RBISEBIMeitYIRDAICDSCOBISDGFTDGCA
AMLEGALS / Market Entry / Sectoral Approvals
Sectoral Regulatory Approvals

Eight regulators. One sequenced licence architecture.

Most India entries fail not on FEMA, but on the licence that surfaced three months after launch. We map every regulator your activity touches, sequence the approvals, build the file and walk the inspection \u2014 so revenue starts on day one, not month twelve.

The wrong sequence costs months. The right sequence is a one-page matrix.
\u20b9 2 cr
Minimum Net Owned Funds for NBFC registration under RBI Act Section 45-IA
50 L
User threshold for Significant Social Media Intermediary under IT Rules 2021
A\u2013D
CDSCO medical-device risk classes that decide the depth of the licence file
Capabilities

Six capabilities. One sequenced licence file.

01

Financial sector licences

RBI · NBFC · PA/PG

NBFC (Section 45-IA, NOF ₹ 2 cr.), PA/PG under PSS Act, account aggregator, fintech and prepaid instrument licences.

02

Capital market licences

SEBI · AIF · PMS · IA

AIF Cat I / II / III, Portfolio Manager, Investment Adviser, Research Analyst, Stock Broker and Custodian registrations.

03

Intermediary & SSMI

MeitY · IT Rules 2021

Intermediary classification, SSMI duties (CCO / Nodal / Grievance Officer), traceability, monthly compliance report.

04

Insurance & medical

IRDAI · CDSCO

IRDAI registration for insurers / intermediaries and CDSCO licence for medical devices / pharma under Drugs and Cosmetics Act and MDR 2017.

05

Goods, trade & aviation

BIS · DGFT · DGCA

BIS mandatory certification under QCOs, DGFT IEC and authorisations, DGCA aviation / drone licensing and PESO.

06

Telecom & digital

DoT · TRAI · STPI

Unified Licence, OSP / Other Service Provider compliance, M2M / IoT registration, STPI / SEZ unit approvals.

The licence sequence

From regulator map to operating licence.

01

Sector map

List every activity, then list every regulator it touches. Output: a regulator-by-activity matrix on one page.

02

Sequence

Pre-incorporation approvals first, post-incorporation second, pre-revenue third. The sequence saves three months.

03

File build

Promoter declarations, fit-and-proper, capital adequacy, IT architecture, premises and personnel — each licence has a defined file.

04

Pre-licence inspection

Field inspection or virtual inspection by the regulator. We pre-walk and rehearse before the regulator visit.

05

In-principle to operating

Many regulators issue in-principle approval first and operating licence after capital infusion or readiness. The window matters.

06

Post-licence governance

Returns, audit, board reporting and amendments to the licence — the licence is not the end of the file, it is the start.

The regulators that decide the licence file
Each is an authority we file before \u2014 not after \u2014 the launch.
RBI
Reserve Bank of India
Banking, NBFC, payment systems and any financial activity nexus.
Mumbai
MeitY
Ministry of Electronics & IT
Intermediary, SSMI duties, DPDPA enforcement and data centre policy.
New Delhi
SEBI
Securities & Exchange Board of India
AIF, PMS, IA, broker, custodian and listed-company conduct.
Mumbai
CDSCO
Central Drugs Standard Control Org.
Medical devices, drugs and cosmetics under MDR 2017 and D&C Act 1940.
DGHS
Answers

The five questions that decide the licence file.

01How do we identify which regulators we will be answerable to in India?

Regulator mapping is read from the activity, not the entity. The same Indian company can be answerable to the Reserve Bank of India (for any financial activity), SEBI (for capital market or investment manager activity), the Ministry of Electronics and IT (for intermediary and significant social media duties), the Insurance Regulatory and Development Authority (for insurance distribution), the Central Drugs Standard Control Organisation (for medical devices and pharma) and the Bureau of Indian Standards (for mandatory product certification). The first deliverable is a sector-by-sector regulator map with sequencing.

02When is an NBFC registration required, and what is the realistic timeline?

Section 45-IA of the Reserve Bank of India Act, 1934 prohibits a company from commencing or carrying on the business of a non-banking financial institution without prior registration with the RBI and minimum Net Owned Funds of ₹ 2 crore. The RBI Master Direction on NBFC — Scale Based Regulation prescribes capital, governance, fit-and-proper and exposure norms. The realistic registration timeline, depending on the layer (Base / Middle / Upper / Top), is 6–12 months and the file must be defensible end to end.

03What does MeitY intermediary classification require under the IT Rules 2021?

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 separate Intermediaries from Significant Social Media Intermediaries (SSMI, > 50 lakh users threshold under the Government notification). SSMIs must appoint a Chief Compliance Officer, a Nodal Contact Person and a Resident Grievance Officer, publish a monthly compliance report, enable traceability where required and meet the takedown SLA in the Rules. The architecture is more than a policy page on the website.

04When do we need IRDAI registration or a CDSCO licence?

A foreign insurer or distributor needs registration under the Insurance Act, 1938 read with the IRDAI (Registration of Indian Insurance Companies) Regulations — the FDI cap has been progressively liberalised, with a Government proposal to allow 100% subject to conditions. For medical devices, the CDSCO under the Medical Devices Rules, 2017 and the Drugs and Cosmetics Act, 1940 issues the manufacturing / import licence, with risk-class A / B / C / D determining the file depth. Each one is a multi-month sequence with field inspection.

05What about BIS, DGFT, DoT/TRAI, DGCA and PESO — are these often missed?

Yes — these are the licensing layers most often missed in entry planning. BIS mandatory certification under the Bureau of Indian Standards Act, 2016 applies to a growing list of products under Quality Control Orders. DGFT issues IEC and any restricted-item authorisation. DoT/TRAI govern any telecom-touching activity. DGCA governs aviation and drone use. PESO governs explosives, petroleum and gas products. We list them in the entry diagnostic so that nothing surfaces three months after launch.

Engage AMLEGALS

Map every regulator before the first sale.

The licence that surfaces three months after launch costs you the quarter. We surface them all in week one.