StampMitraDevelopers
Legal & Policy Documentation

Third-Party & Underlying Services Policy

Developer Platform, APIs, External Service Providers & Service Dependencies | Version 1.0 | Operator: Bani Global Industries LLP (LLPIN: ACI6373) | Effective Date: 05/10/2026

1. Purpose

1.1 This Third-Party & Underlying Services Policy (“Policy”) governs the relationship between the StampMitra Developer Platform and third-party, external and underlying services used in connection with StampMitra APIs.

1.2 StampMitra operates a technology platform that may integrate, orchestrate, route, aggregate or otherwise coordinate services supplied by multiple external parties.

1.3 The Developer may therefore receive a StampMitra API response even where the underlying processing involves one or more external systems.

1.4 The purpose of this Policy is to establish:

  • the nature of StampMitra's role;
  • the Developer's obligations;
  • the treatment of third-party dependencies;
  • provider confidentiality;
  • external-system limitations;
  • data transmission;
  • service availability;
  • provider changes;
  • upstream failures;
  • third-party terms;
  • liability allocation;
  • compliance requirements.

2. StampMitra's Platform Model

2.1 StampMitra may operate as an intermediary technology, orchestration and service-access platform between Developers and external service infrastructure.

2.2 A simplified conceptual architecture may be:

Developer Application → StampMitra Developer Platform → StampMitra API Layer → Internal Processing / Routing / Orchestration → Authorized Underlying Service Provider(s) / Data Source(s) / External System(s) → StampMitra Processing Layer → Developer Application

2.3 This architecture is illustrative and does not constitute a disclosure of StampMitra's confidential technical architecture.

2.4 The actual routing path may vary according to:

  • API;
  • jurisdiction;
  • service;
  • transaction type;
  • availability;
  • capacity;
  • technical requirements;
  • regulatory requirements;
  • commercial arrangements;
  • security controls.

3. Definitions

For this Policy:

3.1 “Third-Party Service”

Means a service supplied by a person or entity other than StampMitra.

3.2 “Underlying Service Provider”

Means an external provider, authorized data source, technology provider, service network, regulated entity, government-connected system, infrastructure provider or other third party used in connection with a StampMitra Service.

3.3 “External System”

Means a system not exclusively controlled by StampMitra.

3.4 “Upstream Service”

Means a service or functionality obtained from an external source and incorporated into or used to deliver a StampMitra Service.

3.5 “Provider Information”

Means information concerning the identity, architecture, commercial relationship, pricing, credentials, routing, contracts or technical arrangements of an Underlying Service Provider.

3.6 “Pass-Through Requirement”

Means a requirement imposed by an external service or provider that must be followed by the Developer to enable the relevant Service.

4. No Requirement to Disclose Upstream Providers

4.1 StampMitra may use multiple Underlying Service Providers.

4.2 The Developer acknowledges that StampMitra is not required to publicly identify every provider involved in delivering a Service.

4.3 Specific provider identities may constitute:

  • confidential commercial information;
  • trade secrets;
  • contractual information;
  • security-sensitive information;
  • proprietary architecture.

4.4 StampMitra may therefore refer generically to:

  • “Underlying Service Providers”;
  • “Authorized Service Providers”;
  • “External Service Providers”;
  • “Third-Party Service Providers”;
  • “Authorized Data Sources”;
  • “External Systems”.

4.5 Such terminology does not mean that StampMitra is concealing a legally required disclosure.

5. Confidential Provider Relationships

5.1 The Developer shall treat non-public provider information obtained through StampMitra as Confidential Information.

5.2 The Developer shall not attempt to discover confidential provider relationships through:

  • reverse engineering;
  • traffic analysis;
  • undocumented endpoint discovery;
  • response fingerprinting;
  • technical probing;
  • infrastructure reconnaissance;
  • credential manipulation;
  • other unauthorized methods.

