eMudhra CA compromise · 21 October 2026

The company behind the keys: a consumer history of eMudhra

We are CashlessConsumer, a consumer collective. This page documents the company at the centre of our statement and open letter: who founded it, who runs it, what it sells, who buys, and where the money comes from. Every figure is sourced. Nothing here alleges wrongdoing; this is corporate record, assembled so consumers can judge the institution that holds their trust.

Fast facts

Fact Detail
Legal name eMudhra Limited, Bengaluru. CIN L72900KA2008PLC060368, incorporated 2008.1
Certifying Authority licence Granted by CCA India on 7 November 2008; valid to 6 November 2028.2
Listed NSE (EMUDHRA) and BSE (543533) since 1 June 2022.3
People 850+ employees, 15 offices, customers in 50+ countries (May 2026).4
FY2026 revenue ₹701.6 crore (₹7,016 million), up 55% in the enterprise line.5
Group entities India, USA, Singapore, Dubai (DMCC), Mauritius, Netherlands, Indonesia, Kenya, plus eMudhra Consumer Services for retail certificates.6
Founder Venkatraman “V.” Srinivasan, Executive Chairman since 2008.7

The people

V. Srinivasan founded eMudhra in 2008 and remains Executive Chairman.8 He holds a mathematics degree from the University of Madras and is a member of all three Indian accounting and secretarial bodies: the Institutes of Chartered Accountants, Cost Accountants, and Company Secretaries.9 Co-founder Kaushik Srinivasan is a Whole-time Director.10

The promoters are V. Srinivasan and Taarav Pte. Limited, a Singapore holding entity.11 At listing, the offer for sale also included shares from Kaushik Srinivasan, Lakshmi Kaushik, Arvind Srinivasan, and Aishwarya Arvind, a family group selling alongside the promoters.12

The executive bench: Venu Madhava (Executive VP, Legal, GRC and HR; Whole-time Director), Ritesh Raj Pariyani (CFO), and Johnson Xavier (Company Secretary).13 The CCA’s disclosure record lists the wider board, including Dr. Nandlal Laxminarayan Sarda, Manoj Kunkalienkar, Chandra Lakshminarayan Iyer, and Chandrasekar Padmanabhan.14

The timeline

Year What happened
2008 Company incorporated; CCA India grants the Certifying Authority licence on 7 November.1516
2010s Retail digital signature certificate business scales past 50 million certificates issued, used for income-tax filing, MCA/ROC filings, tenders, and foreign trade.17
2015–16 eSign, the Aadhaar eKYC-based electronic signing service built on the government’s eSign framework, enters production; the company marks ten years of eSign in 2025 and calls it a foundational component of digital public infrastructure delivery.18
2022 IPO raises ₹412.79 crore; lists 1 June at ₹271 against an issue price of ₹256.19
2023 Acquires 51% of Ikon Tech Services, Houston (cybersecurity and IT services, operating since 2012).20
2024 Acquires 100% of TWO95 International, New Jersey (US$7.6 million revenue in 2023).21
2025 Acquires 51% of CRYPTAS International GmbH, Vienna, an EU Qualified Trust Service Provider under eIDAS with €9.7 million revenue in 2024; proposes acquisition of AI Cyberforge (vault and secrets technology).22
Oct 2026 Eight intermediate certificates on eMudhra’s emSign chains are found with guessable private keys; Firefox, Chrome and Apple distrusted them; Chrome formally reviews the remaining eMudhra root.23

The money

FY2026 revenue was ₹7,016 million across three lines.24 Enterprise Solutions, 59% of revenue, grew 55% year on year: certificate lifecycle management (CertInext), identity and access management (SecurePass), and the emSigner paperless workflow, which the company says processes over 350,000 transactions a day in banking and capital markets.2526 Services contributed 21%. Trust Services, the licensed certifying-authority business, contributed 20%, of which 94% is the retail digital signature certificate and eSign business.27

The geography has shifted fast: India 36%, North America 34%, Europe 12%, Middle East and Africa 11%, Asia Pacific 7%.28 By customer sector, Government and Defence take 32% of revenue, Enterprise 41%, and BFSI 27%.29

Pre-IPO, the company raised US$26.2 million from Motilal Oswal, Hornbill Capital, and 34 other investors.30

Who profits from being trusted

Three numbers carry the consumer story.

