Built for RBI.
Ready for SEBI.
Aligned to DPDP.
Every major AI governance platform covers EU AI Act. None of them have mapped RBI's 2024 AI circular, SEBI's algorithmic AI oversight guidance, or India's DPDP Act to specific controls — at clause level, with examination-ready evidence. Zytra does. It's headquartered in Mumbai and backed by Pennant Technologies, the team that has run lending software inside Indian regulated banking for two decades.
RBI 2024 AI Circular: what it requires, and how Zytra delivers it
The Reserve Bank's 2024 guidance on the use of Artificial Intelligence in regulated entities establishes specific obligations for model governance, evidence trails, and outsourcing controls. These are not aspirational — they are examination requirements.
| RBI Obligation | Zytra Capability | Evidence Output |
|---|---|---|
| Model governance framework — board-approved policies for AI model development, validation, and oversight | MRM Workflow Engine: risk tiering (Critical / High / Medium / Low / Minimal), validation tracking, committee approvals | Board-submittable AI Risk Dashboard; signed approval ledger |
| Audit trail — complete, timestamped record of AI model decisions and governance actions | Hash-chained evidence ledger: every model decision, governance action, and approval cryptographically timestamped | PDF / OSCAL / JSON export; tamper-evident hash chain |
| AI inventory — register of all AI systems in production, with risk classification | AI Asset Registry with automatic discovery, AIBOM, and continuous risk tiering | Model inventory export; AI Bill of Materials per system |
| Outsourcing / third-party controls — oversight of AI models sourced from or operated by third parties | Third-party model governance: vendor attestation, SLA monitoring, evidence collection for third-party AI | Outsourcing risk report; vendor governance pack for RBI inspection |
| Customer protection — guardrails on AI-generated outputs that reach customers | Aval runtime guardrails: 0.5% FPR on BFSI queries, 22 threat categories, real-time blocking | Guardrail event log; blocked query classification report |
| Incident reporting — material AI failures reportable to RBI with supporting documentation | AI-specific incident response tracking: classification, timeline, root cause, containment evidence | Incident report template pre-mapped to RBI notification requirements |
Mapping based on publicly available RBI guidance as of Q3 2026. Specific examination requirements may vary. Zytra's India compliance team maintains clause-level alignment with RBI regulatory updates. Full RBI compliance checklist with examiner Q&A →
SEBI algorithmic AI oversight: capital markets controls
SEBI's guidance on the use of AI/ML in the securities market covers brokers, intermediaries, and exchanges deploying AI in advisory, trading, surveillance, and customer-facing workflows. Zytra maps every applicable obligation at the clause level.
Investment advice guardrails
Aval detects and blocks outputs that constitute unlicensed investment advice — including near-advice formulations common in wealth management chatbots. Risk ID: B-10 (Investment Advice). Logged, evidenced, and reportable to SEBI.
Algorithmic AI monitoring
Continuous observability on AI systems used in trading and market operations: drift detection, performance degradation alerting, and audit-trail evidence for SEBI's algorithmic trading oversight framework.
Bias & fairness controls
Fairness monitoring for AI systems used in customer segmentation, credit scoring, and market access decisions — mapped to SEBI's fair treatment obligations and India's evolving anti-discrimination framework.
Data protection in the AI inference pipeline
India's Digital Personal Data Protection Act 2023 creates obligations that apply directly to AI inference — not just to data storage. PII processed by AI models, consent requirements for AI-driven profiling, and data localisation for AI workloads all fall within scope. Zytra is the only AI governance platform to have mapped these at the inference-pipeline level.
PII detection in AI pipelines
Aval detects and optionally redacts PII (names, Aadhaar, PAN, account numbers, phone numbers) in both prompt inputs and model outputs — preventing DPDP Act violations at the inference layer before they reach downstream systems.
Consent & purpose limitation
Governance workflows to track consent status for personal data used in AI training and inference, and to enforce purpose limitation — so models cannot be used for purposes beyond the consent given by data principals.
Data localisation enforcement
Zytra deploys inside your own VPC or on-prem — no personal data in AI inference ever leaves Indian territory. Tenant isolation is enforced at the infrastructure level, not through policy.
Data principal rights workflow
Structured workflows to respond to data principal requests (access, correction, erasure) that involve AI-derived data — including model outputs, scores, and recommendations stored downstream.
DPDP Act mapping current as of Q3 2026. Rule-making under the Act is ongoing; Zytra's India team tracks and updates controls as implementing rules are issued.
FREE-AI covers agentic AI — and most banks are not ready
RBI's FREE-AI Reliability pillar (R-3 through R-6) applies to agentic AI deployments — autonomous agents that execute multi-step workflows. Indian banks deploying AI agents for loan processing, customer onboarding, or trading operations need governance that covers D-09 (prompt injection into agent pipelines), D-10 (authorization boundary failures), and D-11 (multi-agent coordination risks). Zytra is the only India-aware platform that covers these.
