India Stack

Last updated

India Stack
TypeMarketing term / branding
Coined by iSPIRT (c. 2012-2013)
Components Aadhaar, UPI, DigiLocker, ABDM, ONDC
Governing bodies UIDAI, NPCI, NHA, MeitY
CountryFlag of India.svg India
Websites indiastack.org (promotional)
indiastack.in (structural analysis)


India Stack is a marketing term coined by iSPIRT (Indian Software Product Industry Round Table) to brand a collection of government-operated digital infrastructure systems in India as a unified platform. [1] The term encompasses identity verification (Aadhaar), payments (UPI), document storage (DigiLocker), and data sharing layers--each governed by separate government bodies with distinct legal frameworks.

Contents

The systems have achieved significant scale, with UPI processing over 10 billion monthly transactions and Aadhaar covering 1.4 billion residents. However, the platform has faced sustained criticism regarding welfare exclusion linked to biometric authentication failures, privacy and surveillance concerns, and the gap between "open" branding and closed, proprietary governance. [1] [2]

Origin of the term

The term "India Stack" was coined by iSPIRT, a technology industry think tank co-founded by Sharad Sharma in 2013. iSPIRT positioned the branding to describe separate government systems as a unified, exportable model of "digital public infrastructure" (DPI). [3]

Critics characterise "India Stack" as a PR construct--branding separate closed systems as unified "open" infrastructure for international promotion. Each component (Aadhaar under UIDAI, UPI under NPCI, DigiLocker under MeitY, ABDM under NHA) is closed-source and separately governed; the unified branding suggests cohesion and openness while the underlying systems remain proprietary and siloed. [4]

Components

India Stack Layers
Identity Aadhaar (UIDAI)
Payments UPI, BBPS, AePS (NPCI)
Documents DigiLocker (MeitY)
Health ABDM (NHA)
Commerce ONDC (ONDC Ltd)

India Stack comprises several separately governed layers: [5]

History

YearEvent
2009Aadhaar pilot launched under UIDAI, led by Nandan Nilekani
2013 iSPIRT founded; "India Stack" terminology emerges
2016UPI launched by NPCI; 2016 Indian banknote demonetisation accelerates digital adoption
2017 Supreme Court of India rules privacy a fundamental right (Puttaswamy judgment)
2018Supreme Court upholds Aadhaar but strikes down Section 57 (private sector use)
2019Government re-enables private sector Aadhaar use via ordinance
2021Account Aggregator framework launches; CoWIN for COVID vaccination
2023UIDAI expands facial authentication; 50 million+ monthly facial auth transactions
2024100% e-KYC mandate for ration cards; Odisha suspends 20+ lakh beneficiaries
2025 Madras High Court rules Aadhaar correction a fundamental right

Governance structure

Despite "open" branding, India Stack components are governed by government bodies and private entities with restricted access: [6]

ComponentGoverning BodyLegal StatusAccess Model
Aadhaar UIDAI Statutory authority (exempt from RTI for certain categories)Government licence required
UPI/BBPS NPCI Private Section 8 company Membership approval required
Account AggregatorSahamatiIndustry allianceMembership required
ABDM NHA Government authorityPartnership required
ONDC ONDC LtdPrivate Section 8 company Licensing required

Participation model

Unlike open protocols such as HTTP, email, or TCP/IP where anyone can implement independently, India Stack requires permission at every layer. There is no public RFC process, no citizen representation on technical committees, and no mechanism to challenge design decisions before deployment. [6]

Researchers note this differs fundamentally from both the IETF model of "rough consensus and running code" and FOSS contribution models where rejected proposals can still be implemented independently. In India Stack, if a proposal is rejected, there is no alternative--the gatekeeper's decision is final. [4]

Scale and adoption

India Stack components have achieved significant transaction volumes:

Proponents credit India Stack with expanding financial inclusion through Jan Dhan bank accounts, reducing subsidy leakage through Direct Benefit Transfer, and enabling digital service delivery.

