Skip to searchSkip to main content
  • _csp_www_brightsight_com_contact-us
Brightsight

  • EMVCo

    Visa, MasterCard, UnionPay, JCB, American Express, and Discover (EMVCo) security evaluation 

EMVCo is a global technical body that ensures worldwide interoperability and acceptance of secure payment transactions. Established by the six major payment networks—Visa, Mastercard, UnionPay, JCB, American Express, and Discover—EMVCo develops and manages the specifications for chip-based payment systems and associated technologies. If your product is intended for the financial or payment industry, achieving EMVCo certification is the critical step that validates its security and compliance.

There are two types of EMVCo certifications:
  • IC certification for IC products 
  • platform certification for smartcard products
EMVCo approved products
EMVCo accredited lab

Brightsight is a recognized independent laboratory to test and evaluate products for compliance with EMV Specifications.

Why EMVCo certification matters

In a fast-evolving financial landscape, payment security is non-negotiable. EMVCo certification provides definitive proof that your product meets the security requirements.

Defense against advanced threats

The evaluation tests your product's resistance to modern physical and logical attacks, such as: 

  • side-channel analysis (extracting secret data via power consumption or electromagnetic radiation);
  • fault injection (manipulating the chip's behavior).
    • Trust

    It verifies security across the entire chain—from the IC vendor to the card or platform vendor—ensuring the final issued product is secure.

    Interoperability

    It guarantees your product will work seamlessly and reliably across the global EMV-compliant payment infrastructure.

    Key compliance benefits

    Achieving EMVCo security certification offers vital benefits for IC vendors, platform developers, and card manufacturers.

    Global market access

    The EMVCo approval mark is recognized worldwide, instantly opening doors to international payment markets and simplifying deployment across different regions.

    Reduced fraud and liability

    Meeting security standards reduces counterfeit card fraud risk and may support liability-shift protection in various payment ecosystems.

    Efficiency over documentation

    An EMVCo evaluation focuses more on the security and life cycle of a product than on documentation (evidence), often resulting in a shorter evaluation process, comparing to other types of evaluations such as, for example, Common Criteria.

    Clear certification levels

    EMVCo defines structured levels—IC Level, Platform Level (IC + OS), and ICC Level (Full Card Product)—allowing targeted compliance efforts.

    Brightsight support

    Brightsight can guide your product through the entire certification lifecycle, minimizing risk and accelerating your time-to-market. Our evaluation services cover:

  • Security evaluation: testing and analysis for IC Level (Integrated Circuit), Platform Level (IC + OS), and ICC Level (Full Card Product).
  • Professional advisory: vulnerability analysis and design review at early development stages to identify potential issues before physical testing begins.

    • Leverage our unique expertise to combine the EMVCo process with other required schemes like Common Criteria, where applicable, maximizing efficiency and re-using evaluation results.

    Contact our experts to discuss your product's roadmap and how to accelerate your path to certification.

    Contact us