Agentic AI security for BFSI
D-09, D-10, D-11 — the three agentic threat categories absent from every other AI governance platform.
Explore →Agentic AI in banking: governance failures SR 11-7 doesn't catch
Why traditional model risk management misses agentic failure modes — and what governance must cover.
Read →FREE-AI reliability requirements for agentic AI
FREE-AI R-3 through R-6 cover adversarial robustness, fallback behaviour, and hallucination controls — all agentic-relevant.
Read →The only platform built here, for here
Mumbai-headquartered
Zytra is based in BKC, Mumbai — the same financial district as the institutions it serves. Our India compliance team tracks RBI, SEBI, and DPDP updates in real time, not via an overseas team reading translated summaries.
Backed by 20+ years of Indian banking
Zytra is backed by Pennant Technologies, whose pennApps Lending Factory is trusted by leading Indian public-sector banks, private banks, housing financiers, and NBFCs — including Bajaj Finserv and LIC Housing Finance. Four of India's top-10 HFCs run on Pennant software.
No global competitors cover this
Arthur AI, Credo AI, Holistic AI, Lakera, and F5 AI Guardrails have zero documented coverage of RBI, SEBI, or DPDP Act obligations. For an Indian regulated institution, their governance frameworks stop at EU AI Act and NIST — frameworks your examiner will not ask about.
India regulatory coverage matrix
| Framework | Zytra | Arthur AI / Credo AI / Holistic AI | Lakera / F5 AI Guardrails |
|---|---|---|---|
| RBI 2024 AI Circular | ✓ Clause-level, exam-ready | — | — |
| RBI eMRM Guidelines (2026 draft) | ✓ Tier classification + validation lifecycle | — | — |
| SEBI Algorithmic AI Oversight | ✓ Clause-level | — | — |
| SEBI Responsible AI (Jun 2025) | ✓ Six principles mapped to controls | — | — |
| MeitY National AI Guidelines (Nov 2025) | ✓ National framework coverage | — | — |
| DPDP Act 2023 | ✓ Inference-pipeline level | — | — |
| EU AI Act | ✓ Article-level | ✓ | ✓ |
| NIST AI RMF | ✓ Sub-practice citations | ✓ | Partial |
| ISO/IEC 42001 | ✓ | ✓ | — |
| SR 11-7 / MRM | ✓ MRM workflow engine | — | — |
| Deploys in India VPC / on-prem | ✓ All modes | Typically cloud-only | API-only typical |
Competitor coverage based on publicly available product documentation as of Q3 2026.
In-depth regulatory guides
RBI eMRM: independent validation requirements for all AI models
India's most significant new AI governance development. Mandatory independent validation — including third-party models.
Read →26 FREE-AI recommendations: clause-level mapping
All 26 recommendations mapped to controls, evidence requirements, and Zytra capabilities.
Read →DPDP Act 2023: AI inference pipeline obligations
Consent verification, PII detection, data minimisation — what the pipeline must do before enforcement begins.
Read →AI governance for NBFCs
RBI AI regulations apply to NBFCs as fully as to scheduled banks. No global vendor covers this.
Explore →AI governance for IRDAI-regulated insurers
Underwriting fairness, claims explainability, and DPDP compliance for India's insurance sector.
Explore →SEBI AI governance for brokers and advisers
Algorithmic trading oversight, advisory fairness, and DPDP compliance for SEBI-regulated entities.
Explore →SEBI Responsible AI 2025: six principles mapped to controls
First control-level mapping of SEBI's responsible AI consultation — Fairness, Accountability, Transparency, Robustness, Privacy, Explainability.
Read →India AI governance 2026: complete regulatory landscape
Every instrument, every obligation, every deadline — the full four-layer stack for Indian banking.
Read →MCP Security India BFSI
MCP servers connecting LLMs to CBS and payment APIs create tool poisoning, rug-pull, and privilege escalation attacks. RBI MRMF model component risk, FREE-AI, DPDP Act obligations.
Read →Voice AI Deepfakes India BFSI
Sub-second TTS deepfakes defeat VKYC liveness. IRDAI AI WG June 2026 voice AI requirements. DPDP Act biometric data obligations. NPCI UAP voice payment governance.
Read →Shadow AI in Indian BFSI
Consumer LLMs used by employees create RBI FREE-AI inventory gaps and DPDP Act breach liability. Detection, governance, approved AI program design.
Read →AI Red Teaming: RBI 2026 Adversarial Testing Playbook
RBI's June 2026 directive on adversarial AI testing. Technical playbook for KYC chatbots, loan decisioning models, UPI payment agents, and fraud detection AI.
Read →RAG Corpus Poisoning India BFSI
CKYC records, RBI Master Directions, and CBS docs indexed in RAG systems — the document types adversaries target. RBI MRMF Section 5, DPDP Act breach exposure, corpus integrity controls.
