For NBFCs & digital lenders

One evidence trail for your RBI outsourcing register
and your CERT-In 6-hour clock.

Five RBI instruments landed between April and July 2026 — on top of an IT-governance and vendor-risk regime that's been enforceable since 2024. Most mid-size NBFCs and digital lenders hold the underlying controls but no single, signed record of them. Sanad produces that record continuously, per endpoint, hardware-anchored.

What's changed at RBI, in order

Cited to the instrument and date, not rounded up. Two items are still ahead of us — we say so.

Live
2022, ongoingCERT-In Direction 70B — 6-hour breach reporting, criminal liability under IT Act §70B(7)
Live
1 Apr 2024RBI IT Governance, Risk, Controls and Assurance Practices Master Direction takes effect
Live
10 Apr 2026Transition deadline for existing IT-outsourcing contracts to the 2023 framework
Live
1 Apr 2026RBI Digital Payments Authentication Framework takes effect
Live
21 Apr 2026RBI Digital Payments – E-Mandate Framework, 2026 notified
Upcoming
1 Oct 2026Digital lending recovery-conduct framework — proposed effective date
Upcoming
1 Jan 2027RBI fraud-compensation rules (Commercial Banks — RBC Third Amendment) take effect

What the evidence layer covers

CERT-In Incident API

6-hour reporting countdown, cryptographic verify URL, tamper-evident hash chain for every incident record.

Vendor & outsourcing risk

Continuous evidence against the IT-outsourcing register and annual third-party risk review — the RBI IT Governance Master Direction's core ask.

Consent Management

Purpose-bound, data-minimised consent trail for digital lending — matches the RBI Digital Lending Directions' restrictions on sensitive-data collection.

Ed25519-signed, TPM 2.0-rooted agentDPIIT-recognised, Haryana Seed FundedLive 15-minute demo on your own machinesCompliance data stored and processed in India

See it score your own machines, live.

15 minutes. No slides. We install the agent on 2-3 of your endpoints and walk the evidence it produces for the outsourcing register and CERT-In reporting.

Book a demo