Contracting in Mumbai: Maharashtra Stamp Duty, E-Payment and the Rules That Bind BFSI Vendor Agreements
Mumbai companies contract under the Maharashtra Stamp Act, pay through GRAS, and, if they are banks, NBFCs or insurers, under RBI and IRDAI outsourcing rules. What changed in the 2025 stamp amendment and how to set up a compliant contracting workflow.
Mumbai is where most of India's banks, NBFCs, insurers and asset managers sign their contracts, and where the Maharashtra Stamp Act, 1958 (not the central Act) sets the duty on them. City-ranked "best CLM" lists do not help with either. This guide covers the two things a Mumbai contracting workflow has to get right: Maharashtra stamping after the 2025 amendment, and the sector rules that dictate what a BFSI vendor agreement must contain. Position as of October 2026.
Maharashtra stamping: what applies
The Maharashtra Stamp Act, 1958 governs instruments executed in the state. Its scheme mirrors the central Act on the points that matter for execution: duty is payable before or at execution, and an instrument not duly stamped is inadmissible in evidence until duty and penalty are paid. Rates are in the Act's Schedule I by article; commercial agreements, leave and licence, leases, loan security documents and indemnity bonds each have their own article and rate. Confirm the article for each template against the current Schedule on the Inspector General of Registration's site. ****
E-payment and e-stamp certificates. Section 10 of the Act, as amended by the Maharashtra Stamp (Amendment) Act, 2025, allows the Chief Controlling Revenue Authority to require specified instruments to be stamped through franking or e-payment via the Government Receipt Accounting System (GRAS) or a designated bank account, and provides that e-payment is valid only with an authorised officer's endorsement, a consolidated-payment certificate or an e-stamp certificate. The practical sequence for a Mumbai company is therefore: pay through GRAS, obtain the e-stamp certificate or endorsement, attach it, then execute.
Other 2025 changes. The 2025 amendment also raised the duty on supplementary instruments forming part of a single transaction (for example, a power of attorney executed alongside a principal instrument) and raised the adjudication fee, with adjudication of executed instruments now accepted only with a deposit of the deficit duty. Budget for both when structuring multi-document transactions.
Which documents can be executed electronically
The IT Act, 2000 First Schedule, as amended on 26 September 2022, excludes only negotiable instruments other than cheques and certain instruments in favour of RBI/SEBI/IRDAI/PFRDA/NHB-regulated entities, most powers of attorney, trusts and wills. A Mumbai lease, leave and licence agreement, vendor MSA or loan agreement can be e-signed. Leave and licence agreements in Maharashtra must be registered; leases exceeding one year must be registered under section 17(1)(d) of the Registration Act, 1908. Registration is a separate step from execution and stamping.
BFSI vendor agreements: the rules that write your clauses
Banks and NBFCs. The RBI's Managing Risks in Outsourcing Directions of 28 November 2025 (RBI/DOR/2025-26/171 for commercial banks; RBI/DOR/2025-26/363 for NBFCs) list, in paragraphs 34 and 69 of the bank Directions, what an outsourcing agreement must contain: service standards; access to records; subcontracting consent; confidentiality and breach liability; business continuity; audit rights; RBI's right to inspect the provider and its subcontractors; data storage "only in India (as applicable)"; incident reporting; termination with orderly transfer; essential personnel; and a non-disclosure agreement for retained information. Existing IT outsourcing agreements had to comply by 10 April 2026 or renewal, whichever came first.
Insurers. IRDAI's outsourcing regulations impose similar board-approved policy, agreement-content and reporting requirements on insurers. ****
All of them. Section 8(2) of the DPDP Act, 2023 requires a "valid contract" with any Data Processor; rule 6 of the DPDP Rules, 2025 requires security-safeguard provisions in it; rule 7 requires a 72-hour breach report to the Data Protection Board. These commence on 13 May 2027.
A Mumbai contracting workflow
- Template metadata carries the Maharashtra Schedule I article, the GRAS payment head, and the registration flag.
- Intake captures counterparty category (regulated-entity vendor? MSE? processes personal data?).
- Clause rules add the RBI/IRDAI mandatory clauses automatically for vendor templates when the company is a regulated entity.
- E-payment and e-stamp step precedes signature; the certificate is attached to the execution version.
- Execution with DSC or Aadhaar eSign, audit trail retained.
- Registration task for leases and leave and licence.
- Obligation register holds RBI incident-reporting windows, audit rights, renewal dates and MSE payment deadlines.
Where Legatio fits. Legatio runs steps 1 to 7 as one workflow, with Maharashtra-specific stamping and registration tasks on the contract record. The stamp rates and regulatory clause lists come from the state and the regulator, not from software.
Position stated as of October 2026. Stamp rates and procedures change; confirm with the current Maharashtra Schedule I.