The Economic Times reported on October 2, citing officials, that the government was close to empanelling private agencies to expand DigiLocker integrations. The National e-Governance Division published a draft request for empanelment on September 21, but the public notice does not announce a winner or confirm that selection is complete.
The published DigiLocker partner proposal concerns outreach and technical onboarding of institutions that request verified documents. A separate government AI-services procurement has discussed agents for DigiLocker. The two processes should not be treated as one award; the available public notice does not identify a selected AI integrator.
Key Takeaways
- Selection unconfirmed: ET reports that empanelment is close, citing officials; the public NeGD notice remains a draft request, not an award.
- Separate procurement: Reports naming CoRover and Kyndryl concern a government agentic-AI platform evaluation. Their status does not establish an award under the separate DigiLocker partner proposal.
- Strict DPDP Act Compliance: Empanelled integrators are legally prohibited from caching, storing, retaining, profiling, or running secondary analytics on any citizen document data processed through DigiLocker endpoints.
What the DigiLocker partner proposal says
DigiLocker is operated by the National e-Governance Division (NeGD). Its partner model distinguishes document issuers from requesters, which can retrieve verified documents through approved integrations. The September proposal sought partners to expand requester onboarding; it did not announce a completed appointment.
1. The Role of Private Integrators
NeGD’s draft proposal describes an empanelled partner framework for participating organisations. Its outcome remains subject to the procurement process.
- Requester Onboarding: Private technology partners will identify prospective requester organizations (such as regional rural banks, private universities, fintech lenders, and corporate HR departments), configure their technical environments, and connect them with DigiLocker’s API Setu infrastructure.
- Transaction growth: ET reports that agencies would support sustained transaction volumes. The published notice is a proposal and should not be read as a signed commercial agreement.
- AI tools: A separate NeGD AI-services procurement describes agents for government applications such as DigiLocker. It does not establish that every partner under this DigiLocker proposal must deploy conversational AI.
2. CoRover and Kyndryl: a separate reported evaluation
Moneycontrol reported on September 23 that CoRover and Kyndryl were under evaluation for an agentic-AI platform with DigiLocker as a proposed use case. That report does not prove either firm was chosen for the separate ecosystem partner proposal.
- CoRover: An Indian conversational AI provider known for developing the IRCTC “AskDISHA” passenger assistant and BharatGPT. CoRover brings localized conversational AI capabilities to simplify onboarding for non-metro institutions.
- Kyndryl: The multinational IT infrastructure provider (spun out of IBM) offers enterprise systems integration experience and global compliance capabilities.
3. Data Privacy and the DPDP Framework
The draft partner terms describe restrictions on handling citizen documents, according to a separate analysis of the proposal. They should be described as proposed contractual controls, not as proof that an integrator has already been appointed or that all DPDP Act provisions are in force.
- Empanelled partners act purely as technical facilitators and data conduits.
- Integrators are explicitly barred from storing, caching, retaining, or profiling any underlying citizen document data retrieved via the APIs.
- Detailed remedies and statutory consequences depend on the final contract, the applicable law and the timing of legal provisions; this article has not verified an automatic termination or forfeiture rule.
Frequently Asked Questions
Has the government picked a private AI integrator for DigiLocker?
No award has been publicly announced. The Economic Times reported on October 2, citing officials, that empanelment was close, but NeGD’s September 21 notice is a draft request for empanelment.
Who operates DigiLocker?
DigiLocker is operated by the National e-Governance Division (NeGD), whose partner model separates document issuers from requesters that retrieve verified documents through approved integrations.
What data rules would DigiLocker partners follow?
Empanelled integrators may not cache, store, retain, profile or run secondary analytics on citizen document data processed through DigiLocker endpoints. India’s digital public infrastructure is also tested at scale by UPI, which processed 24.07 billion transactions in September.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.



