Our role: The final statutory audit report for this requirement must be issued by a CERT-In empanelled auditor. Rakvora prepares you for it — pre-audit assessment, VAPT, remediation support and evidence — so the statutory audit closes quickly and cleanly.
Authentication User Agencies (AUA) and KYC User Agencies (KUA) that use Aadhaar authentication must comply with UIDAI's security and data-handling requirements and undergo periodic audits.
We review your Aadhaar integration, data vault, key management, consent capture and operational controls, and help you remediate before the statutory audit.
Objectives
- Review Aadhaar data vault and encryption practices
- Assess HSM and key management
- Verify consent capture and data minimisation
- Test applications and devices in the authentication flow
Methodology
01
Scoping
- Confirm the applicable regulation, circulars and in-scope systems
- Agree timelines against your regulatory deadline
02
Pre-audit assessment
- Control-by-control review against the regulatory checklist
- Vulnerability assessment and penetration testing of in-scope systems
03
Remediation
- Prioritised fix plan with owners and dates
- Hands-on support closing gaps and updating policies
04
Audit readiness
- Evidence pack organised to the auditor's checklist
- Support during the statutory audit and closure of observations
Deliverables
Pre-audit gap assessment report
VAPT report with retest
Remediation tracker
Evidence pack for the statutory auditor