Third-Party & Underlying Services Policy
Developer Platform, APIs, External Service Providers & Service Dependencies | Version 1.0 | Operator: Bani Global Industries LLP (LLPIN: ACI6373) | Effective Date: 05/10/2026
1. Purpose
1.1 This Third-Party & Underlying Services Policy (“Policy”) governs the relationship between the StampMitra Developer Platform and third-party, external and underlying services used in connection with StampMitra APIs.
1.2 StampMitra operates a technology platform that may integrate, orchestrate, route, aggregate or otherwise coordinate services supplied by multiple external parties.
1.3 The Developer may therefore receive a StampMitra API response even where the underlying processing involves one or more external systems.
1.4 The purpose of this Policy is to establish:
- the nature of StampMitra's role;
- the Developer's obligations;
- the treatment of third-party dependencies;
- provider confidentiality;
- external-system limitations;
- data transmission;
- service availability;
- provider changes;
- upstream failures;
- third-party terms;
- liability allocation;
- compliance requirements.
2. StampMitra's Platform Model
2.1 StampMitra may operate as an intermediary technology, orchestration and service-access platform between Developers and external service infrastructure.
2.2 A simplified conceptual architecture may be:
Developer Application → StampMitra Developer Platform → StampMitra API Layer → Internal Processing / Routing / Orchestration → Authorized Underlying Service Provider(s) / Data Source(s) / External System(s) → StampMitra Processing Layer → Developer Application
2.3 This architecture is illustrative and does not constitute a disclosure of StampMitra's confidential technical architecture.
2.4 The actual routing path may vary according to:
- API;
- jurisdiction;
- service;
- transaction type;
- availability;
- capacity;
- technical requirements;
- regulatory requirements;
- commercial arrangements;
- security controls.
3. Definitions
For this Policy:
3.1 “Third-Party Service”
Means a service supplied by a person or entity other than StampMitra.
3.2 “Underlying Service Provider”
Means an external provider, authorized data source, technology provider, service network, regulated entity, government-connected system, infrastructure provider or other third party used in connection with a StampMitra Service.
3.3 “External System”
Means a system not exclusively controlled by StampMitra.
3.4 “Upstream Service”
Means a service or functionality obtained from an external source and incorporated into or used to deliver a StampMitra Service.
3.5 “Provider Information”
Means information concerning the identity, architecture, commercial relationship, pricing, credentials, routing, contracts or technical arrangements of an Underlying Service Provider.
3.6 “Pass-Through Requirement”
Means a requirement imposed by an external service or provider that must be followed by the Developer to enable the relevant Service.
4. No Requirement to Disclose Upstream Providers
4.1 StampMitra may use multiple Underlying Service Providers.
4.2 The Developer acknowledges that StampMitra is not required to publicly identify every provider involved in delivering a Service.
4.3 Specific provider identities may constitute:
- confidential commercial information;
- trade secrets;
- contractual information;
- security-sensitive information;
- proprietary architecture.
4.4 StampMitra may therefore refer generically to:
- “Underlying Service Providers”;
- “Authorized Service Providers”;
- “External Service Providers”;
- “Third-Party Service Providers”;
- “Authorized Data Sources”;
- “External Systems”.
4.5 Such terminology does not mean that StampMitra is concealing a legally required disclosure.
5. Confidential Provider Relationships
5.1 The Developer shall treat non-public provider information obtained through StampMitra as Confidential Information.
5.2 The Developer shall not attempt to discover confidential provider relationships through:
- reverse engineering;
- traffic analysis;
- undocumented endpoint discovery;
- response fingerprinting;
- technical probing;
- infrastructure reconnaissance;
- credential manipulation;
- other unauthorized methods.
6. Provider Commercial Terms
6.1 The Developer has no automatic right to receive:
- wholesale pricing;
- provider invoices;
- provider contracts;
- commercial margins;
- provider commissions;
- internal routing rules;
- negotiated service terms;
- provider credentials.
6.2 StampMitra's commercial relationship with an Underlying Service Provider is separate from the Developer's commercial relationship with StampMitra.
7. No Direct Contract with Underlying Provider
7.1 Unless expressly agreed otherwise, a Developer's use of a StampMitra API does not create a direct contractual relationship between the Developer and an Underlying Service Provider.
