Okta has unveiled the availability of in-country Okta Platform tenants for enterprises in India, hosted on AWS, with general availability scheduled for early 2026. This strategic deployment underscores Okta’s commitment to the Indian market and allows customers in sectors such as banking, financial services, insurance and healthcare to localize their identity management infrastructure. By situating tenant data within India’s borders, Okta addresses emerging regulatory expectations and signals a material investment in regional digital sovereignty.

Underpinning this launch is support for India’s Digital Personal Data Protection Act (DPDP Act) and sector-specific mandates. Indian organisations can now choose to store authentication logs, user profiles and access policies on servers physically located in India, meeting the requirements of at least two major federal regulators who have stipulated local data storage for identity information. This foundational capability helps enterprises demonstrate compliance during audits and aligns with internal governance policies.

Recent Okta research indicates that 91% of organisations in India have begun deploying AI agents, yet only 10% possess a formal strategy for managing these non-human identities. Okta’s identity security fabric provides a unified control plane to govern every identity—whether a human user or an AI agent—across all applications and resources. This centralized approach delivers continuous risk assessment, adaptive authentication and policy enforcement, helping enterprises safeguard against AI-driven cyber threats while accelerating their AI initiatives.

Beyond data localization, the new in-country tenants include an enhanced disaster recovery service designed to ensure uninterrupted operations during regional outages. Leveraging multi-availability-zone failover and automated backup restoration, Okta’s solution promises sub-two-hour recovery time objectives (RTOs) for identity services. This resilience capability is critical for regulated industries where even brief authentication disruptions can lead to compliance violations and significant revenue loss.