OIDAR Compliance in India: GST Registration, NTOR Rules, and Key Risks for Digital Service Providers

Foreign digital service providers supplying to Indian consumers must navigate India’s Online Information and Database Access or Retrieval (OIDAR) framework under the Goods and Services Tax (GST) regime. With enforcement tightening and the digital economy expanding, OIDAR compliance has become a critical market entry and risk management requirement for SaaS platforms, cloud providers, digital content companies, and online platforms.

India taxes OIDAR services based on the location of the recipient, meaning offshore providers can trigger GST liability simply by serving Indian users.

OIDAR compliance is no longer a back-office tax issue—it is a front-line market entry requirement. For digital service providers, GST alignment directly determines how quickly and confidently they can access India’s consumer market while avoiding regulatory friction. – Ankur Munjal, India Country Director, Dezan Shira & Associates

What is OIDAR under India’s GST framework?

OIDAR (Online Information and Database Access or Retrieval) refers to digital services delivered over the internet with minimal human intervention. Under India’s GST law, such services are taxed based on the location of the recipient, making foreign providers liable for GST when supplying to Indian consumers.

What digital services are covered under OIDAR in India?

Under India’s GST framework, OIDAR refers to services delivered over the internet or electronic network that are essentially automated and involve minimal human intervention. See official link from GST Council here for reference.

Core characteristics:

• Delivered via internet/electronic network
• Automated in nature
• Impossible without IT infrastructure

Covered services include:

• Cloud computing and SaaS platforms
• Digital advertising and data services
• Streaming services (video, music, OTT)
• E-learning platforms (automated delivery)
• Online gaming and digital entertainment
• Supply of e-books, software, and digital downloads
• Data storage, hosting, and database access
• AI tools, APIs, and automated digital solutions
• Online marketplaces supplying digital goods/services
• Subscription-based digital memberships

Important distinction: Services involving significant human intervention (e.g., consulting, advisory, live training) are generally excluded from OIDAR classification.

Place of supply rule: Under Section 13(12) of the IGST Act, OIDAR services are taxable in India when consumed by users located in India.

Who is a Non-Taxable Online Recipient (NTOR) in India?

OIDAR provisions under India’s GST framework apply primarily to services supplied to Non-Taxable Online Recipients (NTORs) – a central concept that directly determines whether GST liability rests with the service provider or shifts to the recipient.

NTOR definition

A Non-Taxable Online Recipient is a person who:

• Is located in India;
• Is not registered under GST; and
• Receives OIDAR services for non-business (personal) purposes.

This definition is critical because OIDAR rules are specifically designed to capture cross-border digital consumption by end users, rather than business-to-business transactions.

Typical NTOR examples

Common scenarios where recipients qualify as NTORs include:

• Individuals subscribing to OTT or streaming platforms
• Consumers purchasing digital content such as e-books, music, or apps
• Individuals using SaaS tools, AI platforms, or cloud services for personal use
• Users paying for online gaming, memberships, or digital subscriptions

Practical interpretation challenges

In practice, distinguishing NTOR from business recipients is not always straightforward.

Key grey areas include:

• Freelancers or sole proprietors using services partly for business and personal use
• Small businesses or startups not registered under GST
• Users providing incomplete or inaccurate registration details
  • Register under GST in India
  • Charge and remit GST
  • File returns under GSTR-5A

In such cases, default classification as NTOR may apply, increasing compliance exposure for foreign service providers.

Why NTOR classification matters

Correct identification of NTOR status is fundamental to determining GST liability:

• B2C (NTOR) transactions
  → Foreign service provider is required to
• B2B transactions (GST-registered recipients)
  → GST liability typically shifts to the Indian recipient under the reverse charge mechanism (RCM)

Compliance implications for businesses

For digital service providers, NTOR classification has direct operational and compliance consequences:

• Determines whether GST registration in India is mandatory
• Impacts pricing, invoicing, and tax collection mechanisms
• Requires systems to capture and validate customer GST status
• Influences audit exposure and enforcement risk

Misidentifying NTOR status is one of the most common compliance gaps for foreign digital service providers operating in India.

ALSO READ: GST Compliance for SaaS and Cloud Computing in India: Rates, Registration & Cross-Border Rules

When is GST registration required for OIDAR providers in India?

Find Business Support

Ensure full GST compliance for your digital services in India—speak to our advisors.

GST registration requirements for OIDAR providers depend on the location of the supplier, nature of the recipient (B2C vs B2B), and classification of services. Unlike traditional GST thresholds, OIDAR provisions impose stricter and immediate obligations, particularly for foreign digital service providers.

