DPI Deep Dive — Wednesday | September 16, 2026

Layer 3 — Documents & Data Exchange — spent the week proving that the document layer is no longer backstage infrastructure; it is now the product. DigiLocker’s architecture crossed a new scale marker — 73.53 crore registered users and 936.03 crore issued documents, per the government’s own Global Fintech Fest factsheet ¹ — and then three different governments moved decisively around it: New Delhi explored taking the locker model global for businesses as the BRICS Summit convened in Delhi, ² Tamil Nadu stopped printing driving licences and registration certificates altogether, ³ Karnataka debated walking physical marks cards back into existence, ⁴ and NeGD quietly made DigiLocker the first deployment site for agentic AI in government. ⁵ The through-line: India’s documents layer has graduated from “scan and store” to “issue, verify, and act” — and every step of that graduation is now contested at the point of acceptance, not the point of issuance.

1. Entity Locker Goes Shopping at BRICS: The Business Wallet Looks for Borders

The week’s most geopolitically loaded document story barely appeared on the BRICS Summit agenda. NDTV reported, ahead of the 18th BRICS Summit at Bharat Mandapam on September 12–13, that the government is in consultations to integrate Entity Locker — DigiLocker’s corporate sibling, built by NeGD for companies, MSMEs, startups, trusts, societies and government entities — with Russia, the European Union and Singapore, with banks from those jurisdictions involved in the talks. ² Officials described the proposal as modelled on India’s DigiLocker integration efforts with other countries and stressed it remains at a “diplomatic preliminary stage” — it was not publicly listed as summit business. ²

The domestic plumbing is already laid. Entity Locker’s integration with NeSL’s digital-document platform lets businesses fetch digitally executed electronic bank guarantees directly into their accounts, with MeitY claiming turnaround times collapsing from days to minutes. ² A high-level committee formed in February has been tasked with the platform’s roadmap, ecosystem expansion, and — the quietly radical word — commercialisation of the broader Digital Locker system. ² The model being explored abroad is wallet-to-wallet: an Indian exporter shares FSSAI certificates, bank records and corporate credentials with an overseas buyer, and the receiving party verifies each credential against its source rather than re-authenticating photocopies. ² Kenya has already concluded an implementation framework agreement for DigiLocker and foundational work has begun in Cuba — the individual locker is India’s most-exported governance artefact after UPI. ⁶

Policy voices were quick to frame the prize: Kazim Rizvi of The Dialogue called it “a natural next step in India’s journey as an exporter of digital public infrastructure,” reducing compliance costs for MSMEs seeking global markets, finance and procurement. ² The consumer-sized caveat: cross-border document trust is ultimately a legal reciprocity problem, not an API problem. A Singaporean bank verifying an FSSAI certificate through a wallet is only as protected as the mutual recognition arrangement behind it — and nobody has published one yet. Until the recognition frameworks are public, “Entity Locker global” is a diplomatic aspiration with a pilot-shaped silhouette.

The cross-layer angle: This is Layer 3 expanding into Layer 4 (commerce and trade) with Layer 2’s banks at the table — the document rail following the payment rail across borders, and both now moving in lockstep with India’s DPI diplomacy calendar.

2. Tamil Nadu Stops Printing: The DL/RC Becomes Download-Only

The boldest domestic move of the week came from Chennai. By a Government Order reported on September 11, Tamil Nadu ordered the discontinuation of printing and postal dispatch of physical driving licences and registration certificates after September 12 — a full break from the physical default. ³ The order operationalised Chief Minister C. Joseph Vijay’s Assembly announcement that DLs and RCs would be issued digitally from September 15, downloadable by the citizen on the same day the driving test is completed or the vehicle registered. ³

The design details are what make it workable rather than merely ambitious. Digital DLs and RCs carry QR codes linked to the original electronic records in government databases — reachable through m-Parivahan and DigiLocker — enabling real-time verification and, the order hopes, preventing duplicate documents. ³ The state explicitly prohibited its own officers from demanding physical documents after September 12: seizure, authentication and penalty records must all happen electronically. Printouts on plain paper, laminated or digital, are valid provided the QR code verifies; e-Seva centres will print on demand for a fee. ³

