Case Study: Razorpay achieves automated RBI compliance with Kyverno from CNCF

Razorpay secures 7,000+ Kubernetes nodes with Cloud Native Computing Foundation

Razorpay, a leading Indian fintech company, faced the immense challenge of complying with the Reserve Bank of India's strict Payment Aggregator regulations while operating a massive, high-velocity platform. Manually enforcing complex security requirements like data localization and zero-trust access across thousands of dynamically scaling Kubernetes nodes was mathematically impossible and created severe bottlenecks for their developers. To solve this, Razorpay partnered with the Cloud Native Computing Foundation's ecosystem, implementing the Kyverno policy engine from vendor Nirmata.

The solution involved deploying Kyverno to automate Policy as Code, creating a dual-front defense with proactive, preventive, and detective controls. This allowed Razorpay to automatically validate, mutate, and generate secure configurations at the API server level, ensuring continuous compliance enforcement across its 7,000+ nodes. The measurable impact for Razorpay was the ability to autonomously scale during extreme traffic spikes with zero added latency, achieve continuous audit-readiness, and maintain a frictionless developer experience that supports the launch of over 40 products annually, all while guaranteeing a cryptographically verified software supply chain.

Razorpay