Why Nexovern
Support Request a demo

Home  /  Resources  /  Frameworks  /  SEBI Algo Framework

Every algorithmic order traced, registered, and accountable: SEBI's framework is now mandatory

Since April 1, 2026, every algorithmic order on Indian exchanges must carry an exchange-assigned Algo ID. Brokers bear principal liability for every algorithm on their platform, whether built in-house, sourced from a vendor, or developed by a retail client. For operators deploying AI agents in trading workflows, the algo trading framework and SEBI's parallel AI/ML governance regime create a single regulatory surface: every automated trading decision is traceable, auditable, and tied to a responsible entity.

What is SEBI's Algo Trading Framework?

The Securities and Exchange Board of India issued its landmark circular on February 4, 2025 (Circular No. SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/0000013), titled "Safer Participation of Retail Investors in Algorithmic Trading." Building on SEBI's original 2012 guidelines, the framework establishes a comprehensive regulatory regime for all automated trading in Indian capital markets. It formalizes the broker-as-principal model, requires exchange-assigned Algo IDs on every algorithmic order, mandates kill switches and audit trails, and brings third-party algo providers under exchange empanelment. Running alongside this is Regulation 16C of the SEBI (Intermediaries) (Amendment) Regulations, 2025, which makes the deploying entity solely liable for any AI/ML tool it uses, regardless of whether the tool was built internally or procured from a vendor.

50%+

of total market turnover on Indian exchanges is now driven by algorithmic trading

SEBI Circular, Feb 2025

111

brokers settled with SEBI for algo trading violations, including Zerodha, ICICI Securities, HDFC Securities, and Angel One

SEBI Settlement Scheme, 2025

Rs 4,843 Cr

impounded from Jane Street Group entities in the largest disgorgement order in SEBI history (~US$566M)

SEBI Interim Order, Jul 2025

Who must comply

Stock Brokers

Must register all algo strategies with exchanges and act as principal, bearing full accountability for every algorithm operating through their platform. Required to implement kill switches, IP whitelisting, two-factor authentication, and comprehensive audit trails. Must conduct due diligence on algo providers before onboarding, enforce daily session resets before market pre-open, and approve only exchange-registered algorithms.

SEBI Circular Feb 4, 2025 · Broker-as-Principal model

Algo Providers and Fintech Vendors

Must be empaneled with stock exchanges before offering services. Operate as agents under the broker-as-principal model. Black-box algo providers (where internal logic is not disclosed) must register as SEBI Research Analysts, publish periodic strategy reports, and fully disclose revenue-sharing arrangements with brokers.

SEBI Circular · Exchange empanelment · RA registration for black-box algos

Stock Exchanges (NSE, BSE, MCX)

Must issue SOPs for testing, monitoring, and simulating algo trading. Assign Algo IDs to registered strategies. Implement kill switch mechanisms and conduct mock trading sessions to validate system readiness. Monitor broker compliance and enforce order-to-trade ratio thresholds with economic disincentives.

SEBI Circular · Exchange operational SOPs

Retail API Traders

Trading below 10 orders per second avoids formal algo registration but still requires static IP whitelisting and two-factor authentication. At or above 10 orders per second, full algo registration is mandatory. OAuth-based logins are required; open API access is prohibited.

SEBI Circular · OPS threshold · API security requirements

Self-Developing Retail Investors

May develop personal algorithms but must register them with the exchange if they meet the OPS threshold. Usage is limited to personal and family use (spouse, dependent children, dependent parents). Offering strategies to other investors is prohibited.

SEBI Circular · Self-developer restrictions

AI/ML System Deployers

Under Regulation 16C (effective February 10, 2025), the deploying entity is solely liable for all AI/ML tools it uses, whether developed in-house or procured externally. Any AI/ML system generating or executing trading orders must comply with the full algo trading framework. Liability cannot be transferred to vendors through SLAs or contracts.

Regulation 16C · SEBI (Intermediaries) (Amendment) Regulations, 2025

What you must do

Register every algorithm and obtain an exchange-assigned Algo ID

SEBI Circular, Algo ID Requirements Since April 1, 2026, every order placed by an algorithm must carry an exchange-assigned Algo ID. Orders without a valid Algo ID will not be executed. This applies whether the order originates from a broker's proprietary system, a third-party provider, or a self-built retail strategy. White-box algorithms require single exchange registration; black-box algorithms require the provider to hold a SEBI Research Analyst license with periodic performance reporting.

Nexovern's telemetry captures which algorithms generated which orders, maintaining a correlated record of strategy execution that maps directly to exchange-assigned Algo IDs and supports registration audits.

Implement and maintain kill switches

SEBI Circular, Kill Switch Requirements Brokers and exchanges must maintain emergency stop mechanisms capable of immediately disabling a malfunctioning algorithm. Exchanges can disable specific Algo IDs when irregularities are detected. Kill switches are the primary defense against flash crash scenarios and errant algorithm behavior. Exchanges issue SOPs for testing kill switch procedures through mock trading sessions.

Nexovern's runtime monitoring detects anomalous execution patterns at the session level, providing the behavioral evidence that kill switch activation decisions require and the post-incident audit trail that regulators expect.

Maintain comprehensive execution logs and audit trails

SEBI Circular, Audit Trail Requirements · AI/ML Reporting Directive Brokers must log all strategy execution with comprehensive records. Pre-trade risk checks are mandatory. A five-year audit trail of all API orders must be maintained. For AI/ML systems, the requirement extends to ten-year retention of audit evidence, including reconstructable decision chains showing what models processed, what outputs were generated, and the approval chains followed.

