First Year Startup Compliance: Complete Month-by-Month Checklist for Indian Startups

Why First-Year Compliance Is Critical for Indian Startups

The first year after incorporation is the highest-risk period for compliance defaults. The founders are focused on product development, customer acquisition, and fundraising — and statutory deadlines slip under the radar. At Virtual Auditor, we have assisted over 200 newly incorporated startups with their first-year compliance setup, and the pattern is consistent: founders who miss early deadlines face compounding consequences that become expensive and time-consuming to rectify later.

There are three categories of consequences for first-year non-compliance:

Financial penalties: Late filing fees for ROC forms range from INR 100 per day (for AOC-4 and MGT-7A) to flat penalties for specific defaults. Late GST returns attract late fees of INR 50-100 per day plus interest at 18% per annum on the tax liability. TDS late payment attracts interest at 1.5% per month.

Director disqualification: Under Section 164(2) of the Companies Act, if a company fails to file annual returns or financial statements for three consecutive years, every director of the company is disqualified from being appointed as a director in any company for a period of five years. This disqualification is automatic and can affect the founder’s ability to serve as director in other ventures or future companies.

Company strike-off: Under Section 248, the ROC can strike off the name of a company that has not filed financial statements or annual returns for two consecutive financial years. While reinstatement is possible through the National Company Law Tribunal (NCLT), the process takes 6-12 months and costs significantly more than maintaining compliance.

Month 1: Immediate Post-Incorporation Tasks (Days 1-30)

Open a Current Account and Deposit Subscription Money

The first operational task is opening a current bank account in the company’s name. This requires the Certificate of Incorporation, Memorandum and Articles of Association, PAN card of the company, board resolution authorising the opening of the account, and KYC documents of all directors. The subscription money (the amount each subscriber agreed to pay for shares as stated in the MoA) must be deposited into this account. This deposit is a prerequisite for filing INC-20A.

Appoint the First Auditor — Form ADT-1

Under Section 139(6) of the Companies Act, 2013, the Board of Directors must appoint the first auditor within 30 days of incorporation. The auditor holds office until the conclusion of the first Annual General Meeting (AGM). Form ADT-1 (Notice of Appointment of Auditor) must be filed with the ROC within 15 days of the Board meeting in which the auditor is appointed. If the Board fails to appoint the first auditor within 30 days, the members (shareholders) must appoint the auditor within 90 days at an Extraordinary General Meeting (EGM).

Obtain PAN, TAN, and Register for GST

While PAN is typically allotted at the time of incorporation through the SPICe+ form, the company must separately apply for TAN (Tax Deduction and Collection Account Number) if it is not allotted automatically. TAN is required for deducting and depositing TDS. GST registration is mandatory if the company’s aggregate turnover exceeds INR 20 lakhs (INR 10 lakhs for special category states) or if the company is engaged in inter-state supply, e-commerce, or other categories listed under Section 24 of the CGST Act, 2017. Most startups apply for GST voluntarily at incorporation to claim input tax credit.

Register on the EPFO and ESIC Portals (If Hiring)

If the startup has 20 or more employees (for PF) or employees earning up to INR 21,000 per month (for ESI), registration with the Employees’ Provident Fund Organisation (EPFO) and the Employees’ State Insurance Corporation (ESIC) is mandatory. However, many startups register voluntarily even with fewer employees to provide employee benefits and build compliant processes from inception. The employer’s PF contribution is 12% of basic wages, and the ESI contribution is 3.25% (employer) and 0.75% (employee) of gross wages.

Issue Share Certificates

Under Section 46 of the Companies Act, 2013, and Rule 5 of the Companies (Share Capital and Debentures) Rules, 2014, the company must issue share certificates to every subscriber within 60 days of incorporation. Each certificate must bear the common seal (if the company has one) or be signed by two directors and the company secretary (if appointed). The Register of Members (Section 88) must be updated with the details of each shareholder.

