Startup Compliance:
Survive the ROC Audit.

1. The Secretarial Trap: Why Good Startups Die

There is a dangerous myth in the Indian startup ecosystem: "We are pre-revenue, so we don't have to file anything yet." This misconception destroys companies.

The moment the Registrar of Companies (ROC) issues your Certificate of Incorporation, the clock starts ticking. The Companies Act, 2013 is utterly unforgiving. It does not care if your app is still in beta or if you haven't made a single rupee in sales. If you are a registered Private Limited Company, you have statutory obligations.

Founders usually discover they are non-compliant during two catastrophic events:

1. The VC Term Sheet: An institutional investor offers you $2 Million. Their legal team conducts a Secretarial Due Diligence audit, discovers you haven't filed an ADT-1 or DPT-3, flags your company as a massive liability, and pulls the term sheet.
2. The MCA Strike-Off: The Ministry of Corporate Affairs sends a notice under Section 248, freezing your corporate bank accounts and disqualifying the founders from being directors in any company for 5 years, effectively ending their entrepreneurial careers.

This guide is your chronological map to surviving the financial year. Let's begin with the immediate aftermath of incorporation.

2. The "Day Zero" Compliances (First 180 Days)

Many founders celebrate getting their PAN and TAN, ignoring the fact that a company is technically not allowed to conduct business immediately upon incorporation. You must complete these foundational steps first.

3. Annual ROC Filings: The Core Machinery

Once your startup survives the first 180 days, you enter the cycle of annual compliance. The Indian Financial Year runs from April 1st to March 31st. Regardless of when you incorporated (unless it was after Jan 1st), you must close your books on March 31st and prepare for the "Compliance Season" (September to November).

A. Financial Statements (Form AOC-4)

This form submits your company's audited Balance Sheet, Profit & Loss Account, Directors' Report, and Auditors' Report to the government.

• Deadline: Within 30 days of holding the AGM (Usually October 30th).
• Penalty: A flat ₹100 per day of delay. No maximum cap. If you delay by 1 year, you pay ₹36,500 in penalties alone.

B. Annual Return (Form MGT-7 / MGT-7A)

While AOC-4 handles the money, MGT-7 handles the structure. It details your list of shareholders, changes in directors, board meetings held, and capital structure. (Small companies and One Person Companies use the simplified MGT-7A).

• Deadline: Within 60 days of holding the AGM (Usually November 29th).
• Penalty: ₹100 per day of delay.

C. Director KYC (Form DIR-3 KYC)

To weed out shell companies, the MCA requires every individual holding a Director Identification Number (DIN) to verify their identity (Phone, Email, PAN, Aadhar) annually.

• Deadline:September 30th every year.
• Penalty: Failing to file deactivates the DIN immediately. A steep flat penalty of ₹5,000 is charged to reactivate it. You cannot sign any corporate documents with a deactivated DIN.

4. The "Hidden" ROC Forms Most Founders Miss

AOC-4 and MGT-7 are famous. But secretarial audits frequently uncover that founders have completely ignored event-based or lesser-known annual filings, triggering massive compounding penalties.

Event-Based Triggers: You must also file forms within 30 days if you change your registered office (INC-22), appoint or remove a director (DIR-12), or increase your authorized share capital (SH-7).

5. Income Tax & GST Deadlines

Corporate law is governed by the MCA, but your money is governed by the CBDT (Income Tax) and CBIC (GST). Do not confuse ROC filings with Tax filings.

A. Corporate Income Tax Return (ITR-6)

Every company, even if operating at a massive loss, must file a corporate income tax return.

• Deadline:October 31st (Since all companies require an audit). If transfer pricing is involved (international transactions), it pushes to November 30th.
• The Advance Tax Trap: You cannot wait until October to pay your taxes. If your estimated tax liability exceeds ₹10,000, you must pay "Advance Tax" in four installments (15% by June 15, 45% by Sept 15, 75% by Dec 15, 100% by Mar 15). Failing this triggers heavy interest under Section 234B/C.

B. TDS (Tax Deducted at Source)

If you pay rent for your office, pay professional fees to your lawyer, or pay salaries to your engineers, you must deduct TDS and deposit it with the government by the 7th of the following month. You must then file quarterly TDS returns (Form 24Q for salaries, 26Q for others).

C. GST Returns (The Monthly Grind)

If your turnover crosses ₹20 Lakhs (₹10 Lakhs in some states), or if you sell online across state borders, GST registration is mandatory.

• GSTR-1: Details of your outward supplies (sales). Due by the 11th (QRMP scheme) or 13th of the subsequent month.
• GSTR-3B: Summary return and actual payment of tax. Due by the 20th, 22nd, or 24th.
• LUT Filing: If you export software or services abroad, you must file a Letter of Undertaking (LUT) before March 31st every year to export without paying IGST.

6. Labour Laws & FEMA (Foreign Funding)

Labour Law Thresholds: Startups often ignore HR compliance until a disgruntled employee files a complaint.

• PF (Provident Fund): Mandatory once you hit 20 employees.
• ESI (Employee State Insurance): Mandatory at 10 employees (for employees earning below ₹21,000/month).
• Professional Tax (PT): State-specific. In states like Karnataka and Maharashtra, it is mandatory to deduct PT from salaries and remit it monthly.
• POSH Act: Once you have 10 or more employees, constituting an Internal Complaints Committee (ICC) to prevent sexual harassment is legally mandatory.

7. The DPIIT Startup Exemptions

Is there any relief? Yes. If your startup is recognized by the DPIIT (Department for Promotion of Industry and Internal Trade), the Ministry of Corporate Affairs grants you a few specific regulatory relaxations:

1. Fewer Board Meetings: Instead of the mandatory 4 board meetings per year, a DPIIT-recognized startup only needs to hold 2 board meetings (one in each half of the calendar year, with a gap of at least 90 days).
2. No Cash Flow Statement: Startups are exempt from including a complex Cash Flow Statement as part of their Financial Statements (AOC-4).
3. Fast-Track Mergers: Recognized startups can merge with other startups or small companies without having to go through the lengthy, expensive National Company Law Tribunal (NCLT) approval process.
4. ESOP Sweat Equity Limit: Startups can issue Sweat Equity shares up to 50% of their paid-up capital (compared to the normal 15% limit) for up to 10 years from incorporation.

8. Surviving VC Secretarial Due Diligence

When you sign a term sheet, the VC sends a team of external Company Secretaries to rip your company apart. They are looking for reasons to lower your valuation or insert indemnity clauses protecting themselves against your past mistakes. Here is exactly what they audit:

• The Cap Table Cleanliness: Do the shares issued historically match the exact MGT-7 filings and PAS-3 return of allotment forms? Are the stamp duties on share certificates fully paid?
• Statutory Registers: Do you have a physical or digital, meticulously updated Register of Members (MGT-1), Register of Directors, and signed Board Meeting Minutes? (Most founders fake these at the last minute, which is glaringly obvious to auditors).
• Related Party Transactions: Did the founder transfer company money to their personal account without a formal board resolution and arms-length pricing justification?
• Intellectual Property: Are the trademarks and patents registered in the name of the Company, or accidentally still in the name of the Founder?

Compliance is not an administrative chore. It is the absolute bedrock of your company's valuation.