The Reserve Bank of India's supervisory transformation is underway, not forthcoming. DAKSH — the Advanced Supervisory Monitoring System, launched October 2022 — processes compliance workflow data, cyber incident reports, and MIS data from supervised entities in near real-time. The Supervisory Data Quality Index, introduced in 2025, scores the quality of every bank's data submission and creates a direct link between a bank's internal data governance posture and its supervisory risk profile. Banks whose data submissions score poorly under SDQI face escalated supervisory attention. Governor Sanjay Malhotra's January 2026 speech made the direction explicit: near real-time supervision of India's digital financial system is the goal, and traditional periodic on-site inspection is no longer the primary supervisory mode.

This has three direct implications for AI governance: the model inventory Zytra's governance tools maintain must be DAKSH-ready; AI models that feed bank MIS data submissions must produce explainable outputs when DAKSH flags anomalies; and the data quality obligations embedded in DAKSH's SDQI framework create enforceable data lineage requirements for AI pipelines.

What DAKSH Collects from Banks

Four Categories of Supervisory Data

Data Category What DAKSH receives AI governance implication
Compliance workflow data Status of regulatory compliance actions, open inspection findings, remediation timelines, board committee approvals AI model validation status, open model risk findings, and remediation commitments must be current and accurate in bank MIS. DAKSH tracks whether banks act on supervisory observations.
Cyber incident reports Real-time cyber incident notifications, classification, severity, affected systems AI-specific cyber incidents (model compromise, prompt injection attacks on production systems, adversarial input events) must be classified and reported under the same framework as other cyber incidents. "AI incident" is not a separate category — it flows through cyber reporting.
Model and AI risk data Through RBI MRMF (June 2026), banks must maintain model inventories accessible for supervisory review. DAKSH integration with MRMF reporting is the expected evolution. Model inventory completeness is a DAKSH-visible data quality metric. An incomplete inventory (missing models, stale validation dates, unregistered AI systems) degrades SDQI scores.
MIS and financial data Returns data submitted to RBI — BSR, statutory returns, capital adequacy data Any ML model processing these returns or generating them contributes to SDQI. A model that introduces systematic errors into regulatory returns creates both a financial reporting risk and a supervisory data quality flag.

The Supervisory Data Quality Index

How SDQI Scores Your Bank

SDQI, introduced in 2025, scores bank data submissions on five dimensions:

  1. Completeness — are all required data fields populated? A model inventory with 85% completion scores lower than one at 100%. Empty fields for validation status, model owner, or last review date are completeness gaps.
  2. Accuracy — do submitted values match internal records and external verification? AI models that process data before submission introduce accuracy risk if they apply transformations not documented in submission methodology.
  3. Consistency — do values across different returns agree? An AI model generating cash flow projections for one regulatory return must produce values consistent with the underlying data in other returns. Inconsistency flags suggest either model errors or data pipeline fragmentation.
  4. Timeliness — are submissions made by deadline? An AI-driven data pipeline that processes large volumes of transaction data is subject to the same submission deadlines as manual processes. Pipeline failures that cause late submissions degrade SDQI.
  5. Governance — is there a documented data governance framework? The SDQI framework rewards banks that maintain documented data lineage, data dictionaries, and change management processes for data pipelines — including AI-driven ones.

What Poor SDQI Scores Trigger

A bank with poor SDQI scores enters an escalated supervisory mode that involves more frequent data requests, additional targeted inspections, and in severe cases, supervisory meetings with senior management or board. From an AI governance standpoint: a bank whose AI models are contributing to SDQI degradation (through incomplete model inventory, inconsistent MIS outputs, or undocumented data transformations) creates a direct linkage between AI governance quality and supervisory risk profile.

Explainability for Supervisory Data Requests

When DAKSH's anomaly detection flags a pattern in a bank's submitted data, RBI issues a supervisory data request — asking the bank to explain the underlying driver. If that driver involves an AI model, the bank must produce:

What Banks Need to Produce on Supervisory Request

  1. Model card: What does the model do, what data does it process, what is its output, and who is the accountable owner? A model card must be producible within the supervisory response timeline (typically 7–14 working days for initial response).
  2. Validation report: When was the model last validated, against what data, by whom, and what were the findings? Validation reports must be current — a model with a 3-year-old validation report for a supervisory data request is a documentation failure, not just a governance gap.
  3. Assumption log: What assumptions does the model make, and have those assumptions been tested against current market conditions? For models used in regulatory data processing (capital calculations, provision models, liquidity metrics), assumption drift is a specific DAKSH risk — the model may be operating on stale assumptions that produce systematically biased outputs.
  4. Change log: Has the model been changed since last validation? Model changes that were not re-validated create a gap in the supervisory response chain. DAKSH can in principle detect when submitted data patterns shift in ways consistent with model changes.

