A Depository Participant is the investor-facing agent of a depository, providing access to demat accounts and services for holding and transferring securities electronically.
The short answer
A Depository Participant (DP) is an intermediary registered to act as an agent of a depository. Investors interact with the depository system through the DP to open and operate demat accounts, hold securities electronically, transfer them and use services such as pledging, transmission and dematerialisation. In India, DPs connect investors with the two SEBI-registered depositories, NSDL and CDSL.
The DP is the service point the investor deals with, while the depository maintains the central electronic record. Banks, stock brokers, custodians and certain other eligible institutions can operate as DPs after meeting the applicable requirements.
On this page
How does a Depository Participant work?
The Depositories Act defines a participant as a person registered in that capacity. Operationally, the depository appoints the DP as its agent, and the investor enters the depository system through that participant. The investor remains the beneficial owner and retains the rights and benefits attached to the securities.
What services does a DP provide?
| Service | What it means for the investor |
|---|---|
| Demat account opening | Completing account-opening, identity and KYC processes to access electronic securities holdings. |
| Dematerialisation | Converting eligible physical securities into electronic form. |
| Rematerialisation | Converting electronic holdings back into physical form where permitted. |
| Transfer and settlement | Processing instructions to move securities between accounts or complete market settlement. |
| Pledge and hypothecation | Recording securities as collateral without transferring beneficial ownership outright. |
| Transmission | Transferring securities after the death of an account holder according to the applicable process. |
| Statements and account updates | Providing holding and transaction information and processing changes such as nomination or account closure. |
DP and demat account are not the same thing
The demat account is the electronic account holding the investor’s securities. The DP is the registered intermediary that opens and services that account within the depository system.
Depository, DP and stock broker: the difference
| Entity | Primary role |
|---|---|
| Depository | Maintains the central infrastructure and records for securities held in electronic form. India’s two depositories are NSDL and CDSL. |
| Depository Participant | Acts as the depository’s agent and provides demat services directly to investors. |
| Stock broker | Executes securities trades on an exchange for clients. A broker may also be registered as a DP, but the two roles remain legally and operationally distinct. |
This is why an investor may receive trading services and demat services from the same brand but under different registrations and terms. Trading creates the transaction; the depository system records the resulting securities movement and holding.
Depository Participants under SEBI’s cybersecurity framework
Depository Participants are SEBI Regulated Entities covered through their depositories under the Cybersecurity and Cyber Resilience Framework. CSCRF categorises institutional DPs as Qualified REs and non-institutional DPs as Mid-size REs.
The applicable controls are important because DPs handle identity records, investor instructions, account access and high-value securities transactions. Relevant areas include:
- Strong authentication and MFA for sensitive and privileged access.
- Asset, account and access-right inventories with regular review.
- Application and API security for investor-facing services and integrations.
- Continuous monitoring through an appropriate SOC model and SIEM.
- Vulnerability management and periodic VAPT.
- Incident response, evidence retention and reporting through the prescribed routes.
DPs submit applicable CSCRF compliance, VAPT and cyber-audit reports through the depository. The depth and periodicity follow the entity’s CSCRF category and the specific requirement.
Investor access makes identity security critical
A compromised DP account can enable unauthorised instructions or expose sensitive investor information. Authentication, session security, alerting and transaction monitoring should work together rather than as separate controls.
How Osto supports Depository Participants
Osto helps DPs bring application, API, cloud, endpoint, identity and network security into one operating view. WAF, API protection, CSPM, EDR, DLP, SIEM and VAPT generate evidence while protecting the systems used to serve investors.
That evidence can be connected to CSCRF requirements, findings, remediation owners and closure records. This makes it easier to demonstrate that controls are operating without reconstructing the audit trail from multiple security vendors.
Security for SEBI REs
Protect investor-facing systems and prove it
Connect application, API, endpoint, cloud and monitoring controls with audit-ready evidence.
Get a free security assessmentFrequently asked questions
What is a Depository Participant?
A DP is a registered agent of a depository that provides demat-account and securities-depository services directly to investors.
Is a DP the same as a depository?
No. NSDL and CDSL are depositories that maintain central electronic records. A DP is the intermediary through which an investor accesses their services.
Is a Depository Participant the same as a stock broker?
No. A broker executes trades, while a DP services the demat account and securities movements. One organisation may hold both registrations.
Who can become a Depository Participant?
Eligible entities can include banks, financial institutions, custodians, stock brokers, clearing organisations, qualifying NBFCs and RTAs, subject to applicable SEBI and depository requirements.
Are Depository Participants covered by CSCRF?
Yes. Institutional DPs are categorised as Qualified REs and non-institutional DPs as Mid-size REs under the framework.
Where does a DP submit CSCRF reports?
Depository Participants submit the applicable compliance, VAPT and cyber-audit reports through their depositories.