Compliance & Legal

RBI's digital lending rules aren't a compliance patch. They're four permanent states in your loan engine.

RBI's digital lending framework reads like a disclosure checklist. In a loan-servicing codebase it's four states: who can touch the money, who's allowed on the platform, and two clocks it can't ignore.

The labour codes' 50% wage rule isn't a policy tweak. It's a payroll data-model rewrite.

India's four labour codes have been in force since November 2025. The hard part for payroll teams isn't the law itself — it's that CTC structures and HRIS systems weren't built for its biggest changes.

DPDP Rules 2025 for engineers: what you actually have to change in your codebase

Most DPDP guides are written for DPOs, not engineers. Here are the six technical obligations the DPDP Rules 2025 create — what each one requires from your backend, which phase it activates in, and where to start.

What the ESOP grant letter doesn't tell you

Most Indian startup engineers receive an ESOP grant, pocket the letter, and assume the equity is worth the headline number. It usually isn't. Here is what to actually check before you exercise or resign.

Open-source licence compliance in a corporate codebase: what engineers actually need to know

Most SaaS engineering teams have never read their dependencies' licence files. That works until the first enterprise security questionnaire arrives. Here is what each licence family means and what to do before that call.

DPDP Rules are live. Here is what your backend actually has to change.

The DPDP Rules were notified in November 2025 and most Indian SaaS teams are treating May 2027 as comfortable. It isn't. Here is what the Rules actually require you to build, in priority order.

Section 65B is gone. What the BSA's Section 63 requires from your digital evidence.

Section 65B of the Indian Evidence Act is gone. Its replacement requires hash values in court admissibility certificates, a procedural change most Indian businesses have not built into their document workflows yet.

DPDP Act for engineers: what you actually have to change in your code

The DPDP Act has three engineering implications: a consent layer, a deletion pipeline, and breach notification. Most teams build all three before checking which exemptions already apply to their use case.

Open-source licensing in a corporate SaaS codebase: a non-lawyer's guide that's actually right

Most SaaS teams check if a dependency is permissively licenced and stop there. The real risk is in three places: AGPL libraries, buried transitive dependencies, and the 2021-2024 relicensing wave.

India's DPDP Act is not GDPR with a different flag — and SaaS companies are about to learn that the hard way

The EU AI Act's moving deadline: what the Digital Omnibus actually changes — and what it doesn't

The Digital Omnibus provisional agreement defers high-risk AI obligations to December 2027. But it is not yet law — and until it is, August 2026 remains the enforceable date. Here is how to plan for both.

IP assignment in Indian employment contracts: what engineers building side projects need to know

Indian tech employment contracts often include a broad IP assignment clause. This covers what it actually reaches, where it cannot, and what engineers with side projects should do before signing or quitting.