benefit both its regional and international business activities, as customers and regulatory bodies place greater emphasis on verified device security.

"We are proud to be the first in the access control industry to achieve CE RED certification under the enhanced cybersecurity requirements," said Hanchul Kim, CEO of Suprema. "This certification not only confirms that our products meet internationally recognised standards for security, safety, and wireless performance, but also demonstrates our commitment to staying ahead of evolving regulatory requirements. Through this proactive compliance approach, we strengthen our position in the European market and provide customers worldwide with access control solutions they can trust in today's increasingly demanding security landscape."

Suprema's approach aligns with the public and regulatory focus on enhancing safety for users of access control products - especially as such devices become integral to both the private sector and public infrastructure. The CE RED cybersecurity standard is seen as a key benchmark for any company wishing to maintain or expand its presence in the European access control and security sector.