Product Requirements Document
Contents
This document defines the product requirements for onboarding Micro, Small, and Medium Enterprises (MSMEs) as invoice sellers onto KredX's DTX platform — a TReDS (Trade Receivables Discounting System) licensed by the Reserve Bank of India.
TReDS allows MSMEs to sell their unpaid invoices to banks and financiers, getting cash immediately instead of waiting 60–90 days. The onboarding flow is the first experience every MSME has with DTX. If it is confusing or slow, they leave. If it is fast and clear, they stay and grow with the platform.
Design north star: An MSME owner with a 5th-grade education should be able to complete onboarding on their phone in under 20 minutes, without calling customer support.
Indian MSMEs face a severe cash-flow problem: they deliver goods and services but wait months to be paid. TReDS was built to solve this. However, platform adoption has been low because the onboarding process itself is a barrier.
💡 Insight: All the information MSMEs are asked to upload already exists in government databases (Udyam, GSTN, MCA21, PAN). The real problem is that platforms haven't built the API connections to fetch it automatically.
| Persona | Who they are | Their biggest pain | What success looks like |
|---|---|---|---|
| Ramesh Proprietor, auto-parts supplier, Ludhiana. Limited digital literacy. Aadhaar-linked phone. | Runs a 1-person firm. Submits invoices to a large car manufacturer. Needs ₹5L now, will get it in 90 days. | Doesn't know what "Partnership deed" or "MOA" means. Gives up when asked to upload documents. | Completes onboarding in 12 minutes on his phone. Never asked for a document he doesn't understand. |
| Priya CFO of a 3-partner food ingredient firm, Pune. Has CA on call. Comfortable with digital. | Needs all 3 partners to complete KYC. Worried about which partner's documents are needed. | Sequential partner KYC means the process takes 3 days if partners are in different cities. | All 3 partners get simultaneous KYC links. Onboarding complete in 25 minutes despite geographic split. |
| Amit Director of a textile exporter Pvt Ltd, Surat. 2 directors, 3 shareholders. Referred by anchor corporate. | Complex shareholding. Needs to declare beneficial owners accurately. Has DSC and DigiLocker. | Unclear which shareholders need KYC (old 25% threshold vs new 10% threshold creates confusion). | System auto-fetches director list from MCA21. Clearly explains the 10% BO rule in plain language. |
These are not optional features — they are legal obligations. Any change to these requires a compliance sign-off, not just a product decision.
| Requirement | Regulatory Source | What it means in plain English |
|---|---|---|
| Customer Acceptance Policy | §16 KYC MD | No anonymous accounts. No account activated until KYC is complete. |
| Risk categorisation | §17 KYC MD | Every MSME must be rated Low / Medium / High risk. Level of checking must match the rating. |
| Check CKYC first | §56 KYC MD | Before asking someone to redo their identity verification, check if it's already in the central registry. |
| Video KYC rules | §18A KYC MD | Video must be live, recorded, stored on KredX's own servers. No Zoom/Teams. Facial gestures NOT mandatory (for accessibility, per 2025 update). |
| Beneficial Owner (BO) rule | §22 KYC MD · FATF 2023 | Anyone who owns 10%+ of the business must be personally verified. (This was 25% — it was reduced to 10%.) |
| Record keeping | §45 KYC MD · PMLA 2002 | All KYC documents must be stored securely for at least 5 years. |
| Periodic KYC renewal | §38 KYC MD | Low risk: renew every 10 years. Medium: 8 years. High: 2 years. Platform must restrict account if not renewed. |
| Sanctions screening | PMLA 2002 | Check every new MSME and owner against UN/OFAC/RBI sanctions lists before activation. |
| Udyam mandatory | TReDS MD 2021 | Only businesses with a valid Udyam Registration can use TReDS. No exceptions. |
| Aadhaar eKYC consent | §18(b) KYC MD | Must get explicit, written/digital consent before using Aadhaar OTP to verify anyone's identity. |
MUST = required for launch SHOULD = important, ship in v1.1 NICE = backlog
| System | Data fetched | Regulatory basis | Priority |
|---|---|---|---|
| ITD PAN API | Entity name, type, status | §18 KYC MD | MUST |
| Udyam Verify API | MSME class, NIC code, address, bank account ref | TReDS MD 2021 | MUST |
| GSTN / GST Sahay API | GST status, compliance history, address | §33 KYC MD (proprietorship OVD) | MUST |
| CKYCR (CERSAI) | Individual identity, address, photo | §56 KYC MD | MUST |
| UIDAI eKYC API | Aadhaar-verified identity via OTP | §18(b) KYC MD | MUST |
| MCA21 API | CoI, director list, shareholding | §26–27 KYC MD | MUST (for LLP/Pvt Ltd) |
