Somfy has greatly expanded its smart home portfolio in recent years. During our certification test, we took a close look at the security of the TaHoma V2 Connected Home Box. The following test report shows how the smart home system performed.


The base station (tested in firmware version 2021.1.4-20) allows control of all components, such as shutters, heating, lighting and security components via a central app (Android, iOS – tested in version 3.18.0). When certain scenarios or alarms are triggered, notifications can be sent via the apps, email or SMS; furthermore, individual sequences or conditions can also be set. Apple Homekit and common voice assistants can also be connected.

© Somfy

Local and online communication

In this part of the test, we recorded and analyzed the incoming and outgoing data traffic of the TaHoma V2 Connected Home Box and the mobile apps: TaHoma classic. During the analysis, no obvious vulnerabilities or possible entry points were found. Both the base station and the applications always communicated in encrypted form during the test and were also effectively protected against common attacks, such as man-in-the-middle attacks. The scan of the base station itself also revealed no indications of possible entry points.

Somfy TaHoma classic app


In this test section, we examined devices and applications for indications of unnecessary data collection. Furthermore, the privacy policy (as of 01.02.2021) was analyzed with regard to its transparency and conformity with the General Data Protection Regulation.

During the test, Somfy added missing information to the privacy policy and also reduced the data required during registration. As of today, two trackers (Google CrashLytics and Firebase Analytics) are still integrated into the apps, but Somfy also intends to remove these from the apps in the near future.


The TaHoma V2 solution with the Connected Home Box performs solidly in all relevant areas. The smart home system from the French manufacturer Somfy therefore receives the AV-TEST certificate “Approved Smart Home Product”.