7.2 The Developer's contractual relationship for the relevant API is ordinarily with StampMitra.
7.3 An Underlying Service Provider may have its own legal terms that apply to the underlying service where expressly communicated or legally required.
8. Service Orchestration
8.1 StampMitra may determine how a request is processed.
8.2 StampMitra may:
- route requests;
- select an available provider;
- change routing;
- retry requests;
- fail over;
- transform technical formats;
- normalize responses;
- aggregate information;
- validate responses;
- apply business rules.
8.3 The Developer does not ordinarily control the internal provider-selection process.
9. Dynamic Routing
9.1 StampMitra may dynamically select an appropriate underlying service.
9.2 Routing may change without prior Developer notice where reasonably required for:
- availability;
- capacity;
- security;
- performance;
- regulatory compliance;
- commercial continuity;
- technical compatibility.
9.3 A change in routing does not necessarily constitute a material change to the API contract if the externally documented API behavior remains substantially consistent.
10. Provider Substitution
10.1 StampMitra may replace an Underlying Service Provider.
10.2 Provider substitution may occur because of:
- provider discontinuation;
- technical migration;
- commercial changes;
- performance;
- security;
- compliance;
- capacity;
- service quality;
- business continuity.
10.3 StampMitra will seek to maintain API-level continuity where reasonably practicable.
11. Service Dependencies
Certain StampMitra APIs may depend upon external systems.
Accordingly, a Service may be affected by:
- third-party downtime;
- provider maintenance;
- government-system downtime;
- telecommunications failures;
- infrastructure failures;
- external API changes;
- external capacity restrictions;
- regulatory restrictions.
12. No Guarantee of External Availability
12.1 StampMitra does not control every external system used to deliver Services.
12.2 StampMitra therefore does not guarantee uninterrupted availability of an external dependency.
12.3 Applicable SLA commitments, if any, are governed by the relevant SLA and commercial terms.
13. External System Errors
External systems may produce:
- errors;
- timeouts;
- incomplete responses;
- delayed responses;
- inconsistent responses;
- temporary unavailability;
- changed response structures.
StampMitra may normalize or communicate such conditions through its API.
14. API Abstraction
14.1 StampMitra may abstract underlying systems behind a standardized API.
14.2 The Developer should integrate against StampMitra's published API contract rather than attempting to depend upon undocumented upstream behavior.
14.3 An upstream provider's technical implementation is not necessarily part of the Developer-facing API specification.
15. No Guarantee of Upstream Features
The availability of a particular upstream capability does not guarantee that StampMitra will expose every underlying feature.
StampMitra may selectively expose functionality based on:
- product design;
- security;
- legal requirements;
- commercial arrangements;
- technical compatibility.
16. Data Transmission to Third Parties
16.1 Where required to perform a Service, StampMitra may transmit relevant information to an Underlying Service Provider.
16.2 Such transmission shall be subject to:
- applicable law;
- the Developer's authorized Service request;
- applicable contractual requirements;
- security controls.
16.3 Developers should not submit information that is unnecessary for the requested Service.
17. Developer Authorization
By requesting a Service that requires an external provider, the Developer authorizes StampMitra, subject to applicable law and the relevant contractual arrangement, to transmit information reasonably necessary to perform that Service.
18. Data Minimization
StampMitra may seek to limit information transmitted to an Underlying Service Provider to what is reasonably necessary for the relevant transaction.
However, the exact data requirements may be determined by the underlying Service.
19. External Provider Data Requirements
An Underlying Service Provider may require:
- identity information;
- transaction information;
- document information;
- contact information;
- business information;
- authentication information;
- other information necessary for the requested Service.
The Developer is responsible for ensuring that the underlying request is lawful and authorized.
20. Provider-Specific Data Processing
Where an external provider independently determines the purposes and means of its own processing, it may have a separate legal role under applicable data-protection law.
StampMitra does not represent that every external provider is a Subprocessor.
21. Processor / Independent Provider Distinction
The legal classification of an external provider depends upon the actual arrangement.
An external provider may be:
- a Subprocessor;
- an independent Data Fiduciary;
- a service provider;
- an authorized data source;
- a regulated entity;
- another legally recognized category.
