Replyvault

An archived chat line for SEBI advisers and brokers, ready for audit

SMEs

TL;DR Replyvault gives small SEBI-registered firms a business chat-app number where every client chat is captured, time-stamped and kept in a form they can hand to an inspector or a court. The firm pays a monthly fee per adviser. It works because SEBI now accepts chat-app records, but only if firms can prove them.

The problem

Indian clients message their adviser or dealer on chat apps, not email. Until March 2026 that left brokers unsure whether a chat counted as proof of a client's order. SEBI then told one broker that a chat-app order from the client's registered number can count, provided the logs are retrievable and verifiable for any investigation, and that in a dispute the broker must prove it under electronic-evidence law[1].

That puts the burden squarely on the firm. Most small advisers run client conversations on a personal phone.

If the phone is lost, the employee leaves or a chat gets deleted then the record is simply gone. Large banks buy global archiving suites, but a three-person advisory shop has nothing sized for it.

The idea

What it does, in regulatory terms: record-keeping and supervision software for regulated intermediaries. It does not give advice, take orders or hold client money, so it needs no SEBI licence itself. Its customers stay fully responsible under their own registration.

Each adviser or dealer gets a business chat-app number run through the chat app owner's official business platform. Clients chat as they do today. Every message, voice note and file is copied to tamper-evident storage in India, tagged with the client's registered number and stamped with a trusted time. A compliance officer can search by client, pull an export for an inspection, and flag chats that look like order instructions so the dealer confirms them.

The seed proposed homomorphic encryption and confidential computing for "secure communication". I dropped that, because it's slow and expensive and it solves secrecy when the regulator is asking about proof. Standard encryption at rest plus a clean audit trail does the job just fine.

Who pays

The user is the adviser or dealer, but the payer is the firm's owner or compliance officer. Buyers are SEBI-registered investment advisers, research analysts, portfolio managers and small stock brokers. They already pay for compliance audits and registration fees, so a per-seat monthly subscription is a familiar purchase. No public price exists for an India-sized version, and global tools are sold to large banks on quote.

Why now

SEBI's interpretive letter of 20 March 2026 is the trigger, because it makes chat-app records usable but conditional[1]. The Stock Broker Master Circular of July 2025 already requires evidence of pre-trade confirmation[1]. CERT-In has required 180-day logs since 2022[5], and the DPDP Act raises the cost of a careless leak.

Market signal

The narrowest countable base is SEBI's own register - 1,056 investment advisers[2] and 2,304 research analysts[3], plus small brokers not counted here. No public figure exists for what Indian firms spend on message archiving. If a few hundred firms paid for five seats each, that is a real but modest business, which is why the price must stay low and the sales cost lower.

Who's already doing this

One global archiving vendor captures the major chat apps for financial firms, with supervision and data-loss controls[4]. Another captures email, voice, chat and mobile channels for compliance teams[6]. Both sell to large institutions. I found no tool priced and packaged for India's small SEBI-registered firms, and the brokers' own back-office vendors have not filled the gap publicly.

How hard is it?

Difficulty Moderate (34/100)
Starting capital ₹60 L–1.1 Cr
Time to launch 6–9 months

The software isn't exotic. The hard parts are proving the archive holds up as evidence, staying inside the platform owner's business messaging rules, and selling to thousands of tiny firms without an expensive sales team. Expect most of the first year to go into distribution, not code.

Licences and approvals

Replyvault itself needs no SEBI licence, since it gives no advice and takes no orders. Your customers hold the registrations and the duties.

  • SEBI record conditions for chat-app orders: registered client number, logs that can be retrieved and verified. Build to them before launch[1].
  • Stock Broker Master Circular (July 2025), para 35.2, on evidence of pre-trade confirmation. Map your exports to it before selling[1].
  • CERT-In directions on 6-hour incident reports and 180-day logs in India apply to you as well[5].
  • DPDP Act makes you a processor for each firm, with reasonable security safeguards required[7].
  • Chat platform business messaging policy. Use an approved business platform provider. Current terms are [Requires validation] before launch.