Verify the Registered Office — INC-22

If the registered office is not verified during incorporation, Form INC-22 must be filed within 30 days of incorporation, along with proof of the registered office address (rent agreement, utility bill, NOC from the owner). The registered office must be a real, physical address — a virtual office address is acceptable only if the virtual office provider issues a formal rental/lease agreement and the premises can receive physical correspondence.

Month 2-3: Setting Up Compliance Infrastructure

Hold the First Board Meeting

The first Board meeting must be held within 30 days of incorporation (Section 173(1)). At least 7 days’ notice must be given for a Board meeting (can be shorter with consent of all directors). The first Board meeting agenda typically covers: appointment of the first auditor, adoption of the common seal (optional), opening of the bank account, appointment of authorised signatories, ratification of the registered office, and appointment of key managerial personnel (if applicable).

Under Section 173(1), a minimum of 4 Board meetings must be held in each calendar year, with not more than 120 days between two consecutive meetings. For a newly incorporated company, the planning of Board meeting dates for the full year should be done at the outset. At Virtual Auditor, we prepare an annual compliance calendar for every startup client, with automated reminders for each deadline.

Maintain Statutory Registers

The Companies Act requires maintenance of several statutory registers at the registered office. These include: Register of Members (Section 88), Register of Directors and KMP (Section 170), Register of Charges (Section 85), Register of Loans, Guarantees, and Security (Section 186), Register of Contracts with Related Parties (Section 189), Minutes Book for Board meetings and General meetings (Section 118). All registers can be maintained in electronic form.

Set Up the Accounting System

Under Section 128, every company must prepare and keep books of account on an accrual basis and according to the double-entry system of accounting. The books must be maintained at the registered office or at a place approved by the Board. For startups, we recommend implementing a cloud-based accounting system (such as Zoho Books or Tally Prime) from day one, with proper chart of accounts, GST integration, TDS computation, and bank reconciliation modules. This makes year-end audit preparation significantly smoother.

Month 4-6: INC-20A and Ongoing Monthly Compliance

File INC-20A: Declaration for Commencement of Business

This is one of the most critical first-year filings that founders overlook. Under Section 10A, every company incorporated after 2 November 2018 must file INC-20A within 180 days of incorporation. The declaration confirms that subscribers have paid the subscription money and the registered office has been verified. Until INC-20A is filed, the company cannot commence any business or exercise any borrowing powers. If INC-20A is not filed within 180 days, the company is liable to a penalty of INR 50,000, and every officer in default is liable to a penalty of INR 1,000 per day of continuing default. The ROC may also initiate proceedings to remove the company’s name from the register.

Monthly GST Compliance

Once GST registration is obtained, the startup must file monthly or quarterly returns depending on the turnover and scheme opted:

GSTR-1: Statement of outward supplies — due by the 11th of the following month (monthly filers) or the quarter-end date under QRMP scheme. Details of all invoices issued during the month.

GSTR-3B: Summary return with tax payment — due by the 20th of the following month (monthly filers). This is the form where the actual tax liability is discharged after claiming input tax credit.

Even nil returns must be filed. Non-filing of GSTR-3B for two consecutive months results in automatic cancellation of GST registration under Section 29(2)(c) of the CGST Act. Revocation of cancelled registration is possible but involves additional compliance and potential penalties.

Monthly TDS Compliance

TDS must be deposited by the 7th of the following month (for all months except March, where the due date is 30th April). Common TDS sections applicable to startups include: Section 194J (professional/technical fees — 10%), Section 194C (contractor payments — 1%/2%), Section 194H (commission — 5%), Section 192 (salary — at slab rates), and Section 194I (rent — 10% for land/building). TDS returns must be filed quarterly: Form 26Q (non-salary) and Form 24Q (salary) by the last date of the month following the quarter-end.