22. Data Protection Framework
Processing involving external providers shall be managed consistently with applicable data-protection law and, where applicable:
- the StampMitra Privacy Policy;
- Data Processing Addendum;
- Service-Specific Terms;
- applicable contractual safeguards.
23. Developer Responsibility
The Developer shall ensure that:
- it has authority to submit data;
- required notices have been provided;
- required consent has been obtained where applicable;
- the requested Service is lawful;
- information supplied is accurate where required.
24. Third-Party Terms
24.1 Certain Services may be subject to additional terms imposed by an external provider or applicable regulatory framework.
24.2 Where such terms materially affect Developer use, StampMitra may communicate the relevant requirements.
24.3 The Developer must comply with applicable requirements communicated as a condition of using the Service.
25. Pass-Through Requirements
An external provider may impose requirements concerning:
- data format;
- transaction limits;
- permitted uses;
- identity requirements;
- document requirements;
- geographic availability;
- authentication;
- service timing;
- transaction restrictions.
Developers must comply with such requirements where communicated by StampMitra.
26. Government and Regulated Systems
Certain Services may depend upon:
- government systems;
- authorized government-connected infrastructure;
- regulated service networks;
- statutory systems;
- state-specific infrastructure.
Availability and processing may therefore be subject to governmental or regulatory conditions.
27. State-Specific Services
e-Stamp and related services may vary by:
- State;
- Union Territory;
- jurisdiction;
- article/instrument;
- stamp duty requirements;
- Sub-Registrar jurisdiction;
- local rules;
- government system availability.
Developers must not assume that one jurisdiction's workflow applies universally.
28. e-Stamp Provider Dependencies
Where e-Stamp processing depends on external systems, StampMitra may be unable to independently control:
- government availability;
- inventory;
- transaction acceptance;
- duty calculations determined externally;
- issuance timing;
- cancellation/refund procedures.
29. e-Sign Provider Dependencies
e-Sign functionality may depend upon:
- identity verification;
- authentication;
- external signing infrastructure;
- service availability;
- regulatory requirements;
- technical requirements.
30. Verification Provider Dependencies
Verification results may depend upon:
- source-data availability;
- source accuracy;
- matching rules;
- source-system uptime;
- data freshness;
- external validation processes.
StampMitra cannot guarantee information that it does not independently control.
31. Data Source Accuracy
Where information originates from an external source, StampMitra may communicate the result received from that source, subject to applicable processing and normalization.
StampMitra does not necessarily independently certify every underlying data point.
32. Result Normalization
StampMitra may normalize external responses to provide consistent Developer-facing formats.
Normalization may include:
- field mapping;
- status mapping;
- error mapping;
- data formatting;
- response standardization.
33. No Alteration of Authoritative Records
Normalization does not necessarily mean that StampMitra modifies the authoritative underlying record.
The Developer should distinguish between:
- the API response;
- the authoritative source record;
- StampMitra's processing status.
34. Third-Party Outages
If an external provider becomes unavailable, StampMitra may:
- return an error;
- return a temporary unavailable status;
- retry;
- fail over;
- queue a request;
- delay processing;
- temporarily disable the affected API.
35. Retries
StampMitra may retry certain requests where technically and commercially appropriate.
Retries may be subject to:
- idempotency;
- provider limitations;
- transaction type;
- service rules.
36. Failover
Where multiple service paths are available, StampMitra may implement failover.
Failover is not guaranteed for every API.
37. Maintenance
Underlying providers may perform maintenance that affects StampMitra Services.
StampMitra may communicate material known maintenance where reasonably practicable.
38. Provider API Changes
An Underlying Service Provider may change:
- endpoints;
- schemas;
- authentication;
- rate limits;
- response structures;
- business rules;
- availability.
StampMitra may modify its integration to preserve Developer-facing compatibility where reasonably possible.
39. Material Provider Change
Where an upstream change materially affects the Developer-facing Service, StampMitra may:
- update Documentation;
- notify Developers;
- modify functionality;
- introduce a new API version;
- suspend affected functionality;
- provide an alternative where available.
40. Provider Discontinuation
If an Underlying Service Provider discontinues a Service, StampMitra may:
- migrate to another provider;
- modify the Service;
- suspend the Service;
- discontinue the affected API.