6. Provider Commercial Terms

6.1 The Developer has no automatic right to receive:

  • wholesale pricing;
  • provider invoices;
  • provider contracts;
  • commercial margins;
  • provider commissions;
  • internal routing rules;
  • negotiated service terms;
  • provider credentials.

6.2 StampMitra's commercial relationship with an Underlying Service Provider is separate from the Developer's commercial relationship with StampMitra.

7. No Direct Contract with Underlying Provider

7.1 Unless expressly agreed otherwise, a Developer's use of a StampMitra API does not create a direct contractual relationship between the Developer and an Underlying Service Provider.

7.2 The Developer's contractual relationship for the relevant API is ordinarily with StampMitra.

7.3 An Underlying Service Provider may have its own legal terms that apply to the underlying service where expressly communicated or legally required.

8. Service Orchestration

8.1 StampMitra may determine how a request is processed.

8.2 StampMitra may:

  • route requests;
  • select an available provider;
  • change routing;
  • retry requests;
  • fail over;
  • transform technical formats;
  • normalize responses;
  • aggregate information;
  • validate responses;
  • apply business rules.

8.3 The Developer does not ordinarily control the internal provider-selection process.

9. Dynamic Routing

9.1 StampMitra may dynamically select an appropriate underlying service.

9.2 Routing may change without prior Developer notice where reasonably required for:

  • availability;
  • capacity;
  • security;
  • performance;
  • regulatory compliance;
  • commercial continuity;
  • technical compatibility.

9.3 A change in routing does not necessarily constitute a material change to the API contract if the externally documented API behavior remains substantially consistent.

10. Provider Substitution

10.1 StampMitra may replace an Underlying Service Provider.

10.2 Provider substitution may occur because of:

  • provider discontinuation;
  • technical migration;
  • commercial changes;
  • performance;
  • security;
  • compliance;
  • capacity;
  • service quality;
  • business continuity.

10.3 StampMitra will seek to maintain API-level continuity where reasonably practicable.

11. Service Dependencies

Certain StampMitra APIs may depend upon external systems.

Accordingly, a Service may be affected by:

  • third-party downtime;
  • provider maintenance;
  • government-system downtime;
  • telecommunications failures;
  • infrastructure failures;
  • external API changes;
  • external capacity restrictions;
  • regulatory restrictions.

12. No Guarantee of External Availability

12.1 StampMitra does not control every external system used to deliver Services.

12.2 StampMitra therefore does not guarantee uninterrupted availability of an external dependency.

12.3 Applicable SLA commitments, if any, are governed by the relevant SLA and commercial terms.

13. External System Errors

External systems may produce:

  • errors;
  • timeouts;
  • incomplete responses;
  • delayed responses;
  • inconsistent responses;
  • temporary unavailability;
  • changed response structures.

StampMitra may normalize or communicate such conditions through its API.

14. API Abstraction

14.1 StampMitra may abstract underlying systems behind a standardized API.

14.2 The Developer should integrate against StampMitra's published API contract rather than attempting to depend upon undocumented upstream behavior.

14.3 An upstream provider's technical implementation is not necessarily part of the Developer-facing API specification.

15. No Guarantee of Upstream Features

The availability of a particular upstream capability does not guarantee that StampMitra will expose every underlying feature.

StampMitra may selectively expose functionality based on:

  • product design;
  • security;
  • legal requirements;
  • commercial arrangements;
  • technical compatibility.

16. Data Transmission to Third Parties

16.1 Where required to perform a Service, StampMitra may transmit relevant information to an Underlying Service Provider.

16.2 Such transmission shall be subject to:

  • applicable law;
  • the Developer's authorized Service request;
  • applicable contractual requirements;
  • security controls.

16.3 Developers should not submit information that is unnecessary for the requested Service.

17. Developer Authorization

By requesting a Service that requires an external provider, the Developer authorizes StampMitra, subject to applicable law and the relevant contractual arrangement, to transmit information reasonably necessary to perform that Service.

