A Startup Compliance Calendar for India

Indian startup compliance is not a single annual filing. It is a recurring operating system: company law, income tax, GST, payroll, labour law, state registrations, data protection, and fundraising paperwork. Miss one deadline and you may pay a penalty. Miss the wrong one and you can lose an investor, a banking relationship, or weeks of founder time.

The mistake is treating compliance as a CA’s problem. It is your company’s problem. Investors do not fund a business whose statutory records cannot be produced quickly. A clean data room is not enough if the underlying filings are late, inconsistent, or missing.

What startup compliance in India actually covers

Your compliance calendar should track every filing, payment, renewal, approval, register, and board action that applies to your company. The exact list depends on your legal entity, turnover, state presence, employee count, foreign transactions, and business model.

For most Indian startups, the calendar has six layers:

• Corporate compliance: MCA filings, board meetings, annual general meeting, statutory registers, auditor appointments, share allotments, and director disclosures.
• Direct tax: advance tax, TDS payments and returns, income-tax return, tax audit where applicable, and transfer-pricing filings for related-party international transactions.
• GST: registration, tax invoices, GSTR-1, GSTR-3B, annual return where applicable, e-invoicing, e-way bills, and input-tax-credit reconciliation.
• Payroll and labour: salary payments, EPF, ESIC, professional tax, labour welfare fund, Shops and Establishments obligations, POSH, gratuity, bonus, and state-specific returns.
• Foreign exchange: filings for foreign investment, overseas remittances, export proceeds, share issues to non-residents, and foreign subsidiaries.
• Sector and data rules: RBI, IRDAI, SEBI, FSSAI, CDSCO, telecom, payment, education, health, or privacy obligations depending on what you sell.

A founder in Bengaluru with ten employees, GST registration, and angel funding has a different calendar from a Maharashtra-based D2C company importing goods. Do not download a generic “startup compliance checklist” and assume it applies to you.

Startup compliance India: the calendar I would build

Here is the practical version. Start with recurring dates. Add event-driven filings later. The calendar must show five things for every obligation:

• What has to be filed or paid.
• The statutory due date.
• The internal cut-off date.
• The named owner and backup owner.
• The location of the proof: challan, acknowledgement, return, minutes, or certificate.

Use the government portal as the source of truth. Your spreadsheet, payroll software, or compliance platform is only a reminder system.

Area	Typical obligation	Usual timing	What founders commonly miss
Payroll	Salary payment, EPF, ESIC, professional tax	Monthly; dates vary by law and state	State-wise professional tax and employee-location rules
TDS	Deposit and quarterly return	Monthly deposit; quarterly return	Vendor, contractor, rent, salary, and professional-fee deductions
GST	GSTR-1, GSTR-3B, e-invoice and reconciliation	Monthly or quarterly, depending on scheme	Mismatch between books, GSTR-1, GSTR-3B, and vendor filings
Company law	Board minutes, annual return, financial statements, AGM	Event-based and annual	Share allotments, director disclosures, and late MCA filings
Foreign exchange	Foreign investment and overseas remittance reporting	Transaction-based	Assuming the bank’s paperwork completes the company’s filing
Labour	POSH, Shops and Establishments, LWF, bonus and registers	Monthly, annual, or state-specific	New office or employee in another state

Monthly compliance

Monthly work is where small startups fail. Not because the law is difficult. Because payroll closes on the 30th, invoices arrive late, the finance employee is chasing collections, and nobody has authority to release statutory payments.

Your monthly checklist should include:

• Payroll computation and salary payment.
• EPF contribution and ECR filing where applicable.
• ESIC contribution and related filing where applicable.
• Professional tax deduction and payment in states that impose it.
• Labour welfare fund contribution where applicable.
• TDS deduction, payment, and reconciliation.
• GST sales data, purchase data, credit notes, debit notes, and input-tax-credit review.
• GSTR-1 and GSTR-3B where your filing frequency requires them.
• E-invoice generation if your turnover and business category bring you within the rules.
• Bank reconciliation and review of related-party transactions.

Do not set the internal deadline on the government deadline. Set it five working days earlier. If TDS payment is due on the 7th, your payroll and invoice review should finish before that. If the 11th is the GST return date for your filing cycle, your sales register should be locked before the deadline.

Investor rule: If your finance process cannot produce a month-wise reconciliation of bank, GST, TDS, payroll, and books, you do not have financial control. You have accounting activity.

Quarterly compliance

Quarterly filings usually expose weak bookkeeping rather than create the weakness.

Track:

• TDS returns for salary and non-salary payments.
• Advance tax instalments, generally due in June, September, December, and March, subject to your tax position.
• GST reconciliation and quarterly returns if you use a quarterly filing option.
• Board meetings and minutes. A private company generally needs at least four board meetings each year, subject to the Companies Act and applicable exemptions.
• Financial reporting to the board and investors.
• ESOP grants, vesting records, and approvals where applicable.