Read →Explainable AI for Credit Decisions: RBI MRMF Section 4
"The model decided" is not acceptable to RBI. SHAP/LIME mapped to MRMF explainability obligations, adverse action notice requirements, and the interpretability threshold for high-consequence credit decisions.
Read →AI Supply Chain Attacks India BFSI: Foundation Model Risk
Model weight poisoning, backdoor artifacts, third-party API dependency. RBI MRMF independent validation, concentration risk monitoring, supply chain vulnerability requirements for India banks.
Read →RBI FREE-AI Framework: 7 Sutras, 6 Pillars, 26 Recommendations — Implementation Guide
RBI's master India AI governance framework — board AI policy requirements, third-party AI vendor accountability (full accountability even for procured AI), AI audit mechanisms, innovation sandbox governance, INDIC-BIAS fairness obligations. No global vendor has mapped this.
Read →RBI Authentication Directions 2025: AI Risk-Based Authentication and Fraud Scoring India BFSI
Effective April 2026 — first India regulatory permission for adaptive AI-driven payments authentication. AI/ML risk scoring as additional factor beyond mandatory two-factor. MRMF validation for authentication AI, behavioral biometrics DPDP compliance, cross-border CNP fraud model extension.
Read →CERT-In Frontier AI Cybersecurity Advisory India BFSI: MeitY Threat Report and RBI June 2026 Directive
RBI June 2026 directive required frontier AI risk assessments from all regulated entities by a specific deadline. CERT-In April 2026 advisory defines the threat landscape: AI-augmented attacks, deepfakes, AI-automated malware. CSIRT-Fin AI threat classification. Six of seven MeitY threat predictions already realized.
Read →SEBI AI/ML Guidelines Indian Securities Markets: Algo Trading Compliance Guide for Brokers 2025–2026
April 2026 deadline passed. Pre-exchange approval for all AI algo strategies. Non-delegable liability for third-party AI tools. Seven governance pillars: senior management accountability, model testing, fairness, DPDP, operational resilience. SEBI inspection documentation pack requirements mapped.
Read →IRDAI WG-AI 2026: Insurance AI Governance Framework — Health Underwriting, Motor Telematics, Claims AI
IRDAI Working Group on AI constituted June 17, 2026. Recommendations due September 2026. Seven mandate areas: ethical/explainable AI for claims, health underwriting DPDP obligations, motor telematics governance, deepfake claims fraud defense. Prepare before guidelines land — India's first insurance AI governance framework.
Read →NPCI Sovereign AI and UPI Fraud Model Governance: Federated FRM, DPDP Act, PSS Act Bank Obligations
NPCI-NVIDIA sovereign AI for India payments (Feb 2026). Federated FRM: scores not data shared — DPDP compliant. PSS Act legal basis for NPCI AI mandates on member banks. RBI MRMF applies to NPCI-integrated AI. Who owns model risk when NPCI fraud score is wrong? Zero global coverage.
Read →SEBI PMS Regulations 2020 AI Governance: Discretionary Portfolio AI Sole Accountability and Form BRA Attribution India
SEBI PMS Regulations 2020 + Feb 2025 AI/ML Circular — sole accountability for AI portfolio decisions, suitability AI explainability, Form BRA AI attribution, robo-PMS regulatory gap. Rs 30 lakh crore AUM.
Read →IRDAI Health Insurance Master Circular 2024 AI Governance: Cashless Pre-Authorization AI 1-Hour SLA and Claim Denial Explainability India
IRDAI Health Insurance Circular 2024 cashless AI 1-hour SLA mandate, clinical necessity AI audit trail void, claim denial explainability, DPDP health data AI. Star Health, Niva Bupa, HDFC Ergo, ICICI Lombard.
Read →SEBI Portfolio Managers Master Circular 2025 AI Governance: Mandatory AI Disclosure in PMS Disclosure Document and Sole Liability for AI Portfolio Decisions
SEBI/HO/IMD/IMD-POD-1/P/CIR/2025/104 — mandatory AI disclosure in PMS Disclosure Document, SEBI reporting, three-layer compliance stack. 400+ PMs, ₹30L crore AUM. Zero global coverage.
Read →IRDAI Regulatory Sandbox Regulations 2025 AI Governance: Mandatory Pre-Deployment IRDAI Approval for AI Insurance Tools, Policyholder Protection and Sole Liability
Notified Jan 3, 2025 — mandatory pre-deployment IRDAI sanction for AI/ML insurance tools. AI underwriting, telematics, wearables, chatbot claims. Policyholder protection. Sole entity liability. Zero global coverage.
Read →RBI IT Outsourcing Master Direction 2023: AI/ML as Material IT Service and Board AI Vendor Accountability
RBI/2023-24/102 — AI/ML classified Material IT Service; board accountability; due diligence; contractual audit rights; data localization for cloud AI. 700+ REs. Zero global coverage.
Read →SEBI CSCRF 2024 AI Governance: Five-Tier Framework, SOC AI Mandate and Principle of Equivalence for Dual-Regulated Banks
SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113 + Dec 2024 clarification — five-tier AI cybersecurity; SOC AI/ML mandate Category 1-3; Principle of Equivalence dual-regulated. 10,000+ REs. Zero global coverage.
