The current period is one of the most happening times for the payment industry in India to thrive and prosper with leapfrogging payment revolutions. While such transformation is catapulting the payments businesses to inspiring heights, it is imperative that the industry acts by a robust framework to ensure the security of its most sensitive assets – data. And the NPCI Audit initiative has come into action at the right time when digital firms are looking to strengthen their data security posture. The purpose of this document is to highlight the controls as per the new guidelines released by the National Payment Corporation of India (NPCI) on the storage of all payment-related data. We hope the insights we have provided will be both useful and relevant.