| India Stack | |
| Titlestyle: | background:#1a1a2e;color:white; |
| Label1: | Type |
| Data1: | Marketing term / branding |
| Label2: | Coined by |
| Data2: | iSPIRT (c. 2012-2013) |
| Label3: | Components |
| Data3: | Aadhaar, UPI, DigiLocker, ABDM, ONDC |
| Label4: | Governing bodies |
| Data4: | UIDAI, NPCI, NHA, MeitY |
| Label5: | Country |
| Data5: |  India |
| Label6: | Websites |
| Data6: | (promotional) (structural analysis) |
India Stack is a marketing term coined by iSPIRT (Indian Software Product Industry Round Table) to brand a collection of government-operated digital infrastructure systems in India as a unified platform.[1] The term encompasses identity verification (Aadhaar), payments (UPI), document storage (DigiLocker), and data sharing layers--each governed by separate government bodies with distinct legal frameworks.
The systems have achieved significant scale, with UPI processing over 10billion monthly transactions and Aadhaar covering 1.4billion residents. However, the platform has faced sustained criticism regarding welfare exclusion linked to biometric authentication failures, privacy and surveillance concerns, and the gap between "open" branding and closed, proprietary governance.[1] [2]
The term "India Stack" was coined by iSPIRT, a technology industry think tank co-founded by Sharad Sharma in 2013. iSPIRT positioned the branding to describe separate government systems as a unified, exportable model of "digital public infrastructure" (DPI).[3]
Critics characterise "India Stack" as a PR construct--branding separate closed systems as unified "open" infrastructure for international promotion. Each component (Aadhaar under UIDAI, UPI under NPCI, DigiLocker under MeitY, ABDM under NHA) is closed-source and separately governed; the unified branding suggests cohesion and openness while the underlying systems remain proprietary and siloed.[4]
| India Stack Layers | |
| Headerstyle: | background:#1a1a2e;color:white; |
| Label1: | Identity |
| Data1: | Aadhaar (UIDAI) |
| Label2: | Payments |
| Data2: | UPI, BBPS, AePS (NPCI) |
| Label3: | Documents |
| Data3: | DigiLocker (MeitY) |
| Label4: | Health |
| Data4: | ABDM (NHA) |
| Label5: | Commerce |
| Data5: | ONDC (ONDC Ltd) |
India Stack comprises several separately governed layers:[5]
| Year | Event | |
|---|---|---|
| 2009 | Aadhaar pilot launched under UIDAI, led by Nandan Nilekani | |
| 2013 | iSPIRT founded; "India Stack" terminology emerges | |
| 2016 | UPI launched by NPCI; 2016 Indian banknote demonetisation accelerates digital adoption | |
| 2017 | Supreme Court of India rules privacy a fundamental right (Puttaswamy judgment) | |
| 2018 | Supreme Court upholds Aadhaar but strikes down Section 57 (private sector use) | |
| 2019 | Government re-enables private sector Aadhaar use via ordinance | |
| 2021 | Account Aggregator framework launches; CoWIN for COVID vaccination | |
| 2023 | UIDAI expands facial authentication; 50million+ monthly facial auth transactions | |
| 2024 | 100% e-KYC mandate for ration cards; Odisha suspends 20+ lakh beneficiaries | |
| 2025 | Madras High Court rules Aadhaar correction a fundamental right |
Despite "open" branding, India Stack components are governed by government bodies and private entities with restricted access:[6]
| Component | Governing Body | Legal Status | Access Model | |
|---|---|---|---|---|
| Statutory authority (exempt from RTI for certain categories) | Government licence required | |||
| Membership approval required | ||||
| Account Aggregator | Sahamati | Industry alliance | Membership required | |
| Government authority | Partnership required | |||
| ONDC Ltd | Licensing required |
Unlike open protocols such as HTTP, email, or TCP/IP where anyone can implement independently, India Stack requires permission at every layer. There is no public RFC process, no citizen representation on technical committees, and no mechanism to challenge design decisions before deployment.[6]
Researchers note this differs fundamentally from both the IETF model of "rough consensus and running code" and FOSS contribution models where rejected proposals can still be implemented independently. In India Stack, if a proposal is rejected, there is no alternative--the gatekeeper's decision is final.[4]
India Stack components have achieved significant transaction volumes:
Proponents credit India Stack with expanding financial inclusion through Jan Dhan bank accounts, reducing subsidy leakage through Direct Benefit Transfer, and enabling digital service delivery.
Aadhaar-based biometric authentication for welfare distribution has been linked to documented exclusions and deaths. Research by economists including Reetika Khera of IIT Delhi has found significant exclusion of genuine beneficiaries.[8]
Key findings include:
Documented cases include Santoshi Kumari (11, Jharkhand, 2017), Arjun Hembram (11, Odisha, 2023), and others.[8]
Human Rights Watch documented 2.5million families in Rajasthan denied ration supplies between September 2016 and June 2017 due to Aadhaar issues. The report also found children without Aadhaar excluded from government schools and hospitals demanding Aadhaar enrolment before issuing birth certificates.[2]
Studies have documented significant biometric authentication failure rates:[12]
A 2018 analysis estimated that "two to five per cent of the Indian population would be excluded" due to biometric failures alone.[12]
Despite documented fingerprint exclusion, states began adding facial authentication requirements. Rajasthan mandated facial authentication for pensioners via the RAJSSP app in February 2023. Data from January-April 2025 showed:[13]
Despite 30% failure rates, UIDAI reported 50million+ facial authentication transactions monthly since 2023.[13]
Critics argue that consent is structurally compromised when Aadhaar authentication is mandatory for essential services. UIDAI claims authentication requires "explicit consent," but researchers note consent is meaningless when refusal means exclusion from:[8] [14]
See main article: Surveillance in India. The centralised nature of India Stack creates surveillance infrastructure concerns:[15]
The Supreme Court of India ruled privacy a fundamental right in August 2017 (Justice K.S. Puttaswamy v. Union of India).[16]
In September 2018, the court upheld Aadhaar's constitutional validity but struck down Section 57 allowing private sector use. The government subsequently amended laws through ordinances to restore private sector access.[17]
While described as "open APIs," India Stack does not follow free and open-source software principles:[4]
The Financial Times noted these concerns in 2023, questioning claims of openness.[3]
Several structural accountability issues have been identified:[18]
The COVID-19 vaccination rollout via CoWIN highlighted digital divide issues:[19]
In June 2024, the government directed 100% e-KYC compliance for all ration card holders. Odisha suspended rice distribution for 20+ lakh (2million+) eligible individuals for e-KYC non-compliance. The Right to Food Campaign urged the government to halt e-KYC and remove exclusionary digital measures from PDS.[14]
Several countries have expressed interest in adopting India Stack components. Sri Lanka, Morocco, the Philippines, Guinea, Ethiopia, and Togo have reportedly started using components.[20]
Critics note that countries adopting the model may also adopt its structural issues regarding exclusion, consent, and accountability.[1]