41. No Permanent Upstream Commitment
StampMitra does not guarantee that any particular Underlying Service Provider will remain part of its service architecture for any fixed period unless expressly agreed in writing.
42. Confidential Architecture
Information regarding:
- provider routing;
- provider selection;
- provider pricing;
- provider credentials;
- provider contracts;
- internal service topology;
- upstream capacity;
- provider-specific technical details
may constitute StampMitra Confidential Information.
43. Prohibited Provider Discovery
The Developer must not use StampMitra APIs to intentionally discover confidential upstream providers through:
- endpoint probing;
- reverse engineering;
- response fingerprinting;
- infrastructure scanning;
- error manipulation;
- unauthorized testing.
44. No Upstream Credentials
StampMitra shall not be required to provide Developers with credentials belonging to an Underlying Service Provider.
45. No Direct Upstream Contract
A Developer does not automatically obtain:
- provider rights;
- provider pricing;
- provider support;
- provider guarantees;
- provider contractual protections
merely because StampMitra uses the provider.
46. Commercial Independence
StampMitra's pricing to Developers may differ from StampMitra's costs, fees or commercial arrangements with Underlying Service Providers.
The Developer shall not assume that StampMitra's charges are a direct pass-through of upstream pricing unless expressly stated.
47. Markup and Service Fees
StampMitra may charge:
- platform fees;
- subscription fees;
- processing fees;
- API usage fees;
- service fees;
- transaction fees;
- other applicable commercial charges.
The existence of an underlying provider does not restrict StampMitra's ability to establish its own commercial model.
48. Provider Cost Changes
Changes in external provider pricing may require StampMitra to modify:
- API pricing;
- transaction fees;
- service availability;
- commercial terms.
Where contractually required, applicable notice shall be provided.
49. Refunds Involving Third Parties
Where a third-party cost has already been incurred, refund eligibility may depend upon:
- whether the transaction completed;
- provider rules;
- service-specific terms;
- StampMitra's refund policy;
- applicable law.
50. Failed External Transactions
An external provider failure does not necessarily mean that a transaction is automatically refundable.
The transaction status must be determined based on:
- API response;
- provider status;
- transaction records;
- applicable refund rules.
51. Duplicate Requests
Developers should avoid submitting duplicate requests where an external service may charge or process each request independently.
52. Transaction Finality
Certain external transactions may become irreversible after processing.
Developers must review applicable Service-specific documentation before initiating transactions.
53. Cancellation
Cancellation may depend upon:
- Service type;
- transaction stage;
- external provider rules;
- applicable government rules;
- technical feasibility.
StampMitra cannot guarantee cancellation after an external transaction has become final.
54. External Support
Where an issue originates entirely within an external service, StampMitra may need to coordinate with the relevant provider before resolving the Developer's issue.
The Developer may be asked for:
- transaction ID;
- request ID;
- timestamps;
- documents;
- relevant API responses.
55. Support Abstraction
StampMitra may remain the Developer's primary support interface even where the underlying issue must be resolved by an external provider.
56. Provider Confidentiality During Support
StampMitra may omit specific provider identity from support communications where disclosure is not necessary to resolve the issue and provider identity is confidential.
57. Service-Specific Limitations
Additional limitations may apply to individual Services.
Examples include:
- jurisdiction;
- volume;
- transaction value;
- document size;
- identity requirements;
- processing hours;
- government availability.
58. No Guarantee of Universal Coverage
The availability of a Service in one location does not guarantee availability in every:
- State;
- district;
- jurisdiction;
- country;
- Sub-Registrar office;
- government system.
59. Geographic Restrictions
StampMitra may restrict a Service based on:
- applicable law;
- provider availability;
- regulatory requirements;
- geographic limitations;
- operational constraints.
60. Regulatory Changes
Changes in law or regulatory direction may require StampMitra or an Underlying Service Provider to:
- change workflows;
- restrict access;
- modify data requirements;
- suspend functionality;
- discontinue a Service.
61. Force Majeure
StampMitra shall not be responsible for external-service failures caused by events beyond reasonable control, subject to applicable law and contractual obligations.
62. Security of Third-Party Connections
StampMitra may apply security controls to connections with Underlying Service Providers, including:
- authentication;
- encryption;
- access restrictions;
- credential management;
- monitoring;
- logging.
