- Home
- Business consulting in Kazakhstan
- Kazakhstan
- Kazakhstan Trusted Software Registry Listing
Listing Your Software in Kazakhstan's Trusted Software Registry
We help IT companies get into the trusted software registry, which since July 12, 2026, has been called the registry of trusted digital objects. You need it if you sell to government bodies and the quasi-public sector.
On July 12, 2026, the Kazakhstan trusted software registry, formally the registry of trusted software and electronic industry products, was replaced by the registry of trusted digital objects, with new rules. Getting listed is worth it if your customers are government bodies, state-owned companies or the quasi-public sector: under the Digital Code, they buy digital objects from this registry. In addition, software made in Kazakhstan and included in the registry is treated as a product of Kazakhstan origin.
There are several conditions, and each one is checked. The applicant must hold the exclusive rights to the code, localization must be at least 80%, you need a cybersecurity test report or a certificate under ST RK ISO/IEC 15408-3, and technical support must be based in Kazakhstan. The review takes 20 business days in total from registration of the application. We check your product before filing and tell you directly if any criterion is not met yet.
Who it is for
- IT companies that take part in government procurement or want to
- Developers of solutions for state-owned and quasi-public companies
- Kazakhstan subsidiaries of foreign companies that need to hold product rights in Kazakhstan
- Companies listed in the old trusted software registry that now need to update their documents
- Teams that used to rely on the ST-KZ certificate, which is no longer issued from 2026
Requirements
- The applicant holds exclusive rights to the software for the whole territory of Kazakhstan and for the full term
- Localization of at least 80%: payments to foreign persons make up no more than 20% of development costs for the previous year
- A cybersecurity test report or a certificate under ST RK ISO/IEC 15408-3 at assurance level 4 or higher
- A technical support service in Kazakhstan with a physical address, phone and email
- Compliance with the classifier of digital objects
- No dependence on proprietary software that is not in the registry; open source is fine
- The applicant is a Kazakhstan resident, an LLP or a sole proprietor; a foreign company applies through its own LLP
What we do
- Match your product against the classifier and check dependencies on third-party software
- Check the chain of code rights: employment contracts, contracts with outside developers and transfer of rights to the company
- Calculate the localization share using the official form: team salaries, payments abroad, cloud services and licenses
- Choose the route to a test report or certificate and prepare the documentation
- Document your technical support, file the application and answer the ministry's questions
- After listing, track document deadlines and file updates
Key documents
- Documents on software rights: copyright certificate, contracts with developers and rights transfer acts
- A localization report with payroll payment records and a list of developers
- A cybersecurity test report or a certificate under ST RK ISO/IEC 15408-3
- Details of the technical support service in Kazakhstan
- A product description with ENS TRU codes and the classifier category
- The applicant's incorporation documents
How it works
- Briefproduct, stack, who writes the code and where, who holds the rights, whether there is a test report
- Criteria auditwe go through the registry conditions and tell you what is missing: rights, testing, localization or support
- Document packagecode rights, localization calculation, test report or certificate, technical support details
- Filing and reviewthrough egov.kz, elicense.kz or the Astana Hub single window; 20 business days in total
- After the decisionthe data goes to the e-procurement operator within 14 business days; we then track document deadlines
Timeline
The review usually takes 20 business days from registration of the application; preparing rights, testing and localization documents comes first.
Timelines are approximate: government agencies, consulates and banks set them.
What to watch out for
- If more than 20% of development costs went to foreign developers, the product won't pass on localization
- Product rights held by a parent company abroad must be transferred to the LLP before filing
- Running on a commercial database or other proprietary software that is not in the registry blocks inclusion
- An expired document is grounds to remove a product from the registry; updates must be filed at least 30 days before expiry
- The decision is made by the authorized body, so we can't promise inclusion
FAQ
How much does it cost?
Our service fee is on request. Government fees, translations, insurance and other mandatory costs are paid separately; we send the full estimate before you sign.
How do I get into the Kazakhstan trusted software registry?
File an application through egov.kz, elicense.kz or the Astana Hub single window and attach the documents: code rights, a test report or certificate, a localization calculation of at least 80% and details of technical support in Kazakhstan. The review takes 20 business days in total from registration of the application.
What changed in the registry in 2026?
Since July 12, 2026, the registry of trusted digital objects has replaced the registry of trusted software and electronic industry products. It covers not only software but also digital resources, systems and platforms. Earlier entries are transferred after their document deadlines are checked.
Does the registry give tax benefits?
No, the registry rules don't provide tax benefits. The registry gives access to procurement by government bodies and the quasi-public sector. An IT company gets tax benefits through Astana Hub membership, which is a separate procedure.
How is the 80% localization share calculated?
From all payments under development contracts for the previous year, you single out payments to foreign persons and companies they control: outside developers, license holders and cloud services. These must not exceed 20%. The calculation is supported by payroll payment records and a list of developers.
Can a foreign company list its software in the registry?
Not directly. The applicant must be a Kazakhstan resident, an LLP or a sole proprietor, that owns the code rights. A foreign company usually transfers the rights to its Kazakhstan LLP, and we check how this will affect accounting and taxes.
We were in the old registry. What should we do?
The ministry transfers earlier entries to the new registry after checking document deadlines. We look at which documents expire soon and prepare updates in advance so the product isn't removed.
Do you guarantee the result?
No. Decisions are made by government agencies, consulates and banks. We are responsible for preparing and checking documents, filing and support, and we tell you about the risks upfront.
Related programs
Let’s discuss your case
We will check whether the program fits your citizenship, income and family, and send an estimate with the full list of costs.
