Qualified RTA

Most of India's shareholder records sit with a handful of registrars. If one of them lost its data, or went dark for a week, millions of investors across hundreds of listed companies would simultaneously lose access to their holdings, their dividends and their service requests.

SEBI's answer is to stop treating those firms as ordinary intermediaries. A registrar that services more than 2 crore folios is a Qualified RTA, and is also referred to as a Critical Infrastructure Institution (CII) — the same category of thinking applied to exchanges and depositories.

The label brings no new business. It brings obligations.

Given the volume of transactions they handle, QRTAs must comply with enhanced monitoring requirements through the adoption and implementation of an internal policy framework and periodic reporting on:

• key risk areas
• data security measures
• business continuity
• governance structures
• measures for enhanced investor services, service standards and grievance redressal
• insurance against risks

QRTAs also carry a market-wide duty under SEBI's online-processing framework. In Phase I, every RTA servicing listed companies had to have a functional website displaying its registration number, registered head office and branch addresses, KMP contact details and the procedures for filing service requests, plus a user-friendly online portal. In Phase II, all RTAs are served by a common website, made and operated by QRTAs from 1 July 2024, through which an investor enters the name of a listed company and is redirected to the concerned RTA's own portal for resolution.

On top of that sit the obligations every RTA carries. Internal audit is compulsory and annual, by an independent auditor with at least three years' experience in the financial sector, appointed for a maximum term of five years with a two-year cooling-off period. The report goes to the issuer company within three months of the end of the financial year, and the Action Taken Report within the next one month. Records and documents must be kept for not less than 8 years after completion of the relevant transactions — by the RTA, the issuer company and the banker to an issue alike. Under the 2025 RTA Regulations the old category split has been replaced by a single Unified Registration.

A registrar services 1.62 crore folios. It wins the mandate for a large listed bank bringing 58 lakh folios:

1.62 crore + 0.58 crore = 2.20 crore folios  →  above 2 crore  →  it is now a QRTA

Nothing about the work changed the day the mandate started. The compliance perimeter did: internal policy framework, periodic risk and data-security reporting, business continuity, insurance, and a share of running the common investor website.

Why the threshold is set where it is becomes obvious on a single payout. One client company declares a final dividend of Rs 6 per share on 58 crore shares:

Total payout = 58,00,00,000 × Rs 6 = Rs 348 crore
Spread across, say, 12.6 lakh folios → average Rs 2,762 per folio

Assume just 0.1 percent of those credits fail — stale bank mandates, closed accounts, undelivered warrants:

1,260 folios × Rs 2,762 ≈ Rs 34.8 lakh unpaid

That Rs 34.8 lakh must be reconciled by the issuer, the RTA and the processing bank quarterly, until it is transferred to the IEPF, and the reconciliation files kept eight years. One company, one dividend. A QRTA is doing this across hundreds of issuers at once — which is precisely why SEBI calls it critical infrastructure.

Chapter 6.4.1, under "Enhanced monitoring guidelines for Qualified RTAs", and Chapter 13 for the online portal phases. The examinable facts are narrow and specific: the 2 crore folio threshold, the Critical Infrastructure Institution label, the six heads of periodic reporting, and that the Phase II common website is built and operated by QRTAs from 1 July 2024.

• The threshold is folios, not investors and not companies — more than 2 crore folios in aggregate across all client issuers, not per issuer.
• QRTA is not a separate registration. Under the SEBI (RTA) Regulations, 2025 there is a single Unified Registration covering both registrar-to-an-issue and share-transfer-agent activity; "Qualified" is a supervisory classification layered on top.
• The common website redirects; it does not resolve. Investors are sent on to the concerned RTA's own portal.
• Annual internal audit applies to all RTAs, not only QRTAs. What is specific to QRTAs is the enhanced monitoring and periodic reporting.
• The 8-year retention rule is not the RTA's alone — it binds bankers to an issue and issuer companies too.
• The internal auditor's limits are separate numbers and get muddled: 3 years' experience, 5-year maximum term, 2-year cooling off, report in 3 months, ATR in 1 month.