Insider trading controls are the best first use of AI agents for Indian brokers, depository participants and asset managers: keeping the structured digital database complete and checking designated persons' trades against trading windows. Agents can also triage exchange alerts and complaints. Compliance officers keep every finding and report. SEBI's regulations and the DPDP Act 2023 apply.
What fills a capital markets compliance officer's week in India?
Insider trading controls take a fixed share of every week. Listed companies and market intermediaries must keep a structured digital database of everyone with whom unpublished price-sensitive information is shared, and must close the trading window for designated persons around results. Compliance officers maintain the database, pre-clear trades, and investigate any trade that falls in a closed window.
Brokers carry heavy client-facing obligations. The retail base is large, young and active in derivatives, and brokers must watch for accounts used by someone other than the client, for illegal off-exchange trading arrangements, and for staff or associates giving advice without registration. The exchanges, acting as front-line regulators, run inspections and send alerts that brokers must review and close with reasons.
Client complaints come through the broker's own channels and SEBI's online complaints system, and must be resolved within set timelines. Reporting to the exchanges, depositories and SEBI completes the load.
Where can agents help?
| Use | Depth | What stays with the officer |
|---|---|---|
| Maintaining the structured digital database from deal-team access logs and emails | 2 | Approving each entry and any removal |
| Checking designated persons' trades against closed trading windows and pre-clearances | 1 | Deciding whether a violation occurred and what action follows |
| Triaging exchange alerts on client trading patterns | 2 | Closing the alert with a reason, or escalating |
| Screening outbound client messages and social posts by staff for unregistered advice or guaranteed-return claims | 1 | Deciding whether a message breached the rules |
| Complaint classification and response drafting, in English or a regional language | 2 | Sending the response and deciding redress |
The insider trading database is a good first use. The rule is clear, the inputs are records the firm already holds, and the cost of an omission is high. An agent that drafts entries from access logs catches people who were shared information informally and never added.
What has to stay with people?
The compliance officer under SEBI's insider trading rules is a named person who reports to the board, and decisions about violations, disgorgement of profits by staff, and reporting to the exchanges stay with that office. An agent can find a trade in a closed window; whether it is a breach, and what happens next, is a human decision.
Alert closures for exchanges also stay human. The exchange expects a reason the broker can stand behind, and a templated closure that the agent wrote and nobody read is exactly what inspections find. Every closure is held for a named officer.
Complaint redress stays with people too, because it involves money and the client's trust. This is the posture we describe in AI compliance agents: second line, never the last word.
Which rules apply in India?
SEBI regulates the securities market and its intermediaries, including brokers, depository participants, investment advisers, research analysts and mutual funds. Its regulations cover insider trading, fraudulent and unfair trade practices, client KYC through registration agencies, investment advice by registered persons only, cyber security for intermediaries, and complaint handling. The exchanges and depositories enforce many requirements at the front line. RBI regulates banks that act as brokers or custodians.
The Digital Personal Data Protection Act 2023 applies to client and staff personal data the agent processes, including messages it screens. The firm is the data fiduciary, must process for a specified purpose, keep data secure and answer data principals' rights. See our piece on the DPDP Act and AI agents in India, and our overview of how AI agents are regulated in India.
There is no AI-specific statute. SEBI's expectations on outsourcing, cyber security and technology governance apply to an agent and its supplier.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How should a firm start in the first 90 days?
Start with the structured digital database. Replay the agent over a past quarter's deal activity and compare its proposed entries with the actual database. Every person it adds who was missing is a finding in itself, so plan for the compliance officer to review those carefully.
In the second month, add trading window checks at depth 1. They are rules-based and fast to verify, and they cover every designated person, not a sample.
In the third month, pilot exchange alert triage at depth 2 on one alert type, with closures held for a named officer. Measure inspection-ready reasons, not speed.
Questions people ask
Can an AI agent pre-clear a designated person's trade?
It can check the request against the trading window, holdings and restricted lists and recommend, but pre-clearance should stay with the compliance officer, who is accountable under SEBI's rules.
Can an agent monitor staff social media for unregistered advice?
It can screen public posts by staff linked to the firm, within a defined scope and with staff informed. Decisions on whether a post breached the rules stay with compliance.
How does India compare with Germany for capital markets compliance?
Germany's work centres on EU suitability and market abuse rules and works council consent. See our brief on compliance agents in German capital markets.