Building this outside India? The categories above usually have a local equivalent, so check with your own regulator.

How AI can power this business

  • Order-instruction flags. A model can spot chats that read like buy or sell instructions, so the dealer confirms them on a recorded line.
  • Voice note transcripts. Turning voice notes into searchable text saves a compliance officer hours before an inspection.
  • Search by meaning. Officers can look for "complaints about delays" rather than guessing exact words.
  • Supervision sampling. AI picks a sensible sample of chats for weekly review, weighted towards new advisers and unusual activity.

Don't let AI decide whether a message was a valid order or whether advice was suitable. Those are regulated judgements, and the firm's compliance officer makes them.

Want to work out the AI layer for Replyvault? Talk to Yash →

Biggest risks

  • Platform dependence. The platform owner can change business messaging rules or pricing, and your whole product runs on its pipes.
  • Bundling. Broker back-office software vendors could add a chat archive as a free feature.
  • Regulatory drift. SEBI's letter is informal guidance tied to one applicant, and a later circular could tighten or change the conditions.

Our take

This one is worth a shot for a founder who knows SEBI compliance and can sell through adviser associations and compliance consultants. If you want to build a deep-tech encryption company then skip it, because the buyer does not care one bit. First prove that 20 firms will switch client chats to a new number, and that a lawyer will sign off on the evidence trail.

Questions founders ask

Plan for roughly ₹60 L–1.1 Cr, mostly for secure storage, the chat-app integration and selling into compliance teams.

Do I need a SEBI licence to sell chat archiving software?

No. Your customers are the registered intermediaries. You still build to SEBI's record conditions, CERT-In directions and the DPDP Act.

Can I start a messaging archive for financial firms in another country?

Yes. Archiving is a mature category abroad. Each market's securities regulator sets its own record-keeping rules, so check those first.

Download the kit

The free Replyvault validation kit has the line-by-line capital breakdown, the effort scoring, the SEBI and data-protection checklist, a 14-day validation sprint with pass/fail targets, a 90-day launch plan, 10 interview questions for advisers and compliance officers, and 5 assumptions to test. Download the kit →

Talk to Yash

Thinking about building Replyvault or something close to it? The make-or-break work is getting clients to move to a new business number without losing the relationship, and I've seen how tricky that move can be. If you need a hand, you know where to find me. Talk to Yash →

Sources

  1. SEBI, "Informal guidance to FRR Shares and Securities Ltd (Issue 1/7503/2026)", 2026-03-20. https://www.sebi.gov.in/sebi_data/commondocs/mar-2026/Informal%20Guidance%20Letter%20by%20SEBI-20.03.2026_p.pdf
  2. SEBI, "Recognised intermediaries: Investment Advisers", accessed 2026-10-21. https://www.sebi.gov.in/sebiweb/other/OtherAction.do?doRecognisedFpi=yes&intmId=13
  3. SEBI, "Recognised intermediaries: Research Analysts", accessed 2026-10-21. https://www.sebi.gov.in/sebiweb/other/OtherAction.do?doRecognisedFpi=yes&intmId=14
  4. LeapXpert, official site, accessed 2026-10-21. https://www.leapxpert.com/
  5. CERT-In, "Directions under section 70B(6) of the IT Act", 2022-04-28. https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf
  6. Smarsh, official site, accessed 2026-10-21. https://www.smarsh.com/
  7. PRS Legislative Research, "Digital Personal Data Protection Bill 2023", 2023-08. https://prsindia.org/billtrack/digital-personal-data-protection-bill-2023

For illustration only. Names are fictional and ideas hypothetical; sourced facts are real but may be out of date. Nothing here is legal, financial or professional advice, and Yash Khatri is not personally liable for any use of it. Read the full disclaimer.

Reviews

No reviews yet