Founders often remember the tax payment and forget the return. Or they file the return and do not reconcile it to the general ledger. Both create pain during diligence.

Annual compliance

Annual compliance is not “send the books to the CA in September”. It is a sequence.

1. Close the books and reconcile bank, GST, TDS, payroll, receivables, payables, loans, and founder expenses.
2. Prepare the financial statements and schedules.
3. Complete the statutory audit, where applicable.
4. Hold the board meeting to approve the financial statements and board report.
5. Hold the AGM within the prescribed period.
6. File the annual financial statements and annual return with the MCA.
7. File the income-tax return and tax audit report where applicable.
8. Issue Form 16 to employees and complete year-end payroll records.
9. Review POSH, bonus, gratuity, labour registers, insurance, licences, and contracts.
10. Archive signed minutes, filings, challans, certificates, and auditor reports in one controlled folder.

Private limited companies commonly deal with AOC-4 and MGT-7 or the applicable annual-return form, but do not blindly use last year’s dates. Due dates depend on your financial year, AGM date, entity type, exemptions, and regulatory changes. Confirm the current position with your company secretary.

The first decision: map obligations by where people work

Founders usually begin with the registered office. That is the wrong starting point for labour compliance.

Start with:

• Where each employee works.
• Where your office, warehouse, factory, or store operates.
• Where you make taxable supplies.
• Where inventory is stored.
• Where contractors and delivery personnel operate.

Professional tax, Shops and Establishments rules, minimum wages, labour welfare fund, and local registrations can follow the employee’s or establishment’s location. A company registered in Karnataka that hires its first employee in Maharashtra has not merely added a person to payroll. It may have added a new compliance map.

Maintain a state register with these fields:

• State and city.
• Office or work location.
• Employee count and worker category.
• GST registrations.
• Professional tax registration or enrolment status.
• Shops and Establishments registration.
• EPF and ESIC applicability.
• Labour welfare fund status.
• Local trade, factory, food, health, or sector licence.

Review this register whenever you hire in a new state, open a warehouse, change your registered office, or start selling through a new channel.

The compliance deadlines that deserve founder attention

EPF and ESIC

EPF and ESIC obligations depend on coverage rules, employee status, wages, establishment type, and headcount. Do not assume that calling someone a consultant removes the risk. A contractor working under your control can still create labour exposure.

EPF and ESIC contributions are generally deposited monthly, commonly by the 15th of the following month. Verify the current portal rules and applicability for your workforce. Keep:

• Employee declarations and KYC records.
• Wage registers.
• ECR and payment challans.
• ESIC contribution records.
• Contractor agreements and contractor compliance evidence.

A due date is not met merely because your payroll software calculated the amount. The money must be paid and the filing must be accepted.

Professional tax

Professional tax is a state-level trap. Not every state imposes it. Those that do may have different registration, deduction, payment, and return dates. Some distinguish between an employer’s registration certificate and an enrolment certificate.

Map it employee by employee and state by state. Do not use a single pan-India payroll rule. Keep proof of registration, deductions, payments, and returns.

POSH

If you have ten or more employees, the Sexual Harassment of Women at Workplace law requires an Internal Committee, policy, training, complaint process, and records. The obligation is not suspended because your company has received no complaint.

Track:

• Internal Committee constitution and member terms.
• External member appointment.
• Policy circulation and employee acknowledgement.
• Training records.
• Complaint records with strict confidentiality.
• Annual reporting requirements to the relevant authority.

Do not appoint the founder’s friend as an “external member” without checking whether the person meets the legal requirement. A badly constituted committee is not a harmless paperwork defect.

Final settlement and employee exits

Payroll teams often process full-and-final settlement in the next salary cycle. That habit can become a legal problem. Recent labour-law developments and state rules need careful review, particularly around wage payment and exit settlement timelines.

Your exit checklist should have a legal review point. It should cover salary, leave encashment, reimbursements, bonus, gratuity where applicable, variable pay, deductions, company property, access revocation, confidentiality, and experience documentation.

Do not let a departing employee become the first person to tell you that your payroll process is late.

GST compliance: the silent investor red flag

GST errors are rarely isolated. They spread into revenue recognition, receivables, cash flow, and investor reporting.

Every month, reconcile:

• Sales in the accounting system against GSTR-1.
• Tax liability in GSTR-1 against GSTR-3B.
• Input tax credit in your books against GSTR-2B.
• Credit notes and refunds against customer records.
• E-invoices and e-way bills against dispatch and revenue records.
• GST collected against the bank and cash ledger.