Read →SEBI Master Circular Stock Brokers 2025: AI Added to Annual System Audit Scope and DMA AI Liability for 13,000 Trading Members
SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/90 — AI in annual system audit; digital monitoring platform; auditor independence limit; algo AI half-yearly audit; DMA AI liability. 13,000 brokers. Zero global coverage.
Read →RBI Data Governance Framework Draft Guidance 2026: Board DGF, AI/ML Data Quality and BCBS 239 for All Banks and NBFCs
RBI Draft Jul 2026 — board DGF, quarterly data quality for AI, metadata/lineage for AI auditability, SSoT, third-party AI data accountability, BCBS 239. All 11 entity categories. Zero global coverage.
Read →SEBI MII Governance Circular December 2025: CTO/CISO Functional Independence and Technology Audit Under CRiO for NSE, BSE, NSDL, CDSL
SEBI HO/47/12/11(5)2025 — CTO/CISO independence from business units, technology audits under CRiO, two ED positions. AI oversight architecture for 8 MIIs. Prof. Phatak AI roadmap foundation. Zero global coverage.
Read →SEBI RTA Master Circular 2026 AI Governance: Chapter III-A Sole Liability for CAMS, KFin and 200 RTAs Servicing 15 Crore Investor Accounts
SEBI HO/38/13/(4)2026-MIRSD-POD/I/4298/2026 — Chapter III-A AI obligations for all RTAs; sole liability for AI outputs and 15+ crore investor records; AI/ML reporting; KYC, SIP, fraud detection AI. Zero global coverage.
Read →SEBI AI Vulnerability Detection Advisory 2026 CSCRF: AI-Based VA Tools Standard of Care, SBOM Mandate and Cyber-Suraksha.ai Task Force
SEBI HO/13/19/12(1)2026-ITD-1 — AI-based VA standard of care, SBOM, M-SOC, authorized AI tool governance, cyber-suraksha.ai. All 10,000+ SEBI REs. Distinct from Responsible Usage Framework. Zero global coverage.
Read →IFSCA Frontier AI Cybersecurity Advisory 2026: Binding SBOM Mandate, Frontier AI Risk Obligations and Agentic AI Security Planning for All GIFT City Entities
IFSCA-CSD/MSC/3/2026-DCS — SBOM mandate, frontier AI risk posture reassessment, authorized AI tool governance, agentic AI planning. All IBUs, FMEs, GIFT City entities. Zero global coverage.
Read →IFSCA TechFin Regulations 2025: First AI/ML Licensing Regime for GIFT IFSC — Mandatory Registration, Fit and Proper Criteria for AI Vendors
IFSCA/GN/2025/005 — mandatory IFSCA registration for AI/ML vendors in GIFT City. Fit and proper criteria applied to AI key personnel. Transition deadline Jul 10, 2026. Zero global coverage.
Read →SEBI Intermediaries AI Amendment Regulations 2025 Chapter III-A: Gazette-Notified Binding AI Obligations — Non-Delegable Sole Liability for All 10,000+ SEBI Intermediaries India
Gazette-notified Feb 6, 2025 — Chapter III-A binding AI obligations for all SEBI intermediaries. Sole non-delegable liability for AI outputs, investor data. Scale-independent. Zero global coverage.
Read →RBI AI-ACT&RS Advisory 2026: Board AI Risk Gap Assessment, Generative AI Governance Mandate and AI-Driven Deepfake Safeguards for All Banks and Payment System Operators India
RBI AI-Accelerated Cyber Threats Advisory (Apr/Jun 2026) — India's first GenAI banking regulation. Board-approved AI gap assessment, AI deepfake/voice-cloning controls, CIS gap assessment. All banks + non-bank PSOs. Zero global coverage.
Read →IRDAI Insurance Fraud Monitoring Framework 2025 AI Technology: Mandatory IIB Platform Participation, Dynamic AI Red Flag Indicators and Board Anti-Fraud Policy for 55+ Insurers India
IRDAI/IID/GDL/MISC/112/10/2025 (Oct 2025, eff. Apr 2026) — mandatory IIB fraud monitoring platform for all insurers. Dynamic AI red flag indicators, FMC technology mandate, board-approved policy, annual FMR-1. Zero global coverage.
Read →SEBI Investment Advisers Second Amendment 2024 AI Disclosure: Mandatory Pre-Contract AI Tool Disclosure, Sole IA Liability and Regulation 18 Amendment for 1,300+ Registered IAs India
SEBI/LAD-NRO/GN/2024/219 (Dec 2024) — Regulation 18 amended. Pre-contract AI tool disclosure mandatory for 1,300+ IAs. Sole liability for AI output accuracy. Retroactive disclosure by April 30, 2025. Zero global coverage.
