The Council of the European Union has formally approved the use of the French cryptographic product 'ZONECENTRAL Q.2021.x' for securing information classified at the RESTREINT UE/EU RESTRICTED level. The decision, taken by the Secretary-General on 2 October 2026, is conditional on the integration of the evaluator's recommendations into the Security Operating Procedures (SECOPS) governing the product's use.
Document Details and Legal Basis The approval is documented in an information note issued under Article 10(6) of the Council Security Rules, established by Council Decision 2013/488/EU. The product was evaluated by the French national security authority, which confirmed its compliance with the required security standards for RESTREINT UE/EU RESTRICTED information. The Council's decision formalises this evaluation and authorises the product's deployment across EU institutions and bodies handling such classified material.
Conditional Approval and Operational Impact The approval is not unconditional: the SECOPS must incorporate the evaluator's recommendations before the product can be used operationally. This ensures that any identified vulnerabilities or procedural gaps are addressed, maintaining the integrity of the EU's classified information infrastructure. The product is intended for use in secure communications and data storage systems where RESTREINT UE/EU RESTRICTED information is processed.
Stakeholder Impact - EU institutions and bodies: They gain a new, approved tool for protecting classified information, potentially improving interoperability with French systems. However, they must update their SECOPS to reflect the evaluator's recommendations, which may require administrative adjustments. - French national security authority: The approval validates its evaluation process and strengthens France's role in EU security infrastructure. It may also set a precedent for other member states seeking approval for national cryptographic products. - EU producers of cryptographic products: The decision could encourage other member states to submit their products for EU-wide approval, increasing competition. However, the conditional nature of the approval may raise the bar for compliance. - EU taxpayers: The approval may lead to cost savings by allowing the use of a domestically developed product instead of procuring from non-EU suppliers, but the costs of SECOPS updates are borne by the using institutions.
Institutional Follow-Up The Council's decision is final and does not require further approval from the European Parliament or the Commission. The next step is for the relevant EU bodies to implement the SECOPS changes and begin deploying the product. The Council may issue further guidance on the use of the product across different agencies.
← Atlas › News › Defence