Watch for marketplace sales, interstate supplies, exports, imports, bundled services, discounts, advances, and transactions between related entities. A startup can report strong gross sales while its GST records tell a different story. That discrepancy will surface in diligence.

Do not treat GST credit as free cash. Tax collected from customers is not runway.

Fundraising creates a second compliance calendar

Founders focus on the term sheet and forget the implementation work. A funding round creates corporate and foreign-exchange filings.

Before closing a round, check:

• Authorised share capital is sufficient.
• Cap table matches the register of members.
• All prior allotments are filed and supported by bank evidence.
• Share certificates and board approvals exist.
• Valuation documentation is available where required.
• Investor KYC and beneficial ownership information is complete.
• Foreign investors have been checked against sectoral caps, pricing, entry routes, and reporting rules.
• Share subscription and shareholders’ agreements match the actual allotment.
• ESOP pool, founder vesting, liquidation preference, anti-dilution, information rights, and reserved matters are recorded consistently.

For foreign investment, filings under the Foreign Exchange Management Act may include reporting through the RBI’s FIRMS system, such as FC-GPR for issue of shares to a non-resident, subject to the transaction and current rules. Overseas investment has its own reporting requirements. Your bank may help with documents, but the company remains responsible for the filing.

If you are raising through a convertible note, SAFE-like instrument, CCD, or CCPS, get the instrument and filing path reviewed before signing. Indian company law and foreign-exchange rules do not care that a document is popular in a US accelerator.

For a broader view of pricing and dilution, read this guide on valuing a pre-revenue startup in India. Valuation is only one part. The instrument, rights, and filing trail matter just as much.

Data, sector licences, and the compliance people remember last

Your startup may need obligations beyond MCA, GST, and payroll.

Examples include:

• FSSAI registration or licence for food businesses.
• Drug and medical-device permissions for health products.
• RBI rules for payment, lending, prepaid instruments, or regulated financial activity.
• SEBI rules for investment advice, research, portfolio management, or securities distribution.
• Telecom and messaging rules for communications products.
• Consumer protection, advertising, product liability, and e-commerce rules.
• Data protection, consent, retention, security, breach response, and vendor contracts.

Do not claim “we are only a technology platform” if your product performs a regulated function. Regulators and investors look at what the business does, not the label in your pitch deck.

How to assign ownership without hiring a compliance department

At seed stage, you do not need ten specialists. You do need one accountable owner and one reviewer.

Company stage	Practical setup	Founder’s job
Pre-revenue or pre-seed	Founder plus external CA/CS; monthly checklist	Approve structure, sign documents, review exceptions
Seed stage	Finance or operations owner; CA/CS review; payroll system	Review a monthly compliance dashboard
Series A preparation	Finance lead, company secretary, tax advisors, legal counsel	Own the data room and close open items before diligence
Multi-state or regulated startup	Dedicated compliance owner with specialist advisors	Set risk tolerance and escalation rules

Do not make your CA the owner of everything. Your CA cannot know that an employee moved to Hyderabad, that a warehouse opened in Gujarat, or that you started selling a new regulated product unless you tell them.

Use a RACI-style rule:

• Responsible: prepares the filing and evidence.
• Accountable: founder or finance head who ensures it happens.
• Consulted: CA, CS, lawyer, payroll provider, or specialist.
• Informed: board, investors, or department head where relevant.

One named person must own each line. “Finance team” is not an owner.

The 90-minute compliance audit you can run this week

You do not need a six-month project. You need a hard first pass.

1. Export your legal identity. Collect incorporation certificate, PAN, TAN, GST certificates, licences, bank details, director records, cap table, and registered-office proof.
2. List every operating location. Include remote employees, warehouses, stores, factories, and contractors.
3. Pull the last twelve months of evidence. Download MCA filings, tax returns, challans, payroll reports, GST reconciliations, board minutes, and foreign-investment filings.
4. Mark gaps in red. Separate “not applicable”, “filed”, “paid but not filed”, “filed but unreconciled”, and “unknown”. Unknown is not compliant.
5. Assign owners and internal dates. Put a backup owner against every recurring obligation.
6. Review your next funding event. Check authorised capital, prior allotments, valuation documents, cap table, and foreign-investor reporting.
7. Schedule a quarterly review. Trigger an extra review after any new state, employee threshold, product line, investor, foreign transaction, or acquisition.

Keep the tracker simple. A shared spreadsheet can work. It should have a status column, due date, internal date, owner, reviewer, proof link, and notes on applicability.

What investors ask for during diligence

Investors do not expect a seed-stage startup to have the compliance machinery of a listed company. They do expect honesty and control.

