Defense · India IT Rules (SGI)
India IT Rules (SGI) for defense AI workflows
India IT Rules (SGI) in defense AI workflows: what compliance requires, who asks for evidence, and the records to keep.
01 / The rule
What India IT Rules (SGI) requires
Intermediaries whose services can be used to create or share synthetic content; significant social media intermediaries carry the declaration and verification duties.
- 01Services that can create or share synthetic content must label it prominently; for audio, a prominently prefixed disclosure. No label size is set.
- 02Embed permanent metadata or other provenance with a unique identifier where technically feasible, and not enable removal of the label or metadata.
- 03Significant social media intermediaries must collect each user's declaration on whether content is synthetic, verify it with technical measures, and label confirmed synthetic content.
- 04Remove content within 3 hours of a court order or reasoned government intimation.
- 05Remove intimate or impersonation content within 2 hours of an individual's complaint; specified categories within 36 hours, other grievances within 7 days.
02 / In this sector
In a defense AI workflow
Covers AI-made or AI-altered audio, images and video that appear real and could be mistaken for a real person or event. Pure text output is excluded, as are routine good-faith edits that do not materially change meaning.
Program office leads and ATO-package owners.
NIST AI RMF · DoW RAI · OMB M-25-21.
03 / Records
Records to keep
- 01Label specifications per surface and format, with prominence rationale
- 02Provenance metadata standard and embedding test results
- 03User declaration records and verification results
- 04Takedown notice log with class, receipt time and removal time
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
Ministry of Electronics and Information Technology
RELATED
Related: India IT Rules (SGI): the full guide · India IT Rules (SGI) for medicine · India IT Rules (SGI) for law · India IT Rules (SGI) for education