Two consumer watch-items follow. First, the free-download window: the G.O. makes digital documents free for one year from September 13 or until the Tamil Nadu Motor Vehicle Rules, 1989, are amended, whichever is earliest ³ — meaning the permanent fee schedule for what was previously a bundled service is still unwritten. Second, the verification gap at the roadside: a QR code is only as good as the checking officer’s connectivity and the source database’s uptime. The state has removed the paper fallback from its own conduct; whether every checkpoint, RTO desk and insurance inspection follows before the one-year window closes is the real adoption test. Tamil Nadu is the largest state to date to flip the default this way — and every other state transport department is now watching whether enforcement friction or citizen convenience dominates the headlines in three months.

The cross-layer angle: Layer 3’s issuance decision now binds Layer 1’s identity infrastructure — Vahan and Sarathi become the ground truth for who may drive — and hands Layer 7 a new surface: every roadside check is now a live API call against the document rail.

3. DigiLocker Gets an Agent: Agentic AI Arrives on a DPI Substrate

While the summit was headline theatre, the more structurally interesting development ran in the trade press. NeGD under MeitY is developing a reusable “unified AI assistant and bot” platform with DigiLocker as the initial implementation — an LLM-driven, agentic system designed to orchestrate multiple AI components, intended as a template for government-wide use rather than another isolated chatbot. ⁵ Such agents could understand citizen objectives, plan steps, access approved tools, and complete transactions on the citizen’s behalf. ⁵ When the world’s largest document locker becomes the first substrate for autonomous government software, the governance questions stop being hypothetical.

The accountability discussion has already begun, and it is refreshingly unsparing. Salman Waris of TechLegis LLC identified the “sequencing problem”: AI systems are being designed and piloted before consent managers and erasure mechanisms are fully operational under the DPDP framework — and, as he put it, “most Indian deployments still treat ‘safety’ as an uptime and authentication problem, not an explainability or contestability problem.” ⁵ Jameela Sahiba of The Dialogue pushed for “narrow, explicit permissions” — task-specific, time-bound, auditable access rather than broad database reach. ⁵ On the defensive side, MeitY Secretary S. Krishnan confirmed CERT-In is operationalising an AI-powered “war room,” with his own admission that “constant vigilance is what is needed.” ⁵

To NeGD’s credit, the proposed platform architecture anticipates some of this: human-in-the-loop review, hallucination and accuracy evaluation, and dashboards to track agent behaviour are written into the design. ⁵ But the honest critique stands: safeguards in tender documents are not safeguards in production. An agent that can “complete transactions” inside a locker holding 936 crore documents ¹ is simultaneously the best accessibility upgrade DPI has ever shipped and the single largest new attack surface — prompt-injected into an agent with document-fetch powers, a fraudster no longer needs to phish the citizen, only the software. The consumer ask: publish the agent’s permission model before launch, not in a post-incident report after.

The cross-layer angle: Layer 3 deploying Layer 7’s unresolved problems inside itself — DPDP consent machinery, CERT-In threat models, and contestability standards are all being stress-tested by an agent that acts on documents before the law has decided who is liable when it acts wrongly.

4. Karnataka’s Paper Regret: The Acceptance Problem Walks Back In

If Tamil Nadu’s move showed the digital default’s ambition, Karnataka’s week exposed its soft underbelly. At a September 11 meeting of vice-chancellors with Higher Education Minister Basavaraj Rayareddi at the Karnataka State Higher Education Council, VCs reported that students and parents are complaining digital marks cards “are not accepted at many places, including some foreign universities and corporates” — because all academic documents in the state now exist only digitally in the National Academic Depository-DigiLocker pipeline. ⁴ The minister responded positively to a walk-back: the government will set minimum and maximum printing rates, quality requirements and anti-counterfeit standards so physical marks cards can be issued alongside digital ones. Higher education secretary Thulasi Maddineni framed the compromise precisely — both formats will coexist, with online verification on DigiLocker remaining the authenticity check. ⁴

