Section 17(1)(c) in The Aadhaar (Authentication) Regulations, 2016
(c)the encrypted PID block is not stored, unless it is for buffered authentication where it may be held temporarily on the authentication device for a short period of time, and that the same is deleted after transmission;