iOS and iPadOS Receive NATO Security Certification
Apple's iPhone and iPad running iOS 26 and iPadOS 26 are the first consumer devices approved by NATO for handling classified data up to the "restricted" level. This certification is a significant milestone for Apple in government and enterprise sectors, potentially influencing API usage and security requirements for apps handling sensitive information.
This certification was the culmination of an exhaustive evaluation by Germany's Federal Office for Information Security (BSI). The BSI's deep technical assessments and testing confirmed that the built-in platform security of standard, off-the-shelf iPhones and iPads met the exacting operational requirements for all NATO nations. The approval, granted on November 25, 2025, and valid until October 31, 2027, specifically lists iOS 26 and iPadOS 26 in the NATO Information Assurance Product Catalogue (NIAPC). This allows personnel across the 32 NATO member nations to use these devices for sensitive communications without specialized hardware or software. "NATO Restricted" is the alliance's lowest level of classified information, but it is still a formal security classification. It applies to data that, if disclosed without authorization, would be disadvantageous to NATO's interests and requires transmission through classified channels. This milestone hinges on Apple's integrated hardware and software security, including the Secure Enclave for key management, Face ID biometrics, and Memory Integrity Enforcement on the latest Apple silicon. Unlike previous secure government devices that required bespoke modifications, this certification validates the security of the stock consumer platform. While the NIAPC listing mentions an "indigo configuration," this is merely a name assigned by the German BSI during its evaluation. Apple has confirmed that standard, commercially available devices received the approval, only requiring supervision via a standard device management service. This achievement builds on previous national-level clearances, such as Germany's BSI certification for "Verschlusssache" (VS-NfD) level data. It represents a strategic shift, allowing governments to potentially move away from expensive, purpose-built hardware toward modernizing with commercial off-the-shelf technology.