Nexovern captures prompt-level execution records and OS-layer telemetry for every AI-driven trading session, correlated under one identity. The evidence for five-year and ten-year audit trail compliance is generated continuously, not assembled after the fact.

Enforce broker-as-principal accountability across all algo partnerships

SEBI Circular, Broker-as-Principal Model Brokers function as principals responsible for all algorithms operating through their platform. Algo providers must partner with registered brokers; direct exchange connections are prohibited. Brokers must conduct due diligence before onboarding providers, implement IP whitelisting and static IP binding, enforce OAuth-based logins and two-factor authentication, and ensure all API sessions log out automatically before the next market pre-open.

Nexovern's correlated app-layer and OS-layer records provide brokers with continuous visibility into every algo provider's execution behavior, supporting the due diligence and oversight obligations the principal-agent model demands.

File half-yearly AI/ML disclosures (or NIL declarations)

SEBI AI/ML Reporting Directive (2019, expanded 2023 and 2025) Trading members must disclose details of all AI/ML systems used for trading, risk management, or investor servicing. Reports cover application name, type, first-use date, order involvement, safeguards, methodology, and compliance attestation. Entities not using AI/ML must file NIL declarations. Since July 2025, NSE's cross-exchange reporting mechanism allows a single filing shared across NSE, BSE, MSE, MCX, and NCDEX.

Nexovern's automated inventory of every AI system in your environment provides the baseline data for half-yearly filings: which systems are active, what they do, and what safeguards are in place, compiled continuously rather than manually at filing time.

Prepare for board-level AI governance requirements

SEBI Consultation Paper, June 2025 (pending finalization) The proposed governance framework requires a board-approved AI Governance Framework for all regulated institutions. Internal controls, algorithmic audits, model explainability, and fallback plans must be documented and maintained. Human-in-the-loop mechanisms are mandated (specific approach not yet finalized). Regulatory sandbox testing and staff training are required before live deployment of AI/ML trading systems.

Nexovern's continuous monitoring provides the runtime data that board-level governance reviews require: which AI systems are operating, how they behave against policy boundaries, and where human oversight gaps exist.

Penalties for non-compliance

Statutory penalties: INR 1 lakh to INR 1 crore

Section 15HB of the SEBI Act, 1992: failure to comply with any provision of the Act, rules, regulations, or directions carries a penalty of not less than INR 1 lakh (~US$1,200) up to INR 1 crore (~US$120,000). SEBI can also impose cease-and-desist orders, suspension of registration, and cancellation of registration for serious or repeated violations.

Section 15HB, SEBI Act 1992

Client onboarding bans

Brokers who failed to meet compliance milestones by January 3, 2026 were barred from onboarding new retail clients for API-based algo trading effective January 5, 2026. Non-compliance with exchange empanelment or registration requirements can trigger show-cause notices and de-empanelment.

SEBI Circular · Implementation milestones

Market access denial

Orders without a valid exchange-assigned Algo ID are not executed. This is an immediate, automatic penalty: unregistered algorithms simply cannot place orders. Exchanges also impose economic disincentives for exceeding order-to-trade ratio thresholds.

SEBI Circular, Algo ID enforcement · OTR framework

Jane Street: INR 4,843 crore (~US$566M) impounded

The largest enforcement action in SEBI history. In July 2025, SEBI impounded INR 4,843.57 crore from Jane Street Group entities for alleged index manipulation using algorithmic strategies across 21 trading days. Potential additional penalties reach up to three times the impounded amount. Jane Street entities were temporarily barred from accessing the Indian securities market.

SEBI Interim Order, July 4, 2025

111 brokers settled for INR 1 lakh each

SEBI's Settlement Scheme on Association with Certain Algo Platforms, 2025 addressed violations centered on APIs being integrated with platforms marketing "guaranteed returns." Major brokers including Zerodha, ICICI Securities, HDFC Securities, and Angel One settled. SEBI reserved the right to reopen proceedings if representations were found untrue.

SEBI Settlement Scheme, 2025 · Total: INR 1.11 crore collected

Key dates

01

Feb 4, 2025: Landmark SEBI circular issued

SEBI publishes "Safer Participation of Retail Investors in Algorithmic Trading" (Circular No. SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/0000013), establishing the comprehensive algo trading framework. Six days later, Regulation 16C takes effect, making deployers solely liable for AI/ML tools.

02

Aug 1, 2025: Framework operational

Full regulatory framework operational guidelines take effect. Brokers enabled for go-live by October 1, 2025. All algo products must be submitted to exchanges by October 31, 2025, with exchange registration complete by November 30, 2025.

03

Jan 5, 2026: Non-compliant brokers barred

Brokers who failed to complete at least one mock trading session with full functionality by January 3, 2026 were barred from onboarding new retail clients for API-based algo trading.

04

Apr 1, 2026: Full framework mandatory

All algorithmic orders must carry exchange-assigned Algo IDs. Complete compliance required for all stock brokers in India. Orders without a valid Algo ID are not executed. Revised order-to-trade ratio exemption rules take effect on April 6, 2026.

05

May 13, 2027: DPDP Act Phase 3

The Digital Personal Data Protection Act, 2023, Phase 3 obligations activate, adding data privacy requirements relevant to AI/ML data handling in trading systems. Penalties for non-compliance reach up to INR 250 crore.

How Nexovern helps

The Algo ID deadline has passed. The audit trail deadline never ends.

Every algorithmic order on Indian exchanges now requires a registered Algo ID and a traceable execution record. A Nexovern demo shows you which AI and algorithmic systems in your trading environment are generating audit evidence today, and which are not.