www.lawizer.com

Lawizer

Tag: TDS compliance

  • Legal Audit for Startups: What to Check Every Quarter

    Legal Audit for Startups: What to Check Every Quarter

    Most Indian startups get hit with MCA penalties, GST mismatches, or investor red flags not because they ignored compliance — but because they checked it once and never came back. A quarterly legal audit for startups costs a few hours every 90 days. The alternative can cost ₹50,000 to over ₹10 lakh in late fees, compounding penalties, and reinstatement costs.

    Here’s exactly what to review every quarter — so legal problems don’t ambush you at the worst possible time.

    📌 TL;DR: A quarterly legal audit for startups in India covers four core areas: MCA/ROC filings, GST and TDS compliance, contract and IP health, and HR/labour law status. Running this check every 90 days prevents director disqualification, investor due diligence failures, and penalty accumulation under the Companies Act 2013. Lawizer’s startup legal services can help you run and fix each of these areas entirely online.

    What You’ll Learn

    • Which MCA and ROC filings to verify every quarter — and what happens if you miss them
    • The GST and TDS checks that catch 90% of tax compliance gaps before they become notices
    • Contract, IP, and HR items most founders overlook until due diligence knocks
    • A simple 4-area framework you can run in-house or hand to your CA in under a day

    Why Quarterly — Not Annual — Is the Right Cadence

    Annual compliance reviews made sense when businesses moved slowly. Startups don’t. A new co-founder joins in March, a contractor agreement expires in June, your GST turnover crosses ₹10 crore in September — and none of these trigger automatic alerts. By the time your annual audit flags the gap, the deadline has passed and the penalty clock has been running for months.

    Here’s the thing: MCA charges ₹100 per day of delay on most ROC forms — with no upper cap on penalties for forms like MGT-7 (Annual Return). Miss a quarterly TDS return and you’re looking at ₹200 per day as a delay fee, plus interest on the unpaid amount. These aren’t theoretical risks. Every year, thousands of MSME and startup directors across India receive MCA strike-off notices that are entirely preventable with a basic 90-day review cycle.

    The quarterly rhythm also aligns naturally with India’s GST filing calendar (monthly GSTR-1 and GSTR-3B), TDS return quarters (April–June, July–September, October–December, January–March), and advance tax payment installments. Reviewing compliance once a quarter means you’re never more than 90 days away from catching a problem early.

    Check #1 — MCA and ROC Filings Status

    Start every quarterly audit on the MCA21 portal — the Ministry of Corporate Affairs’ online compliance hub. Log in and pull your company’s master data. Check that your registered office address is current, all directors have active DIN (Director Identification Number) status, and no forms are showing as “pending” or “under processing” without a valid reason.

    What most founders miss: the DIR-3 KYC (Director KYC form) deadline falls on September 30 every year. Miss it and your DIN gets deactivated — you can’t sign any company documents until you pay a ₹5,000 reactivation fee and file. If you have multiple directors, make sure every single one has completed their KYC for the current year before Q2 ends.

    Key forms to check each quarter

    • ADT-1 — Auditor appointment form. Must be filed within 15 days of the first board meeting. If your startup is in its first year and this hasn’t been done, fix it immediately.
    • MGT-7 / MGT-7A — Annual Return. Due 60 days after AGM (Annual General Meeting). Small companies file the simplified MGT-7A. Late filing penalty: ₹100 per day, no cap.
    • AOC-4 — Financial Statements. Due 30 days after AGM. Same per-day penalty applies.
    • DPT-3 — If your company has received any loans or deposits. Due June 30 annually. Non-filing penalty: up to ₹1 crore or twice the deposit amount, whichever is lower.
    • MSME-1 — If you owe money to MSME vendors for over 45 days. Filed half-yearly. Investors check this closely.
    Legal Compliances for Startups in India: A Practical Checklist for Founders

    Check #2 — GST and TDS Compliance Health

    GST compliance is a monthly obligation — but the quarterly audit is where you catch the mismatches that build up. Pull your GSTR-2B (auto-populated Input Tax Credit statement) for the last three months and reconcile it against your purchase register. From 2026, the GSTN (Goods and Services Tax Network) flags supplier-recipient mismatches in real time, so any unreconciled difference shows up as a risk during an inspection or investor data room review.

    A quick example: if your supplier filed their GSTR-1 late and you’ve already claimed the ITC (Input Tax Credit — the GST you paid on purchases, which you can offset against your GST liability), that claim will be reversed in your next GSTR-3B. You’ll owe the tax plus interest. Catching this quarterly means you can chase the vendor before the reversal hits.

