Decode Civils CAShorts
Current affairs Open app
ExplainerSci-TechGS3GS2

MeghRaj and India's government cloud: models, empanelment and data rules

By CAShorts DeskPublished Source: PIB; Ministry of Electronics and Information Technology; National Informatics Centre; STQC; India Code

Why in news: PIB's backgrounder of 29 October 2026 reviewed India's cloud ecosystem: MeghRaj, empanelled providers and data centre capacity.

MeghRaj and India's government cloud: models, empanelment and data rules
Illustration (AI-generated)

Cloud computing lets users rent storage, servers, development platforms and software over the internet instead of owning the machines. MeghRaj, the government cloud launched by the Ministry of Electronics and Information Technology (MeitY) in 2014, hosts departments' applications. PIB put its adoption at 2,330 government departments by September 2026, in a backgrounder of 29 October 2026.

Syllabus: GS3 · Indian Achievements in S&T; GS3 · IT, Space, Biotech & IPR; GS2 · Governance & e-Governance

Why this matters for UPSC

GS3 awareness in IT and GS2 e-governance: cloud computing models and MeghRaj, MeitY's government cloud. Prelims can ask service models or who audits providers; Mains, data sovereignty.

In short

Cloud computing delivers computing resources over the internet on demand. MeghRaj, launched by MeitY in 2014, is India's government cloud, balancing cheaper, faster e-governance against control over sensitive data.

From provider togovernment workloadSTQC auditsproviderMeitY empanelsproviderWorkloadclassificationHosting on amatching cloud

MeghRaj has made shared cloud the default for e-governance; its value now rests on binding data classification and a notified sovereign tier for sensitive records.

Why it matters

A family that pulls a certificate from DigiLocker, or a student filing a scholarship form, depends on servers it never sees. When those servers sit in a shared government cloud, a small district office can launch an online service quickly without buying its own machines, and the service can grow when demand peaks. The same sharing raises the stakes. If a provider fails or leaks records, many departments and many citizens are hit at once. That is why the rules on who audits a provider, where the data must sit and which records may leave government hands matter to ordinary people. The larger issue is data sovereignty: whether India keeps control over the digital records of its citizens.

Prelims pointers

  • In the cloud stack, IaaS leases raw computing power, PaaS hands developers a ready environment, and SaaS gives users a complete application such as video conferencing.
  • Serverless computing still uses servers: the provider manages them and assigns capacity only when a task is triggered, so developers handle no servers.
  • A government community cloud may serve only government bodies; a public cloud is open to any customer on shared infrastructure.
  • STQC audits a cloud provider and recommends it, but the empanelment itself is granted by MeitY; STQC is an attached office of MeitY.
  • The National Informatics Centre was set up in 1976; National Informatics Centre Services Inc. (NICSI) was set up under it in 1995 to procure IT solutions.
  • Under the Digital Personal Data Protection Act, 2023, a Data Fiduciary stays answerable for reasonable security safeguards even when a Data Processor handles the data for it.
  • The same Act lets the Central Government restrict, by notification, transfers of personal data to notified countries; it does not require all personal data to stay in India.

Practise a UPSC-style question

With reference to cloud computing service models, consider the following statements:

1. In Platform as a Service, developers build and test applications while the provider manages the underlying infrastructure.

2. In Infrastructure as a Service, the provider delivers finished applications and handles their updates and maintenance.

Which of the statements given above is/are correct?

  1. (a) 1 only
  2. (b) 2 only
  3. (c) Both 1 and 2
  4. (d) Neither 1 nor 2
Show the answer

Answer: (a) 1 only

Answer: (a) 1 only. Finished, provider-maintained applications describe SaaS, not IaaS.

Statement 1: correct. PaaS gives developers tools to build, test and launch applications without managing servers, storage or networks.

Statement 2: incorrect. IaaS rents virtual servers, storage and networks; ready software with updates handled by the provider is Software as a Service.

Eliminate: Statement 2 describes SaaS, so it is wrong. Out: (b), (c).

Eliminate: Statement 1 matches the PaaS definition, so it is right. Out: (d).

Trap: Look-alike names. The three 'as a Service' layers sound alike, and the question pins the SaaS description on IaaS.

Remember: IaaS rents hardware, PaaS gives a build platform, SaaS hands over finished software.

More Explainers

All Explainers

More Sci-Tech current affairs