The irony is sharp. DigiLocker documents are, by Rule 9A of the IT Rules, deemed at par with originals — yet the acceptance failure is happening not in Indian law but in foreign admissions offices and HR onboarding portals that have never heard of Rule 9A. Maharashtra’s higher and technical education minister was pushing the opposite direction the same week, urging Nagpur universities to use DigiLocker to issue degrees without delay. ⁷ Between the two states sits the week’s real lesson about the documents layer: issuance was never the hard part — acceptance is. A digital credential is only as portable as the most analogue institution willing to read it. The durable fix is not re-issuing paper but pushing verification links — QR-checked, source-anchored — into the workflows of the foreign universities and corporates currently bouncing digital marksheets. Karnataka’s dual-format compromise is a pragmatic patch for students, but every reprinted marksheet is also a small admission that the verification network effect hasn’t been built yet.

The cross-layer angle: Layer 5’s education infrastructure (NAD, Academic Bank of Credits) is discovering that Layer 3’s guarantees stop at jurisdictional borders — and Layer 7’s trust problem is measured in admissions-office policies, not cryptography.

5. Exam Season Stress-Test: DigiLocker Becomes Mandatory Gatekeeping

The quietest but most consequential normalisation of the week: DigiLocker became compulsory, not optional, at the front door of India’s largest exam system. GATE 2027 — organised by IIT Madras, registration closing September 27 — has made DigiLocker-based registration mandatory for Indian nationals and introduced live facial verification during registration, alongside a new Robotics & Automation paper and 300+ exam cities. ⁸ Candidates are explicitly advised to have their DigiLocker account and documents ready before starting. ⁸ Meanwhile the National Testing Agency pushed JEE Main 2026 scorecards into DigiLocker for secure viewing and download. ⁹

The education-credentials pipeline is likewise deepening into the welfare stack. The Social Justice and Empowerment Ministry disclosed on September 14 that ₹51,474 crore has been released for SC scholarships over 12 years, with the Post-Matric Scholarship Scheme running on Aadhaar-seeded DBT since FY 2021-22 — de-duplication, biometric authentication and e-KYC as the verification spine, and DigiLocker plus API Setu integration for digital verification of certificates and supporting documents. ^{10 11 10 11} Read together: the document layer is no longer a storage convenience but the identity-adjacent gate through which national examinations, welfare entitlements, and academic records must pass. That is efficient — and it concentrates failure. A student whose DigiLocker fetch fails on registration day, whose name mismatches between issuer and Aadhaar, or whose consent token lapses has no counter at the exam gate. Every mandatory DigiLocker integration silently converts a document-system outage into a citizen-rights incident. The layer’s uptime SLA is now, functionally, an education-policy parameter — and nobody has published it.

The cross-layer angle: Layer 3 hard-fusing with Layer 1 (facial verification, Aadhaar e-KYC) and Layer 6 (DBT welfare delivery) — the exam hall and the scholarship account are now downstream of the locker’s availability page.

The Week’s Ledger

The seven days describe a documents layer completing its metamorphosis: from wallet to rails. Scale (73.53 crore users, 936 crore documents ¹), reach (Tamil Nadu’s print-free DL/RC ³), ambition (Entity Locker courting three jurisdictions during BRICS ²), intelligence (agentic AI choosing DigiLocker as its first substrate ⁵), and compulsion (GATE’s mandatory DigiLocker registration ⁸) all landed inside one week. But the week also supplied the counter-evidence: Karnataka’s VCs rediscovering that paper persists wherever acceptance lags, ⁴ and policy experts noting that the agent’s permission model is being written faster than the accountability framework. ⁵ The documents layer won the issuance war years ago. The next twelve months decide the acceptance war — border by border, admissions office by admissions office, roadside check by roadside check — and the consumer’s interest is blunt: verification must travel wherever the document already has, or the paper will follow the citizen forever.