What are the mandatory compliance requirements for an Indian startup?

Mandatory compliance includes company registration (MCA), PAN/TAN, GST registration once turnover crosses thresholds, professional tax, ESI/PF if applicable, annual ROC filings (AOC-4, MGT-7), and board meeting minutes. Post-2023, DPDP Act compliance also applies to customer data.

How much does it cost to register a startup in India?

Private limited company incorporation typically costs ₹8,000–₹25,000 including government fees, DIN, DSC, and professional fees. LLP registration is cheaper at roughly ₹5,000–₹15,000. Name reservation and DIN are additional.

Do I need a founder agreement in India?

Yes — strongly recommended. A founder agreement covers equity split, vesting, roles, IP assignment, decision-making, and what happens if a founder leaves. Without it, disputes are decided by company law defaults, which rarely match founder intent.

What annual filings must a private limited company file?

AOC-4 (financial statements), MGT-7 (annual return), DIR-3 KYC for directors, and income tax returns. Late filing attracts penalties of ₹100 per day per form, and striking-off risk for prolonged non-filing.

Startups · August 2026 · 2026-08-02

The Complete Startup Legal Checklist for India (2026)

Indian startups fail compliance audits for one reason more than any other: they treat legal work as a launch-day problem. By the time an investor's due diligence arrives, missing ROC filings, unsigned founder agreements, and absent DPDP consent records cost deals — or worse, draw regulatory penalties.

This is the 2026 edition of the practical startup compliance checklist, ordered by when you need each item. Work through it in order, and you will be audit-ready at every funding stage.

Phase 1: Before You Launch (Week 0–4)

Choose your entity: Private Limited vs LLP vs OPC — Pvt Ltd is standard for VC funding; LLP suits services and lower compliance
Reserve your company name via MCA RUN (Reserve Unique Name) — check trademark conflicts first
Incorporate: DIN, DSC, SPICe+ form — typically ₹8,000–₹25,000 all-in
Get PAN, TAN, and GST registration (GST optional below thresholds, but needed early for B2B)
Open a current account in the company name — never mix personal and business funds
Sign a founder agreement: equity split, 3–4 year vesting with 12-month cliff, IP assignment, non-compete scope, and exit terms
Draft an NDA before your first pitch — use a jurisdiction-correct template like Lexacore's generator

Phase 2: Hiring and Operations (Month 1–6)

Employment agreements with clear probation, notice period, IP assignment, and confidentiality clauses
Register for EPF and ESI once you cross employee thresholds
Professional tax registration — state-specific (Maharashtra, Karnataka, etc.)
Shops & Establishments registration under your state's act
Vendor agreements with liability caps and DPDP-compliant data clauses — AI-review them with ContractIQ
Privacy policy + consent capture for customer data (DPDP Act, 2023 — see our DPDP guide)

Phase 3: Annual Compliance (Every Year, No Exceptions)

AOC-4 — audited financial statements (within 30 days of AGM)
MGT-7 — annual return (within 60 days of AGM)
DIR-3 KYC — director KYC (every year by September 30)
Income tax return — and transfer pricing if applicable
GST returns — monthly/quarterly depending on scheme
Board meeting minutes — minimum 4 board meetings per year for Pvt Ltd
MCA compliance — check every filing deadline with a tracker; see our annual filings deep-dive

Late ROC filings attract ₹100 per day per form penalties, and three consecutive years of non-filing can get your company struck off the register — losing your name, bank accounts, and investor confidence in one stroke.

Phase 4: Funding Documents

When investors come calling, have these ready before the term sheet:

Cap table (updated) and ESOP pool documentation
Founder agreements and IP assignment proofs
Data room: incorporation docs, tax returns, compliance filings, contracts
Due diligence questionnaire responses — DD is now 30% compliance review
Key contracts: customers, vendors, employees, NDAs — all reviewed for risk

DD failures kill more seed deals than valuation disagreements. Founders who run every contract through risk scoring before the data room opens close 2–3x faster.

How Lexacore Automates Startup Compliance

Lexacore turns this checklist into a live process. ComplianceRadar tracks MCA, GST, DPDP and labour regulation changes in real time with LexCounsel AI answering compliance questions with verified citations. Generate NDAs, review vendor contracts, and store everything encrypted in the Legal Vault. Try the interactive demo — no signup needed.