The NPS Architecture: Trust, Recordkeeping Agency and Who Holds What
The National Pension System (NPS) architecture splits four jobs between four different entities. A trust holds the assets for subscribers. A central recordkeeping agency keeps the record of who has what. A pension fund manages the money inside a mandate. A point of presence is where a subscriber deals with the system. The entity a subscriber meets is the one that never holds anything. The Pension Fund Regulatory and Development Authority (PFRDA) sets the architecture out, read at pfrda.org.in.
Everything below is India. Four jobs sit at the centre of the arrangement: holding the assets, holding only a record, making the management decisions, and speaking to the subscriber. The four jobs went to four separate entities rather than to one convenient firm that did all of them, and the reason for the split is the whole subject.
The names are the easy part, and the part that falls out of memory by next week. The idea comes first. One sentence sits underneath the whole arrangement. Holding the assets, recording who has what, deciding how the money is managed and dealing with the person are four different jobs, and here they sit with four different entities on purpose. With that sentence learned, everything else is a matter of filling in which entity got which job. Without it, what remains is a list of names to memorise.
Here is the version everybody in the country has already watched happen. Think about the gift table at a large wedding. Somebody has to greet people, so one person stands at the door and receives the envelopes. In six months the household will want to know whose envelope was whose, so a second person sits with a register and writes each one down. A third person carries the day's collection to the steel almirah and it is locked there. A fourth person, usually an uncle nobody argues with, decides where the money eventually goes. Four jobs, four people, and every one of them thinks of themselves as looking after the same thing.
Now notice the two things that arrangement quietly achieves. The pension architecture is built for exactly those two. The person at the door never has custody of anything for more than a minute, so nothing much can go wrong there. And the register is kept by somebody who is not holding the almirah key, so the register can be checked against the almirah rather than being simply believed. Nobody in that wedding hall drew a diagram. The four of them arrived at the arrangement because a hundred and fifty guests will break anything simpler.
What four jobs does this architecture actually separate?
Four, and the jobs are worth naming before a single entity is named. Entity names are easy to learn in place of jobs, and the jobs are the material the architecture is built from. The jobs are these. Holding the assets. Keeping the record of who has what. Managing the money. Dealing with the subscriberThe person whose contributions and whose record these are. The word simply names the individual inside the arrangement., meaning the person whose contributions and record these are.
Say each one out loud and ask what would go wrong if it were missing. With nobody holding the assets there is nothing to talk about. With nobody keeping the record, the assets exist but no individual can be shown to have any part of them. With nobody managing, the money sits still. With nobody facing the person, the arrangement has no door. All four jobs have to happen. The interesting question is not whether they happen but how many entities they are spread across.
The word for that arrangement is separation of functionsGiving holding, recording, managing and dealing with the person to different entities rather than to one, so that no entity is checking its own work., and it is not unique to pensions. Separation of functions appears wherever anybody was serious about money: the person who counts the cash is not the person who signs the ledger, and neither of them is the person who reconciles the two. The unusual part is that the separation is written into the architectureThe arrangement of entities and the way the jobs are divided between them, rather than any one entity in it. itself rather than left to whatever a single firm decides internally.
Which set below names the four jobs this architecture separates?
What does the trust do, and who does it hold the assets for?
The NPS trustThe entity that holds the assets on behalf of subscribers. Holding is the whole of what it is there to do. holds. Holding is the whole sentence, and nothing needs to be added to it. The assets sit with the trust, and they sit there on behalf of subscribers rather than on behalf of any firm the subscriber deals with. The distinction has teeth in it: an entity that holds something for another party is in a different position from an entity that holds something of its own.
The jobs the trust never touches matter as much as the one job it has. The trust does not maintain the record of which subscriber has what. The trust does not decide how the money is managed. The trust does not answer a telephone call from a person who cannot find their statement. The trust was given exactly one job, and nobody else in the architecture has that job. Ask who holds a subscriber's assets and the trust is the only honest answer.
