RBI outsourcing & IT governance

Software for RBI IT outsourcing and vendor risk compliance

IntelloSync helps RBI-regulated entities manage the contracts, vendor due diligence and evidence that IT outsourcing and IT governance directions call for. IntelloVendor runs service-provider onboarding and risk assessments, IntelloContract manages outsourcing agreements and their obligations, and IntelloComply tracks review cycles, owners and audit evidence.

Last updated

The regulation in brief

The Reserve Bank of India's Master Direction on Outsourcing of Information Technology Services, issued in April 2023 and effective from 1 October 2023, applies to regulated entities including scheduled commercial banks, most NBFCs (excluding base-layer NBFCs) and credit information companies. It expects a board-approved IT outsourcing policy, due diligence on service providers, appropriate contractual terms and ongoing monitoring. RBI has also issued directions on IT governance, risk, controls and assurance practices.

How IntelloSync supports the programme

This page describes how IntelloSync supports a compliance programme. It is general information, not legal advice — confirm requirements with your advisers.

  • Service-provider onboarding, due diligence and risk scoring
  • Outsourcing agreements with required clauses tracked as obligations
  • Periodic review reminders with owners and escalation
  • Evidence and attestations for internal audit and inspections
  • One register linking vendor, contract and control

FAQ

Frequently asked questions

Who does the RBI IT outsourcing direction apply to?

According to RBI, it applies to regulated entities including scheduled commercial banks, small finance and payments banks, certain urban co-operative banks, NBFCs other than base-layer NBFCs, credit information companies and all-India financial institutions. Confirm applicability with your advisers.

Can IntelloSync store vendor due-diligence evidence?

Yes. IntelloVendor stores assessments and documents per service provider, linked to their contracts.

Does it remind us about periodic vendor reviews?

Yes. IntelloComply schedules recurring reviews with owners and escalations.

Can we see all contracts with a given IT vendor?

Yes. Vendor records link to every associated contract and obligation.

Is this legal advice?

No. IntelloSync supports your compliance programme; it does not replace legal or regulatory advice.

See your contracts run themselves.

A 30-minute walkthrough with our team, on your use cases — then a 30-day free trial on every product.