Certification, Compliance & Procurement

Verify the exact model, hardware and radio configuration, brand or responsible entity and intended EU or EEA market. Request the applicable Declaration of Conformity and supporting test references, then check that labeling and instructions match the supplied product. CE is not a universal factory certificate; the applicable route depends on the product configuration and legislation.

Identify the exact wireless product, module or host configuration and request the applicable FCC identification, grant and supporting test information. Confirm labeling, user instructions and whether changes to antennas, modules, enclosure or firmware affect the approved configuration. Match the supplied revision to the evidence before treating the product as covered for the United States.

Ask for the exact listing standard, product name, model, configuration and listing identifier, then verify it in the relevant certification directory. Confirm that the supplied lock, components and installation match the listed scope. Do not treat UL testing, a component recognition or a supplier statement as equivalent to a finished-product listing.

Confirm the exact entrance panel, indoor unit, power and radio configuration, brand arrangement and destination. Request the applicable Declaration of Conformity and supporting references, and check labeling and instructions against the supplied revision. A family-level statement should not replace model-level evidence for the final project scope.

Include locks, mortises and accessories; gateways and network work; software or subscriptions; installation and door preparation; credential administration; batteries and preventive service; replacements and spare stock; support and training; integrations; compliance work and eventual platform or hardware replacement. Compare these costs over the planned operating period and test the assumptions against occupant turnover and support responsibility.

Start with the selected controller, reader, software route and intended data flow. Request model-specific information on biometric handling, deletion, fallback credentials, audit records, hosting, retention, security controls and update responsibility. The buyer and privacy adviser should confirm the current local requirements; no one hardware feature establishes a complete compliance result.

GDPR applies to both, but at different regulatory tiers. RFID cards linked to a named individual are personal data under Article 4(1) and subject to standard GDPR obligations. Biometric data — fingerprints, face geometry templates — is Special Category data under Article 9, requiring explicit legal basis, DPIA, and stricter storage controls. RFID-only deployments carry significantly lower compliance burden than biometric systems.

Generally no, not on the basis of consent alone. Most EU Data Protection Authorities — including the EDPB — have confirmed that employee consent is not freely given due to the power imbalance in the employment relationship. Employers must establish legal basis under Article 9(2)(b) (employment law obligation) or 9(2)(g) (substantial public interest), and must offer a non-biometric alternative access method such as an RFID card or PIN.

Wiegand transmits credential data in plain text with no authentication, encryption or tamper detection. OSDP v2 uses bidirectional RS-485 communication and, with Secure Channel Block enabled, AES-128 encryption and mutual authentication between reader and panel. OSDP v2 also supports reader supervision and tamper alerts. For a secured deployment, require compatible reader and panel hardware, Secure Channel Block enabled and enforced, unique installation keys and the correct RS-485 wiring.

Video-intercom documentation is reviewed against the exact entrance panel, indoor unit, power and radio configuration, brand arrangement and destination. Request the applicable Declaration of Conformity, test references and country approvals for the quoted configuration; do not treat a family-level statement as evidence for every SKU. ONVIF or other interface conformance is also checked by model and firmware, while ISO 9001 refers to the factory quality-management system rather than product certification.