    On the TDS side, verify that deductions are current for all qualifying payment categories. Let’s break this down: TDS (Tax Deducted at Source) must be deducted on professional fees above ₹30,000 at 10%, contractor payments above ₹30,000 per transaction at 2%, and rent above ₹2,40,000 per year at 10%. Quarterly TDS returns are due on July 31, October 31, January 31, and May 31. A missed quarterly return attracts ₹200 per day as a late fee — plus interest at 1.5% per month on unpaid TDS from the date it was due to be deposited.

    E-invoicing threshold: are you caught yet?

    From April 1, 2026, e-invoicing is mandatory for businesses with turnover above ₹5 crore. If your startup has crossed this threshold and you haven’t enabled e-invoice generation through your billing software or the GSTN portal, every B2B invoice you’ve raised without it is technically non-compliant. Check your last four quarters of turnover and confirm your e-invoicing status every time you run a legal audit.

    Check #3 — Contracts, IP, and Cap Table Hygiene

    This is the area that trips up investor due diligence most often — and it has nothing to do with ROC deadlines. Every quarter, pull up a simple register of your active contracts and check three things: expiry dates, IP assignment clauses, and unsigned documents sitting in email threads.

    A vendor SLA that expired six months ago but is still being performed is legally murky territory. A freelance developer who built your core product but never signed an IP assignment agreement means your company doesn’t cleanly own the code — something any serious investor or acquirer will catch immediately. These aren’t edge cases. They’re among the most common closing conditions flagged in investor due diligence of Indian startups.

    ESOP and cap table: reconcile every quarter

    If you’ve granted ESOPs (Employee Stock Ownership Plans — equity option grants to employees), the ESOP pool on your cap table must match the scheme document and every PAS-3 filing (a form filed with the ROC whenever shares are allotted). Granted but unvested options must be disclosed separately from vested-but-unexercised options. Investors and acquirers will reconcile this in the data room — mismatches add weeks to closing timelines. Run this check once a quarter, not once a year.

    Also verify your trademark status if you’ve filed one. The trademark registration process in India can take 18–24 months, and objections or oppositions during examination require a response within 30 days. Missing that window means abandonment. Set a quarterly reminder to check your application status on the CGPDTM (Controller General of Patents, Designs and Trade Marks) portal.

    Legal Compliances for Startups in India: A Practical Checklist for Founders

    Check #4 — HR, Labour Law, and Data Privacy Status

    If your headcount has changed in the last quarter, your labour law registrations may need updating. PF (Provident Fund) registration is mandatory once you cross 20 employees; ESIC (Employees’ State Insurance Corporation) kicks in at 10 employees in most states. Both have state-level Shops & Establishment Act registrations that require amendment when headcount, address, or working hours change.

    The POSH Act (Sexual Harassment of Women at Workplace Act, 2013) requires every company with 10 or more employees to have a constituted Internal Complaints Committee (ICC). The ICC must submit an annual report to the district officer — but quarterly is a good time to confirm your ICC is still validly constituted, especially if a member has resigned or changed roles. Investors and large enterprise clients increasingly ask for proof of POSH compliance before signing.

    On data privacy: if your startup collects personal data from Indian users, the Digital Personal Data Protection Act 2023 (DPDPA) is already in play. Investors are treating DPDPA readiness as a legal due diligence item, particularly for B2C, SaaS, healthtech, and edtech startups. Each quarter, verify that your privacy policy reflects current data processing practices, your consent mechanisms are active and explicit, and any data processor agreements (DPAs — contracts with third-party vendors who handle your users’ data) are in place.

    If your business qualifies as an MSME, check that your MSME Udyam registration reflects your current NIC code, turnover, and investment in plant and machinery. An outdated Udyam certificate can cause you to miss government scheme benefits or create misrepresentation issues during tenders and bank loan applications.

    Frequently Asked Questions

    Q: Is a quarterly legal audit mandatory for startups in India?

    A: A quarterly legal audit is not mandated by law, but many of the compliance deadlines it tracks — TDS returns, e-invoicing, DIR-3 KYC, and POSH reporting — fall at quarterly or semi-annual intervals. Running a structured 90-day review ensures no deadline is missed between annual statutory audits. For funded startups, most investor agreements include a covenant requiring the company to remain in good regulatory standing, which effectively makes quarterly monitoring necessary.

    Q: What happens if a startup misses an ROC filing deadline?

    A: The MCA charges ₹100 per day of delay on most ROC forms including MGT-7 and AOC-4, with no upper cap. If a company fails to file annual returns for two consecutive years, the Registrar of Companies can initiate a strike-off under the Companies Act 2013, which leads to the company being removed from the register. Directors of struck-off companies can be disqualified from holding directorships in any Indian company for five years under Section 164(2).

    Q: How is a quarterly legal audit different from a statutory audit?