| DigiLocker API | Aadhaar XML, DL, MOA/AOA | §18A KYC MD | MUST |
| Penny Drop / IMPS Bank API | Bank account beneficiary name validation | TReDS MD — fund destination | MUST |
| Account Aggregator | Bank statement (consent-based) | Optional enhancement | SHOULD |
| Udyam Assist (UAP) | Informal enterprise certificate | MSME Ministry / SIDBI | SHOULD |
| Sanctions API (UN/OFAC/RBI) | Sanctions match check | PMLA 2002 | MUST |
| Metric | Target | Measurement | Review cadence |
|---|---|---|---|
| Time-to-activate (P50) | <20 minutes | Account creation timestamp → first invoice upload enabled | Weekly |
| Straight-through approval rate | >80% | % submissions auto-approved without human review | Weekly |
| Drop-off rate | <15% overall | % users who start and do not submit | Daily |
| Per-step drop-off | <5% per step | Funnel analysis in analytics dashboard | Daily |
| CKYC hit rate | >50% of individuals | % KYC instances resolved via CKYCR without fresh KYC | Monthly |
| KYC rejection rate | <5% | % applications rejected by compliance team | Monthly |
| Manual review TAT | <8 hours (medium risk) | Submission → decision timestamp for non-STP cases | Daily |
| Regulatory compliance | 100% | % applications with complete KYC per entity type (internal audit) | Real-time |
| Risk | Probability | Impact | Mitigation |
|---|---|---|---|
| 2026 Draft TReDS Directions not finalized or materially changed | Medium | High — simplified flow becomes non-compliant | Architecture has a compliance mode toggle. Full CDD path is production-ready from Day 1. |
| Government API downtime (Udyam, GSTN, UIDAI) | Medium | High — onboarding blocked | Async retry with exponential backoff. Session state saved at every step. Fallback to manual upload if API down >5 min. |
| Fuzzy matching thresholds too strict → high manual review queue | High (on launch) | Medium — slows onboarding, not a compliance risk | Pre-calibrate on existing 65K MSME dataset. Weekly ops review. All thresholds configurable without code deploy. |
| Fuzzy matching too loose → fraud | Low | Very High — compliance and financial risk | Multi-source 3-way validation (PAN + Udyam + penny drop). Any mismatch routes to manual review, not auto-approve. |
| V-CIP infrastructure not RBI-compliant | Low (if built correctly) | Very High — regulatory violation | V-CIP is Level 4 fallback — volume should be <10% of applications. Full §18A compliance checklist enforced pre-launch. |
| BO declaration is fraudulent (self-declared) | Low | High — PMLA violation | MCA21 cross-verification for Pvt Ltd. Digital undertaking with explicit penalty clause. High-risk flag triggers EDD and manual review of all BO declarations. |
Get paid faster on your invoices
Sign up in under 20 minutes. No branch visit. No document uploads.
We'll send a 6-digit code to your phone. This creates your account and helps us contact you during onboarding.
To verify your business quickly, we need to check these government databases on your behalf. You can say no to any of them.
Enter 2 numbers — we'll auto-fill everything else.
We need to confirm the identity of the person running this account. We try the fastest option first.
This is where KredX will send your money when invoices are paid. We'll verify it by sending ₹1 to confirm ownership.
Matches: XYZ Textiles Pvt Ltd · HDFC Bank
Check everything below before signing.
Your application is being reviewed. Low-risk businesses are approved automatically in under 2 hours.
No branch visit. No document scanning. Most MSMEs done in under 20 minutes.
📋 You'll need: your Business PAN and your Udyam number. That's it — we'll fetch everything else automatically from government databases.
We'll send a 6-digit code. This keeps your account secure.
📍 Why we need this: RBI requires us to verify your contact details before opening any financial account. Reference: §16 KYC MD
To verify your business quickly, we need to check these government databases.
Enter two numbers — we do the rest automatically.
🔍 After you tap Continue, we'll automatically check: business name, type, GST status, MSME classification, and registered address — from government databases. No uploads needed.
RBI requires us to confirm the identity of the person running this account. We try the fastest method first.
This is where KredX sends money when invoices are paid. We'll verify it by sending ₹1 to confirm it's yours.
💡 Why 3-way verification? We cross-check your bank name against (1) your PAN records and (2) the bank account on your Udyam certificate. This is the RBI's primary requirement for TReDS sellers. TReDS MD 2021
Check everything below. You'll sign this with your Aadhaar OTP.
Your business is Low Risk. You'll receive an approval SMS and email within 2 hours. Once approved, you can upload your first invoice immediately.