₹251.79 crore of the ₹412.79 crore IPO was promoters selling. The fresh money that reached the company was ₹161 crore; the larger half went to exiting shareholders, led by Taarav Pte. Limited (45.16 lakh shares) and V. Srinivasan (32.89 lakh shares).31

The retail certificate is a mandated purchase. A two-year digital signature certificate costs about ₹1,500, and certifying authorities keep 45–50% as commission under the CA-led distribution model, which is about 70% of volume.32 Over 50 million certificates have been issued since inception, and income-tax filing, MCA filings, and tenders are the volume drivers.3334 Consumers buy these because the law routes them through a CA; they do not shop for them.

A third of revenue comes from government and defence. The same state whose regulators stayed silent after the October 2026 key failure is the company’s largest sector buyer, at 32% of FY26 revenue.35

The trust stack, and what broke

eMudhra operates two trust hierarchies. The India hierarchy runs on the CCA licence of 7 November 2008 and issues the retail DSC and eSign certificates.36 The international hierarchy runs under emSign, on WebTrust-accredited roots, now expanded into Europe through CRYPTAS’s eIDAS qualification.37 The eight compromised keys sit on the international side. Our own desk verification adds one more dependency: IDRBT, the RBI-established institute that runs the banking sector’s certifying authority, builds its issuance on eMudhra’s emCA platform, so the banking PKI borrows the vendor’s stack even where it holds its own licence.38

That is the structural point for consumers. This is not one compromised product line. It is one vendor whose platform issues the state’s identity certificates, the banks’ PKI, and a growing share of European trust services, and whose failure surfaced through foreign browsers and foreign root programs rather than through any Indian authority. The corporate record above is the context for the four asks in our open letter.

Sources


  1. Ministry of Corporate Affairs identity via NSE filing letterhead, eMudhra Limited FY26 audited results, 6 May 2026. https://nsearchives.nseindia.com/corporate/EMUDHRA2008_06052026200156_Outcome_upload.pdf↩︎

  2. Controller of Certifying Authorities, Disclosure Record of e-Mudhra CA (licence grant 7 Nov 2008, validity to 6 Nov 2028, board list, CPS versions). https://cca.gov.in/e_mudhra.html↩︎

  3. eMudhra Limited IPO details and offer-for-sale composition. https://tradesmartonline.in/ipo/emudhra-ltd-ipo · DRHP, BSE, 12 Nov 2021. https://www.bseindia.com/corporates/download/314104/eMudhra%20Limited%20-%20DRHP%20-%20November%2012,%202021_20211115111859.pdf↩︎

  4. Trendlyne company profile (employees, offices, countries, acquisitions summary). https://trendlyne.com/equity/about/897537/EMUDHRA/emudhra-ltd↩︎

  5. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  6. eMudhra Investor Relations, subsidiary results index. https://emudhra.com/en-us/investors↩︎

  7. eMudhra leadership page, V. Srinivasan biography. https://emudhra.com/en/leadership↩︎

  8. eMudhra leadership page, V. Srinivasan biography. https://emudhra.com/en/leadership↩︎

  9. eMudhra leadership page, V. Srinivasan biography. https://emudhra.com/en/leadership↩︎

  10. Yahoo Finance company profile, officers and tenure. https://au.finance.yahoo.com/quote/EMUDHRA.BO/profile↩︎

  11. eMudhra DRHP, promoter disclosure (V. Srinivasan and Taarav Pte. Ltd). Same source as the IPO row above.↩︎

  12. eMudhra Limited IPO details and offer-for-sale composition. https://tradesmartonline.in/ipo/emudhra-ltd-ipo · DRHP, BSE, 12 Nov 2021. https://www.bseindia.com/corporates/download/314104/eMudhra%20Limited%20-%20DRHP%20-%20November%2012,%202021_20211115111859.pdf↩︎

  13. Yahoo Finance company profile, officers and tenure. https://au.finance.yahoo.com/quote/EMUDHRA.BO/profile↩︎

  14. Controller of Certifying Authorities, Disclosure Record of e-Mudhra CA (licence grant 7 Nov 2008, validity to 6 Nov 2028, board list, CPS versions). https://cca.gov.in/e_mudhra.html↩︎

