Section 14(1)(d) in The Aadhaar (Authentication) Regulations, 2016
(d)employ only those devices, equipment, or software, which are duly registered with or approved or certified by the Authority or agency specified by the Authority for this purpose as necessary, and are in accordance with the standards and specifications laid down by the Authority for this purpose;