63. Provider Security Incident
If an Underlying Service Provider experiences a security incident affecting a StampMitra Service, StampMitra may:
- investigate;
- restrict traffic;
- suspend the affected Service;
- rotate credentials;
- implement alternative routing;
- notify affected Developers where required.
64. Third-Party Data Breach
Where an external provider suffers a data breach affecting Developer Data, StampMitra shall take reasonable steps appropriate to its legal and contractual role.
This may include:
- obtaining information;
- assessing impact;
- coordinating containment;
- assisting with notifications;
- implementing alternative controls.
65. Limitations on Upstream Control
StampMitra cannot guarantee the internal security, availability or processing practices of every external system outside its direct control.
StampMitra's obligations remain governed by its own contractual and legal responsibilities.
66. Developer Due Diligence
Developers should evaluate whether the relevant StampMitra Service is appropriate for their intended use case, particularly where:
- highly sensitive data is involved;
- regulated decisions are involved;
- critical transactions are involved;
- legal consequences depend on the result.
67. Third-Party Claims
Where a claim arises solely from an external provider's independent conduct, responsibility shall be allocated according to:
- applicable law;
- contractual arrangements;
- actual control over the relevant processing;
- the applicable Service terms.
68. No Third-Party Warranty
Unless expressly stated, StampMitra does not provide an independent warranty concerning the internal services of an Underlying Service Provider.
69. No Endorsement
The use of a third-party service does not necessarily constitute:
- endorsement;
- certification;
- partnership;
- ownership;
- agency.
70. No Agency Relationship
A Developer shall not represent an Underlying Service Provider as its own partner, agent or representative merely because StampMitra uses that provider.
71. No Public Disclosure Requirement
StampMitra may determine how it describes its service architecture publicly, subject to mandatory disclosure obligations.
72. Legally Required Disclosure
Nothing in this Policy permits StampMitra to withhold information where disclosure is legally mandatory.
Where disclosure is required, StampMitra may provide the information in the legally required manner.
73. Developer Confidentiality
Where a Developer receives confidential information regarding StampMitra's external providers, the Developer shall:
- protect it;
- limit access;
- use it only for the relevant contractual purpose;
- not publish it;
- not exploit it commercially without authorization.
74. Non-Circumvention
The Developer shall not intentionally use confidential provider information obtained through StampMitra to bypass StampMitra's contractual relationships.
This provision does not restrict lawful independent activity based solely on public information.
75. Provider Information Requests
A Developer may request general information regarding:
- categories of external providers;
- nature of dependencies;
- data-processing arrangements;
- relevant security controls;
where reasonably necessary for compliance or due diligence.
StampMitra may satisfy such requests through generalized or categorized information without disclosing confidential commercial identities.
76. Enterprise Due Diligence
Enterprise Developers may receive additional information under a separate confidentiality arrangement where commercially and legally appropriate.
Such information may include:
- security summaries;
- compliance documentation;
- data-flow information;
- provider categories;
- processing locations.
77. Confidentiality Agreements
StampMitra may require an NDA before providing non-public information concerning:
- architecture;
- provider relationships;
- security;
- commercial arrangements.
78. Provider Lists
Where a legally or contractually required provider/subprocessor list is maintained, StampMitra may publish or make available the relevant categories or names according to its applicable disclosure obligations.
Such a list does not necessarily disclose every commercial or technical relationship.
79. Subprocessor vs Underlying Provider
Not every Underlying Service Provider shall be considered a Subprocessor.
The classification depends on:
- processing purpose;
- control;
- contractual role;
- applicable law.
80. Data Processing Addendum
Where StampMitra acts as a Data Processor, the DPA governs applicable processing obligations.
This Policy does not replace the DPA.
81. Privacy Policy
StampMitra's Developer Privacy Policy governs processing for which StampMitra independently determines the purpose and means.
82. Security Policy
Security requirements for Developers and StampMitra shall be addressed in the API Security Policy.
83. Acceptable Use
Developers must comply with the API Acceptable Use Policy when interacting with external services through StampMitra.
84. SLA
Availability commitments relating to StampMitra Services shall be governed by the applicable SLA.
Third-party availability is subject to the limitations described in this Policy and the SLA.
85. Service Deprecation
If an Underlying Service Provider discontinues a required capability, StampMitra may invoke its API lifecycle and deprecation procedures.
