Back
WITNESS CASE · INDIA · INDIA STACK

India Stack is not an app. It's a stack of public protocols.

India separated identity, payments, and data into three independent public layers, not into a single system. What can be exported to other countries is not the software — it's the decision to separate the layers and who controls them.

1.3B+
people with digital identity (Aadhaar)
16B+
UPI transactions per month
300+
banks and apps connected to the same rail
4
independent public layers
TIMELINE

Four layers, four separate decisions.

2009

The identity layer

The government of India created the UIDAI (Unique Identification Authority of India) with a narrow mandate: assign a 12-digit biometric identity number — Aadhaar — to every resident, verifiable online in real time. The key design decision was to treat identity as a separate public infrastructure layer, queryable by any authorized system, instead of letting every bank, every welfare program, and every telecom operator build its own identity verification from scratch.

2016

The payments layer (UPI)

The National Payments Corporation of India (NPCI, jointly owned by banks under central bank oversight) launched UPI: an instant, free, interoperable payments protocol between bank accounts, usable by any bank or app that implements it. Unlike a private payments monopoly, UPI is a public standard — Paytm, PhonePe, and Google Pay compete on top of the same rail; they are not the rail.

2016–2021

The rest of the stack

A group of technical volunteers (iSPIRT) coined the term «India Stack» to name what was already being built: DigiLocker (verifiable digital documents), eSign (legally valid digital signature), and later the Account Aggregator framework (2021), which lets a person authorize — and revoke — access to their own financial data across institutions. Four layers, four separate design decisions, no single provider owning the full stack.

2023–2025

Dominance and the questions it leaves open

UPI became the dominant payment method in India, processing more monthly transactions than almost any other rail in the world, and it began to be exported — Singapore, France, and the United Arab Emirates adopted it for payments by Indian tourists. At the same time, Aadhaar faced a Supreme Court of India ruling (2018) that restricted its mandatory use by private parties, following a legal battle over privacy and the exclusion of people who could not verify themselves biometrically.

PRINCIPLES ACTIVATED

India Stack clearly activates five of the framework's eight principles. The other three are precisely where the case becomes instructive because of its limits, not its success — constitutional reversibility and deliberative legitimacy are the layers where India built first and debated later.

§ 01

Selective standardization

UPI is a single public protocol; no bank had to invent its own instant payments system, and none could capture it as private property.

§ 02

Double stack

The state retains the protocol — the rules of identity, payment, and consent. Private companies run the product layer: the app, the user experience, the marketing.

§ 03

Layers over silos

Identity, payments, documents, and data are four independent stacks with their own APIs — not a single monolithic system organized by ministry.

§ 05

Endogenous productive density

An entire Indian fintech ecosystem (Paytm, PhonePe, Razorpay, Cred) was built on top of the public rail, instead of the country's payments infrastructure ending up in the hands of a foreign provider.

§ 07

Generational gradient

The generation that uses UPI today to buy from a street stall did not live through the 2016 debate over whether it was worth building a public payments protocol. It inherits it as background fact.

OPEN QUESTION

India built the most ambitious execution layer in the world in digital identity and payments — and left pending exactly the two principles that make that layer sustainable in the long run. Aadhaar became, in practice, quasi-mandatory for accessing subsidies and basic services before the Supreme Court set limits on that mandatory use — a cession of reversibility the framework warns against. And the public debate over how centralized national identity should be arrived after the system was already deployed at scale, not before. The lesson for other countries is not «copy India Stack» — it's that the most sophisticated execution layer in the world does not substitute for the deliberative legitimacy skipped by building first and debating later.

SOURCES

  1. [1]UIDAI (Unique Identification Authority of India) — Aadhaar Dashboard, official enrollment statistics
  2. [2]NPCI (National Payments Corporation of India) — UPI Product Statistics (official monthly data)
  3. [3]Supreme Court of India — K.S. Puttaswamy vs. Union of India (2018), ruling on privacy and the use of Aadhaar
  4. [4]iSPIRT Foundation — India Stack technical documentation (indiastack.org)
Stable identifier
AS-C02·v1.0·May 2026
arquitecturasoberana.com/en/casos/india-stack