Concerns and criticism

Welfare exclusion and documented denials

Aadhaar-based biometric authentication for welfare distribution has been linked to documented exclusions and deaths. Research by economists including Reetika Khera of IIT Delhi has found significant exclusion of genuine beneficiaries. [8]

Key findings include:

Documented cases include Santoshi Kumari (11, Jharkhand, 2017), Arjun Hembram (11, Odisha, 2023), and others. [8]

Human Rights Watch documented 2.5 million families in Rajasthan denied ration supplies between September 2016 and June 2017 due to Aadhaar issues. The report also found children without Aadhaar excluded from government schools and hospitals demanding Aadhaar enrolment before issuing birth certificates. [2]

Biometric authentication failures

Studies have documented significant biometric authentication failure rates: [12]

A 2018 analysis estimated that "two to five per cent of the Indian population would be excluded" due to biometric failures alone. [12]

Facial authentication expansion (2023-2025)

Despite documented fingerprint exclusion, states began adding facial authentication requirements. Rajasthan mandated facial authentication for pensioners via the RAJSSP app in February 2023. Data from January-April 2025 showed: [13]

Despite 30% failure rates, UIDAI reported 50 million+ facial authentication transactions monthly since 2023. [13]

Critics argue that consent is structurally compromised when Aadhaar authentication is mandatory for essential services. UIDAI claims authentication requires "explicit consent," but researchers note consent is meaningless when refusal means exclusion from: [8] [14]

Privacy and surveillance

The centralised nature of India Stack creates surveillance infrastructure concerns: [15]

The Supreme Court of India ruled privacy a fundamental right in August 2017 (Justice K.S. Puttaswamy v. Union of India). [16]

In September 2018, the court upheld Aadhaar's constitutional validity but struck down Section 57 allowing private sector use. The government subsequently amended laws through ordinances to restore private sector access. [17]

Open source claims

While described as "open APIs," India Stack does not follow free and open-source software principles: [4]

The Financial Times noted these concerns in 2023, questioning claims of openness. [3]

Accountability gaps

Several structural accountability issues have been identified: [18]

Digital divide

The COVID-19 vaccination rollout via CoWIN highlighted digital divide issues: [19]

Court cases

Key judgments

e-KYC mandate (2024)

In June 2024, the government directed 100% e-KYC compliance for all ration card holders. Odisha suspended rice distribution for 20+ lakh (2 million+) eligible individuals for e-KYC non-compliance. The Right to Food Campaign urged the government to halt e-KYC and remove exclusionary digital measures from PDS. [14]

International adoption

Several countries have expressed interest in adopting India Stack components. Sri Lanka, Morocco, the Philippines, Guinea, Ethiopia, and Togo have reportedly started using components. [20]

Critics note that countries adopting the model may also adopt its structural issues regarding exclusion, consent, and accountability. [1]

See also

References

  1. 1 2 3 "India Stack Watch" . Retrieved 7 January 2025.
  2. 1 2 "India: Identification Project Threatens Rights". Human Rights Watch. 13 January 2018. Retrieved 7 January 2025.
  3. 1 2 "The India Stack: Opening the digital marketplace to the masses". Financial Times . 20 April 2023. Retrieved 7 January 2025.
  4. 1 2 3 "Is India Stack Open Source?". India Stack Watch. Retrieved 7 January 2025.
  5. "India Stack Layers". India Stack Watch. Retrieved 7 January 2025.
  6. 1 2 "Can You Participate?". India Stack Watch. Retrieved 7 January 2025.
  7. "NPCI - National Payments Corporation of India" . Retrieved 7 January 2025.
  8. 1 2 3 "The Human Cost". India Stack Watch. Retrieved 7 January 2025.
  9. "J-PAL Studies on Aadhaar and Welfare" . Retrieved 7 January 2025.
  10. "Right to Food Campaign" . Retrieved 7 January 2025.
  11. Khera, Reetika (9 August 2018). "Aadhaar, India's ID system, is a cautionary tale". The Washington Post . Retrieved 7 January 2025.
  12. 1 2 Ramanathan, Usha. "UID: Questions without Answers". Centre for Internet and Society . Retrieved 7 January 2025.
  13. 1 2 "No Match: Rajasthan's Push for Facial Authentication on Pensioners Leaves Many Behind". The Wire. 2025. Retrieved 7 January 2025.
  14. 1 2 "Infrastructures of Exclusion: How e-KYC Impacts Access to Food". IDR Online. Retrieved 7 January 2025.
  15. "Surveillance Architecture". India Stack Watch. Retrieved 7 January 2025.
  16. "Right to Privacy a Fundamental Right, Says Supreme Court in Unanimous Verdict". The Wire. 24 August 2017. Retrieved 7 January 2025.
  17. "India expands Aadhaar authentication for businesses, raising privacy concerns". TechCrunch. 2 February 2025. Retrieved 7 January 2025.
  18. "Can You Audit It?". India Stack Watch. Retrieved 7 January 2025.
  19. "SFLC.in Raises Concerns Related to CoWIN". Software Freedom Law Centre, India. 2021. Retrieved 7 January 2025.
  20. "World rushes to adopt the 'India Stack' while 'UPI' goes global". ThePrint. 15 February 2023. Retrieved 7 January 2025.

Further reading

Critical views

Other views