Skip to content

Corporate Compliance Checklist for Startups in India

Introduction

Nobody starts a company because they’re excited about filing annual returns. But here’s the thing — I’ve watched too many founders get blindsided by penalties for missing basic compliance deadlines, sometimes running into lakhs of rupees for something that would’ve taken an afternoon to file on time. A solid corporate compliance checklist isn’t glamorous, but it genuinely protects your company and your personal liability as a director.

Let’s go through what actually needs to happen, and when, so you’re not caught off guard.

Why Corporate Compliance Actually Matters

Quick answer: Corporate compliance refers to the legal and regulatory filings a company must complete under the Companies Act, 2013, and other applicable laws — skipping these can lead to penalties, director disqualification, or even company strike-off.

I’ve seen directors get disqualified for three years simply because their company failed to file annual returns for three consecutive financial years. It’s an avoidable disaster, and yet it happens all the time.

Monthly and Quarterly Compliances

GST Filings

If you’re GST registered, GSTR-1 and GSTR-3B need to be filed monthly (or quarterly under the QRMP scheme for smaller businesses), with due dates typically falling on the 11th and 20th of the following month respectively.

TDS Payments and Returns

TDS deducted needs to be deposited by the 7th of the following month, with quarterly TDS returns (Form 24Q/26Q) due by the last day of the month following each quarter.

Annual ROC Compliances

This is where most founders lose track. Here’s what’s typically required every year:

  • Form ADT-1 — auditor appointment, within 15 days of AGM
  • Form AOC-4 — filing of financial statements, within 30 days of AGM
  • Form MGT-7/MGT-7A — annual return, within 60 days of AGM
  • DIR-3 KYC — director KYC, by September 30 each year for every director

Missing DIR-3 KYC alone can get a director’s DIN deactivated, which then blocks them from signing off on other filings too — it’s a domino effect that’s genuinely annoying to untangle.

Income Tax Compliances

Companies need to file their Income Tax Return by October 31 (if subject to audit) or earlier, along with advance tax payments in four installments through the year. Tax audit under Section 44AB applies if turnover crosses specified thresholds.

[link to related guide on company registration process here]

Board Meetings and Statutory Registers

Private companies must hold a minimum of four board meetings per year, with a gap of no more than 120 days between two consecutive meetings. Startups often skip this, treating it as a formality — but proper minutes and statutory registers (register of members, register of directors, etc.) matter a lot during due diligence if you’re raising funds later.

Event-Based Compliances

Beyond the routine annual filings, certain events trigger immediate compliance obligations:

  • Change in registered office address
  • Appointment or resignation of directors
  • Allotment of new shares
  • Change in authorized or paid-up capital
  • Any charge created on company assets (like a loan against property)

Each of these needs to be reported to the ROC within specified timelines, usually 30 days, through relevant forms.

Labour Law Compliances (If You Have Employees)

Once you start hiring, a whole new set of obligations kicks in — EPF registration (mandatory once you cross 20 employees), ESIC registration, professional tax (state-specific), and adherence to the Shops and Establishments Act of your state.

A Real-World Example

A fintech startup in Jaipur onboarded its first ten employees within the first year but completely overlooked professional tax registration, assuming it only applied to larger companies. During a routine inspection eighteen months later, they were slapped with a penalty along with interest on the unpaid tax. It cost them roughly ₹45,000 in penalties for something that would’ve cost nothing if handled on time. That’s the real cost of skipping corporate compliance.

[link to related article on legal documents every startup needs here]

Building a Compliance Calendar

Honestly, the single best thing any founder can do is maintain a compliance calendar, or better yet, engage a company secretary on retainer. It’s a small monthly cost compared to the penalties, legal fees, and stress of catching up on missed filings later.

FAQs

What happens if a company misses ROC filing deadlines? Late filing fees apply, often at ₹100 per day per form with no upper cap in many cases, plus possible director disqualification for repeated defaults.

Do all private limited companies need a statutory audit? Yes, every private limited company in India requires a statutory audit regardless of turnover, unlike LLPs which have a threshold.

Is DIR-3 KYC mandatory every year? Yes, every director with a DIN must complete DIR-3 KYC annually by September 30, even if there’s no change in details.

Can a startup handle compliance without a company secretary? Technically yes for very small companies, but given how many deadlines and forms are involved, most founders find it more practical to outsource this.

What is the penalty for not holding board meetings? Non-compliance can attract penalties on the company and every officer in default, and it also creates governance red flags during investor due diligence.

Conclusion

Corporate compliance might feel like paperwork nobody warned you about, but treating it as an afterthought is one of the costliest mistakes a startup founder can make. Build a calendar, automate reminders, or hire someone to handle it — whatever works, just don’t let it slip. Your company’s good standing (and your own liability as a director) depends on it more than you’d think.

Suggested Image Alt Text:

  1. “Startup founder reviewing corporate compliance checklist”
  2. “Calendar marking ROC filing deadlines for companies”
  3. “Company secretary filing annual return documents”