Compliance

Cyber Security

Suprema implements robust cybersecurity measures, including encryption, access control, network and cloud security, and comprehensive risk management, to protect against a wide range of cyber threats and ensure regulatory compliance.

GDPR

General Data Protection Regulation

Suprema's compliance with GDPR, emphasizing their data protection and security measures, and clarifies that while Suprema provides the technology, customers are responsible for ensuring GDPR compliance as data controllers.

NIS2 Directive

Network and Information Systems

Suprema ensures the highest level of cybersecurity and physical security by adhering to the EU NIS2 Directive through comprehensive security management and response systems.

PSTI Act

Product Security and Telecommunications Infrastructure

Suprema ensures compliance with the UK’s PSTI regulations by adhering to prescribed security requirements, providing security updates, and facilitating vulnerability reporting for its connectable products sold in the UK.

NDAA

National Defense Authorization Act

Suprema certifies that its listed products comply with NDAA Section 889, ensuring they do not contain components from prohibited Chinese companies, including Hikvision, Dahua, Huawei, and ZTE.

Principles Regarding the Use of Suprema AI

Suprema adopts fairness, transparency, accountability, and robust data security as core principles throughout the design, development, and operation of our access control devices and related AI functions.