Section 22(1) in The Aadhaar (Authentication) Regulations, 2016
(1)Requesting entities and Authentication Service Agencies shall have their servers used for Aadhaar authentication request formation and routing to CIDR to be located within data centres located in India.
