Technology and regulation glossary

Account aggregator

A consent-based system, regulated by the Reserve Bank of India, that lets individuals and businesses share their financial data between regulated institutions. Aggregators pass data on with the user’s consent but cannot read or store it for their own use. Read the full guide

Agentic AI

AI systems that can plan a sequence of steps and take actions in other software, such as updating records or sending messages, rather than only producing text. They raise new questions about oversight, logging and reversibility. Read the full guide

BRSR Core

A subset of key indicators within SEBI’s Business Responsibility and Sustainability Report that the largest listed companies must have assured. It places greater weight on the quality and traceability of sustainability data. Read the full guide

Data product

A data set managed like a product, with a named owner, known users, documentation and a published quality standard. The approach aims to make data easier to find and trust.

DPDP Act

India’s Digital Personal Data Protection Act, 2023. It sets rules for how organisations process digital personal data, including consent, the rights of individuals (data principals) and the notification of breaches. Read the full guide

FinOps

The practice of managing cloud costs through shared accountability between engineering, finance and business teams, using near real-time data on spending. Read the full guide

Operational sovereignty

Control over who can operate, access and administer the systems that hold your data, as distinct from where the data is physically stored.

Quick commerce

Delivery of groceries and everyday goods within minutes, typically from small local warehouses known as dark stores.

Scope 3 emissions

Indirect greenhouse gas emissions in a company’s value chain, such as those of suppliers and from the use of sold products. They are usually the largest share of a company’s footprint and the hardest to measure.

Zero trust

A security approach that grants access based on continuous verification of identity, device and context, rather than on whether a request comes from inside the corporate network. Read the full guide