86. API Continuity
StampMitra will seek reasonable API-level continuity but does not guarantee that every upstream functionality can be preserved indefinitely.
87. Business Continuity
StampMitra may maintain:
- alternate providers;
- redundant infrastructure;
- backup systems;
- fallback mechanisms;
- alternate processing paths
where commercially and technically appropriate.
88. No Guarantee of Failover
Failover may not be available for:
- every API;
- every jurisdiction;
- every transaction;
- every external provider.
89. Service Status
StampMitra may communicate external-service incidents through:
- status pages;
- developer notifications;
- API responses;
- support channels;
- service notices.
90. Error Classification
StampMitra may distinguish between:
- StampMitra-generated errors;
- upstream errors;
- network errors;
- validation errors;
- authorization errors;
- temporary availability errors.
91. Developer Error Handling
Developers should implement robust handling for:
- timeouts;
- retries;
- temporary failures;
- upstream unavailability;
- partial results;
- asynchronous processing.
92. No Guarantee of Response Timing
Where external systems are involved, response times may vary.
Any contractual response-time commitment shall be governed by the applicable SLA or commercial agreement.
93. External System Maintenance
StampMitra may temporarily restrict an API due to scheduled or emergency maintenance by an external dependency.
94. Provider Migration
During provider migration, StampMitra may:
- temporarily reduce capacity;
- change routing;
- introduce temporary limitations;
- modify internal infrastructure.
Where API behavior materially changes, applicable versioning procedures may apply.
95. API Compatibility
StampMitra may attempt to preserve backward compatibility when replacing an Underlying Service Provider.
Compatibility cannot be guaranteed where external changes make equivalent functionality technically or legally impossible.
96. Data Format Changes
An upstream data-format change may require StampMitra to:
- map fields;
- remove unsupported fields;
- change validation;
- modify responses.
Material Developer-facing changes shall be addressed under applicable API lifecycle procedures.
97. Third-Party Licenses
Where a Service incorporates third-party software or licensed functionality, Developers may be subject to applicable license restrictions communicated by StampMitra.
98. Open-Source Components
StampMitra may use open-source software in its infrastructure.
Applicable open-source licenses govern the relevant components where legally applicable.
99. Third-Party Intellectual Property
Developers shall not use StampMitra APIs to infringe third-party intellectual-property rights.
100. Trade Secret Protection
Confidential information relating to external providers may constitute trade secrets or commercially sensitive information.
Developers shall not misuse or disclose such information.
101. Competitive Intelligence
A Developer shall not use unauthorized technical access to StampMitra systems to obtain confidential information for competitive intelligence.
102. Benchmarking
Public or private benchmarking of StampMitra or external service performance must comply with applicable authorization requirements and must not involve prohibited load or security testing.
103. Third-Party Complaints
Where an Underlying Service Provider raises a legitimate concern regarding a Developer's use, StampMitra may:
- investigate;
- request information;
- restrict the relevant Service;
- require remediation;
- suspend access where necessary.
104. Provider Requirements
StampMitra may communicate provider-specific requirements to Developers where necessary.
Such requirements may become conditions of continued access to the affected Service.
105. Emergency Provider Restriction
StampMitra may immediately restrict a Service if an external provider:
- withdraws authorization;
- identifies material abuse;
- experiences a security incident;
- becomes legally unavailable;
- requires emergency suspension.
106. Third-Party Termination
If an external provider terminates a critical dependency, StampMitra may terminate or suspend the affected API where no reasonable alternative exists.
107. No Guarantee of Replacement
StampMitra may attempt to identify an alternative provider but does not guarantee that an equivalent alternative will exist.
108. Developer Responsibility for Business Continuity
Developers should maintain appropriate application-level handling for Service interruption.
For business-critical applications, Developers should not rely on a single API request path without appropriate error and fallback handling.
109. Transaction Status
Where an external service processes a transaction asynchronously, the Developer should rely on the documented status mechanism rather than assuming that a timeout means failure.
110. Duplicate Transactions
Developers are responsible for implementing idempotency and transaction reconciliation where supported.
StampMitra shall not necessarily be liable for duplicate requests caused by Developer implementation.
111. External Payment Dependencies
Where a Service involves an external payment system, payment status may depend upon external confirmation.
