arilator

Trust, Security & Regulatory Compliance

Arilator is purpose-built as a dual-entity Merchant of Record — combining compliant domestic INR billing and 18% GST tax invoicing in India (GSTIN: 36ABGCA4968F1ZG) with seamless USD wholesale settlement for global software vendors.

Buyer Terms of SaleVendor Reseller TermsPrivacy & DPDP Policy

How our Merchant of Record model works

Authorized Merchant of Record (MoR)

Arilator is the statutory seller of record for every transaction in India — not an unlicensed pass-through payment facilitator. Arilator India Pvt Ltd (GSTIN: 36ABGCA4968F1ZG) contracts directly with Indian buyers in INR and issues domestic GST tax invoices.

RBI Payment Data Localization (India Residency)

All Indian payment records, UPI callback verifications, INR prepaid credit ledgers, GSTIN verification logs, and GST tax invoices are processed and stored exclusively in secure data centers located within India in accordance with RBI payment system data localization directives.

Compliant 18% GST Tax Invoicing & GSTR-2B ITC

Every purchase generates an itemized domestic GST tax invoice under Arilator India Pvt Ltd’s GSTIN (36ABGCA4968F1ZG) with real-time verified buyer GSTIN, Place of Supply, CGST/SGST or IGST split, and applicable SAC codes (998314 / 997331), enabling Indian businesses to claim 18% Input Tax Credit (ITC) without reverse-charge (RCM) filings.

Zero Card Storage & Direct INR Collection

Payments are collected directly in INR via dynamic UPI QR and domestic NEFT/RTGS bank rails into Arilator India Pvt Ltd’s designated collection account displayed at checkout (statement descriptor: ARILATOR INDIA PVT LTD). Arilator never collects or stores customer payment card numbers.

Multi-Tenant API Gateway & SSRF Protection

For usage-metered AI and API products, Arilator’s reverse proxy enforces strict per-customer session isolation, cryptographically hashed API keys, atomic INR credit reservation, and outbound SSRF network guards.

Audited USD Vendor Remittance

Arilator Inc. (Delaware, USA) settles wholesale revenue shares to global software vendors in USD on a monthly Net-15 schedule after a 15-day reconciliation window, backed by immutable cryptographic agreement hashes and order-level audit logs.

1. Corporate & Contracting Structure

  • Indian Buyer Counterparty (Merchant of Record): Arilator India Pvt Ltd (GSTIN: 36ABGCA4968F1ZG, State Code 36 — Telangana) acts as the authorized local reseller and statutory seller of record for all software subscriptions and prepaid API usage packages purchased by customers in India. All INR payments, UPI and domestic bank collections, and GST tax invoices are issued directly by Arilator India Pvt Ltd.
  • Global Vendor Counterparty: Arilator Inc. (incorporated in the State of Delaware, USA) executes commercial reseller schedules with global software vendors and remits monthly USD wholesale settlements through regulated US banking rails.

2. Statement Descriptor, GST Verification & Billing Transparency

When an Indian business or individual pays for software or prepaid API credits through Arilator, the bank or UPI statement displays ARILATOR INDIA PVT LTD (collected via the designated Arilator India Pvt Ltd UPI handle or domestic NEFT/RTGS collection account displayed at checkout). Every tax invoice clearly identifies Arilator India Pvt Ltd (GSTIN: 36ABGCA4968F1ZG) as the seller of record alongside the underlying software vendor, product plan, and SAC classification (998314 for IT Software & Cloud SaaS or 997331 for software licensing).

For Organization accounts, buyer GSTINs are verified in real time against official Indian GST taxpayer records through authorized GST compliance verification services to ensure active registration status and match against the entity's registered Legal Name or Trade Name prior to issuing B2B tax invoices for GSTR-2B Input Tax Credit (ITC) reconciliation.

3. Regional Data Residency & Infrastructure Security

  • Domestic Data Residency: All Indian payment callbacks, order ledgers, GSTIN verification records, statutory tax invoices, and INR prepaid usage ledgers are hosted and processed exclusively in secure data centers located within India.
  • Credential Hygiene & Isolation: Customer API gateway keys are returned once at provisioning and stored exclusively as one-way cryptographic hashes. Upstream vendor master credentials and USD payout banking instructions are encrypted at rest using hardware-backed key management, excluded from public catalog endpoints, and represented only as cryptographic hashes in contract audit trails.
  • Statutory Tax Audit Retention: In compliance with Section 36 of the Central Goods and Services Tax (CGST) Act, 2017, all domestic tax invoices, credit notes, and order ledgers are retained immutably in India for a minimum of eight (8) years.

4. Grievance Redressal, Refunds & Escalation

For billing inquiries, GST invoice questions, refund requests, or India DPDP Act (2023) data rights requests, contact our compliance and grievance team: