Yes. Algo trading is legal for retail traders in India, and it has been for years. What changed is the paperwork around it.
SEBI issued a framework on 4 February 2025 called Safer participation of retail investors in Algorithmic trading. It was meant to start on 1 August 2025, slipped twice, and now applies to every stock broker from 1 April 2026. There is no grace period left.
The framework does not ban anything retail traders were doing. It decides who is responsible when an automated order goes wrong — and the answer depends on one question.
The question that decides everything
Did you write the algo, or did someone give it to you?
Everything else follows from that.
If you wrote it yourself
SEBI calls you a tech-savvy investor, and the rules are light:
“Algos developed by tech-savvy retail investors themselves, using programming knowledge, shall also be registered with the Exchange, through their broker, only if they cross the specified order per second threshold”
That threshold is 10 orders per second. A strategy that enters a position in the morning and exits in the afternoon is nowhere near it. Below the threshold your orders are still tagged with an identifier, but there is no approval process and nothing to apply for.
Two conditions come with it.
You need a static IP. The NSE FAQ is explicit:
“Client static IP is required only in case of Tech savvy Investor using API.”
Most home broadband in India has a changing IP address, so in practice this means renting a small server — a VPS — which comes with a fixed IP included, or buying a static IP service. Expect ₹250–600 a month.
You may only use it for your family. SEBI defines that narrowly: “self, spouse, dependent children and dependent parents.” Running your algo for friends, clients or subscribers is a different activity with a different set of rules, covered below.
If someone gave it to you
Then they are an algo provider, and the obligation is theirs, not yours:
“any algo provider, providing the facility to place algo orders with Brokers through API, shall require to be empaneled with Exchanges”
As a user, your job is simply to check that whoever sold you the strategy is actually empanelled. NSE publishes the list. If a platform is taking your money to place automated orders and is not on it, that is a problem you will eventually inherit.
What it takes to be an algo provider
This is worth knowing even if you never intend to become one, because it explains why there are so few of them.
NSE’s empanelment criteria require a registered entity, two years of securities-market experience for a proprietor or director, ISO 27001:2022 certification, SOC 1 and SOC 2 reports, and a VAPT assessment from a CERT-In empanelled auditor with a closure report. Then each individual strategy is registered with the exchange and gets its own ID, and any change to the logic needs re-approval.
There is one more requirement that surprises people:
“all the strategies shall be run on the brokers servers. The order messages shall be originated from brokers server.”
An empanelled provider does not run your strategy on their own cloud. Their software is deployed onto each broker’s infrastructure. That is why empanelment alone is not enough to launch — a provider also needs a separate integration with every broker they want to serve.
Roughly fifteen firms have completed this.
Two rules people get wrong
Market orders are not allowed. NSE circular NSE/MSD/67753 states that “Algo orders with order type as Market Order are not permitted”, and that IOC orders are barred too. If you are automating, your orders must be LIMIT orders. A lot of hobby code written before 2025 assumes market orders and will simply be rejected.
“Black box” strategies need more. If the logic is hidden from the user and not replicable, SEBI requires the provider to also register as a Research Analyst and keep a research report for each algo. Selling a strategy whose rules you will not disclose is a regulated activity in its own right.
Where enforcement actually lands
This is the part most explanations skip.
SEBI does not license algo platforms, so there is no licence to suspend. When SEBI acted over unregistered algo platforms, it penalised the brokers — ₹16 lakh across ten of them — not the platform.
The practical consequence for anyone building in this space: your risk is not a fine. It is that brokers are required to “deal with empaneled algo providers only”, so the moment you look like an unempanelled provider, every broker has a strong incentive to cut you off at once. Compliance here is less about avoiding punishment and more about remaining connectable.
So, practically
- Automating your own strategy for yourself? Legal. Get a static IP, use LIMIT orders, stay under 10 orders/second, keep it to your immediate family.
- Using a paid platform? Legal. Check it appears on NSE’s empanelled list.
- Thinking of selling a strategy to others? That is the regulated activity. Read the empanelment criteria before writing any code.
None of the above restricts backtesting, research, or analysis. You can model, test and study whatever you like — the rules only begin when an order is placed automatically.