We are proud to announce that our Certification Body (CB) has issued its first certificate under the European Union Common Criteria (EUCC) scheme.
This achievement represents more than the successful certification of a secure IT product; it demonstrates that the European Cybersecurity Certification Framework established under the Cybersecurity Act is operational and that accredited private Certification Bodies are now able to deliver trusted and harmonised certifications across Europe.
Certified Product
Product: Blancco File Eraser v. 8.7.1
Developer: Blancco Technology Group IP Oy
TOE Type: Generic software and network products
Assurance Level: Substantial
Assurance Package: EAL2 with AVA_VAN.2, augmented by ALC_FLR.2
The evaluation was performed by the atsec information security AB ITSEF (IT Security Evaluation Facility) in accordance with the EUCC scheme requirements.
A Milestone for atsec CB
For our CB, this first EUCC certificate marks the beginning of a new chapter. Cybersecurity certification has always been about building trust, and independent, internationally recognized certification plays an essential role in demonstrating security assurance as digital products become increasingly interconnected and regulatory expectations continue to grow.
Our team has invested significant effort in preparing for the EUCC transition – from establishing compliant processes and working closely with the National Accreditation Body (SWEDAC) and the Swedish National Certification Authority (FMV) to supporting vendors throughout the new certification framework.
Issuing our first EUCC certificate confirms that these efforts have become reality.
Looking Ahead
The regulatory landscape in Europe is rapidly evolving. The upcoming Cyber Resilience Act (CRA) introduces essential cybersecurity requirements for digital products placed on the EU market, and the EUCC is expected to play an increasingly important role as a structured, pre-market conformity assessment scheme that can support manufacturers in demonstrating security assurance and compliance readiness.
As CRA implementation progresses, the demand for recognized certification schemes such as the EUCC is expected to increase, strengthening its role in Europe’s cybersecurity assurance ecosystem.
We look forward to supporting vendors throughout their certification journeys and contributing to a more secure European digital ecosystem. As the EUCC scheme continues to mature, we remain committed to delivering high-quality, impartial, and technically rigorous certification services.
We would like to thank our customer, the evaluation facility, and everyone involved in achieving this milestone.
