Who we serve Services Resources About Contact Book Free 15-min Call →
Industry Guide · 2026 Edition

GST on AI, API & Cloud Services:
The Complete OIDAR Guide

If your AI tool, developer API, or cloud platform serves Indian users, it is very likely an OIDAR service — whether or not it feels like one from an engineering seat. Here's exactly how the rules apply.

18%
IGST — same rate as all OIDAR services
No SAC
Dedicated code for "AI services" — genuine grey zone
B2B tail
Individual developers create NTOR exposure
Dec 2024
Circular requires recipient state on invoices
CA Parmod Bindal, FCA
Prepared by CA Parmod Bindal, FCA
Founder & Lead OIDAR Specialist · OIDARIndia™
2026 EditionUpdated July 2026
India's dedicated OIDAR practice

Not sure if your product qualifies?

Use our free checker or book a specific assessment for your product.

Try the checker

Executive summary

Engineering teams tend to think of themselves as building infrastructure, not selling a consumer service. GST law disagrees — and that mismatch is where most AI, API, and cloud companies get their OIDAR position wrong.

What you need to know
  • Almost every AI tool, API, and cloud service delivered over the internet qualifies as OIDAR — the law looks at what the user receives, not what your team calls the product internally.
  • The rate is the same as any other OIDAR service: 18% IGST on B2C supplies to Indian users.
  • There is currently no dedicated HSN/SAC code for "AI services" specifically — a genuine classification grey zone this guide addresses directly.
  • Most AI/API/cloud businesses are majority B2B, but individual developers, indie hackers, and freelancers paying by card create a real B2C (NTOR) tail that's easy to miss.
  • A December 2024 CBIC circular now requires recording the recipient's state on invoices for OIDAR and digital services — a procedural detail that affects billing system design.
  • Real AI companies handle this differently today — some register and localise pricing, others bill in USD with GST added on top. Both are legitimate; the difference is a compliance choice, not a legal exemption.
1

Why your API is an OIDAR service (even if it doesn't feel like one)

The single most common blind spot for engineering-led companies: OIDAR looks at the output the user receives, not how your team internally categorises the product.

Most APIs enable access to stored data, computing power, automation, analytics, authentication, or workflow triggers. Every one of these matches the OIDAR definition — a service delivered over the internet, mediated by information technology, impossible without that technology. It does not matter that your servers sit outside India, that you see yourselves as "pure infrastructure," or that a human never touches an individual request. If an Indian user receives an automated digital output from your API, GST law treats that as a service supplied to them.

Common mistake
Backend and engineering teams often assume tax obligations belong entirely to finance, and that "we just provide infrastructure" is a meaningful distinction under GST law. It isn't. User classification, invoicing, and transaction history all originate in the API layer — meaning OIDAR compliance depends on backend system design as much as it depends on finance oversight.
Professional tip
Rapid product development compounds this risk. New endpoints and features go live regularly, but GST classification is rarely revisited each time. A feature that quietly became a new kind of OIDAR-qualifying output can go live for months before anyone notices the tax treatment never caught up.
2

What's covered: AI, API, and cloud, specifically

The breadth here is genuinely wide. Here's how the main categories map onto OIDAR.

AI tools & LLM access

Chat assistants, AI writing/coding tools, and API-based model access (chat completions, embeddings, fine-tuning endpoints) all qualify. The 2023 amendment removing the "minimal human intervention" test closed off any argument that AI-assisted output is somehow less automated than plain software.

Watch: consumer-facing AI subscriptions are squarely B2C by default unless a GSTIN is captured.

Developer APIs

Data access, compute, automation, analytics, and authentication APIs all qualify — the mode of consumption (an API call rather than a UI) doesn't change the classification.

Watch: pay-as-you-go billing to individual developers on personal cards is classic unvalidated NTOR exposure.

Cloud infrastructure (IaaS/PaaS/SaaS)

Compute, storage, hosting, CDN, and managed platform services are all treated uniformly as OIDAR when delivered to India, regardless of the "as-a-Service" layer they sit at.

Watch: free-tier-to-paid conversion moments are when a previously invisible Indian user becomes a taxable one. If you use an Indian data-hosting provider to support your infrastructure, see CBIC Circular 232/26/2024-GST on our case law page for how that India-side relationship is classified.

AI training data & datasets

Training datasets delivered via API, download, or cloud storage qualify as OIDAR — including curated, human-annotated datasets, following the same 2023 amendment logic. See Section 3 for the genuine classification grey zone here.