What is the Central Recordkeeping Agency, and what does it hold?
The central recordkeeping agencyThe entity that maintains the record of who has what. It knows, and it holds nothing. holds a record and nothing else. Think of the register at the wedding gift table again: it is not the almirah, it never was the almirah, and its whole value comes from the fact that it is not. The recordkeeping agency knows whose contributions are whose, what each subscriber's position is, and what has happened to it. The recordkeeping agency does not hold the assets those records describe.
The lazy design is obviously the other one, so why anybody would arrange it this way is worth asking. Putting the record with the money saves an entity, a system and a great deal of reconciliation. The reason nobody serious does it is that a record kept by whoever holds the assets is a record with nothing independent to be checked against. The record becomes its own authority. The record and the assets are held apart precisely so that one can be checked against the other, and a record that cannot be checked against anything is a claim rather than a record.
Why is the record kept by an entity that does not hold the assets?
What does a pension fund do, and what does it never touch?
A pension fundThe entity that manages the money within the mandate it has been given. It manages, and it does not hold. manages. The fund makes the decisions about how the money is managed, inside a mandateThe stated authority a pension fund works inside. It sets the boundary of what the fund may decide, and the fund cannot widen it. set for it rather than chosen by it. The words set for it rather than chosen by it are the ones people skip. A mandate is a boundary, and a boundary cannot be moved from inside.
How a pension fund invests within that boundary is set out under the pension fund role. The negative space around the job matters just as much. The fund does not keep the record of which subscriber has what. The fund does not meet a subscriber. And a pension fund does not hold the assets it manages. Managing something and holding it feel like one act until somebody separates the two, so the split surprises people every single time. A pension fund decides and does not hold. Even the entity making the decisions is not the entity in possession.
Where does a subscriber actually meet a point of presence?
At the counter. A point of presenceThe place a subscriber deals with the system. It handles paperwork and instructions, and it holds nothing. is the part of the arrangement built to be met: it takes the paperwork, it passes on instructions, it is the address a person walks into or logs into. Girija Retirement Services Private Limited, an invented firm, is one. Lalitha Varma handles compliance there, and her firm handles subscribers' paperwork and their contributions without ever holding the money or managing it.
The combination is a strange one at first. Sit with it. A firm can handle something without holding it. The person at the wedding door receives every envelope of the evening and holds none of them by ten o'clock. Girija Retirement Services Private Limited is in the same position with far better systems: it is a route, and a route is not a destination. Handling and holding are different acts, and a point of presence does the first and never the second.
Pension Fund vs Point of Presence: which of the two ever meets the subscriber?
Take the two side by side. A pension fund and a point of presence are the pair most often flattened into one another, and the flattening happens in a particular direction: people assume the firm they can see must be the firm making the decisions. Define each one first. A pension fund is the entity that manages the money inside its mandate. A point of presence is the entity a subscriber deals with, taking paperwork and instructions and passing them on.
Putting the same four questions to both of them lets the contrast do the work. Does it meet the subscriber? A point of presence does, and a pension fund does not. Does it hold the assets? Neither one. Does it keep the record? Neither one. Does it decide how the money is managed? A pension fund does, and a point of presence does not. Each of the two has exactly one yes, they are different ones, and neither of the two yeses is holding anything.
Which of a pension fund and a point of presence ever meets the subscriber?
Which entity ever holds a subscriber's money, and which never does?
One holds. Three never do. The trust holds the assets, and a point of presence, a recordkeeping agency and a pension fund never hold them at any stage, on any day, under any circumstance. The four-way split is not a complicated position compressed into a sentence. The split is the position.
A problem has to be taken somewhere, and most of the delay in fixing anything is spent taking it to the wrong place. The practical value of knowing which entity does what shows up the first time something goes wrong. Sort problems into three kinds and each one has an address. A record question is answered on the recordkeeping side. A paperwork or service question is a point of presence question. A question about how the money is managed is a question about a mandate, and a mandate is read from the regulator's own description rather than from whoever answers the telephone.
