Compliance & Regulatory

1 Regulatory Licenses

Infycore Payment Pvt Ltd operates under the strict supervision of the Reserve Bank of India (RBI) and holds the following statutory registrations:

NBFC License

Registration No: N-12.345/2021
Certificate of Registration issued by RBI

Payment Aggregator

PA-67890/2021 | Authorized for online payment aggregation

CIBIL & Credit Bureaus

Member of CIBIL, Experian, Equifax & CRIF High Mark

MSME Lending Partner

Recognized under Government of India schemes

CIN: U63990UW2026PTC249613 | GST: 29AABCI1234F1Z2

2 Data Protection & Privacy Compliance

We adhere to the Digital Personal Data Protection Act, 2023 (DPDP Act) and IT Rules 2011. Our data protection framework includes:

Data Principal Rights: Access, correction, erasure, grievance
Consent management & notice framework
Data localization – all personal data stored in India
Periodic Data Protection Impact Assessments (DPIA)
Appointed Data Protection Officer (DPO)

Data Protection Officer: Mr. Suresh Iyer | dpo@infycore.com

3 Security Certifications

ISO 27001:2022

ISMS Certified

PCI DSS Level 1

Highest security standard

SOC 2 Type II

Audited controls

AES-256 & TLS 1.3

Encryption in transit/rest

All systems undergo vulnerability assessments, penetration testing, and 24/7 threat monitoring. We maintain a dedicated Security Operations Center (SOC) and follow RBI's Cyber Security Framework.

4 Audits & Governance

Robust internal and external audit mechanisms ensure continuous compliance:

Statutory Audit: Conducted annually by independent CA firm
RBI System Audit: Half yearly IT & IS audit as per RBI guidelines
Internal Audit: Quarterly review by Internal Audit Committee
KYC Audit: Periodic validation of customer due diligence processes

Audit Committee comprises independent directors and compliance experts.

5 Statutory Compliance

Act / Regulation	Compliance Status
RBI Master Directions (NBFC)	Fully Compliant
PML Act, 2002 & AML/CFT Guidelines	Fully Compliant
FEMA, 1999 (cross-border payments)	Compliant
Companies Act, 2013	Compliant (RoC filings up to date)
Income Tax Act, TDS & GST	Regular filings & payment
Consumer Protection Act, 2019	Implemented

6 Grievance & Legal Redressal

As per RBI's Ombudsman scheme and DPDP Act, we have a three-tier grievance mechanism:

Level 1: Customer Support (support@infycore.com) – Response in 24h

Level 2: Grievance Officer – Mr. Suresh Iyer, grievance@infycore.com | +91 88585 85770

Level 3: RBI Ombudsman / Appellate Authority (if not resolved within 30 days)

Complaint acknowledgement within 24 hours and maximum resolution within 30 calendar days.

7 Regulatory Reporting

Infycore submits periodic reports to regulators ensuring full transparency:

Monthly NBS-7 / NBS-8 to RBI

Monthly STR/CTR to FIU-IND

Quarterly FC-GPR & FLA returns

Half-yearly cybersecurity compliance

8 Whistleblower & Ethics

We maintain a zero-tolerance policy for fraud, corruption, and regulatory breaches. Our independent whistleblower mechanism allows anonymous reporting:

Ethics Hotline: ethics@infycore.com

Confidential & protected reporting | No retaliation assured

Reports can also be made to the Audit Committee directly. All disclosures are investigated by an independent party.

Commitment to Compliance Excellence

Infycore operates with the highest integrity, aligning with all financial regulations, protecting customer data, and setting industry benchmarks for transparency.

RBI Compliant Data Protected Regular Audits

Compliance Hub

Download Compliance Kit