Who this is for
An operator launching on its own licence, or a supplier selling into licensed operators, whose regulator or partners want a test-lab certificate for the platform, the random number generator or the games. In practice that means a turnkey build heading for the Isle of Man or Finland, a Curaçao licensee checking that its suppliers were tested by a lab the regulator recognises, or a studio or platform vendor collecting certificates for several markets at once.
"GLI certification" or "RNG certification" means a report issued by an accredited lab stating that a specific version of your software met a specific technical standard. We are not a lab and do not issue certificates. We prepare the submission so that the lab tests the right version against the right standard, and we handle what comes back.
Which licences on this site make you test what
The column that changes a plan is the last one. Where a system has to be certified before the first bet, certification sits on the critical path of the launch.
| Licence | What has to be tested or reviewed | By whom | When |
|---|---|---|---|
| Isle of Man | The system by which gaming is conducted, against the standards in Schedule 1 of the Online Gambling (Systems Verification) (No 2) Regulations 2007 | A test house approved by the Gambling Supervision Commission | Before any gaming is conducted |
| Finland | Gaming systems and RNGs; detailed secondary regulation on certification standards is still being finalised | An approved third-party body | Before launch; licensed operations start 1 July 2027 |
| Curaçao | Your suppliers' RNG and game reports must come from a lab the regulator recognises | Test houses certified by the CGA under Article 5.17 of the LOK, accredited to ISO/IEC 17025 with a scope covering online gaming systems, RNG, game fairness and RTP | Checked when the certificate is checked, not when the games go live |
| Cyprus (betting only) | The control system, the reporting behind the monthly tax file, self-exclusion integration and server topology with the Cyprus mirror | The National Betting Authority, as part of the application | Before the licence |
| Tobique | No platform assessment; an RNG certificate is one document in the pack | The lab that issued the RNG certificate | With the application |
| Tuvalu | RNG certificates for your games, where they exist | The lab that issued them | With the application |
| Anjouan | No platform assessment; every supplier needs its own B2B licence or Recognition Certificate | The regulator, for the supplier credential | Before the supplier serves your brand |
For a casino, the Isle of Man and Finland are the two that assess a working platform, so the build must be substantially complete before the clock starts; Cyprus does the same for a sportsbook. The others assess documents, and the certificates in those documents usually come from your studios and aggregator rather than from a test you commission.
The labs, as they describe themselves
Four names cover most requests. The right one is the one your regulator lists and whose accreditation scope covers what you are submitting, so check both before price.
| Lab | What it states (checked 16 October 2026) | Accreditation it states |
|---|---|---|
| Gaming Laboratories International (GLI) | Founded in 1989 in New Jersey; serves more than 710 jurisdictions; publishes its own standards, including GLI-19 Interactive Gaming Systems v3.0, GLI-11 Gaming Devices v3.0 and GLI-33 Event Wagering Systems v1.1 | ISO/IEC 17025 for its North American labs through A2LA; European labs through the Dutch Accreditation Council |
| BMM Testlabs | Established 27 November 1981; licensed or recognised in more than 480 jurisdictions; 15 offices in 14 countries; lists maths and RNG testing and iGaming testing | ISO/IEC 17025 for testing, 17020 for technical audits, 17065 for product certification |
| eCOGRA | Founded in 2003, based in the United Kingdom; accredited in 47 jurisdictions; RNG, RTP, platform, integration and live-dealer testing, penetration testing, and an ADR service | ISO/IEC 17025:2017 through UKAS, certificate 4656 |
| iTech Labs | Describes itself as an independent iGaming boutique lab; RNG certification at set prices, RTP and RNG audits from live server logs, platform and integration certification. Part of the GLI group since May 2023 and run independently | Not stated on its website; ask for the certificate and scope |
For an Isle of Man file the list is short and published. On 16 October 2026 the GSC's approved test houses were BMM, eCOGRA, several GLI entities, Gaming Associates Europe, Eclipse, Global Lab, Lean Lab, QA Lab and Quinel. iTech Labs was not on it when we checked. The GSC states that licensees whose systems require official testing must use a firm from that list.