Foreign service providers (B2C – NTOR supplies)

For foreign entities supplying OIDAR services to Non-Taxable Online Recipients in India, GST registration is mandatory from the first transaction, regardless of turnover.

Under GST provisions:

• No threshold exemption applies – even minimal revenue from Indian consumers triggers registration
• Applies to all foreign providers offering digital services such as SaaS, streaming, digital content, or online platforms
• Registration must be obtained under a simplified OIDAR compliance regime
• Businesses are required to appoint a representative in India for compliance purposes
• GST must be charged, collected, and remitted directly by the foreign supplier

This creates a direct tax presence in India without requiring a physical establishment, making early compliance planning essential for market entry.

Foreign providers (B2B supplies)

Where OIDAR services are supplied to GST-registered businesses in India, the tax liability typically shifts to the recipient under the reverse charge mechanism.

Key considerations:

• The Indian business recipient is responsible for self-assessing and paying GST
• Foreign suppliers may not be required to register if all supplies are purely B2B and correctly classified
• However, mixed supply models (B2B + B2C) can trigger registration requirements

Risk factors:

• Misclassification of customers (NTOR vs GST-registered entity)
• Failure to obtain or validate GSTIN details
• Incorrect assumption of RCM applicability

Even limited B2C exposure can create full GST registration obligations for foreign providers.

Indian providers

For Indian entities supplying OIDAR services:

• GST registration is required once prescribed turnover thresholds are exceeded (typically INR 2 million for normal category states or / INR 1 million for special category states)
• Full GST compliance obligations apply, including:
  • Regular return filing
  • Input tax credit (ITC) eligibility
  • Standard invoicing and reporting requirements

Additional considerations:

• Indian providers must still assess OIDAR classification to determine place of supply rules
• Cross-border supplies may trigger export of services provisions or IGST implications

Intermediary exception: When platforms are liable for GST

A critical compliance issue for marketplaces, aggregators, and digital platforms is whether they are treated as the supplier of OIDAR services.

Under GST rules, an intermediary will not be treated as the supplier only if all four conditions below are satisfied:

1. Does not authorize the charge
   The platform does not control or approve customer payments
2. Does not set general terms and conditions
   Pricing and service terms are determined by the underlying provider
3. Does not deliver or control service delivery
   The platform does not influence how the service is performed
4. Does not collect or process payment
   Payment is not routed through or handled by the platform

Key implication: If any one of these conditions is not met, the platform becomes the deemed supplier and is liable for GST under OIDAR.

Many app stores, SaaS marketplaces, and aggregator platforms fail these conditions – triggering direct GST liability in India.

The hidden risk: Misclassification and enforcement exposure

Indian tax authorities increasingly apply a substance-over-form approach, supported by CBIC guidance and advance rulings.

High-risk scenarios include:

• SaaS incorrectly classified as non-OIDAR
• Automated services treated as consulting/advisory
• Platforms misclassifying intermediary status
• Incorrect B2B vs B2C classification

Potential consequences:

• Retrospective tax liabilities
• Interest and penalties
• Regulatory scrutiny and audits
• Disputes over place of supply

OIDAR compliance requirements: GSTR-5A, tax payments, and reporting

Once registered, OIDAR providers must comply with a specific and streamlined GST framework.

GSTR-5A return filing (mandatory)

• Monthly return under FORM GSTR-5A
• Due by the 20th of the following month
• Includes:
• B2C supplies to Indian consumers
• Tax payable and discharged

Tax payment

• GST must be paid in Indian Rupees (INR)
• No input tax credit mechanism for foreign OIDAR providers

Record-keeping and data tracking

Businesses must maintain:

• Customer location indicators (IP, billing address, payment method)
• Transaction-level data
• Classification of B2B vs B2C

Place of supply determination

Requires at least two non-contradictory pieces of evidence, such as:

• Billing address
• IP address
• Bank/payment details 

Failure to file GSTR-5A or maintain adequate records is a common trigger for GST enforcement actions.

Why OIDAR compliance is a strategic business issue

Market entry enablement

GST registration is often a prerequisite for operating and scaling in India. Without proper registration, businesses may face restrictions in onboarding customers, processing payments, or partnering with local entities. Increasingly, Indian payment gateways, enterprise clients, and platform partners require GST-compliant invoicing, making early alignment essential for seamless market entry and scalability.