Developers should rely on the documented transaction status rather than solely on browser redirects or client-side indications.
112. Refund Processing
Refunds involving external providers may require reconciliation with the relevant external transaction.
113. Customer Communication
Developers must not falsely attribute an external provider's action, failure or decision to StampMitra where the distinction is material.
114. Service Representation
Developers must accurately describe StampMitra-powered Services to their End Users.
They must not claim that StampMitra guarantees an outcome that depends upon an external authority or provider.
115. Government Decisions
Where a government authority or authorized external system makes a decision, the Developer must not represent that decision as being made by StampMitra unless expressly stated.
116. Verification Results
A verification result must not automatically be represented as:
- a government certification;
- legal advice;
- absolute proof;
- permanent validation.
The precise meaning of the result depends upon the Service.
117. Document Acceptance
StampMitra cannot guarantee that every external authority will accept a document unless such acceptance is expressly represented.
118. Service-Specific Disclaimers
Additional disclaimers may apply to:
- verification;
- e-Stamp;
- e-Sign;
- government-related services;
- document services.
119. Liability Allocation
Liability concerning an external service shall be determined by:
- the Developer Terms;
- applicable SLA;
- Service-Specific Terms;
- DPA where relevant;
- actual control over the relevant event;
- mandatory applicable law.
120. No Unlimited Upstream Liability
StampMitra does not automatically assume unlimited liability for failures occurring exclusively within an independent external system outside StampMitra's reasonable control.
121. No Waiver of Statutory Rights
Nothing in this Policy excludes liability or statutory rights that cannot lawfully be excluded.
122. Policy Changes
StampMitra may update this Policy to reflect:
- provider changes;
- technical changes;
- regulatory changes;
- security developments;
- new Services;
- commercial changes.
123. Notice of Material Changes
Where required, material changes may be communicated through:
- Developer Platform;
- email;
- Documentation;
- service notifications;
- updated policy publication.
124. Effect of Changes
The updated version shall specify its effective date.
Continued use after the effective date may constitute acceptance where legally permissible and appropriate.
125. Severability
If any provision is invalid or unenforceable, the remaining provisions shall remain effective to the maximum extent permitted by law.
126. Governing Law
This Policy shall be governed by the laws of India, subject to mandatory applicable law.
127. Dispute Resolution
Disputes shall be handled in accordance with the dispute-resolution provisions contained in the StampMitra Developer Terms of Service or applicable written commercial agreement.
128. Contact
For legal, contractual or third-party service matters:
- Legal Team
- BANI GLOBAL INDUSTRIES LLP
- LLPIN: ACI6373
Registered Office: 2-A/3, Kundan Mansion, Asaf Ali Road, Turkman Gate, Central Delhi, NCT of Delhi, India – 110002
Email: [email protected]
129. Final Acknowledgement
By using a StampMitra API, the Developer acknowledges that:
- 1. StampMitra may rely on external service infrastructure;
- 2. specific upstream providers may remain confidential;
- 3. external service availability is not entirely controlled by StampMitra;
- 4. provider routing may change;
- 5. external data may have limitations;
- 6. external transaction rules may apply;
- 7. Developers must comply with communicated provider requirements;
- 8. Developers must not attempt to circumvent StampMitra's upstream relationships;
- 9. StampMitra may substitute or discontinue external dependencies where necessary; and
- 10. the Developer remains responsible for lawful use of the Services.
130. Policy Record
- Policy: StampMitra Third-Party & Underlying Services Policy
- Document Type: Developer Platform Third-Party & Service Dependency Policy
- Version: 1.0
- Status: FINAL — PUBLISHED POLICY
- Effective Date: 05 October 2026
- Last Updated: 05 October 2026
- Legal Entity: BANI GLOBAL INDUSTRIES LLP
- LLPIN: ACI6373
Registered Office: 2-A/3, Kundan Mansion, Asaf Ali Road, Turkman Gate, Central Delhi, NCT of Delhi, India – 110002
Developer Platform: developer.stampmitra.in
Legal Contact: [email protected]
- Prepared by: Legal Team
- BANI GLOBAL INDUSTRIES LLP
- [email protected]
© 2026 BANI GLOBAL INDUSTRIES LLP. All rights reserved.