Rule 46(8) of the Income-tax Rules 2026 requires every entity that maintains books of account electronically to take a backup at the close of each business day and store it on servers physically located in India. The rule came into force on 1 April 2026 and covers most businesses and professionals who maintain digital accounts, regardless of whether their primary data is stored on a local machine, a private server or a global cloud platform.
If you use accounting software, an enterprise resource planning (ERP) system, or any cloud-based platform to maintain your financial records, this rule is already in force and applies to you.
What does Rule 46(8) actually say?
The rule forms part of the Income-tax Rules 2026, notified alongside the Income Tax Act 2025, which replaced the Income Tax Act 1961. It requires books of account and related electronic records to remain accessible in India at all times, with a backup copy maintained within India and updated at the close of each business day.
Two requirements sit at the core of this rule.
- Daily backup: The backup must be taken at the close of each business day. A backup taken on Monday does not cover Tuesday. Random or irregular backups, even if taken frequently, do not satisfy the provision.
- India-based storage: The backup destination must be a server physically located in India. This applies even if your primary accounting data lives on a global cloud platform such as an AWS data centre in Singapore or a Microsoft Azure node in the US.
Who does this rule apply to?
The daily data backup requirement applies to two categories of taxpayers.
- Persons required to maintain books of account under Section 62 of the Income-tax Act 2025: This covers companies, limited liability partnerships (LLPs), partnership firms, proprietorships, professionals and other entities above the prescribed turnover or income thresholds. Individuals and Hindu Undivided Families (HUFs) in business are covered if their income exceeds ₹2,50,000 or their turnover exceeds ₹25,00,000 in a tax year.
- Persons liable for tax audit under Section 63: This broadly covers businesses with turnover above ₹1 crore and professionals with gross receipts above ₹50 lakh. If 95% or more of a business’s total receipts and payments are through banking channels or prescribed electronic modes, the audit threshold rises to ₹10 crore.
What is the penalty for non-compliance?
Under Section 441 of the Income-tax Act, 2025, an Assessing Officer (AO) can levy a penalty of up to ₹25,000 for failure to keep and maintain books of account as required under Section 62. Non-compliance with Rule 46(8) falls within this provision.
There is also a separate penalty of ₹10,000 for an auditor who provides incorrect certification in the tax audit report related to backup and server location details.
The monetary penalty, while modest in absolute terms, is not the primary risk. An AO who finds that Rule 46(8) has not been followed may treat the taxpayer’s books as not duly maintained. This can result in a best-judgment assessment, where the AO estimates taxable income based on available information, disallowance of claimed deductions and heightened scrutiny in future assessments.
How does this affect cloud-based accounting users?
Businesses that use cloud-hosted accounting platforms need to pay particular attention here. The primary data can be hosted anywhere in the world. The rule does not require you to migrate everything to Indian servers. What it requires is that a complete, up-to-date copy of your books be available on a server in India at the end of each business day.
If you use a cloud accounting platform or an ERP with overseas hosting, the steps you need to take depend on your service provider.
- Providers with data centres in India: Confirm that your account is provisioned on an India-region node. Many providers offer both global and India-specific instances, and the default may not be India.
- Providers hosted entirely outside India: You need a separate India-based backup arrangement. This could be a local server, a network-attached storage (NAS) device, or a cloud backup bucket configured to a region in India such as AWS ap-south-1 (Mumbai), Azure India Central or Google Cloud asia-south1.
In either case, you should confirm in writing with your service provider that your backup data is stored on servers located within the country and obtain documentation of the server’s IP address and physical location for your records.
What does a compliant daily backup process look like?
A compliant workflow requires automation, the correct destination and proper documentation to work together effectively.
- Automated end-of-day backup: Configure your accounting software or ERP to initiate a backup automatically at a defined cut-off time each business day. Relying on someone to remember to take a backup manually is not a reliable compliance strategy.
- India-based backup storage: Map the backup path explicitly to an India-based destination, whether a local server on your premises, a network drive in India or a cloud storage bucket configured to an Indian region.
- Backup log maintenance: Keep a timestamped log of each backup event, including the date, time, size of the backup file and the server address where it was stored. This log is your primary evidence of compliance if an AO questions whether the daily requirement was met.
Businesses operating across time zones or running 24-hour operations should establish a fixed day-end cut-off time, document it as internal policy and run backups at that time consistently.
Conclusion
Rule 46(8) is already in force for the tax year 2026–27. The first tax audit reports under Form No. 26, which will request server location and backup details, will be filed for this year. Businesses that have not yet reviewed their backup setup, confirmed their service provider’s server location or implemented a daily automated backup are running a compliance gap that will surface at audit time.
TallyPrime's auto-backup feature offers complete data safety so you can focus on growing your business. It allows you to schedule automatic backups everyday that run quietly in the background, storing your information securely in the cloud with TallyDrive,
