Testing labs in Delft

ISO/IEC 17025 accredited by RvA (No. K179) testing laboratory (accreditation status: active). Accredited test areas include: Calibration Electrical. Located at 2628 XJ, Delft, Netherlands.

ISO/IEC 17025 accredited by RvA (No. K180) testing laboratory (accreditation status: active). Accredited test areas include: Calibration Electrical. Located at 2600 AM, Delft, Netherlands.

NMi is an independent Netherlands-based metrology specialist providing certification, testing, training and market-access services for measuring and weighing instruments, with internationally recognised expertise in legal and industrial metrology.

ISO/IEC 17025 accredited by RvA (No. M087) testing laboratory (accreditation status: active). Located at 2600 GA, Delft, Netherlands.

SGS Brightsight is an independent IT security evaluation laboratory and certification body headquartered in Delft, the Netherlands, operating as a specialized business line within SGS Group — the world's leading inspection, verification, testing, and certification company. Founded in 1984, Brightsight has grown into the largest independent security evaluation lab globally, helping manufacturers and developers of hardware and software products achieve certification across internationally recognized cybersecurity frameworks. The laboratory operates as an IT Security Evaluation Facility (ITSEF), conducting rigorous, impartial technical assessments that verify a product's security claims against defined assurance levels before market entry. Its client base spans companies across the payment, Internet of Things, medical, automotive, industrial, government, telecommunications, network infrastructure, and integrated circuit sectors. The laboratory's flagship service is security evaluation under Common Criteria (ISO/IEC 15408), the international standard governing IT product security assessment. SGS Brightsight holds ITSEF status under multiple national and regional Common Criteria certification schemes, including NSCIB (the Netherlands), CCN (Spain), BSI (Germany), SERTIT (Norway), CSA (Singapore), and TSE (Turkey). All five of Brightsight's European laboratory sites — located in Delft, Barcelona, Madrid, Meyreuil (France), and Graz (Austria) — are authorized under the EU Cybersecurity Certification Scheme on Common Criteria (EUCC) to perform evaluations at both Substantial and High assurance levels across all technical domains. Notably, SGS Brightsight in Delft was the first Dutch test laboratory authorized to conduct EUCC evaluations at the High assurance level, and the Graz facility is currently the only Austrian lab designated as a Conformity Assessment Body (CAB) under the German Federal Office for Information Security (BSI) scheme. SGS Brightsight is a recognized and approved testing laboratory for multiple payment security schemes administered by the PCI Security Standards Council (PCI SSC). Services in this domain cover MPoC (Mobile Payments on COTS), SPoC (Software-Based PIN on COTS), CPoC (Contactless Payments on COTS), and the 3DS SDK security standard. The laboratory is also an EMVCo-approved Security Evaluation Laboratory for testing chip-based payment platforms and applications — including ICC (integrated circuit card) evaluations — with formal recognition granted in both the Netherlands and Singapore. These approvals allow payment technology vendors to complete their PCI and EMV compliance evaluations from a single trusted partner. In the IoT security domain, SGS Brightsight has attained designation as a PSA Certified Certification Body, enabling it to deliver in-house PSA Certified evaluations and issue certificates without reliance on a third-party certification body. This capability is frequently combined with SESIP (Security Evaluation Standard for IoT Platforms) assessment, allowing manufacturers to pursue a streamlined, combined PSA/SESIP certification pathway that reduces cost and time to market. The laboratory achieved the world's first SESIP Assurance Level 3 (SESIP3) certification for a UWB (Ultra-Wideband) module when Samsung's U100 — the first UWB device in the Car Connectivity Consortium's Digital Key program — received its certificate following a Brightsight assessment. GSMA security certification for SIM and embedded SIM (eSIM) components is an additional capability within the connected-device portfolio. SGS Brightsight supports compliance with an expanding set of regulatory and industry-driven cybersecurity requirements. These include the EU Cyber Resilience Act (CRA), which mandates security-by-design for products with digital elements placed on the European market, and the EU Radio Equipment Directive (RED) cybersecurity requirements applicable to wireless devices. The EUCC has formally succeeded the SOGIS Mutual Recognition Agreement (MRA) that governed European Common Criteria recognition for nearly three decades, and Brightsight's early authorization under EUCC positions it as a primary port of call for organizations navigating this regulatory transition. The laboratory also participates actively in OCP (Open Compute Project) cybersecurity standardization, including the S.A.F.E. framework, and engages in industry forums addressing cross-border mutual recognition arrangements such as the Singapore–Japan and Singapore–South Korea IoT cybersecurity cooperation agreements. Product types evaluated by SGS Brightsight span an exceptionally broad technology landscape: smart cards and secure elements, hardware security modules (HSMs), payment terminals and point-of-sale devices, SIM and eSIM components, IoT platforms and connected devices, automotive security controllers, industrial control systems and PLCs, medical device security components, government and public-sector IT products, mobile applications with security functions, network access devices, cryptographic libraries, and integrated circuits incorporating security logic. This breadth reflects the laboratory's expertise across both hardware and software security evaluation, including advanced attack methods such as side-channel analysis and fault injection for high-assurance evaluations. SGS Brightsight's quality management system is built on ISO/IEC 17025 (testing laboratory competence) and ISO/IEC 17065 (product certification body requirements), the twin pillars required for ITSEF licensing and certification body accreditation respectively. With laboratory sites in Delft (Netherlands), Barcelona and Madrid (Spain), Meyreuil (France), Graz (Austria), Singapore, and multiple locations in China, Brightsight offers genuinely global reach backed by a heritage spanning four decades of independent security evaluation. Clients benefit from the combined authority of SGS Group's international brand recognition, mutual recognition agreements that allow European and Asian certifications to be leveraged across jurisdictions, and a technical team with deep expertise in both current standards and emerging regulatory requirements.