A subscriber finds that their record does not show what they expected. What kind of question is that?
What happens to one contribution as it moves through the architecture?
Follow a single contribution and the separation stops being an abstraction. The contribution begins at a point of presence, and Girija Retirement Services Private Limited is one: it takes the instruction and the paperwork, handles both, and holds neither. The record of whose contribution it is sits with the recordkeeping agency, an entity that knows and does not hold. The assets sit with the trust, held for subscribers. The management is a pension fund's job, decided inside its mandate.
Read the table below across, and then read the last column down. Four entities, four jobs, and one yes in the whole column. Her firm is not the entity that holds a subscriber's money, so Lalitha Varma at Girija Retirement Services Private Limited could not touch it if she wanted to. The protection is structural rather than a matter of how careful anybody is being.
| Where the contribution is | What that entity does with it | What that entity does not do | Holds the assets |
|---|---|---|---|
| At a point of presence, such as Girija Retirement Services Private Limited | Handles the paperwork and passes the instruction on | Never holds it and never manages it | No |
| With the recordkeeping agency | Records whose contribution it is and what the position now shows | Never holds it and never meets the subscriber | No |
| With the trust | Holds the assets on behalf of subscribers | Keeps no record and makes no management decision | Yes |
| With a pension fund | Manages it inside the mandate the fund is given | Never holds it and never meets the subscriber | No |
| The whole journey | Four entities, four jobs | No entity does two of them | One yes |
Before the control below is moved: a subscriber deals with one firm for a pension. Does that firm hold the money?
Move one contribution across the four entities, and watch how few of them ever hold it.
The control below moves a single contribution through the arrangement one entity at a time. The control opens where the worked example above opens, at a point of presence, the only entity a subscriber ever meets. The division of jobs does not depend on how much money moves, so the unit that moves is drawn as one plain square and carries no amount of any kind. At every position, the entities that do not hold the contribution matter more than the one that does.
- At a point of presence. The firm at the counter handles the contribution and passes the instruction on without holding it.
- At the recordkeeping agency. The agency records whose contribution it is and holds nothing.
- At the trust. The trust holds the assets on behalf of subscribers, and holding is the whole of its job.
- With a pension fund. The fund manages inside the mandate it is given and does not hold the contribution either.
Where this arrangement is described authoritatively
The pension arrangement described above is set out by the Pension Fund Regulatory and Development Authority, the body that regulates it, and is read at pfrda.org.in. The regulator's own site is where the registered roles are named, where what each one may and may not do is written, and where the current list of entities in each role is published. Charges, contribution limits, ages, periods and returns are all set by the regulator and all revised from time to time, so each of them is read there rather than carried away from any description of it. A description of a requirement is never the requirement, and the version in force is always the one at that address. Where a question crosses into insurance rather than pensions, the address is the Insurance Regulatory and Development Authority of India at irdai.gov.in, and where it crosses into securities it is the Securities and Exchange Board of India at sebi.gov.in.
Why is the architecture separated like this at all?
Because a single entity doing all four jobs would be checking its own work at every point, and because a single entity doing all four jobs is a single thing that can fail. The separation is a design decision made in advance rather than an accident that history left behind, and read that way the whole arrangement becomes memorable: the question stops being what each entity is called and becomes which of the four jobs it was given.
Take each failure in turn. If the entity a subscriber deals with stops working, the assets are not with it, the record is not with it, and the management decisions are not with it. If the recordkeeping side has a bad day, the assets are still held by an entity that had nothing to do with it. If a fund is replaced, the assets stay where they were and the record stays where it was. Separation does not make any of these events painless, and it is not meant to: what it does is stop one failure from becoming all four.
Why separate the four jobs at all, rather than give them to one capable entity?
What does a subscriber actually see of all this?