Pricing and competitiveness

Find Business Support

Mitigate GST risks on cross-border digital services—consult our tax specialists.

OIDAR-related GST obligations have a direct and immediate impact on pricing models, particularly in B2C segments where tax costs are typically absorbed or passed on to consumers.

Key implications include:

• Adjustments to subscription pricing and billing structures
• Margin compression if GST is not factored into pricing strategy
• Competitive positioning relative to GST-compliant and locally established players

Businesses that proactively integrate GST into their pricing architecture can avoid reactive price corrections and maintain consistency across global and India-specific offerings.

Investment readiness

Investors assess tax compliance as a core due diligence parameter when evaluating India expansion strategies.

Unresolved GST risks can:

• Trigger valuation discounts
• Delay transactions or funding rounds
• Create contingent liabilities on balance sheets

Conversely, a well-structured OIDAR compliance framework signals operational maturity, governance readiness, and scalability, all of which are critical for investors, acquirers, and strategic partners evaluating India exposure.

Practical tax considerations for digital businesses in India

Businesses entering India’s digital market should adopt a structured and forward-looking approach to managing OIDAR obligations:

Assess OIDAR applicability

Evaluate whether the service model meets the automation and minimal human intervention threshold under GST law.
This requires reviewing:

• Service delivery mechanisms
• Degree of human involvement
• Platform architecture and user interaction

Even slight variations in service design can influence classification outcomes.

Determine recipient classification

Establish whether customers qualify as Non-Taxable Online Recipients (NTOR) or business entities.

This involves:

• Capturing GST registration status of customers
• Differentiating between personal and business use cases
• Applying correct tax treatment (OIDAR vs reverse charge)

Incorrect classification remains a leading cause of compliance exposure.

Evaluate intermediary exposure

For platform-based models, carefully assess whether the business qualifies as an intermediary or a deemed supplier under OIDAR rules.

This requires applying the four-condition test to determine:

• Control over pricing and terms
• Role in service delivery
• Payment collection responsibilities

Given the complexity of digital platform structures, this analysis often requires detailed contractual and operational review.

Align systems and compliance processes

Ensure that internal systems are capable of capturing, validating, and reporting GST-relevant data in real time.

Key system capabilities should include:

• Identification of customer location using multiple indicators
• Automated tax determination based on transaction type
• Clear classification of B2B vs B2C supplies
• Integration with invoicing and reporting workflows

Technology alignment is critical to avoid manual errors and ensure audit readiness.

Track regulatory updates

India’s digital tax framework is evolving rapidly, with frequent clarifications and enforcement trends emerging from authorities such as the Central Board of Indirect Taxes and Customs (CBIC) and the GST Council.

Businesses should:

• Monitor notifications, circulars, and advance rulings
• Track changes in digital tax enforcement practices
• Periodically reassess compliance positions

A static approach to compliance can quickly become outdated in India’s dynamic regulatory environment.

Digital tax trends in India

India’s regulatory landscape for digital services is evolving rapidly:

• Increased enforcement of GST on cross-border digital services
• Expansion of data-driven tax monitoring systems
• Greater scrutiny of platform-based business models
• Alignment with global digital taxation frameworks

Frequently asked questions (FAQs)

Do foreign SaaS companies need GST registration in India?
Yes, if supplying to Indian consumers (Non-Taxable Online Recipients or NTOR), registration is mandatory regardless of turnover.

Is there a minimum threshold for OIDAR registration?
No, foreign providers must register irrespective of revenue.

Does GST apply to B2B digital services?
Typically under reverse charge, but classification must be carefully assessed.

What is GSTR-5A?
A monthly return required for OIDAR providers to report B2C supplies in India.

Can intermediary platforms avoid GST liability?
Only if all four statutory conditions are satisfied.

Final takeaway

OIDAR compliance sits at the intersection of tax, technology, and market strategy. For digital service providers entering India, GST registration, NTOR classification, intermediary assessment, and GSTR-5A compliance is essential.

Companies that treat compliance as a strategic function, rather than a regulatory burden, are better positioned to scale in India’s digital economy while minimizing tax risk.

A well-executed audit in India is crucial to ensure compliance with local regulations, verify financial accuracy, and identify risks, while a clean, structured audit process helps businesses stay ahead and gain clear visibility into operations.

Lalitha Rao

Manager

Talk to an expert at India@dezshira.com

Or request a consultation at +91 0124 4001785 ext. 202

• Previous Article India’s Tax Compliance Deadlines for April & May
• Next Article