Data Pipeline Governance for DAKSH Feeds

Four Data Governance Requirements AI Pipelines Must Meet

  1. Data lineage documentation: Every AI pipeline that processes data eventually submitted to RBI must have documented lineage — from source data to model input to model output to regulatory return. Undocumented transformations in the pipeline create SDQI accuracy risks.
  2. CIMS integration readiness: RBI's Centralised Information Management System (CIMS) is the data infrastructure DAKSH draws from. Banks submitting data through CIMS must ensure their AI pipelines produce outputs in CIMS-compatible formats and that model-generated values are clearly attributed (not merged with manually adjusted values without documentation).
  3. Change management for AI pipelines: Model updates, data source changes, and feature engineering changes must trigger a documented review before the changed pipeline feeds DAKSH-visible submissions. A model that changes its output distribution without a documented change management process creates an unexplained shift in supervisory data.
  4. Audit trail for AI-generated regulatory data: Any value in a regulatory return generated or materially processed by an AI model must have an audit trail sufficient to reconstruct the computation. This is both an RBI IT Governance Master Direction requirement and a DAKSH data quality requirement.

Utkarsh 3.0 Forward-Look

What RBI's 2025–2027 Strategy Means for AI Governance

Utkarsh 3.0, RBI's medium-term strategy for the period 2025–2027, embeds near-real-time supervisory capability as a strategic objective. Four specific implications:

  1. Supervision will move from sampling to comprehensive monitoring — meaning every bank, every return, every anomaly pattern is visible to DAKSH, not just those selected for inspection.
  2. Model inventory data will be requested more frequently and with shorter lead times — banks need a continuously maintained model registry, not a point-in-time snapshot produced for inspections.
  3. AI-specific supervisory data requests will increase — as MRMF implementation matures, RBI will be monitoring model risk at the portfolio level, not just validating individual models.
  4. The explainability bar will rise — a model explanation that satisfied a 2023 inspection may not satisfy a 2026 supervisory data request, as RBI's own supervisory AI capabilities improve and the bar for model documentation rises correspondingly.
Key implication

The combination of DAKSH's near-real-time data collection, SDQI's automated quality scoring, and MRMF's model inventory requirements means that a bank's AI governance posture is now continuously visible to the regulator — not just at inspection time. A model inventory that is incomplete, a validation report that is stale, or an AI pipeline that degrades data quality will be visible to DAKSH before they are visible to the bank's own compliance function, if that function is operating on a periodic review cycle rather than a continuous monitoring model.

Frequently Asked Questions

What is RBI's DAKSH and why does it matter for AI governance in banks?
DAKSH (Advanced Supervisory Monitoring System) is RBI's AI-powered supervisory platform, launched October 2022, that processes compliance workflow data, cyber incident reports, and MIS data from supervised entities in near real-time. For AI governance, DAKSH creates a direct link between a bank's model inventory completeness, data quality in regulatory submissions, and its supervisory risk profile. Banks with incomplete model inventories or AI pipelines that degrade data quality face escalated supervisory attention under the Supervisory Data Quality Index (SDQI, 2025).
What is the RBI Supervisory Data Quality Index (SDQI)?
The Supervisory Data Quality Index (SDQI), introduced in 2025, scores bank data submissions across five dimensions: completeness, accuracy, consistency, timeliness, and governance. AI models that process data before regulatory submission affect SDQI scores — an AI pipeline producing inconsistent values across returns, or a model inventory with missing validation dates, directly degrades a bank's SDQI score. Poor SDQI scores trigger escalated supervisory attention including more frequent data requests and targeted inspections.
What does a bank need to produce when DAKSH flags an AI-related anomaly?
When DAKSH flags an anomaly involving an AI model, banks must produce within the supervisory response timeline (typically 7–14 working days): a current model card, a validation report (no older than the last major model change), an assumption log showing current assumptions have been tested, and a change log documenting all post-validation modifications. These are the four components of a DAKSH-ready AI model documentation package.

DAKSH-ready before your next RBI supervisory interaction?

Zytra's India compliance team will review your model inventory completeness, SDQI risk exposure, and data pipeline governance posture — and map the fastest path to DAKSH-readiness.