What the lab actually tests
The UK Gambling Commission publishes a detailed public description of an RNG test, and it is a useful reference for what any lab will ask of you. It has four parts: a review of the RNG documentation, research into the algorithm or hardware for publicly known weaknesses, a source-code review to confirm the implementation matches the documentation, and statistical testing of raw output and of the scaled or shuffled results.
Game testing checks the design (the maths, the rules as shown to players, the theoretical RTP) and then the implementation on an environment matching live, with RTP measured by simulation and rare outcomes forced. Platform testing runs the system against the jurisdiction's own technical standard. Any problem found goes back to the supplier and is retested after the fix.
How we prepare a submission
- Scope statement. Target jurisdiction, the standard and version the lab will test against, and the components in scope: RNG, game maths, platform, integrations. A market added later reopens this scope, which is why it is fixed at the start.
- Version freeze. The build that goes to the lab is tagged and hashed. A certificate covers a version, so the version has to be identifiable afterwards.
- Documentation pack. RNG design and seeding, game rules and maths, system architecture, hosting topology, the responsible-gaming and reporting functions the standard names.
- Test environment and access. An environment that matches production, test accounts, and the source-code access the RNG review needs.
- Internal pre-run. We run the standard's checklist against the build before the lab does, so the lab's time goes on testing rather than on missing documents.
- Findings and retest. Each finding is classed as a defect, a documentation gap or a scope question. Defects are fixed and retested on the same scope; documentation gaps are answered; scope questions go to the regulator in writing rather than being argued with the lab.
- After the certificate. A change log tied to the certified version, so you know which release needs retesting before it ships.
A first-attempt failure typically adds two to four weeks rather than a restart, because the retest runs against the same fixed scope.
When you do not need this
- You run a white label: the licence holder's platform, and its certification, is the licence holder's responsibility.
- Your licence assesses no platform and every game is already certified. On Anjouan or Tobique with studio content that already carries certificates, the work is collecting documents for the file, which the licence application covers.
- You need the regulatory requirements for a jurisdiction. Those live on the jurisdiction pages. This service starts once the standard is known.
Questions to ask any lab or preparation partner
- Is the lab on the target regulator's approved list today, and for which product types?
- Does its ISO/IEC 17025 scope cover what you are submitting: online gaming systems, RNG, game fairness, RTP? Ask for the certificate and the scope schedule, not the logo.
- Which standard and which version will the report cite?
- What counts as a change that needs retesting, and who decides?
- Who holds the source code during the review, and on what terms?
Frequently asked
What is GLI certification?
A report from Gaming Laboratories International stating that a version of your product met a named standard: one of GLI's own, such as GLI-19 for interactive gaming systems, or a regulator's technical standard. The certificate attaches to a version and a jurisdiction, not to the company.
Is an RNG certificate enough to launch a casino?
For Tobique it is one document in the pack, and Anjouan assesses no platform. The Isle of Man certifies the system by which gaming is conducted, and Finland assesses gaming systems as well as RNGs, so an RNG certificate alone does not get you live there.
Do I need to certify games I take from an aggregator?
Usually the studio holds the game certificate and you hold the platform's. What you must check is that the studio's certificate covers your jurisdiction and comes from a lab your regulator recognises. In Curaçao a report from a lab outside the required ISO/IEC 17025 scope does not count.
Can you certify our platform yourselves?
No. Certification is issued by an accredited, independent lab. Our part is the preparation, the submission and the fixes, and for our own turnkey builds the platform side of the certification.
Does Finland have a separate certification for suppliers?
Finland adds a gambling software licence for suppliers: applications open on 1 July 2027, and from 1 July 2028 a B2C licensee may only use software from a licensed supplier. That licence comes on top of any lab certificate.