  15. Ministry of Corporate Affairs identity via NSE filing letterhead, eMudhra Limited FY26 audited results, 6 May 2026. https://nsearchives.nseindia.com/corporate/EMUDHRA2008_06052026200156_Outcome_upload.pdf↩︎

  16. Controller of Certifying Authorities, Disclosure Record of e-Mudhra CA (licence grant 7 Nov 2008, validity to 6 Nov 2028, board list, CPS versions). https://cca.gov.in/e_mudhra.html↩︎

  17. Livemint, eMudhra IPO business overview (50 million certificates, use cases). https://www.livemint.com/market/emudhra-ipo-here-s-all-you-need-to-know-about-its-financials-business-outlook-151653041466658.html↩︎

  18. Kaushik Srinivasan, eMudhra, on ten years of eSign and DPI framing. https://www.linkedin.com/posts/kaushik85_emudhra-esign10years-digitaltransformation-activity-7348975929160802304-yckp↩︎

  19. eMudhra Limited IPO details and offer-for-sale composition. https://tradesmartonline.in/ipo/emudhra-ltd-ipo · DRHP, BSE, 12 Nov 2021. https://www.bseindia.com/corporates/download/314104/eMudhra%20Limited%20-%20DRHP%20-%20November%2012,%202021_20211115111859.pdf↩︎

  20. CB Insights, Ikon Tech Services acquisition record (51%, May 2023). https://www.cbinsights.com/company/ikon-tech-services↩︎

  21. Business Standard, eMudhra-TWO95 International acquisition, 28 June 2024. https://www.business-standard.com/markets/capital-market-news/emudhra-announces-acquisition-of-new-jersey-based-two95-international-inc-124062801025_1.html↩︎

  22. eMudhra BSE intimation, CRYPTAS International GmbH acquisition, June 2025 (51%, QTSP/eIDAS, €9.7m FY24 revenue). https://emudhra.com/investor-assets/investors/esg-profile/fy2026/Acquisition_of_Cryptas_International_GmbH_Austria_June_2025.pdf↩︎

  23. CashlessConsumer statement and open letter, 21 October 2026, with incident sources. https://cyber.cashlessconsumer.in/pages/emudhra/statement.html↩︎

  24. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  25. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  26. ICICI Direct, eMudhra Q2FY26 results note (emSigner 3.5 lakh daily transactions). https://www.icicidirect.com/research/equity/rapid-results/emudhra-ltd↩︎

  27. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  28. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  29. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  30. Tracxn company profile (pre-IPO funding US$26.2m, investors). https://tracxn.com/d/companies/emudhra/__UQqhb4UAixEXiU_gLgb8nYCFuVFfJ659NC0R8UqaGpc↩︎

  31. eMudhra Limited IPO details and offer-for-sale composition. https://tradesmartonline.in/ipo/emudhra-ltd-ipo · DRHP, BSE, 12 Nov 2021. https://www.bseindia.com/corporates/download/314104/eMudhra%20Limited%20-%20DRHP%20-%20November%2012,%202021_20211115111859.pdf↩︎

  32. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  33. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  34. Livemint, eMudhra IPO business overview (50 million certificates, use cases). https://www.livemint.com/market/emudhra-ipo-here-s-all-you-need-to-know-about-its-financials-business-outlook-151653041466658.html↩︎

  35. eMudhra FY2026 Investor Presentation, BSE filing, 7 May 2026 (revenue, business lines, geography, sectors, DSC economics). https://www.bseindia.com/xml-data/corpfiling/AttachHis/7407be70-8a7c-4858-adc3-1c8956404fb5.pdf↩︎

  36. Controller of Certifying Authorities, Disclosure Record of e-Mudhra CA (licence grant 7 Nov 2008, validity to 6 Nov 2028, board list, CPS versions). https://cca.gov.in/e_mudhra.html↩︎

  37. eMudhra BSE intimation, CRYPTAS International GmbH acquisition, June 2025 (51%, QTSP/eIDAS, €9.7m FY24 revenue). https://emudhra.com/investor-assets/investors/esg-profile/fy2026/Acquisition_of_Cryptas_International_GmbH_Austria_June_2025.pdf↩︎

  38. eMudhra case study, “IDRBT Secures Banking PKI Infrastructure” (emCA platform). https://www.emudhra.com/industries/banking↩︎