Watch: the narrow exception is data shipped on physical media — vanishingly rare in practice.
3

The AI training data grey zone

This is a genuine, current gap in Indian tax guidance — worth understanding rather than assuming it's settled.

India's GST framework has no dedicated HSN or SAC code for "AI training data" specifically. Businesses must classify by analogy — to database licensing, IT services, or online information supply — each carrying different practical compliance implications. As of this guide's publication, there is no Authority for Advance Ruling decision, CBIC circular, or GST Council recommendation addressing AI training data as a distinct category.

What this means in practice
The absence of a dedicated classification does not mean the transaction is untaxed — the 18% rate applies regardless, since general OIDAR/digital-service classification catches it by default. The grey zone is about which specific classification and documentation approach best protects you on audit, not about whether GST applies at all.
Professional tip
In genuine grey-zone areas like this, proactive documentation of your classification reasoning — and considering an advance ruling application for high-value, recurring transactions — is a stronger defence than waiting for guidance that may not arrive before an audit does.

The closest verified precedents, and what they do (and don't) settle

Nothing directly addresses AI training data, but two verified rulings address closely analogous questions and are worth knowing:

Database/journal access is OIDAR — Karnataka AAR, In re: Springer Nature Customer Service Centre GmbH (2019)
A scientific/technical/medical publisher's database access was held to be OIDAR, chargeable to unregistered users for business-purpose use. The closest verified analogy for API-based data access services, though this predates the 2023 amendment and the specific "AI training data" question was not before the authority.
Human-validated automated output — Karnataka AAAR, In re: NCS Pearson INC (2021)
An algorithmically-scored, human-validated testing service was found OIDAR on appeal (reversing a first-instance finding to the contrary) — relevant to any AI product where a human reviews or validates a model's output before it reaches the customer, a common pattern in AI-assisted services. See our case law page for full detail.

Neither ruling addresses AI training data directly — they are cited here as the closest verified analogies, not as settled answers to the training-data question itself.

4

The B2B tail problem

Most AI/API/cloud businesses genuinely are majority B2B — which is exactly what makes the B2C tail easy to overlook.

If a customer provides a valid GSTIN, the reverse charge mechanism applies and you have no liability on that revenue (see our calculator to see the impact this distinction makes). But developer-focused businesses in particular accumulate a long tail of individual developers, indie hackers, students, and freelancers who pay by personal card and never enter a GSTIN — because nobody asked, and because the checkout flow was built for speed, not tax classification.

Common mistake
"We're a B2B platform" is a description of your target market, not a legal classification. Every individual signup without a validated GSTIN is an NTOR under the current definition — regardless of how your go-to-market positions the product.
Professional tip
Build GSTIN capture into signup and billing, even for a "B2B" product. This single design decision is what actually separates your reverse-charge revenue from your NTOR exposure — self-description at the marketing level does neither.
5

How real AI companies handle it today

Different major AI providers have made different, equally legitimate compliance choices — useful to see in practice.

Approach A — Register and localise

Registered non-resident provider, local currency pricing

One well-known consumer AI provider operates as a registered non-resident OIDAR supplier, pricing its consumer tiers directly in rupees with GST handled as part of that registration. Indian users see a single INR price; the GST obligation is absorbed into the provider's own compliance rather than left for the user to work out.

Trade-off: more upfront compliance investment, cleaner customer experience, one less thing for Indian customers to think about.
Approach B — Bill in USD, add GST on top

Foreign-currency billing with GST added at checkout

Another major AI provider continues to bill its consumer subscription in US dollars, with 18% GST added on top of the converted price at checkout — the default treatment for most individual and small-team subscribers who never enter a GSTIN.

Trade-off: less upfront localisation work, but the customer bears the currency conversion plus GST directly, and cannot recover it as input credit under consumer treatment.
The GSTIN decision point is what actually matters
In both approaches, the same fork applies to the end customer: enter a GSTIN and the obligation shifts to reverse charge (with input credit available if used for business purposes); don't enter one, and you're treated as a consumer paying the 18% directly, with no credit recovery. This is the single design decision that determines outcome — not which of the two provider approaches above is used.

Company examples above describe publicly observable billing practices as general illustrations of compliance approaches, not a statement about any company's complete or current tax position.

6

Invoicing requirements: the December 2024 update

A procedural change that affects how your billing system should be built, not just how your finance team files.

