NBFC Scale-Based Regulation in India: What Each Layer Means for Your Lending Operations

India’s NBFC regulatory framework underwent a structural reset in 2021. The RBI replaced its previous size-based classification with a four-tier Scale-Based Regulation (SBR) framework. Each tier carries distinct capital, governance, and credit operations requirements.

NBFC scale-based regulation in India directly affects credit policy design, underwriting standards, board-level governance, and the automated tools an NBFC must deploy. This guide breaks down what each layer requires in practical operational terms.

The Four Tiers of NBFC Scale-Based Regulation in India

The RBI’s SBR framework classifies all regulated NBFCs into four layers based on asset size, systemic risk, and business activity type. Each layer carries proportionally stricter regulatory requirements.

• Base Layer (NBFC-BL): non-deposit-taking NBFCs with assets below Rs 1,000 crore. Also includes NBFC-P2P, Account Aggregators, and non-operative financial holding companies, regardless of size.
• Middle Layer (NBFC-ML): all deposit-taking NBFCs irrespective of asset size, non-deposit-taking NBFCs above Rs 1,000 crore, housing finance companies, and core investment companies.
• Upper Layer (NBFC-UL): the top 10 NBFCs by asset size, plus others specifically identified by the RBI based on size, interconnectedness, and systemic importance.
• Top Layer (NBFC-TL): currently empty by design. Reserved for Upper Layer NBFCs where the RBI identifies heightened systemic risk requiring near-bank-level regulation.

Most NBFC credit operations teams interact most with Middle Layer and Upper Layer requirements. Base Layer NBFCs have the lightest regulatory touch but must still meet core credit policy and data governance standards.

Base Layer: Regulatory Requirements for Smaller NBFCs

NBFC Base Layer entities operate under the lightest regulatory framework in the SBR structure. Key requirements:

• Minimum Net Owned Funds (NOF) of Rs 10 crore (phased requirement, fully effective from March 2027).
• Capital to Risk-weighted Assets Ratio (CRAR) of a minimum of 15%.
• Board-approved credit policy covering each loan product offered.
• Digital Lending Directions 2025 compliance, including consent management, audit trails, and explainability requirements, applies to ALL layers regardless of size.
• Annual board review of credit policy and portfolio performance.

Base Layer NBFCs are not exempt from the Digital Lending Directions. A Rs 50 crore asset-size NBFC conducting digital lending must meet the same consent documentation, audit trail, and credit decisioning explainability standards as a Rs 5,000 crore NBFC-ML.

Middle Layer: Bank-Equivalent Governance Standards

NBFC Middle Layer requirements significantly expand governance and credit operations obligations. The most material additions over the Base Layer:

• Independent Board committees: Risk Management Committee, Audit Committee, Nomination and Remuneration Committee, all mandatory with specific composition requirements.
• Chief Risk Officer (CRO) mandatory appointment for NBFCs-ML above Rs 5,000 crore in assets. CRO reports directly to the MD/CEO and cannot be overruled on risk matters.
• NPA Classification in India for credit exposures above Rs 5 crore at SMA-1 and above.
• Sensitivity analysis and stress testing of credit portfolios quarterly minimum.
• Liquidity Coverage Ratio (LCR) requirements for deposit-taking NBFC-MLs phased implementation ongoing.

For credit underwriting specifically, NBFC-ML entities face stronger documentation requirements. Every deviation from the Board-approved credit policy must be documented, justified, and reported to the NBFC Credit Risk Management Committee quarterly.

Upper Layer: Systemically Important NBFC Requirements

NBFC Upper Layer entities face near-bank-level regulation. The RBI currently identifies approximately 15 NBFCs as Upper Layer. They face the most comprehensive credit governance requirements:

• Common Equity Tier 1 (CET1) capital ratio minimum of 9% a requirement previously applicable only to banks.
• Differential Standard Asset Provisioning 0.4% on standard assets (versus 0.25% for middle layer), creating stronger provisioning buffers.
• Limits on loans to directors, senior management, and their relatives are stricter than ML requirements.
• Mandatory Credit Risk Assessment is a forward-looking capital planning exercise submitted to the RBI annually.
• Enhanced large exposure framework: per-borrower and group exposure limits are more tightly defined.

Upper Layer NBFCs also face the most demanding board governance standards. Independent directors must form the majority of the Board. The Board must include members with demonstrated risk management, credit, and technology expertise.

How Scale-Based Regulation Affects Credit Underwriting Standards

NBFC scale-based regulation has direct implications for how credit underwriting must be designed at each layer.

At the Base Layer, the minimum standard is a Board-approved credit policy with documented consent and audit trails. AI Underwriting for NBFCs are operationally necessary at any volume above 100 applications per month but is not a regulatory-mandated specific technology requirement.

At the Middle Layer, the Risk Management Committee oversight requirement means credit underwriting policy deviations must flow upward to the board committee level. The quarterly reporting obligation effectively requires systematic exception tracking, making manual exception management impractical.

At the Upper Layer, stress testing obligations require credit underwriting to be modelled under adverse scenarios. This demands portfolio-level data analytics beyond individual application assessment, connecting the origination-level credit decision to the portfolio-level capital planning process.

Key Takeaways

• NBFC scale-based regulation in India creates four tiers: Base Layer (below Rs 1,000 crore assets), Middle Layer (above Rs 1,000 crore or deposit-taking), Upper Layer (top 15 systemically important NBFCs), and Top Layer (currently empty).
• Digital Lending Directions 2025: consent management, audit trails, and explainability apply to ALL layers. There is no size-based exemption.
• Middle Layer NBFCs must have mandatory board committees, a CRO above Rs 5,000 crore in assets, and CRILC reporting for exposures above Rs 5 crore.
• Upper Layer NBFCs face CET1 capital requirements, differential provisioning, mandatory ICAAP, and the most stringent board governance standards.
• Credit underwriting design must reflect the NBFC’s regulatory tier exception tracking, stress testing, and capital linkage requirements, which increase significantly from Base to Upper Layer.

Frequently Asked Questions

Conclusion

NBFC scale-based regulation in India is not a static compliance checklist. It is a proportionality framework where regulatory intensity scales with systemic importance.

For most NBFCs operating at the Middle Layer, the practical implication is clear: board committee governance, systematic exception tracking, CRILC reporting infrastructure, and stress-tested portfolio management are not optional enhancements; they are regulatory requirements.

Design credit operations to meet the requirements of your current layer and build the capability to scale into the next layer as your asset book grows.