ETSI EN 304 631 V1.0.0 specifies cybersecurity requirements for smart home general purpose virtual assistants, such as smart speakers with integrated voice assistants and standalone virtual assistants. The standard covers products that communicate over the public internet, process natural-language commands and provide access to services or control connected devices in residential settings.

The requirements cover vulnerability handling activities, technical security requirements and corresponding assessment criteria. The standard has been developed as part of ETSI’s work supporting the EU Cyber Resilience Act (CRA) and forms part of the broader framework of harmonised cybersecurity standards for products with digital elements.

You can find the standard here: ETSI EN 304 631 V1.0.0

All feedback and comments are welcome by 11 October 2026.