STQC Certification: The Complete Guide for Indian Startups

If you're bidding on any Indian government IT contract — or building software for the public sector — you need STQC certification. The Standardisation Testing and Quality Certification Directorate is India's official quality assurance body. Here's exactly what you need to know and how to prepare.

What is STQC?

STQC operates under the Ministry of Electronics and Information Technology (MeitY). It provides quality assurance services including software testing, information security auditing, and IT infrastructure certification. STQC certification is mandatory for:

• Government software applications and portals
• Digital public infrastructure (Aadhaar-integrated apps, UPI, DigiLocker)
• E-governance and citizen-facing services
• Defense and public sector unit (PSU) software

The STQC Audit Process

1. Application: Submit application to nearest STQC Regional Centre (Delhi, Kolkata, Mumbai, Chennai, Bangalore, Hyderabad, Pune, Mohali, Thiruvananthapuram, Guwahati) with project details.
2. Document Review: STQC reviews your SDLC documentation, security architecture, test plans, and risk assessments.
3. On-Site Audit: 2-5 day assessment of your development processes, security controls, and compliance posture.
4. Technical Testing: Security testing (VA/PT), performance testing, functional testing, accessibility testing.
5. Report & Certification: If compliant, STQC issues a certificate valid for 1-3 years with periodic surveillance audits.

STQC Testing Requirements

Timeline and Costs

• Typical Timeline: 8–16 weeks (application to certification)
• STQC Fees: ₹50,000 – ₹5,00,000 (based on application complexity)
• Consultant Fees: ₹2,00,000 – ₹10,00,000 (if using external consultants)
• TestForge Pre-Audit: ₹0 — Run all 162 STQC-mapped checks before your official audit