Mandatory Annual API Audits

UPI-performing PSPs and TPAPs must annually undergo a CERT-In empanelled security audit, covering APIs, encryption, and infrastructure. Audit reports and remediation plans must be submitted to NPCI by August?31,?2025, to ensure compliance.