of India's goods trade conducted with the EU
2025European Commission, EU–India tradeCountry file
India
India combines an evolving European commercial relationship, a large-scale IT/ITeS industry and a national incident-monitoring framework.
Relationship with the European Union
EU–India free trade agreement concluded, not yet binding
Negotiations were concluded on 27 January 2026, but the text only becomes binding after signature and internal procedures. It does not remove the need for supplier assurance.
Sources reviewed on 14 August 2026
of EU–India goods trade
2025European Commission, EU–India tradeof EU–India services trade
2024European Commission, EU–India tradeEconomy and sectors
of projected revenue for the Indian IT industry
2024–2025 financial yearIT, excluding supplier qualification
Government of India, IT and ITeS industryof IT/ITeS contribution to services exports
Benchmark published in March 2025Government estimate
Government of India, IT and ITeS industryof professionals employed by the IT/ITeS industry
2023–2024 financial yearEstimated sector employment
Government of India, IT and ITeS industryIncidents, fraud and impersonation
security incidents handled by CERT-In
2024Technical reports from disparate categories
CERT-In, 2024 annual reportreported card or online banking fraud
2024–2025 financial yearCases of at least ₹1 lakh; reporting year
Reserve Bank of India, Annual Report 2024–2025of reported bank fraud cases involved a card or the Internet
2024–2025 financial yearShare of the number of cases, not the amount of losses
Reserve Bank of India, Annual Report 2024–2025Points to check within your organisation
Delivery sites and teams
Establish which teams, entities, locations and populations actually access the European client’s scope.
Access and privileged accounts
Demonstrate the account lifecycle, MFA, reviews, exceptions and traceability beyond the central policies.
Fraud and sensitive instructions
Document trusted channels, out-of-band validation and dual approval for changes of beneficiary or sharing arrangements.
Developments to be aware of
The topics that may change your answers
EU–India Agreement
The legal status must be revalidated before any contractual conclusion.
IT and ITeS economy
The scale of the sector explains the diversity of delivery models; it does not prejudge the maturity of any given entity.
National incidents
Volumes are read by category, not as an attack rate per company.
Data transfers
Transfer mechanism, remote access and onward transfers are still to be documented.
The scale of the Indian sector reinforces the need to move down from the group-wide framework to the service actually delivered: entity, site, people, access, subcontractors and evidence. National statistics do not constitute a supplier risk score.
Official sources
Confidential exchange
