Govt Upgrades To Secure Cloud Email System With Zoho
ECONOMY & POLICY

Govt Upgrades To Secure Cloud Email System With Zoho

The Government of India has recognised email as a critical channel of official communication and is upgrading its legacy system to a secure, scalable cloud-based platform. The upgrade is being implemented through Zoho Corporation Ltd., a reputed Indian software services provider selected via an open competitive process.

The new model enables timely upgrades, rapid scaling, seamless migration of existing accounts and integration with modern office productivity tools such as word processors, spreadsheets and presentation software.

A rigorous security architecture has been defined to protect sensitive government data. All email data must be encrypted both at rest and in transit, with mandatory end-to-end encryption based on RSA 256 and TLS 1.3 standards.

The service provider must comply with stringent security certifications, including ISO 27001, ISO/IEC 27017 and ISO 27018. Key technical safeguards include multi-factor authentication for users across all protocols (Web, IMAP, SMTP, POP and Calendar), geo-fencing, IP-based restrictions and industry-standard anti-spoofing policies.

The platform is fully integrated with NIC-CERT’s Security Information and Event Management system. It also includes multi-factor authentication, mobile device management and advanced threat protection measures to defend against phishing, malware and data loss.

Data sovereignty is a central requirement. Zoho must ensure that all data — including that stored in primary and disaster recovery centres — remains within India, with no replication or transfer outside the country. As an Indian-registered entity governed by Indian law, Zoho meets these conditions. The contract reinforces the Government’s commitment to Make in India, ensuring full ownership of all data and intellectual property created.

The service is designed for high reliability, with a mandated uptime of at least 99.9 per cent on a 24×7×365 basis. Disaster recovery sites must be located in separate seismic zones at least 500 kilometres apart, supported by strict recovery time and recovery point objectives to minimise data loss during emergencies.

The Government clarified that Arattai, Zoho’s messaging platform, is not part of the email solution.

This information was provided by Shri Jitin Prasada, Union Minister of State for Electronics and Information Technology, in the Rajya Sabha on 5 December 2025.

The Government of India has recognised email as a critical channel of official communication and is upgrading its legacy system to a secure, scalable cloud-based platform. The upgrade is being implemented through Zoho Corporation Ltd., a reputed Indian software services provider selected via an open competitive process. The new model enables timely upgrades, rapid scaling, seamless migration of existing accounts and integration with modern office productivity tools such as word processors, spreadsheets and presentation software. A rigorous security architecture has been defined to protect sensitive government data. All email data must be encrypted both at rest and in transit, with mandatory end-to-end encryption based on RSA 256 and TLS 1.3 standards. The service provider must comply with stringent security certifications, including ISO 27001, ISO/IEC 27017 and ISO 27018. Key technical safeguards include multi-factor authentication for users across all protocols (Web, IMAP, SMTP, POP and Calendar), geo-fencing, IP-based restrictions and industry-standard anti-spoofing policies. The platform is fully integrated with NIC-CERT’s Security Information and Event Management system. It also includes multi-factor authentication, mobile device management and advanced threat protection measures to defend against phishing, malware and data loss. Data sovereignty is a central requirement. Zoho must ensure that all data — including that stored in primary and disaster recovery centres — remains within India, with no replication or transfer outside the country. As an Indian-registered entity governed by Indian law, Zoho meets these conditions. The contract reinforces the Government’s commitment to Make in India, ensuring full ownership of all data and intellectual property created. The service is designed for high reliability, with a mandated uptime of at least 99.9 per cent on a 24×7×365 basis. Disaster recovery sites must be located in separate seismic zones at least 500 kilometres apart, supported by strict recovery time and recovery point objectives to minimise data loss during emergencies. The Government clarified that Arattai, Zoho’s messaging platform, is not part of the email solution. This information was provided by Shri Jitin Prasada, Union Minister of State for Electronics and Information Technology, in the Rajya Sabha on 5 December 2025.

Next Story
Infrastructure Urban

Centre Boosts FPO Growth With New Credit And Market Support

The Government is implementing the Central Sector Scheme on the formation and promotion of 10,000 Farmer Producer Organisations (FPOs), under which all 10,000 FPOs have now been registered. The scheme provides Rs 1.8 million per FPO for three years as management support, a matching equity grant of up to Rs 1.5 million, and a credit guarantee of up to Rs 0.02 billion through eligible lending institutions. It also offers assistance for training, market linkages and alignment with other schemes. FPOs receive support to obtain input licences for seed, fertiliser and pesticide supplies, as well as..

Next Story
Infrastructure Urban

PM-KISAN Drives Farm Income Gains And Rural Stability

The PM-KISAN scheme, a central sector initiative launched in February 2019, aims to support the financial needs of farmers holding cultivable land. Under the scheme, Rs 6,000 per year is transferred in three equal instalments to Aadhaar-seeded bank accounts through Direct Benefit Transfer. Eligibility is based primarily on cultivable landholding, with certain exclusions for individuals of higher economic status. A farmer-centric digital infrastructure ensures scheme benefits reach farmers across India without intermediaries. With full transparency in registration and verification, the Governm..

Next Story
Infrastructure Urban

Govt Extends Pro Tem Security Certificate To Two Years

In a further push to improve ease of doing business and ensure continuity for the telecom industry, the National Centre for Communication Security (NCCS) under the Department of Telecommunications has extended the validity of the Pro Tem Security Certification from six months to two years. The Pro Tem Certification, initially launched in October 2024 with a six-month validity, was designed to prevent business disruption for IP Router and Wi-Fi CPE products, which became subject to mandatory security certification from 1 October 2024. Under this certification, OEMs submit a declaration confirm..

Advertisement

Subscribe to Our Newsletter

Get daily newsletters around different themes from Construction world.

STAY CONNECTED

Advertisement

Advertisement

Advertisement

Advertisement

Open In App