18. Data Minimization

StampMitra may seek to limit information transmitted to an Underlying Service Provider to what is reasonably necessary for the relevant transaction.

However, the exact data requirements may be determined by the underlying Service.

19. External Provider Data Requirements

An Underlying Service Provider may require:

  • identity information;
  • transaction information;
  • document information;
  • contact information;
  • business information;
  • authentication information;
  • other information necessary for the requested Service.

The Developer is responsible for ensuring that the underlying request is lawful and authorized.

20. Provider-Specific Data Processing

Where an external provider independently determines the purposes and means of its own processing, it may have a separate legal role under applicable data-protection law.

StampMitra does not represent that every external provider is a Subprocessor.

21. Processor / Independent Provider Distinction

The legal classification of an external provider depends upon the actual arrangement.

An external provider may be:

  • a Subprocessor;
  • an independent Data Fiduciary;
  • a service provider;
  • an authorized data source;
  • a regulated entity;
  • another legally recognized category.

22. Data Protection Framework

Processing involving external providers shall be managed consistently with applicable data-protection law and, where applicable:

  • the StampMitra Privacy Policy;
  • Data Processing Addendum;
  • Service-Specific Terms;
  • applicable contractual safeguards.

23. Developer Responsibility

The Developer shall ensure that:

  • it has authority to submit data;
  • required notices have been provided;
  • required consent has been obtained where applicable;
  • the requested Service is lawful;
  • information supplied is accurate where required.

24. Third-Party Terms

24.1 Certain Services may be subject to additional terms imposed by an external provider or applicable regulatory framework.

24.2 Where such terms materially affect Developer use, StampMitra may communicate the relevant requirements.

24.3 The Developer must comply with applicable requirements communicated as a condition of using the Service.

25. Pass-Through Requirements

An external provider may impose requirements concerning:

  • data format;
  • transaction limits;
  • permitted uses;
  • identity requirements;
  • document requirements;
  • geographic availability;
  • authentication;
  • service timing;
  • transaction restrictions.

Developers must comply with such requirements where communicated by StampMitra.

26. Government and Regulated Systems

Certain Services may depend upon:

  • government systems;
  • authorized government-connected infrastructure;
  • regulated service networks;
  • statutory systems;
  • state-specific infrastructure.

Availability and processing may therefore be subject to governmental or regulatory conditions.

27. State-Specific Services

e-Stamp and related services may vary by:

  • State;
  • Union Territory;
  • jurisdiction;
  • article/instrument;
  • stamp duty requirements;
  • Sub-Registrar jurisdiction;
  • local rules;
  • government system availability.

Developers must not assume that one jurisdiction's workflow applies universally.

28. e-Stamp Provider Dependencies

Where e-Stamp processing depends on external systems, StampMitra may be unable to independently control:

  • government availability;
  • inventory;
  • transaction acceptance;
  • duty calculations determined externally;
  • issuance timing;
  • cancellation/refund procedures.

29. e-Sign Provider Dependencies

e-Sign functionality may depend upon:

  • identity verification;
  • authentication;
  • external signing infrastructure;
  • service availability;
  • regulatory requirements;
  • technical requirements.

30. Verification Provider Dependencies

Verification results may depend upon:

  • source-data availability;
  • source accuracy;
  • matching rules;
  • source-system uptime;
  • data freshness;
  • external validation processes.

StampMitra cannot guarantee information that it does not independently control.

31. Data Source Accuracy

Where information originates from an external source, StampMitra may communicate the result received from that source, subject to applicable processing and normalization.

StampMitra does not necessarily independently certify every underlying data point.

32. Result Normalization

StampMitra may normalize external responses to provide consistent Developer-facing formats.

Normalization may include:

  • field mapping;
  • status mapping;
  • error mapping;
  • data formatting;
  • response standardization.

