As RIAs and RAs increasingly rely on technology platforms and third-party service providers, the line between operational outsourcing and outsourcing of core regulatory functions is becoming increasingly blurred. This article examines SEBI’s outsourcing framework, recent enforcement actions and the key functions that must always remain under the intermediary’s control.