Read →IRDAI Motor Insurance AI Telematics Governance 2024: Mandatory PAYD/PHYD AI Pricing, Board-Approved AI Claim Settlement Policies and DPDP Telematics Data Obligations for 33 General Insurers India
IRDAI Master Circular June 2024 + Policyholders Regulations 2024 — mandatory PAYD/PHYD AI telematics, board-approved AI claim policies, AI app claims below ₹50,000. DPDP consent for continuous GPS data. 33 general insurers. Zero global coverage.
Read →SEBI Retail Algo Trading AI Governance 2025: White-Box vs Black-Box AI Classification, Research Analyst Registration for Black-Box AI Algos and Broker Principal Liability India
SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/0000013 (Feb 2025, eff. Apr 2026) — India's first regulatory AI transparency classification. Black-box AI: RA registration required. Broker principal liability. Exchange kill-switch. 1,500+ stockbrokers. Zero global coverage.
Read →SEBI AMC Institutional Mechanism 2024 AI Governance: AI Market Abuse Surveillance, Front-Running Detection and Board-Approved AI Alert SOPs for 45 Mutual Fund Houses India
SEBI/HO/IMD/IMD-PoD-1/P/CIR/2024/107 (Aug 2024) — AI-powered market abuse surveillance for 45 AMCs managing ₹67 lakh crore AUM. Real-time cross-portfolio front-running detection. Board-approved AI alert SOPs. CEO/CCO accountability. AMFI standards. Zero global coverage.
Read →RBI IT Governance Directions 2023 AI Governance: AI Model Inventory, Vendor Due Diligence and CERT-In Audit for 260+ Banks and NBFCs India
DoS.CO.CSITEG/SEC.7/31.01.015/2023-24 — foundational AI compliance layer. Board-approved model inventory, AI vendor contractual audit rights, algorithmic change management, annual CERT-In AI audit. ~260 entities. Zero global coverage.
Read →RBI Digital Lending Directions 2025 AI Governance: Feature-Level Consent Audit Trail, LSP AI Liability and CCO Certification for 10,000+ NBFCs India
RBI/2025-26/36 May 2025 — field-level consent audit trail for AI credit scoring features, non-delegable LSP AI liability, DLA CIMS registry, CCO certification. 10,000+ NBFCs. Supersedes 2022 Guidelines. Zero global coverage.
Read →RBI Payment Aggregators Directions 2025 AI Governance: Board AI Fraud Policy, Continuous ML Monitoring and FIU-IND PMLA AML AI for 400+ Non-Bank PAs India
RBI/DPSS/2025-26/141 September 2025 — board AI fraud policy, continuous ML merchant monitoring, FIU-IND PMLA registration for non-bank PAs, CERT-In AI audit. ~400 non-bank PAs. Zero global coverage.
Read →SEBI Master Circular for Depositories 2024 Section 2.9 AI Governance: Mandatory Quarterly AI/ML Disclosure via e-PASS for 1,000+ DPs India
SEBI/HO/MRD/MRD-PoD-1/P/CIR/2024/168 Section 2.9 — mandatory quarterly AI/ML disclosure via e-PASS portal. NIL returns mandatory. NSDL, CDSL, all registered DPs. Zero global coverage.
Read →PFRDA Information and Cybersecurity Policy Guidelines 2024 AI Governance: AI Risk Register, Board Accountability and AI Audit for NPS CRAs India
PFRDA/2024/14/ICS/01 — first AI governance for India's pension sector. CISO-led ICSRM, AI in ICT risk register, periodic AI audits for Protean CRA, KFin CRA, SBI/LIC/HDFC Pension Funds. 60M subscribers. Zero global coverage.
Read →RBI Master Directions Fraud Risk Management 2024 AI Governance: Mandatory AI/ML EWS, Explicit Bias Testing Obligation and Board-Approved AI Fraud Framework India
RBI July 2024 — mandatory AI/ML Early Warning Signal deployment, explicit bias testing obligation, board-approved AI fraud framework, independent AI audit. All banks, NBFCs, credit card issuers. Zero global coverage.
Read →RBI Urban Cooperative Banks Governance Directions 2025 AI Model Risk: Board AI Accountability and MRMF Extension for 1,500 UCBs India
RBI UCB Governance Directions 2025 + MRMF 2026 extension to co-operative banks — board AI oversight, CBS vendor AI disclosure, third-party validation, concentration risk governance. 1,500 UCBs, 8 crore depositors. Zero global coverage.
Read →SEBI Stockbrokers Institutional Mechanism 2024 AI Market Surveillance: Mandatory AI Fraud Detection, Compliance Officer Accountability and NSE Penal Action India
SEBI Circular July 2024 — mandatory AI trading surveillance for ALL stockbrokers. Compliance officer AI accountability, whistle-blower escalation, NSE penal action. April 2026 deadline even for smallest brokers.