One corner of it. Everything a subscriber experiences arrives through a point of presence: the form, the acknowledgement, the person who explains what a column means, the number that gets rung when something looks wrong. Three other entities are doing the holding, the recording and the managing, and a subscriber will in all likelihood never contact any of them for as long as they are in the arrangement.
So when somebody says the name of the firm they deal with as though it were the name of the whole thing, they are not being careless. The speaker is describing the only part of the arrangement they have ever been shown. The architecture is four entities wide and the view from where a subscriber stands is one entity wide. The gap between the two is the entire reason the arrangement feels like one firm.
Why does the whole arrangement feel like one firm to a subscriber?
How does somebody working in compliance or advice use this map?
Three ways, and all three are ordinary working uses rather than theory. The first is triage. Lalitha Varma, who handles compliance at Girija Retirement Services Private Limited, gets questions all week that sound identical and are not: some are her firm's to answer, some belong on the recordkeeping side, and some are questions about a mandate that neither she nor anybody in her building decides. Sorting the question by which of the four jobs it touches is faster than sorting it by who shouted loudest.
The second is scope. When somebody asks her firm to do something, the first question is whether the request sits inside what a point of presence is registered to do. A firm that starts holding or managing has not stretched a service, it has stepped into a role somebody else is registered for. The third is explanation. A person who has understood which entity holds what asks better questions of anybody they deal with, and stops being reassured by the wrong reassurance.
The same map works from the other side of the table. Seen by somebody who assesses institutions rather than uses them, the four jobs give four separate places to ask about controls, and the interesting question at each one is whether that entity is doing anything the other three would otherwise check.
The failure: reading the firm at the counter as the system
Here is how it happens, and it happens to careful people. A subscriber deals with one firm. Every form goes through it, every question is answered by it, the acknowledgement carries its name. Over a few years that firm quietly becomes the word the subscriber uses for the pension. Nobody said it holds the money. Nobody said it does not either.
The wrong reading is that the entity a subscriber talks to is the entity holding the assets. The entity at the counter is not the entity holding the assets, and the separation is one of the few structural protections built into the arrangement. The one entity a subscriber ever deals with is the one entity in the whole arrangement that never holds anything, and almost nobody outside the industry knows that.
The cost runs in both directions, and both directions are worth naming. A subscriber who thinks the firm they deal with holds their assets can be frightened by news about that firm that has nothing to do with where the assets are. The same subscriber can also be reassured by comfortable words from a firm that was never holding anything to begin with. Neither reaction is a failure of attention on the subscriber's part. Subscribers were shown one corner of a four part arrangement and reasoned perfectly well about the corner they could see.
The firm a subscriber deals with runs into difficulty. Are that subscriber's assets sitting with that firm?
How a pension fund invests inside its mandate is set out under the pension fund role, and what a pension is as a product is a separate subject again. Whether this arrangement suits a particular person turns on that person's circumstances, and no description of an architecture can supply those. How insurance and pension regulation is organised in India sets out the regulators themselves and what each one answers for, and the regulated advice role in retirement is set out under the pension adviser.
References
| Source | Document | Where |
|---|---|---|
| Pension Fund Regulatory and Development Authority | The authority's own description of the pension arrangement and of the roles registered within it, covering the existence and the division of the four jobs | pfrda.org.in |
| Pension Fund Regulatory and Development Authority | The regulations and registration material for the roles named above, showing that each role is registered separately and therefore carries its own obligations rather than inheriting them from whichever entity a subscriber happens to deal with | pfrda.org.in |
| Insurance Regulatory and Development Authority of India | The insurance regulator's own material, for a question about insurance rather than about the pension arrangement described above | irdai.gov.in |
| Securities and Exchange Board of India | The securities regulator's own material, for the securities market side of the same question, under a different address and a different rulebook | sebi.gov.in |
Girija Retirement Services Private Limited and Lalitha Varma are invented.
Educational material. Not advice on any investment, tax, budget or market position.