CBIC Circular No. 242/36/2024-GST
Arising from the 55th GST Council meeting (December 2024), this circular requires recording the recipient's state on invoices for OIDAR and other digital services. For an API or cloud platform serving customers across multiple Indian states, this is a data-capture requirement that needs to be designed into checkout and billing flows — not something that can be reconstructed after the fact from payment processor metadata alone.
Professional tip
If your signup flow doesn't currently capture a billing state/region for Indian customers, this is worth fixing proactively rather than retrofitting under audit pressure later.
7

Worked scenarios

Scenario · AI API startup

A US-based LLM API company with 3,000 Indian developer accounts

Most accounts are funded startups paying via invoiced contracts with GSTINs on file. But roughly 2,400 are individual developers and small teams on a self-serve, pay-as-you-go plan billed directly to a personal card — no GSTIN ever captured.

The 2,400 self-serve accounts are NTORs. The company must register under REG-10, charge 18% IGST on that self-serve revenue, and file GSTR-5A monthly. The funded-startup contracts are reported under reverse charge in Table 5B.

Verdict: registration mandatory despite being a "B2B-first" product, driven entirely by the self-serve tier.
Scenario · Cloud storage provider

A cloud storage platform with a free tier and paid upgrade

Thousands of Indian users are on the free tier — no transaction, no current obligation. A subset converts to paid plans each month via card, all unregistered individuals.

The conversion moment is the trigger point: each newly paid Indian user is a new NTOR from that billing cycle forward. The company's obligation scales with paid conversions, not total signups — but must be tracked from the point of conversion, not discovered retrospectively.

Verdict: monitor conversions continuously; the free tier itself creates no obligation, but silent accumulation of paid conversions does.
Scenario · AI training data provider

A data licensing company selling curated datasets via API to Indian AI labs

All customers are Indian AI companies, several of which are GST-registered. One is an early-stage startup that hasn't yet registered for GST despite genuine business use.

The registered customers fall under reverse charge. The unregistered startup customer is technically an NTOR despite being a genuine business — GST law does not create a "business but unregistered" exception. The provider should still validate GSTIN status rather than assume business intent equals B2B treatment.

Verdict: GSTIN validation, not stated business purpose, determines classification — even for a clearly B2B-intent transaction.
8

Compliance checklist for AI, API & cloud providers

Work through this in order
  • Confirm your product is internet-delivered and automated enough to qualify — for AI/API/cloud, assume yes by default
  • Build GSTIN capture into signup and billing, regardless of whether your product is "B2B" by positioning
  • Identify your self-serve / pay-as-you-go tier specifically — this is where NTOR exposure concentrates
  • Capture recipient state at signup/checkout per the December 2024 invoicing requirement
  • Track free-to-paid conversion moments as the trigger point for new Indian tax obligations
  • For genuine AI-training-data classification grey areas, document your reasoning proactively
  • Register via Form GST REG-10 once any NTOR revenue exists, and file GSTR-5A monthly thereafter

Glossary

NTOR
Non-Taxable Online Recipient — any unregistered person receiving your service. For API/cloud businesses, this is typically the self-serve, pay-as-you-go tier.
SAC code
Service Accounting Code — the classification system used for GST purposes. No dedicated code currently exists for AI training data specifically.
Reverse Charge Mechanism (RCM)
Where a GST-registered Indian business customer, not the foreign supplier, accounts for GST directly.
IaaS / PaaS / SaaS
Infrastructure/Platform/Software-as-a-Service — all treated uniformly as OIDAR when delivered to India by a foreign provider, regardless of which layer the service sits at.
CA Parmod Bindal, FCA
CA Parmod Bindal, FCA
Founder & Lead OIDAR Specialist, OIDARIndia™

A finance leader with over three decades in taxation, corporate governance, and cross-border advisory. Former Independent Director of Steel Authority of India (SAIL), a Maharatna PSU, and Independent Director of CSL Finance Limited, a listed NBFC. Read full profile →

About this guide & sources: This guide reflects the OIDAR GST framework as applied to AI, API, and cloud services as at July 2026, including the Finance Act 2023 amendments and CBIC Circular No. 242/36/2024-GST (December 2024). It is provided for general information and does not constitute professional advice — classification of specific products, particularly in genuinely unsettled areas like AI training data, should be confirmed for your specific facts.

Not sure how your product classifies?

AI, API, and cloud products often have genuinely ambiguous edges. Get a specific classification assessment for your product — free, no obligation.