33. No Alteration of Authoritative Records

Normalization does not necessarily mean that StampMitra modifies the authoritative underlying record.

The Developer should distinguish between:

  • the API response;
  • the authoritative source record;
  • StampMitra's processing status.

34. Third-Party Outages

If an external provider becomes unavailable, StampMitra may:

  • return an error;
  • return a temporary unavailable status;
  • retry;
  • fail over;
  • queue a request;
  • delay processing;
  • temporarily disable the affected API.

35. Retries

StampMitra may retry certain requests where technically and commercially appropriate.

Retries may be subject to:

  • idempotency;
  • provider limitations;
  • transaction type;
  • service rules.

36. Failover

Where multiple service paths are available, StampMitra may implement failover.

Failover is not guaranteed for every API.

37. Maintenance

Underlying providers may perform maintenance that affects StampMitra Services.

StampMitra may communicate material known maintenance where reasonably practicable.

38. Provider API Changes

An Underlying Service Provider may change:

  • endpoints;
  • schemas;
  • authentication;
  • rate limits;
  • response structures;
  • business rules;
  • availability.

StampMitra may modify its integration to preserve Developer-facing compatibility where reasonably possible.

39. Material Provider Change

Where an upstream change materially affects the Developer-facing Service, StampMitra may:

  • update Documentation;
  • notify Developers;
  • modify functionality;
  • introduce a new API version;
  • suspend affected functionality;
  • provide an alternative where available.

40. Provider Discontinuation

If an Underlying Service Provider discontinues a Service, StampMitra may:

  • migrate to another provider;
  • modify the Service;
  • suspend the Service;
  • discontinue the affected API.

41. No Permanent Upstream Commitment

StampMitra does not guarantee that any particular Underlying Service Provider will remain part of its service architecture for any fixed period unless expressly agreed in writing.

42. Confidential Architecture

Information regarding:

  • provider routing;
  • provider selection;
  • provider pricing;
  • provider credentials;
  • provider contracts;
  • internal service topology;
  • upstream capacity;
  • provider-specific technical details

may constitute StampMitra Confidential Information.

43. Prohibited Provider Discovery

The Developer must not use StampMitra APIs to intentionally discover confidential upstream providers through:

  • endpoint probing;
  • reverse engineering;
  • response fingerprinting;
  • infrastructure scanning;
  • error manipulation;
  • unauthorized testing.

44. No Upstream Credentials

StampMitra shall not be required to provide Developers with credentials belonging to an Underlying Service Provider.

45. No Direct Upstream Contract

A Developer does not automatically obtain:

  • provider rights;
  • provider pricing;
  • provider support;
  • provider guarantees;
  • provider contractual protections

merely because StampMitra uses the provider.

46. Commercial Independence

StampMitra's pricing to Developers may differ from StampMitra's costs, fees or commercial arrangements with Underlying Service Providers.

The Developer shall not assume that StampMitra's charges are a direct pass-through of upstream pricing unless expressly stated.

47. Markup and Service Fees

StampMitra may charge:

  • platform fees;
  • subscription fees;
  • processing fees;
  • API usage fees;
  • service fees;
  • transaction fees;
  • other applicable commercial charges.

The existence of an underlying provider does not restrict StampMitra's ability to establish its own commercial model.

48. Provider Cost Changes

Changes in external provider pricing may require StampMitra to modify:

  • API pricing;
  • transaction fees;
  • service availability;
  • commercial terms.

Where contractually required, applicable notice shall be provided.

49. Refunds Involving Third Parties

Where a third-party cost has already been incurred, refund eligibility may depend upon:

  • whether the transaction completed;
  • provider rules;
  • service-specific terms;
  • StampMitra's refund policy;
  • applicable law.

50. Failed External Transactions

An external provider failure does not necessarily mean that a transaction is automatically refundable.