Month 7-9: Mid-Year Review and DPIIT Recognition

Apply for DPIIT Startup Recognition

If the startup meets the eligibility criteria (incorporated for less than 10 years, turnover below INR 100 crores in any financial year, working towards innovation/development/commercialisation of new products or services), it should apply for DPIIT recognition through the Startup India portal. Benefits include: exemption from angel tax under Section 56(2)(viib), self-certification under 6 labour laws and 3 environmental laws, fast-track patent and trademark examination, eligibility for Fund of Funds, tax exemption under Section 80-IAC (3 consecutive years out of 10 years from incorporation). Read our detailed guide on DPIIT recognition and its benefits.

Second and Third Board Meetings

The second and third Board meetings must be planned such that the gap between consecutive meetings does not exceed 120 days. Typical agenda items for mid-year Board meetings include: review of financial statements, approval of related-party transactions (if any), review of compliance status, approval of operational matters, and noting of statutory registers.

Advance Tax Payments

If the company’s total tax liability for the year exceeds INR 10,000, advance tax must be paid in quarterly instalments: 15% by 15th June, 45% by 15th September, 75% by 15th December, and 100% by 15th March. Non-payment of advance tax attracts interest under Sections 234B and 234C. For startups eligible under Section 44AD (presumptive taxation — applicable only if turnover is below INR 3 crores and the business is eligible), the entire advance tax can be paid by 15th March.

Month 10-12: Year-End Compliance Rush

Close the Books of Account

The financial year ends on 31st March. The accounting team must ensure: all transactions are recorded, bank reconciliation is completed, debtors and creditors are confirmed, provisions for doubtful debts are made, depreciation is computed under both the Companies Act (Schedule II) and the Income Tax Act (Section 32), deferred tax computation is performed (Ind AS 12 or AS 22), and all GST reconciliations (GSTR-2B vs purchase register) are completed.

Statutory Audit

The auditor appointed in Month 1 conducts the statutory audit of the financial statements. The audit must be completed before the AGM, which must be held within 6 months from the end of the financial year (i.e., by 30th September). For the first financial year, if the company is incorporated between 1 January and 31 March, the financial year can be extended to 31 March of the following year (Section 2(41)). The auditor issues the audit report in Form CARO (if applicable) and expresses an opinion on the financial statements.

Hold the First Annual General Meeting (AGM)

Under Section 96, the first AGM must be held within 9 months from the closure of the first financial year (not 6 months, as is the case for subsequent AGMs). However, the AGM must be held within 6 months from the end of the financial year in subsequent years. Business transacted at the AGM includes: adoption of audited financial statements, appointment of auditor (or ratification), declaration of dividend (if any), and appointment of directors (if any). At least 21 clear days’ notice must be given for the AGM (can be shorter with consent of 95% of members).

File Annual Return — MGT-7A

Form MGT-7A (Annual Return for Small Companies and OPCs) or MGT-7 (for other companies) must be filed within 60 days of the AGM. The annual return contains details of the company’s shareholders, directors, shares transferred during the year, indebtedness, and other statutory information. Late filing attracts additional fees of INR 100 per day of delay.

File Financial Statements — AOC-4

Form AOC-4 (or AOC-4 XBRL, if applicable) must be filed within 30 days of the AGM. This form contains the audited financial statements (Balance Sheet, Profit & Loss Account, Cash Flow Statement, Notes), the Board’s Report, and the Auditor’s Report. Late filing attracts additional fees of INR 100 per day.

File Income Tax Return

The due date for filing the income tax return for companies is 31st October (if tax audit is required under Section 44AB — i.e., turnover exceeds INR 1 crore) or 31st July (if tax audit is not required). For companies with international transactions requiring transfer pricing documentation, the due date is 30th November. The return is filed in Form ITR-6 (for companies not claiming exemption under Section 11).

