Introduction
Founders love talking about product and growth, but compliance? That’s the part everyone quietly ignores until an ROC notice shows up. A solid corporate compliance checklist isn’t glamorous, but skipping it is how startups end up paying penalties that dwarf what proper filing would’ve cost. In 2026, with MCA tightening scrutiny on shell companies and late filings, this matters more than founders realize.
Why Compliance Gets Ignored (And Why That’s a Problem)
Early-stage founders are usually juggling ten things at once, and compliance feels like the least urgent. But penalties for late ROC filings can run into lakhs over time, since many penalties are calculated per day of delay.
Quick answer: A corporate compliance checklist for Indian startups includes annual ROC filings, income tax returns, GST compliance, statutory registers, board meeting minutes, and event-based filings like changes in directors or share capital.
Annual Compliances Every Company Must Do
- Form AOC-4: Filing of financial statements, due within 30 days of the AGM
- Form MGT-7/MGT-7A: Annual return filing, due within 60 days of AGM
- Income Tax Return: Due by October 31 for companies requiring audit
- DIN KYC (DIR-3 KYC): Annual verification for every director, due by September 30
Event-Based Compliances
Unlike annual filings, these are triggered by specific events:
- Change in directors — file DIR-12 within 30 days
- Increase in authorized capital — file SH-7
- Allotment of shares — file PAS-3 within 15 days
- Change in registered office — file INC-22
I’ve noticed startups often forget event-based filings entirely, assuming annual filing covers everything. It doesn’t — each event has its own separate deadline and form.
Statutory Registers You Must Maintain
Every company must maintain registers like the Register of Members, Register of Directors and KMP, and Register of Charges. These aren’t filed anywhere but must be available for inspection — and auditors do check for these during due diligence, especially if you’re raising funding.
GST Compliance for Startups
If registered under GST, monthly or quarterly GSTR-1 and GSTR-3B filings are non-negotiable, along with annual GSTR-9 if turnover crosses the threshold. Picture a startup that stops filing GST returns for three months because “sales were low” — the late fees and interest accumulate regardless, and it becomes a mess to untangle later.
Board Meetings and Minutes
Private companies must hold at least 4 board meetings a year (not more than 120 days gap between two), and minutes must be recorded and maintained properly. Small companies get some relaxation here — only 2 meetings required.
Quick answer: Private limited companies in India must hold a minimum of 4 board meetings annually, with no gap exceeding 120 days between consecutive meetings, while small companies and OPCs need only 2 board meetings a year.
Labour Law Compliances
Once you cross certain employee thresholds, PF, ESI, and gratuity obligations kick in. Startups scaling headcount fast sometimes miss the exact threshold dates, which triggers compliance retroactively — and that’s an expensive surprise.
Startup India Recognition Compliance
If you’re registered under Startup India, don’t forget the annual compliance requirement for maintaining that status, including updates on funding and revenue for continued tax benefits under Section 80-IAC.
FAQs
Q1. What happens if a startup misses ROC filing deadlines? Penalties accrue per day of delay, and directors can face disqualification if defaults continue for multiple years.
Q2. Is a company secretary mandatory for startups? Only mandatory if paid-up capital crosses ₹10 crore or turnover crosses ₹50 crore, but many startups hire one earlier for smoother compliance.
Q3. How often should board meetings be held? At least 4 times a year for private companies, with a maximum gap of 120 days between meetings.
Q4. Do startups need to file GST returns even with zero sales? Yes, nil returns are still mandatory if registered under GST, otherwise late fees apply.
Q5. What is DIR-3 KYC and who needs to file it? It’s an annual KYC verification for every person holding a DIN, due by September 30 each year, and missing it deactivates the DIN.
Conclusion
Compliance isn’t the exciting part of running a startup, but it’s the part that protects everything else you’ve built. Missing filings doesn’t just mean penalties — it can affect your ability to raise funding later when investors run due diligence. Set calendar reminders for every deadline on this checklist today, or better yet, get a compliance professional on retainer before your first ROC due date sneaks up on you.
Suggested Alt Text for Images:
- “Corporate compliance checklist for Indian startups”
- “ROC annual filing calendar for private limited companies”
- “Board meeting minutes documentation for startup compliance”
