Keeping all data centres sovereign, says RBI governor

A sovereign data centre is a facility operated under a country's or public institution's control, rather than relying entirely on outside infrastructure. For the RBI, this means keeping critical financial applications and data within infrastructure it manages. The goal is stronger security, resilience and technological self-reliance.

The Bhubaneswar centre will host applications for NEFT, RTGS, government banking operations and regulated financial entities' consumers. Although NPCI operates UPI, final settlement takes place through RBI data centres and applications. That makes RBI-controlled infrastructure central to the financial system.

RBI governor Sanjay Malhotra said IT is now a core function, not merely support. The new sovereign facility has four independent facilities and Tier IV accreditation. RBI is also strengthening cybersecurity training and indigenous technology as AI changes technology and creates new security risks.

The data centre will host applications behind several essential financial services. These include NEFT and RTGS payment systems, government banking operations, and services used by consumers of regulated financial entities. Its importance comes from the broad range of public and financial activities that rely on these systems.

The article gives a key example through UPI. NPCI operates the Unified Payments Interface, but settlement ultimately happens through RBI data centres and applications. In simple terms, a payment may begin on one network while the final movement and recording of funds depend on RBI infrastructure.

This makes the centre more than a storage site. It is part of the operating foundation for payments and banking services. Secure facilities, better uptime and resilience help these applications remain available as digital financial use expands and technology changes.

The new facility is designed for resilience rather than dependence on one location or installation. It includes four independent facilities, which gives the RBI more separation among critical infrastructure components. The article also identifies Tier IV accreditation, a formal high-resilience standard for data-centre design and operation.

Its role is especially important because it will support NEFT, RTGS, government banking and consumer-facing applications. The RBI says the sovereign data centre should improve efficiency, uptime and resilience. These benefits help critical systems continue operating reliably when demand or technical risks arise.

The article does not state the site's physical size, storage capacity or transaction capacity. It does say that two-thirds of the Bhubaneswar site houses a cybersecurity training institute. The remaining facility details focus on independent sites, accreditation, green-building plans and support for critical financial systems.

If RBI data centres or applications become unavailable, services that depend on them could be interrupted. These include NEFT, RTGS, government banking operations and consumer services provided by regulated financial entities. The article presents this risk as a financial-system resilience issue, not merely a technical inconvenience.

The payment mechanism shows why. NPCI operates UPI, but settlement ultimately takes place through RBI data centres and applications. A disruption at that stage could affect the completion of digital payments, even if the customer-facing UPI network remains available. The article does not provide an outage example or estimate losses.

The RBI is responding with four independent facilities, Tier IV accreditation and a cybersecurity training institute. It is also strengthening technological infrastructure and indigenous technology. These measures are intended to improve uptime, security and resilience as AI-driven risks become more important.

NPCI and the RBI have different roles in digital payments. NPCI operates the Unified Payments Interface, the system through which UPI payments are initiated and routed. The RBI, meanwhile, provides data centres and applications where settlement ultimately takes place.

The article's mechanism is straightforward. A UPI payment can be handled through NPCI's network, but the final settlement of funds depends on RBI infrastructure. This shows that operating a payment platform and settling transactions are related but distinct responsibilities.

The distinction makes RBI's new data centre strategically important. It will support critical payment systems, including NEFT and RTGS, as well as government banking and consumer-facing applications. RBI governor Sanjay Malhotra said IT has become a core function because public, consumer and internal applications run through it. Secure, resilient infrastructure therefore supports the wider payments system.

As financial institutions adopt artificial intelligence, technology becomes more capable and security risks become more complex. The article says AI-driven security risks are one reason two-thirds of the Bhubaneswar site houses a cybersecurity training institute. Stronger skills are needed to protect financial systems and maintain public confidence.

The institute will build expertise in cybersecurity and emerging technologies. Alongside training, the RBI is strengthening its technological infrastructure and indigenous technology. This combines people, systems and national capability rather than treating cybersecurity as a separate technical concern.

The need is immediate because the centre will support payment systems, government banking and consumer applications. Prime Minister Narendra Modi stressed secure digital infrastructure and technological self-reliance. Finance minister Nirmala Sitharaman highlighted cybersecurity and emerging-technology expertise. RBI aims to support India's 2047 development goal through stronger domestic technology.

A data centre is a purpose-built facility that houses computer systems, storage and the software applications that organisations rely on. It allows data and digital services to run from managed infrastructure instead of individual devices. Reliability matters because banks, payment systems and public services may depend on continuous access.

In the RBI's case, the Bhubaneswar centre will host applications supporting NEFT, RTGS, government banking and services for consumers of regulated financial entities. NPCI operates UPI, but final settlement uses RBI data centres and applications. The centre therefore supports both stored information and the processes that complete financial operations.

Reliability comes from the facility's design and protections. The RBI says it has four independent facilities and Tier IV accreditation, and expects better uptime, efficiency and resilience. Its cybersecurity institute will build expertise as AI changes technology and increases security risks.