Compliance & Security
A managed venue for duty-credit scrips
The scripxhq.com platform, an Eximfiles product, is a managed venue for government-issued duty-credit e-scrips, the RoDTEP and RoSCTL scrips recorded in the Electronic Duty Credit Ledger under the Customs Act, 1962 and the Electronic Duty Credit Ledger Regulations, 2021. Sellers list the scrips that issue to them; buyers cover a Bill of Entry with scrips instead of cash. The scrips themselves are issued, recorded, and utilised by the Government. ScripX is an Eximfiles product operated by Dreamfuel Technologies Private Limited, an independent technology and settlement provider that is not affiliated with, endorsed by, or acting for the Directorate General of Foreign Trade, the Central Board of Indirect Taxes and Customs, Indian Customs, or ICEGATE, or any government body.
Agency only, we never take title
When you sign up you accept our Terms of Service, and when you connect your Government Portal account you sign a revocable Power of Attorney appointing ScripX as your authorised agent: we access the portal on your behalf, read your Scrip Ledger, and carry out the listings, transfers, and duty covers you approve. Every transfer executes directly from the selling IEC to the buying IEC on the Government Portal. ScripX never takes title to a scrip, never trades on its own account, and holds no position in the instruments transacted, it acts strictly as the transacting agent. The mandate is revocable at any time by disconnecting your account or withdrawing the Power of Attorney, and we keep a record of consents, instructions, and submissions.
Settlement is atomic delivery versus payment
Buyer funds lock in partner-bank virtual accounts before any scrip moves. Only then does the transfer execute from seller to buyer on the Government Portal, and the seller payout fires on the portal's confirmation, by IMPS with a UTR, the same business day. If a settlement fails it unwinds and refunds in full the same day, so no scrip and no money is ever left in mid-transfer. Nothing auto-submits: every write to the portal follows the same workflow of prepare, review, approve, e-sign, and submit.
Provenance screening before a scrip lists
Before a scrip is offered on the venue we screen its provenance: the shipping-bill chain behind it, the seller IEC history, KYC on the seller, and the live ledger status of the scrip. Government notifications from September 2022 shield a bona-fide transferee from a seller's prior defaults, and our screening is built to keep the scrips on the venue clean so that protection holds. A buyer covering a Bill of Entry receives the cheapest whole-scrip bundle, assembled first-expiry first-out, and the ask is capped at face value, never above it.
Know your customer and anti-money-laundering
Every account is verified before it can transact. We collect and check business identity, including IEC, PAN, GSTIN, and bank details, together with the identity of the persons who control the account, and we may re-verify at any time. We monitor for suspicious patterns, may pause or decline any listing, cover, or settlement that fails our checks or that we are required to hold, and we keep the records of consents, instructions, and settlements that applicable law requires. Settlement runs in Indian rupees through regulated partner banks. ScripX is a domestic duty-credit venue and does not itself move money across borders; each User remains responsible for its own obligations under customs, tax, foreign exchange, and anti-money-laundering law.
How tax works on a trade
- The scrip sale is GST-exempt. Sale of a duty-credit scrip is a supply of a duty-credit instrument, exempt from Goods and Services Tax under HSN 4907 (Notification 02/2017-Central Tax (Rate)).
- The ScripX fee carries 18% GST. Our fee is charged only when a trade settles, and it carries Goods and Services Tax at 18%.
- Every trade ships its paperwork. Each settled trade produces a GST invoice and a net-realisation statement setting out the price, the ITC impact, the fee, and your take-home, plus a per-trade audit pack, all exportable to Excel.
Protecting your information
- Your portal credentials: held in a server-side vault, encrypted at rest, never exposed in the browser and never shown back to you. When you update them, we replace the stored secret immediately.
- Your data: we handle personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. See our Privacy Policy for details.
- A tamper-evident trail: every consent, instruction, and write is recorded in a hash-chained, tamper-evident audit trail, exportable in full.
- What we never do: we do not take title to your scrips, we do not sell your data, and we do not use your transaction data for advertising.
For brokers and platform partners
A broker or customs house agent can run every client IEC from one desk, keeping the client and the commission while settlement and paperwork run on ScripX rails. Access to the platform's quote and settlement API is contract-gated: production access follows a signed NDA and production agreement, completed electronically. API keys are shown once at creation and are never stored in a readable form. Every client must have granted its own mandate and executed its own Power of Attorney before any transfer or cover is made for it. Programmatic use is governed by our API Terms, which bind partners to the same end-customer mandate and data obligations described above.
Responsible disclosure
If you believe you have found a security vulnerability in the platform, write to amin@eximfiles.io with enough detail for us to reproduce it, and give us a reasonable opportunity to remediate before any public disclosure. Do not access data that is not yours, do not degrade the service for others, and do not test against Live accounts or real trades. We acknowledge reports and act on verified issues promptly.
Questions and grievances
If you have questions about compliance or how we handle your information, reach us at amin@eximfiles.io. Our Grievance Officer under Indian law is Amin Naik, reachable at the same address; see the Terms of Service and Privacy Policy for the full grievance process and your rights under the Digital Personal Data Protection Act, 2023.