The transaction status must be determined based on:

  • API response;
  • provider status;
  • transaction records;
  • applicable refund rules.

51. Duplicate Requests

Developers should avoid submitting duplicate requests where an external service may charge or process each request independently.

52. Transaction Finality

Certain external transactions may become irreversible after processing.

Developers must review applicable Service-specific documentation before initiating transactions.

53. Cancellation

Cancellation may depend upon:

  • Service type;
  • transaction stage;
  • external provider rules;
  • applicable government rules;
  • technical feasibility.

StampMitra cannot guarantee cancellation after an external transaction has become final.

54. External Support

Where an issue originates entirely within an external service, StampMitra may need to coordinate with the relevant provider before resolving the Developer's issue.

The Developer may be asked for:

  • transaction ID;
  • request ID;
  • timestamps;
  • documents;
  • relevant API responses.

55. Support Abstraction

StampMitra may remain the Developer's primary support interface even where the underlying issue must be resolved by an external provider.

56. Provider Confidentiality During Support

StampMitra may omit specific provider identity from support communications where disclosure is not necessary to resolve the issue and provider identity is confidential.

57. Service-Specific Limitations

Additional limitations may apply to individual Services.

Examples include:

  • jurisdiction;
  • volume;
  • transaction value;
  • document size;
  • identity requirements;
  • processing hours;
  • government availability.

58. No Guarantee of Universal Coverage

The availability of a Service in one location does not guarantee availability in every:

  • State;
  • district;
  • jurisdiction;
  • country;
  • Sub-Registrar office;
  • government system.

59. Geographic Restrictions

StampMitra may restrict a Service based on:

  • applicable law;
  • provider availability;
  • regulatory requirements;
  • geographic limitations;
  • operational constraints.

60. Regulatory Changes

Changes in law or regulatory direction may require StampMitra or an Underlying Service Provider to:

  • change workflows;
  • restrict access;
  • modify data requirements;
  • suspend functionality;
  • discontinue a Service.

61. Force Majeure

StampMitra shall not be responsible for external-service failures caused by events beyond reasonable control, subject to applicable law and contractual obligations.

62. Security of Third-Party Connections

StampMitra may apply security controls to connections with Underlying Service Providers, including:

  • authentication;
  • encryption;
  • access restrictions;
  • credential management;
  • monitoring;
  • logging.

63. Provider Security Incident

If an Underlying Service Provider experiences a security incident affecting a StampMitra Service, StampMitra may:

  • investigate;
  • restrict traffic;
  • suspend the affected Service;
  • rotate credentials;
  • implement alternative routing;
  • notify affected Developers where required.

64. Third-Party Data Breach

Where an external provider suffers a data breach affecting Developer Data, StampMitra shall take reasonable steps appropriate to its legal and contractual role.

This may include:

  • obtaining information;
  • assessing impact;
  • coordinating containment;
  • assisting with notifications;
  • implementing alternative controls.

65. Limitations on Upstream Control

StampMitra cannot guarantee the internal security, availability or processing practices of every external system outside its direct control.

StampMitra's obligations remain governed by its own contractual and legal responsibilities.

66. Developer Due Diligence

Developers should evaluate whether the relevant StampMitra Service is appropriate for their intended use case, particularly where:

  • highly sensitive data is involved;
  • regulated decisions are involved;
  • critical transactions are involved;
  • legal consequences depend on the result.

67. Third-Party Claims

Where a claim arises solely from an external provider's independent conduct, responsibility shall be allocated according to:

  • applicable law;
  • contractual arrangements;
  • actual control over the relevant processing;
  • the applicable Service terms.

68. No Third-Party Warranty

Unless expressly stated, StampMitra does not provide an independent warranty concerning the internal services of an Underlying Service Provider.

69. No Endorsement

The use of a third-party service does not necessarily constitute:

  • endorsement;
  • certification;
  • partnership;
  • ownership;
  • agency.

