Section 14(1)(a) in The Aadhaar (Authentication) Regulations, 2016
(a)establish and maintain necessary authentication related operations, including own systems, processes, infrastructure, technology, security, etc., which may be necessary for performing authentication;