Prepare these folders:

• Incorporation and constitutional documents.
• Statutory registers and board minutes.
• Annual MCA filings and audited financial statements.
• Income-tax returns, tax audit reports, and TDS records.
• GST registrations, returns, reconciliations, notices, and replies.
• Payroll, EPF, ESIC, professional tax, POSH, and employment records.
• All customer, vendor, founder, employee, and investor contracts.
• IP assignments from founders, employees, and contractors.
• Fundraising documents, cap table, share certificates, and valuation reports.
• Regulatory licences, insurance, litigation, notices, and material disputes.

The investor question is not “Did you ever miss a deadline?” Small companies do. The question is “Did you know, disclose, fix, and prevent recurrence?” A disclosed late filing with a remediation plan is usually less damaging than a surprise discovered in diligence.

Do not hide notices from investors. A tax notice is manageable. A founder who concealed it is not.

Common compliance mistakes that cost more than the penalty

Using a calendar copied from another startup

Your SaaS company and a food-delivery company do not have the same licences, taxes, or worker risks. Templates help you begin. They do not decide applicability.

Filing without reconciliation

A filed return can still be wrong. Reconcile it to books, bank, invoices, payroll, and prior returns. Repeated corrections are a diligence signal.

Calling employees consultants

Labels do not decide employment status. Control, supervision, working hours, exclusivity, and the actual relationship matter. Misclassification can affect PF, ESIC, gratuity, leave, notice, tax, and claims.

Ignoring founder expenses

Personal expenses paid by the company, company expenses paid by founders, unsecured loans, and informal reimbursements create messy related-party and tax records. Use a documented expense policy and settle balances monthly.

Forgetting old entities and dormant subsidiaries

A dormant subsidiary still has filings. A company with no revenue is not automatically free from compliance.

Assuming DPIIT recognition removes obligations

DPIIT recognition may provide access to specific benefits and schemes. It does not replace MCA, GST, tax, labour, FEMA, or sector compliance.

If you are considering government funding, read the guide to the Startup India Seed Fund Scheme, but keep the scheme application separate from your statutory calendar.

Bottom line

Compliance is not paperwork you outsource. It is evidence that your company is under control.

Build the calendar from your locations, people, transactions, investors, and product. Set internal deadlines before statutory ones. Name an owner. Save the proof. Reconcile the numbers. Review the map after every material business change.

The startup that misses one filing may pay a fee. The startup that cannot explain its compliance history loses negotiating power when cash is tight and investors are asking hard questions. That is when a messy calendar becomes expensive.

FAQs

What is a startup compliance calendar in India?

It is a dated tracker of every statutory payment, filing, renewal, approval, register, and reporting obligation that applies to your startup. It should include the due date, an earlier internal deadline, an owner, a reviewer, and the proof of completion.

What compliances are mandatory for an Indian private limited company?

Common obligations include MCA filings, board meetings, statutory registers, auditor and financial-statement requirements, income-tax filings, TDS, GST where applicable, payroll and labour compliance, and FEMA reporting if there is foreign investment or an overseas transaction. The exact list depends on your activities and facts.

What are the monthly compliances for startups in India?

Typical monthly items include salary processing, EPF, ESIC, professional tax, labour welfare fund, TDS payment, GST data and returns, e-invoicing where applicable, bank reconciliation, and payroll records. State rules and filing frequency can change the list.

Does a pre-revenue startup need GST registration?

Not automatically. Registration depends on turnover, the nature and location of supplies, interstate transactions, e-commerce activity, reverse-charge situations, and other statutory conditions. Registering too early can create recurring filing work; registering too late can create tax exposure. Get a fact-specific review.

Is DPIIT recognition the same as compliance?

No. DPIIT recognition is a status that may help with specified benefits. It does not replace company-law filings, GST, TDS, payroll, FEMA, sector licences, or data obligations.

When should an Indian startup hire a company secretary?

Use a qualified company secretary from incorporation if you are issuing shares, creating an ESOP pool, raising from foreign investors, changing directors, or preparing for institutional funding. A full-time hire may come later. The compliance work should not.

What happens if a startup misses an MCA filing?

Late fees can accumulate, and repeated non-compliance can affect directors, company status, fundraising, banking, and diligence. Check the specific filing and current rules immediately. Do not wait for the next funding round to clean it up.

How often should a startup review its compliance calendar?

Review it monthly for completion, quarterly for applicability, and immediately after hiring in a new state, opening a location, changing products, raising foreign capital, crossing a threshold, or receiving a regulatory notice.

Can a startup outsource compliance?

Yes, but accountability stays with the company. Your external CA, CS, payroll provider, or lawyer can prepare and file items. You must provide accurate information, approve payments, track deadlines, and retain evidence.

What should a founder do this week to improve compliance?

List every operating state, download the last twelve months of filings and challans, mark missing evidence, assign an owner to each obligation, and set internal deadlines five working days before statutory dates. That exercise will expose more risk than another generic compliance checklist.