Read →SEBI AI ML Responsible Usage Framework 2025: Kill-Switch Mandate, Human Oversight and Senior Management Accountability for All Securities Intermediaries India
SEBI AI/ML Responsible Usage Guidelines 2025 — first comprehensive cross-market AI governance for ALL SEBI intermediaries. Kill-switch mandate, human oversight, non-delegable senior management accountability, NSE half-yearly reporting.
Read →SEBI Research Analysts Third Amendment 2024 AI Governance: AI Research Disclosure, AI Trading Call Accountability and Audit Trail India
SEBI RA Third Amendment 2024 and Circular Jan 2025 — mandatory AI tool disclosure, full RA accountability for AI trading calls, audit trail for AI research inputs and outputs. 1,500+ SEBI RAs.
Read →SEBI Investment Advisers Second Amendment 2024 AI Governance: Mandatory AI Disclosure, Robo-Advisory Sole Accountability and MITC AI Disclosure India
SEBI IA Second Amendment 2024 — India's first sector-specific AI disclosure obligation. Sole accountability for AI-generated advice, MITC AI disclosure, no vendor safe harbour. 1,400+ SEBI IAs.
Read →RBI Digital Lending Guidelines 2022 AI Governance: Algorithmic Underwriting Accountability, LSP AI Liability and Credit Scoring Explainability India
RBI/2022-23/111 — credit algorithms must be auditable, trained on non-discriminatory data. RE full accountability for LSP fintech AI. KFS explainability for AI-dynamic pricing. 1,000+ NBFCs, $200B+ digital lending market.
Read →RBI FREE-AI Framework 2025 AI Governance: 7 Sutras, 26 Recommendations and Responsible Ethical AI Blueprint India
RBI FREE-AI Committee August 2025 — board AI policy, AI-specific vendor contract clauses, India-trained model bias, AI audit mechanisms. 26 actionable recommendations for Indian banks and NBFCs.
Read →SEBI Intermediaries Amendment 2025 AI Liability Governance: Sole Accountability for AI Outputs and India's First AI Liability Rule Securities Market
SEBI Intermediaries Amendment February 2025 — sole accountability for AI tool outputs, no vendor safe harbour, investor data security, AI audit trail. 9,000+ SEBI entities. India's first direct AI liability rule.
Read →RBI Model Risk Management Framework 2026 AI Governance: Board-Approved MRMF, Killswitch Mandate and Bias Testing India
RBI Draft MRMF 2026 — board-approved MRMF covering AI/ML, killswitch mandate, bias testing across demographic segments, explainability, independent validation, third-party AI obligations. All banks and NBFCs.
Read →IRDAI Insurance Fraud Monitoring Framework Guidelines 2025 AI Governance: Behavioural Analytics Mandate and Deepfake Defense India
IRDAI Fraud Framework 2025 — first IRDAI AI capability mandate (behavioural analytics), Fraud Monitoring Cell AI governance, FMR-1 AI data, deepfake defense V-CIP, IIB cross-insurer fraud AI pipeline.
Read →RBI Payment Aggregator Master Direction 2025 AI Governance: Fraud Detection AI, Merchant Onboarding AI and Transaction Monitoring India
PA Master Direction 2025 fraud AI explainability for merchant adverse action, transaction monitoring audit trail, merchant onboarding AI PMLA, PA-Cross Border AI, killswitch void. PhonePe, Razorpay, PayU, CCAvenue.
Read →IFSCA TechFin Ancillary Services Regulations 2025 AI Governance: GIFT City IFSC AI Model Risk Void and Conduct Code Gap India
TechFin AI model risk void, no explainability or model validation standard, IFSCA 2026 AI Survey governance maturity gap. Only page in English covering IFSCA TechFin AI governance.
Read →SEBI Mutual Fund AI ML Reporting Circular 2019 Governance Gap: AMC Quarterly Inventory and Explainability Void India 2026
Quarterly AI/ML inventory obligation for all 44 AMCs, explainability void for investor-facing fund AI, no model validation, SEBI June 2025 consultation paper escalation. SBI MF, HDFC MF, ICICI Prudential MF.
Read →SEBI Clearing Corporation AI Governance: CCIL NSE Clearing VaR AI and Settlement Guarantee Fund India 2026
AI VaR model SGF adequacy, counterparty default prediction AI suspension protocol, trade compression settlement finality, cross-CCP information barrier, BCP AI failover for clearing MIIs.
Read →RBI Housing Finance Company HFC AI Governance: AVM LTV Compliance, PMAY Credit AI and Disbursement Fraud Detection India 2026
AVM LTV compliance backtesting, PMAY-CLSS credit AI adverse action for EWS/LIG/MIG borrowers, disbursement fraud AI explainability, EMI reset audit trail. LIC Housing Finance, PNB Housing.
Read →IRDAI Life Insurance Products Regulations 2024 AI Governance: Appointed Actuary AI Model, Claim Settlement and Surrender Value India
Appointed Actuary AI mortality model sign-off gap, learned exclusion vs product filing lock, claim settlement AI 15/30-day SLA audit trail, surrender value GMSV regression testing, free-look AI routing.