DIR-3 KYC for All Directors

Every individual holding a DIN (Director Identification Number) must file DIR-3 KYC by 30th September each year. If DIR-3 KYC is not filed, the DIN is deactivated, and a penalty of INR 5,000 is levied for reactivation. Both Indian and foreign directors must file this form.

Complete Month-by-Month Compliance Calendar

Month 1 (Immediately After Incorporation)

Open bank account and deposit subscription money. Appoint first auditor and file ADT-1 within 15 days of Board resolution. Obtain PAN and TAN. Apply for GST registration. Issue share certificates within 60 days. File INC-22 if registered office not verified at incorporation. Hold first Board meeting within 30 days.

Month 2-3

Set up accounting system. Register on EPFO/ESIC if hiring. Begin monthly GST filings (GSTR-1 and GSTR-3B). Deposit first month TDS by 7th of following month. Maintain statutory registers. Plan Board meeting schedule for the year.

Month 4-6

File INC-20A before 180-day deadline. Continue monthly GST and TDS compliance. Hold second Board meeting (within 120 days of first). File first quarterly TDS return (Form 26Q/24Q). Apply for DPIIT recognition. Pay first advance tax instalment (if applicable).

Month 7-9

Hold third Board meeting. Continue monthly GST and TDS compliance. File second and third quarterly TDS returns. Pay advance tax instalments. Review mid-year financial position. Ensure MSME vendor payments are within 45-day limit (Section 43B(h) — applicable from AY 2024-25).

Month 10-12

Hold fourth Board meeting. Close books of account as at 31st March. Complete GST reconciliations. Complete statutory audit. Hold AGM (within 9 months for first AGM). File AOC-4 within 30 days of AGM. File MGT-7A within 60 days of AGM. File income tax return by due date. File DIR-3 KYC by 30th September. Pay final advance tax instalment by 15th March.

Common First-Year Compliance Mistakes and How to Avoid Them

Mistake 1: Not Filing INC-20A

This is the single most common compliance default we encounter at Virtual Auditor. Founders assume that incorporation itself is sufficient to start business operations. The consequence is severe: the company legally cannot commence business until INC-20A is filed, and all contracts entered before filing are technically voidable. The fix is straightforward — deposit subscription money, verify the registered office, and file INC-20A well before the 180-day deadline.

Mistake 2: Missing GST Nil Returns

Pre-revenue startups that have obtained GST registration must still file nil returns every month. Missing two consecutive GSTR-3B filings triggers automatic cancellation of registration. Revocation requires filing all pending returns with late fees and interest, and is only possible within 90 days of the cancellation order (extendable by the proper officer).

Mistake 3: Not Deducting TDS

Startups often pay vendors, consultants, and landlords without deducting TDS. This creates a dual liability: the company must deposit the TDS amount from its own funds (since it cannot recover the amount from the payee after payment), and it must pay interest at 1% per month for late deduction and 1.5% per month for late deposit. Additionally, the expense becomes non-deductible under Section 40(a)(ia) until TDS is deposited.

Mistake 4: Inadequate Board Meeting Documentation

Startups often hold Board meetings informally (phone calls, WhatsApp discussions) without proper minutes. Under Section 118, minutes must be recorded in the minutes book within 30 days of the meeting. Each page must be consecutively numbered and signed by the chairman. Minutes serve as evidence of Board decisions and are critical during due diligence by investors. Our ESOP valuation and structuring guide details the specific Board resolutions required for ESOP grants.

Mistake 5: Ignoring MSME Payment Timelines

Under Section 15 of the MSME Development Act, 2006 (and now reinforced by Section 43B(h) of the Income Tax Act), payments to MSME-registered suppliers must be made within 45 days. Non-payment within this period results in: (a) compound interest at three times the RBI bank rate, and (b) from AY 2024-25, disallowance of the expense in the year of default (deduction allowed only in the year of actual payment). Startups must verify the MSME status of every vendor using the MCA and Udyam portals.