70. No Agency Relationship

A Developer shall not represent an Underlying Service Provider as its own partner, agent or representative merely because StampMitra uses that provider.

71. No Public Disclosure Requirement

StampMitra may determine how it describes its service architecture publicly, subject to mandatory disclosure obligations.

72. Legally Required Disclosure

Nothing in this Policy permits StampMitra to withhold information where disclosure is legally mandatory.

Where disclosure is required, StampMitra may provide the information in the legally required manner.

73. Developer Confidentiality

Where a Developer receives confidential information regarding StampMitra's external providers, the Developer shall:

  • protect it;
  • limit access;
  • use it only for the relevant contractual purpose;
  • not publish it;
  • not exploit it commercially without authorization.

74. Non-Circumvention

The Developer shall not intentionally use confidential provider information obtained through StampMitra to bypass StampMitra's contractual relationships.

This provision does not restrict lawful independent activity based solely on public information.

75. Provider Information Requests

A Developer may request general information regarding:

  • categories of external providers;
  • nature of dependencies;
  • data-processing arrangements;
  • relevant security controls;

where reasonably necessary for compliance or due diligence.

StampMitra may satisfy such requests through generalized or categorized information without disclosing confidential commercial identities.

76. Enterprise Due Diligence

Enterprise Developers may receive additional information under a separate confidentiality arrangement where commercially and legally appropriate.

Such information may include:

  • security summaries;
  • compliance documentation;
  • data-flow information;
  • provider categories;
  • processing locations.

77. Confidentiality Agreements

StampMitra may require an NDA before providing non-public information concerning:

  • architecture;
  • provider relationships;
  • security;
  • commercial arrangements.

78. Provider Lists

Where a legally or contractually required provider/subprocessor list is maintained, StampMitra may publish or make available the relevant categories or names according to its applicable disclosure obligations.

Such a list does not necessarily disclose every commercial or technical relationship.

79. Subprocessor vs Underlying Provider

Not every Underlying Service Provider shall be considered a Subprocessor.

The classification depends on:

  • processing purpose;
  • control;
  • contractual role;
  • applicable law.

80. Data Processing Addendum

Where StampMitra acts as a Data Processor, the DPA governs applicable processing obligations.

This Policy does not replace the DPA.

81. Privacy Policy

StampMitra's Developer Privacy Policy governs processing for which StampMitra independently determines the purpose and means.

82. Security Policy

Security requirements for Developers and StampMitra shall be addressed in the API Security Policy.

83. Acceptable Use

Developers must comply with the API Acceptable Use Policy when interacting with external services through StampMitra.

84. SLA

Availability commitments relating to StampMitra Services shall be governed by the applicable SLA.

Third-party availability is subject to the limitations described in this Policy and the SLA.

85. Service Deprecation

If an Underlying Service Provider discontinues a required capability, StampMitra may invoke its API lifecycle and deprecation procedures.

86. API Continuity

StampMitra will seek reasonable API-level continuity but does not guarantee that every upstream functionality can be preserved indefinitely.

87. Business Continuity

StampMitra may maintain:

  • alternate providers;
  • redundant infrastructure;
  • backup systems;
  • fallback mechanisms;
  • alternate processing paths

where commercially and technically appropriate.

88. No Guarantee of Failover

Failover may not be available for:

  • every API;
  • every jurisdiction;
  • every transaction;
  • every external provider.

89. Service Status

StampMitra may communicate external-service incidents through:

  • status pages;
  • developer notifications;
  • API responses;
  • support channels;
  • service notices.

90. Error Classification

StampMitra may distinguish between:

  • StampMitra-generated errors;
  • upstream errors;
  • network errors;
  • validation errors;
  • authorization errors;
  • temporary availability errors.

91. Developer Error Handling

Developers should implement robust handling for:

  • timeouts;
  • retries;
  • temporary failures;
  • upstream unavailability;
  • partial results;
  • asynchronous processing.