Read →DPDP Act 2023 Significant Data Fiduciary AI Governance for India BFSI
DPDP Act Section 16 SDF obligations — mandatory DPIA before ML deployment, purpose limitation vs ML feature discovery, right to erasure vs model unlearning, cross-border AI vendor restrictions, legacy ML training consent adequacy.
Read →SEBI Commodity Derivatives AI Governance: MCX NCDEX Algo AI and Agricultural Price Discovery
SEBI CDMRD AI governance — algo AI classification gap, surveillance model drift liability, position limit AI false-negative, agri AI under Essential Commodities Act, cloud AI vendor MII governance for commodity exchanges.
Read →RBI Scale Based Regulation NBFC AI Governance: Upper Layer NBFC Credit AI and ICAAP Model Validation
SBR Master Direction 2023 AI governance for Bajaj Finance, Shriram Finance, L&T Finance — Board AI oversight, ICAAP credit model validation gap, liquidity AI stress testing, PCA trigger risk from ML underwriting drift.
Read →RBI Merchant Acquiring Bank AI Governance: MRMF, Chargeback Prediction, CoFT Tokenisation
Card Master Direction 2022 + MRMF acquiring AI — merchant onboarding AI MRMF+PMLA intersection, tokenisation AI retraining obligation, chargeback AI NPCI dispute standard, white-label acquiring AI model ownership. Distinct from PA governance.
Read →IRDAI Motor Insurance Telematics AI Governance: MISP Chain, UBI Pricing and IIB FAB Score
MISP distribution chain AI accountability, WG-AI 2026 driving score explainability, telematics AI product filing re-trigger, IIB FAB score third-party AI governance, DPDP consent withdrawal mid-policy impact.
Read →SEBI Stockbroker AI Governance: Smart Order Routing AI, Clause 26 System Audit Gap and DMA Client AI Liability
Clause 26 audit covers AI OMS with no AI methodology. SOR AI model ownership fragmented across exchanges. DMA broker bears SEBI liability for client-side AI. Kill-switch restart governance void.
Read →NPCI NACH AI Governance: Mandate Fraud Detection and Batch Payment MRMF
NACH mandate fraud AI MRMF validation. DMS return-code AI audit trail. FIU-IND AML for recurring mandates. PSO audit false-positive documentation. NPCI limit revision circulars as MRMF change triggers.
Read →RBI IOS 2021 AI Governance: Complaint Response AI and MRMF Obligations
LLM complaint reply adverse inference risk. Triage AI 30-day IOS clock breach. AI decision logs discoverable in award proceedings. DPDP complaint training restriction. NBFCs and PSOs covered.
Read →SEBI FPI AI Governance: Circular Trading, Beneficial Ownership AI and FUTP Evidence Standards
Custodian circular trading AI FUTP evidentiary standard. Look-through BO AI SEBI-explainable. Concentration limit AI dual MRMF+SEBI system audit. SEBI adjudication AI evidence standards 2024.
Read →IRDAI Bima Sugam Insurance Distribution AI Governance
Regulation 10 non-conflicting product ranking AI. Chatbot as licensed intermediary. AI premium pricing actuarial certification. India Stack DPDP+IRDAI dual KYC obligations. WG-AI adversarial testing.
Read →RBI PPI Master Directions 2021 AI Governance: Wallet Fraud Scoring
Full-KYC V-CIP AI liability on PPI issuer. Velocity check AI under MRMF. 2024 co-branding AI ownership delineation. DPIP explainability. DPDP behavioral profiling limits.
Read →RBI IRRBB AI Model Governance: Banking Book, ALM Behavioural Models and MRMF
Deposit/prepayment behavioural AI under MRMF. Dual IRRBB+MRMF validation. AI scenario generation board approval. Pillar 2 breach from AI error. November 2025 RRB extension.
Read →RBI KYC Master Direction V-CIP AI Governance: Deepfake Detection and Aadhaar e-KYC Model Performance Standards
RBI KYC MD mandates AI for V-CIP with "high degree of accuracy" liveness/spoof detection. MRMF model card required. Deepfake bypass of DigiLocker documented in 2026. CKYC upload AI accuracy obligations. Third-party V-CIP vendor liability falls on RE. INDIC-BIAS for liveness false rejection across demographic segments.
Read →SEBI Investment Advisers Regulations 2013: Robo-Advisory AI Governance, Suitability Obligations and Mis-Selling Liability
IA Regulations apply to AI robo-advisors — technology-neutral since 2016 confirmation. Per-client suitability rationale at scale. Conflict-of-interest in commission-era training data. SEBI algorithm inspection authority. 2024 AI finfluencer enforcement wave. Consumer Protection Act 2019 cumulative mis-selling liability.
Read →RBI NBFC-P2P Lending Directions AI Governance: Non-Discriminatory Matching Algorithm and August 2024 Amendment
August 2024 amendment: board-approved non-discriminatory matching algorithm — unique globally. MRMF applies to P2P credit AI. Closed-user-group prohibition creates origination-channel AI independence obligation. T+1 disbursement AI SLA. Guaranteed-return prohibition for AI-marketed P2P products.