FEMA Compliance for Startups with Foreign Investment

If the startup receives foreign investment (from a foreign VC fund, NRI angel investor, or through a convertible note from a non-resident), additional first-year FEMA compliances apply. These include filing FC-GPR (Foreign Currency — Gross Provisional Return) with the RBI within 30 days of share allotment, obtaining a FEMA-compliant valuation certificate from a chartered accountant or SEBI-registered merchant banker, reporting the investment in the Annual Return on Foreign Liabilities and Assets (FLA Return) by 15th July each year, and ensuring pricing compliance under Rule 21 of the FEMA (Non-Debt Instruments) Rules, 2019. For detailed guidance, refer to our complete FEMA compliance checklist for FDI in Indian startups.

Frequently Asked Questions

Q1: What happens if I do not file INC-20A within 180 days of incorporation?

The company is liable to a penalty of INR 50,000, and every officer in default is liable to INR 1,000 per day of continuing default. The company legally cannot commence any business or exercise any borrowing powers until INC-20A is filed. The ROC may also initiate proceedings under Section 248 to strike off the company’s name from the register. Filing INC-20A after the deadline is still possible — the form can be filed with additional fees, but the penalties for late filing apply separately.

Q2: Is GST registration mandatory for all new startups?

GST registration is mandatory only if the aggregate turnover exceeds INR 20 lakhs (INR 10 lakhs for special category states) or if the startup falls under mandatory registration categories under Section 24 of the CGST Act (inter-state supply, e-commerce operations, etc.). However, most startups register voluntarily at incorporation to claim input tax credit on expenses incurred during the pre-revenue phase, especially on technology purchases, office rent, and professional services.

Q3: How many Board meetings must a startup hold in the first year?

A minimum of 4 Board meetings per calendar year, with not more than 120 days between two consecutive meetings. The first Board meeting must be held within 30 days of incorporation. One Person Companies (OPCs) and small companies (paid-up capital up to INR 4 crores and turnover up to INR 40 crores) can hold only 2 Board meetings per year with a 90-day gap. Board meetings can be held through video conferencing, but certain matters (approval of financial statements, Board’s Report, prospectus) must be discussed only at physically held meetings.

Q4: What is the penalty for not filing annual returns (MGT-7A) and financial statements (AOC-4)?

Late filing of AOC-4 and MGT-7A attracts additional fees of INR 100 per day of delay (no upper cap). If annual returns and financial statements are not filed for two consecutive years, the ROC can strike off the company under Section 248. If not filed for three consecutive years, every director is automatically disqualified under Section 164(2) from being appointed as director in any company for 5 years. This disqualification affects all other directorships held by the individual.

Q5: When must a startup get its accounts audited?

Every company (including a private limited company) must get its accounts audited by a chartered accountant, regardless of turnover. There is no exemption from statutory audit for companies under the Companies Act, 2013. The audit must be completed before the AGM, and the audited financial statements along with the Board’s Report and Auditor’s Report must be laid before the AGM. Tax audit under Section 44AB of the Income Tax Act is a separate requirement that applies only if turnover exceeds INR 1 crore (INR 10 crores if cash transactions are within the prescribed threshold).

Q6: Do I need to file DIR-3 KYC even if the company was just incorporated?

Yes. Every individual holding a DIN must file DIR-3 KYC by 30th September each year, regardless of when the company was incorporated. If the DIN was allotted during incorporation through SPICe+, the director must still file DIR-3 KYC in the year of allotment. Failure to file results in DIN deactivation and a penalty of INR 5,000 for reactivation. Both Indian resident and foreign directors must comply.

Q7: Can a startup use a virtual office as its registered office?

Yes, a virtual office address can be used as the registered office, provided there is a valid rent/lease agreement, an NOC from the virtual office provider, and the address can receive physical correspondence and regulatory notices. The ROC may verify the registered office under Section 12(9), and if the company is found to not be physically reachable at the address, the ROC can initiate proceedings to remove the company’s name from the register.