92. No Guarantee of Response Timing

Where external systems are involved, response times may vary.

Any contractual response-time commitment shall be governed by the applicable SLA or commercial agreement.

93. External System Maintenance

StampMitra may temporarily restrict an API due to scheduled or emergency maintenance by an external dependency.

94. Provider Migration

During provider migration, StampMitra may:

  • temporarily reduce capacity;
  • change routing;
  • introduce temporary limitations;
  • modify internal infrastructure.

Where API behavior materially changes, applicable versioning procedures may apply.

95. API Compatibility

StampMitra may attempt to preserve backward compatibility when replacing an Underlying Service Provider.

Compatibility cannot be guaranteed where external changes make equivalent functionality technically or legally impossible.

96. Data Format Changes

An upstream data-format change may require StampMitra to:

  • map fields;
  • remove unsupported fields;
  • change validation;
  • modify responses.

Material Developer-facing changes shall be addressed under applicable API lifecycle procedures.

97. Third-Party Licenses

Where a Service incorporates third-party software or licensed functionality, Developers may be subject to applicable license restrictions communicated by StampMitra.

98. Open-Source Components

StampMitra may use open-source software in its infrastructure.

Applicable open-source licenses govern the relevant components where legally applicable.

99. Third-Party Intellectual Property

Developers shall not use StampMitra APIs to infringe third-party intellectual-property rights.

100. Trade Secret Protection

Confidential information relating to external providers may constitute trade secrets or commercially sensitive information.

Developers shall not misuse or disclose such information.

101. Competitive Intelligence

A Developer shall not use unauthorized technical access to StampMitra systems to obtain confidential information for competitive intelligence.

102. Benchmarking

Public or private benchmarking of StampMitra or external service performance must comply with applicable authorization requirements and must not involve prohibited load or security testing.

103. Third-Party Complaints

Where an Underlying Service Provider raises a legitimate concern regarding a Developer's use, StampMitra may:

  • investigate;
  • request information;
  • restrict the relevant Service;
  • require remediation;
  • suspend access where necessary.

104. Provider Requirements

StampMitra may communicate provider-specific requirements to Developers where necessary.

Such requirements may become conditions of continued access to the affected Service.

105. Emergency Provider Restriction

StampMitra may immediately restrict a Service if an external provider:

  • withdraws authorization;
  • identifies material abuse;
  • experiences a security incident;
  • becomes legally unavailable;
  • requires emergency suspension.

106. Third-Party Termination

If an external provider terminates a critical dependency, StampMitra may terminate or suspend the affected API where no reasonable alternative exists.

107. No Guarantee of Replacement

StampMitra may attempt to identify an alternative provider but does not guarantee that an equivalent alternative will exist.

108. Developer Responsibility for Business Continuity

Developers should maintain appropriate application-level handling for Service interruption.

For business-critical applications, Developers should not rely on a single API request path without appropriate error and fallback handling.

109. Transaction Status

Where an external service processes a transaction asynchronously, the Developer should rely on the documented status mechanism rather than assuming that a timeout means failure.

110. Duplicate Transactions

Developers are responsible for implementing idempotency and transaction reconciliation where supported.

StampMitra shall not necessarily be liable for duplicate requests caused by Developer implementation.

111. External Payment Dependencies

Where a Service involves an external payment system, payment status may depend upon external confirmation.

Developers should rely on the documented transaction status rather than solely on browser redirects or client-side indications.

112. Refund Processing

Refunds involving external providers may require reconciliation with the relevant external transaction.

113. Customer Communication

Developers must not falsely attribute an external provider's action, failure or decision to StampMitra where the distinction is material.

114. Service Representation

Developers must accurately describe StampMitra-powered Services to their End Users.

They must not claim that StampMitra guarantees an outcome that depends upon an external authority or provider.

