Co-Founder Programme We co-found three products a year for 10 to 15 per cent equity. Next cycle: January 2027. Next cycle Jan 2027 Booking projects from January 2027

Fintech and financial services software in India: Regulators now ask how your app works. Build it so you can show them.

RBI rules decide what a loan app may collect, where its data lives and how fast a cyber incident is reported. SEBI and IRDAI set similar duties for brokers and insurers. We build lending, KYC, payment and customer apps that follow these rules and keep the records that prove it.

  • Free 30-minute call
  • Fixed quote in writing
  • Code you own
The sector

Financial services and fintech, in numbers.

UPI payments and consent-based data sharing are now everyday tools for Indian lenders, brokers and insurers.

2,407 crore
UPI transactions in September 2026, worth ₹29.37 lakh crore (NPCI data, October 2026).
50 crore
consents fulfilled through the Account Aggregator framework, with more than 1,100 regulated entities live (Sahamati, September 2026).
What the rules ask of you

The rules shaping your software.

The regulations and standards that change what your systems, website and data handling need to do, each with its date and a link to the source.

01 RBI digital lending rules May 2025, consolidated November 2025 Borrowers get a Key Fact Statement and a cooling-off period of at least one day. Repayments go straight to the lender's bank account, with no pool account. Apps collect data only with explicit consent and may not read files, contacts or call logs. All data stays on servers in India, and lenders report their apps to RBI. Source
02 RBI KYC Directions, including Video KYC consolidated November 2025 Video KYC (V-CIP) is run by an authorised official of the lender, with facial recognition. The connection must start from the lender's own secure network. A cloud or technology partner that helps with the session keeps no data once it ends. Source
03 RBI cyber security and technology risk directions 31 July 2026 New directions for NBFCs took effect immediately. NBFCs must report cyber incidents to RBI within six hours of detection. The board and senior management are responsible for IT governance. Source
04 Payment data stored in India since April 2018 Payment system operators must store the full data of every payment only in India. Data on the foreign leg of a cross-border payment may also be kept abroad. Payment aggregators also work under RBI's directions of 15 September 2025. Source
05 SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) since August 2024 SEBI-regulated entities, such as stock brokers, must meet cyber security controls that scale with their size. The compliance deadline for most entities passed on 31 August 2025, so new systems have to meet the framework from day one. Source
06 IRDAI Information and Cyber Security Guidelines updated 6 April 2026 Insurers, brokers, corporate agents, web aggregators and third-party administrators must report cyber incidents to CERT-In within six hours, with a copy to IRDAI. External penetration tests by a CERT-In empanelled auditor are due at least every six months, and cloud providers must be MeitY empanelled. Source
What we build

What we build for lenders, fintechs, brokers and insurers.

01 Loan apps that follow RBI rules Key Fact Statements, a cooling-off exit, consent screens with an audit trail and no access to contacts or photos, hosted in Indian cloud regions.
02 Video KYC and onboarding V-CIP, PAN and other identity checks through your licensed providers, with recordings and records kept on your own servers.
03 Account Aggregator integrations Consent-based access to bank statements and other financial data through RBI-registered Account Aggregators, for faster and better-documented credit decisions.
04 Cyber logs and incident alerts Central logs kept for at least 180 days and clocks synced to Indian time servers. Alerts help your team report an incident within six hours.
Free 30-minute call

Not sure where to start? Talk it through with an engineer.

Thirty minutes with a senior engineer, free and with no obligation. Bring the problem, not a brief.

What we will not claim.

We are not regulated by RBI, SEBI or IRDAI, and no app is RBI compliant on its own. We do not give financial or investment advice. Your compliance officer and board stay responsible for your regulated activities. We build the systems, customer flows and records that support those duties and help you show the evidence.

Sources: Outlook Money, UPI processes 2,407 crore transactions worth ₹29.37 lakh crore in September, 2 October 2026; Sahamati, Account Aggregator crosses 50 crore consents, 2 September 2026; RBI, Non-Banking Financial Companies (Managing Risks in Outsourcing) Directions, 2025; RBI, Non-Banking Financial Companies (Account Aggregator) Directions, 2025; RBI, Regulation of Payment Aggregators Directions, 15 September 2025.

Financial services and fintech questions

Frequently asked questions.

Are you regulated by RBI or SEBI?

No. We are a software and AI development company, not a regulated entity, and we do not lend, advise or handle client money. We build the apps and systems you use to meet your duties. Your compliance officer and board keep responsibility for them, as the RBI, SEBI and IRDAI rules expect.

Can you build a loan app that follows RBI's digital lending rules?

Yes. We build the Key Fact Statement, a cooling-off exit, explicit consent screens with an audit trail and direct repayment to your bank account. The app does not read contacts, files or call logs, and data stays on servers in India. Your compliance team signs off the final flows before launch.

Will you accept our outsourcing and audit clauses?

Yes. RBI's outsourcing directions of November 2025 expect NBFCs to audit their technology service providers, and RBI can inspect those arrangements. We accept audit, access and confidentiality clauses, keep documentation up to date and support your auditors. You get a Data Processing Addendum before any work starts.

Can you integrate the Account Aggregator framework?

Yes, through an RBI-registered Account Aggregator as your partner. Customers approve each request through a consent artefact that sets the purpose, the data and when consent expires. The aggregator cannot keep the data it passes on. We design your consent screens, data handling and deletion around those terms.

Still have a question? Call +91 99966 88404 and speak to an engineer.

Financial software built to be audited.

Thirty minutes with a senior engineer, free and with no obligation.

Or call us+91 99966 88404

What happens next

  1. A free 30-minute callWith a senior engineer, at a time that suits you. No obligation.
  2. A short discoveryWhat it covers is agreed in writing before it starts.
  3. A written scope and a fixed quoteIn rupees, with any GST shown separately, before you commit to a build.

A senior engineer replies within one working day, in Indian business hours (IST).

Cookie preferences

Choose which cookies we may use. You can change this at any time using the Cookie settings link at the bottom of every page.

Strictly necessary Always on

Keep the site secure and working, and remember this choice.

Count visits and show which pages are useful, so we can improve the site. Google Analytics.

Measure our advertising and show relevant ads on other sites. Google Ads, Meta and LinkedIn.

Cookie Policy · Privacy Policy