Read →RBI Co-Lending Arrangements Directions 2025 AI Governance: Joint Credit Model Accountability
Directions effective January 2026. Dual-board AI model ownership ambiguity under MRMF. MRMF Section 7 applies when bank relies on NBFC AI credit model. NPA cascade risk from one RE's AI model forces partner's book classification. Blended-rate explainability under FREE-AI Pillar 4.
Read →Account Aggregator AI Governance India: FIU Credit Model Obligations, Consent-Scope Drift, DPDP–MRMF Intersection
AA crossed 100M consents. FIUs using AA data in AI credit models face consent-scope drift in model retraining (DPDP Section 6 violation risk), model drift from consent-revocable training data, and FIU AI obligations under NBFC-AA Directions 2025. INDIC-BIAS testing for NTC/Jan Dhan segments.
Read →India MSME Credit AI Governance: PSB 59 Minutes Portal, TReDS Invoice Fraud AI, CGTMSE Guarantee Stack
Rs 52,300 crore under digital CAM April–December 2025. PSB 59 Minutes AI under MRMF Section 7 — PSB model inventory and validation obligations. TReDS AI governance gap in RBI 2014 Guidelines. CGTMSE guarantee stack AI accountability. PMLA intersection for TReDS invoice fraud AI.
Read →RBI Digital Lending Guidelines 2022 AI Governance: LSP Algorithmic Audit and DLA Data Restrictions
2,000+ regulated digital lenders. RE retains full accountability for LSP AI credit decisions. DLA data collection restrictions for AI features. Algorithmic credit scoring disclosure obligation. MRMF validation required for LSP models — RE cannot accept LSP self-assessment.
Read →PMJDY Financial Inclusion AI Governance: Jan Dhan Overdraft Scoring, DBT Fraud Detection, PMJJBY Claim AI
530+ million Jan Dhan accounts at PSU banks. BSBDA overdraft AI scoring under MRMF. DBT fraud detection AI governed by MeitY/DFS joint guidelines and RBI. PMJJBY/PMSBY claim processing AI under IRDAI and MRMF. INDIC-BIAS testing for financial inclusion populations — zero global coverage.
Read →RBI Regulatory Sandbox AI Governance: Fintech Cohort AI Model Compliance and RBIH Innovation Framework
RBI sandbox does not exempt from AI governance — MRMF applies inside. Cohort 6 MSME lending required bias testing, explainability, and data governance documentation. RBIH adds foundation model governance criteria. Exit package requires production-scale validation before graduation to full deployment.
Read →AI AML Transaction Monitoring: PMLA Section 12 and FIU-IND STR Governance
AI-generated STRs must be explainable to FIU-IND. RBI de-risking risk guidance creates a false-positive governance imperative alongside detection. MRMF Section 4 explainability applied to AML alert rationale. No global vendor has mapped this India-specific framework.
Read →AI Model Drift Detection: RBI MRMF Section 6 and PSI/CSI for India Credit Banking
MRMF Section 6 ongoing performance monitoring obligations. PSI and CSI thresholds used by RBI examination teams. COVID moratorium, rate cycle, and UPI growth cause structural drift. Champion-challenger testing and MRMF-compliant production monitoring architecture.
Read →Conversational AI Chatbot Governance: RBI, IRDAI Digital Distribution, Consumer Protection Act
Three regulatory layers for India bank chatbots: RBI no-credit-commitment rule, IRDAI Digital Distribution Regulations 2024 AI disclosure requirements, Consumer Protection Act civil liability. RBI Ombudsman adjudicates chatbot conduct. Technical controls by layer.
Read →OWASP LLM Top 10 for BFSI India 2026
All 10 LLM vulnerabilities mapped to India BFSI context — with RBI MRMF, FREE-AI, SEBI, DPDP Act, and NPCI UAP obligations per attack vector.
Read →Agentic AI security India BFSI: prompt injection in UPI and credit agents
Tool-call hijacking, CIBIL memory poisoning, multi-agent privilege escalation — India-specific attack scenarios and controls.
Read →DPDP Act 2023 and LLM data exfiltration
KV Cache leakage, RAG retrieval exposure, and training data memorization — each triggers DPDP Act breach notification obligations.
Read →SEBI AI kill-switch: technical implementation guide
4-layer architecture, trigger taxonomy, RAIDAR readiness, and the test evidence SEBI inspectors require — for trading, advisory, and surveillance AI.
Read →India BFSI AI governance: complete guide 2026
RBI, SEBI, IRDAI, NPCI, and DPDP Act — full compliance matrix, entity type obligations, and implementation checklist in one page.
Read →Govern AI the way your regulator expects
Talk to Zytra's India team. Bring your RBI circular questions, your DPDP obligations, and your toughest AI deployment challenge.