Building a startup in India involves navigating strict regulatory requirements. Missing statutory deadlines leads to penalties, blocked bank accounts, and deal-breaking friction during investor due diligence.

Whether you operate a Private Limited Company or an LLP, maintaining structural, tax, and labor compliance from day one is essential.

Phase 1: Post-Incorporation Setup (Days 1–30)

Once the Ministry of Corporate Affairs (MCA) issues your Certificate of Incorporation, complete these foundational tasks:

• Bank Account Opening & Subscription Capital: Open a corporate current account and deposit the subscriber capital as outlined in the Memorandum of Association (MOA).

• Filing INC-20A (Declaration of Commencement): File Form INC-20A within 180 days of incorporation to legally start business operations and issue share certificates.

• First Board Meeting: Hold your first Board of Directors meeting within 30 days of incorporation to record the registered office address and open bank operations.

• Appointment of First Auditor (ADT-1): The Board must appoint a Chartered Accountant as statutory auditor within 30 days. File Form ADT-1 with the ROC.

• Issuance of Share Certificates: Issue stamped share certificates to founding subscribers within 60 days of incorporation.

Phase 2: Core Tax & Regulatory Registrations

Depending on your industry and turnover, secure these mandatory registrations:

Phase 3: Annual ROC & Statutory Filings

Indian companies must file annual returns with the Registrar of Companies regardless of revenue.

Key ROC Due Dates:

• Form DPT-3 (June 30): Declaration of outstanding loans or receipts not classified as deposits.

• Form DIR-3 KYC (September 30): Annual KYC verification for every individual holding a Director Identification Number (DIN).

• Form AOC-4 (October 30): Filing audited financial statements, Board Report, and Auditor's Report.

• Form MGT-7 / MGT-7A (November 29): Filing company annual return covering shareholding patterns and director details.

Phase 4: Labor Law & Data Privacy Safeguards

As your team grows, set up basic employment governance:

• POSH Act Compliance: Form an Internal Complaints Committee (ICC) if you employ 10 or more people.

• EPF & ESIC Registration: Mandatory when employee count reaches 20 for EPF and 10 for ESIC.

• Data Protection (DPDP Act): Maintain a transparent Privacy Policy, consent logs, and secure user data handling protocols.

Key Takeaways for Founders

1. Failure to file ROC forms costs money: Late filings incur a statutory penalty of ₹100 per day per form with no upper cap.

2. Nil revenue does not mean nil compliance: Non-operational companies must still file AOC-4 and MGT-7 to prevent director disqualification.

3. Draft core agreements early: Ensure co-founders sign a Founder Agreement covering equity vesting, IP assignment, and exit terms before raising funds.