Hikvision DeepinView Cameras Gain EUCC Cybersecurity Certification

Hikvision's DeepinView network camera series (iDS-2CD7x) has been awarded EUCC certification, which Hikvision says makes it the first product in the CCTV camera category to achieve it. EUCC is the EU's new cybersecurity certification scheme, built on the long-established Common Criteria standard. Announced on 3 July 2026, this is useful news for anyone specifying cameras for sites where cyber security has to be proven, not just promised. Here's what EUCC is, what was tested, and why it matters with the Cyber Resilience Act and NIS2 coming in.

What is EUCC certification?

EUCC stands for the European Cybersecurity Certification Scheme on Common Criteria. It's the first certification scheme under the EU Cybersecurity Act, and it takes the internationally recognised Common Criteria (ISO/IEC 15408) and turns it into a single EU-wide scheme. In plain terms, an independent lab tests the product's security features, how it was developed and how the manufacturer handles vulnerabilities, and an accredited body then issues the certificate.

For the DeepinView iDS-2CD7x series, Hikvision says:

• the evaluation was carried out by Bureau Veritas Cybersecurity Europe, an independent test lab;
• the certificate was issued by TrustCB B.V., a certification body authorised by the Dutch Authority for Digital Infrastructure (RDI);
• testing followed ISO/IEC 15408 and CEM:2022 R1;
• the cameras met the EUCC "Substantial" assurance level, which lines up with Evaluation Assurance Level 3 (EAL3) plus ALC_FLR.2 flaw remediation.

The series had already held Common Criteria certification before this.

What did the certification look at?

According to Hikvision, the evaluation validated the cameras' security controls in five areas:

• Identity authentication: proving who is logging in.
• Access control: limiting what each user can see and change.
• Secure communications: protecting video and settings in transit.
• Security auditing: keeping a record of who did what.
• Vulnerability management: finding and fixing flaws over the product's life. That's the ALC_FLR.2 part.

Why it matters: the Cyber Resilience Act and NIS2

Europe is tightening the rules on connected products. The Cyber Resilience Act (CRA) brings in security requirements for "products with digital elements" across their whole lifetime, and the NIS2 Directive puts stricter cyber duties on organisations in critical sectors. IP cameras sit right in the middle of both: they're connected devices, and they're installed in exactly the sort of sites NIS2 covers.

EUCC gives a recognised, independent benchmark that buyers can point to. Hikvision highlights government, critical infrastructure, energy and transport as sectors where that proof is most likely to be asked for. The UK has its own regime, the PSTI Act for consumer connected products, but many UK businesses supply into the EU or follow EU frameworks in their own security policies, so EUCC can still be a useful reference here.

What it can do for you

• Easier tender and compliance paperwork. An independent certificate is far easier to put in a specification or risk assessment than a manufacturer's own claims.
• Confidence the camera isn't the weak point. Authentication, access control and encrypted communications have been tested by a third party.
• A long-term view. Flaw remediation is part of the evaluation, so the scheme looks at how vulnerabilities are handled after the camera is sold, not just on the day it ships.

Who it helps

• Specifiers and consultants writing CCTV specifications for public-sector, utilities, transport or healthcare sites.
• IT and security managers who have to sign off every connected device on the corporate network.
• Installers bidding for work where cyber assurance is a scored part of the tender.
• Businesses supplying the EU, which may need to show their own security estate meets EU expectations.

DeepinView cameras we stock

DeepinView is Hikvision's top-tier deep-learning camera range, used for perimeter protection, ANPR, facial recognition and people counting on larger sites. Models in the iDS-2CD7 family we list include:

• iDS-2CD7A46G0-IZHS 4MP DeepinView bullet (2.8–12mm)
• iDS-2CD7146G0-IZHSY 4MP DeepinView dome
• iDS-2CD7A86G0-IZHS 8MP DeepinView bullet (8–32mm)
• iDS-2CD7A47G0-XZHSY 4MP DarkFighterS DeepinView bullet
• iDS-2CD7A46G2/V-XZHSY 4MP DeepinViewX perimeter protection bullet

Certification applies to specific models and firmware versions, so if EUCC is a requirement on your project, ask us and we'll check the certified model list for you before you order. See the whole range in our DeepinView category.

Certified cameras still need a secure set-up

A certificate tells you the camera can be run securely. Whether it is depends on the installation. Whatever camera you choose:

• set a strong, unique admin password on activation and create separate user accounts;
• keep camera and NVR firmware up to date (our firmware guide shows how);
• don't port-forward cameras to the internet; use Hik-Connect or a VPN for remote viewing;
• put cameras on their own VLAN, using a managed switch.

Our take

Cyber questions come up on more and more commercial CCTV jobs, and "is it secure?" is hard to answer with a datasheet alone. An independent EU certificate at EAL3-equivalent level, issued through a government-authorised body, gives specifiers something concrete to point to. It's a meaningful step for DeepinView, and worth knowing about if you're quoting for sites where cyber assurance is part of the brief.

Need DeepinView cameras for a project? Call 01902 902251. As an authorised Hikvision partner, we ship nationally to England, Scotland and Wales, with orders before 2:30pm normally delivered in 1–2 working days.

EUCC: quick questions

What does EUCC "Substantial" mean?
It's one of two assurance levels in the EUCC scheme. Hikvision says its certification aligns with EAL3 augmented with ALC_FLR.2 (flaw remediation).

Are all Hikvision cameras EUCC certified?
No. The announcement covers the DeepinView iDS-2CD7x series. Check the certificate for the exact models included.

Is EUCC the same as Common Criteria?
EUCC is built on Common Criteria (ISO/IEC 15408), but it is an EU scheme with its own rules on certification bodies, labelling and vulnerability handling.

Does EUCC apply in the UK?
It's an EU scheme, so it isn't a UK legal requirement. It's still a recognised, independent benchmark that UK buyers and specifiers can use.

Source: Hikvision UK newsroom, 3 July 2026.