115. Government Decisions

Where a government authority or authorized external system makes a decision, the Developer must not represent that decision as being made by StampMitra unless expressly stated.

116. Verification Results

A verification result must not automatically be represented as:

  • a government certification;
  • legal advice;
  • absolute proof;
  • permanent validation.

The precise meaning of the result depends upon the Service.

117. Document Acceptance

StampMitra cannot guarantee that every external authority will accept a document unless such acceptance is expressly represented.

118. Service-Specific Disclaimers

Additional disclaimers may apply to:

  • verification;
  • e-Stamp;
  • e-Sign;
  • government-related services;
  • document services.

119. Liability Allocation

Liability concerning an external service shall be determined by:

  • the Developer Terms;
  • applicable SLA;
  • Service-Specific Terms;
  • DPA where relevant;
  • actual control over the relevant event;
  • mandatory applicable law.

120. No Unlimited Upstream Liability

StampMitra does not automatically assume unlimited liability for failures occurring exclusively within an independent external system outside StampMitra's reasonable control.

121. No Waiver of Statutory Rights

Nothing in this Policy excludes liability or statutory rights that cannot lawfully be excluded.

122. Policy Changes

StampMitra may update this Policy to reflect:

  • provider changes;
  • technical changes;
  • regulatory changes;
  • security developments;
  • new Services;
  • commercial changes.

123. Notice of Material Changes

Where required, material changes may be communicated through:

  • Developer Platform;
  • email;
  • Documentation;
  • service notifications;
  • updated policy publication.

124. Effect of Changes

The updated version shall specify its effective date.

Continued use after the effective date may constitute acceptance where legally permissible and appropriate.

125. Severability

If any provision is invalid or unenforceable, the remaining provisions shall remain effective to the maximum extent permitted by law.

126. Governing Law

This Policy shall be governed by the laws of India, subject to mandatory applicable law.

127. Dispute Resolution

Disputes shall be handled in accordance with the dispute-resolution provisions contained in the StampMitra Developer Terms of Service or applicable written commercial agreement.

128. Contact

For legal, contractual or third-party service matters:

  • Legal Team
  • BANI GLOBAL INDUSTRIES LLP
  • LLPIN: ACI6373

Registered Office: 2-A/3, Kundan Mansion, Asaf Ali Road, Turkman Gate, Central Delhi, NCT of Delhi, India – 110002

Email: [email protected]

129. Final Acknowledgement

By using a StampMitra API, the Developer acknowledges that:

  • 1. StampMitra may rely on external service infrastructure;
  • 2. specific upstream providers may remain confidential;
  • 3. external service availability is not entirely controlled by StampMitra;
  • 4. provider routing may change;
  • 5. external data may have limitations;
  • 6. external transaction rules may apply;
  • 7. Developers must comply with communicated provider requirements;
  • 8. Developers must not attempt to circumvent StampMitra's upstream relationships;
  • 9. StampMitra may substitute or discontinue external dependencies where necessary; and
  • 10. the Developer remains responsible for lawful use of the Services.

130. Policy Record

  • Policy: StampMitra Third-Party & Underlying Services Policy
  • Document Type: Developer Platform Third-Party & Service Dependency Policy
  • Version: 1.0
  • Status: FINAL — PUBLISHED POLICY
  • Effective Date: 05 October 2026
  • Last Updated: 05 October 2026
  • Legal Entity: BANI GLOBAL INDUSTRIES LLP
  • LLPIN: ACI6373

Registered Office: 2-A/3, Kundan Mansion, Asaf Ali Road, Turkman Gate, Central Delhi, NCT of Delhi, India – 110002

Developer Platform: developer.stampmitra.in

Legal Contact: [email protected]

© 2026 BANI GLOBAL INDUSTRIES LLP. All rights reserved.

Build with AI

Integrate StampMitra with one copy-paste prompt.

Ready-made prompts for the tools you already use. They know our endpoints, auth and response shapes.