    A: A statutory audit is a mandatory annual financial review conducted by an independent chartered accountant under the Companies Act 2013 — it looks at whether your financial statements are accurate. A quarterly legal audit is an internal or advisor-led compliance review that checks whether all filings, registrations, contracts, and regulatory obligations are current and complete. The two serve different purposes and should both be in your compliance calendar.

    Q: Do DPIIT-recognised startups get any compliance exemptions?

    A: DPIIT (Department for Promotion of Industry and Internal Trade) recognition under the Startup India scheme unlocks three consecutive years of income tax exemption under Section 80-IAC, angel tax exemption under Section 56(2)(viib) for allotments after April 1, 2024, and self-certification under six labour laws. However, core MCA filings — AOC-4, MGT-7, GST returns, and TDS obligations — are not waived. A DPIIT-recognised startup that has crossed the ₹100 crore turnover threshold without updating its status creates a misrepresentation risk that any investor will flag.

    Q: What should I check in a legal audit before raising a funding round?

    A: Before opening a data room for investors, run a pre-due diligence legal audit covering: clean MCA filing history with no pending defaults, all director DINs active and KYC current, ESOP pool reconciled to PAS-3 filings, all founding IP assigned to the company (not held personally by founders), GST registration active with no unreconciled GSTR-2B mismatches, valid DPIIT recognition if applicable, and POSH compliance documented. Catching and fixing these items before the term sheet is signed prevents costly closing conditions that delay and sometimes kill funding rounds.

    Q: Can I do a legal audit myself or do I need a CA or lawyer?

    A: Founders can run the MCA portal checks, GSTR-2B reconciliation, and contract expiry reviews themselves with a structured checklist. However, TDS return verification, statutory audit coordination, ESOP scheme compliance, and DPDPA readiness typically require a CA or legal professional for accuracy. Many startups use a combination — founders track the calendar and flag items, while a CA or compliance platform handles the actual filing and remediation. The goal of a quarterly audit is early detection, not necessarily self-filing.

    Ready to clean up your startup’s compliance gaps?
    Lawizer’s experts handle everything — MCA and ROC filings, GST registration and returns, trademark registration, and MSME Udyam registration — fully online, starting at just ₹999. No CA visit needed.

    Start your compliance review on Lawizer →

  • India’s New Income Tax Act 2025Key Changes Startup Founders Must Know :

    India’s New Income Tax Act 2025Key Changes Startup Founders Must Know :

    Six decades. That’s how long the Income Tax Act, 1961 governed every rupee of business income in India — and on April 1, 2026, it got replaced. If you’re running a startup, this isn’t a “read it later” compliance update. Your ESOP grant letters, TDS filings, and advance tax workings are already operating under a different rulebook.

    Here’s the part that trips up most founders: you’re currently filing your FY 2025-26 return under the old 1961 Act, even though your business has been operating under the new 2025 Act since April 1. Two legal frameworks, running in parallel, for at least one filing cycle. Let’s break this down.

    📌 TL;DR: The Income Tax Act, 2025 replaced the Income Tax Act, 1961 with effect from April 1, 2026, cutting the law down from roughly 819 sections to 536 and introducing a single “Tax Year” concept that replaces the old Financial Year/Assessment Year split. For startups, the core benefits — the Section 80-IAC tax holiday, angel tax exemption, and loss carry-forward protection — continue under renumbered sections, but ESOP deferral windows, TDS section numbers, and compliance documentation all need updating.

    What You’ll Learn

    • Why the government replaced a 64-year-old tax law and what actually changed
    • What “Tax Year” means and why it replaces Financial Year and Assessment Year
    • How your startup’s 80-IAC tax holiday, angel tax exemption, and ESOP terms carry over
    • What TDS and compliance changes to prepare for right now

    Why the Old Act Got Replaced

    The Income-tax Act, 1961 was built for a paper-based economy with face-to-face assessments. Over six decades, patchwork amendments pushed it past 800 sections spread across 47 chapters. That overgrowth raised compliance costs and fuelled disputes with multi-year case backlogs. It also never sat comfortably with e-commerce, platform income, or cross-border digital transactions — problems that simply didn’t exist when the law was written.

    The government’s response was structural, not cosmetic. The new Act reduces provisions from 819 sections to 536, received Presidential assent in 2025, and came into force on April 1, 2026, applicable from Tax Year 2026-27 onwards. The reassuring part for founders: the core scheme and fundamental principles of the old Act largely remain intact. This is a rewrite for clarity, not a redesign of how tax is calculated.

    “Tax Year” Replaces Financial Year and Assessment Year

    This is the single change every founder will notice on every form, notice, and Form 16 going forward.

    Under the old system, income earned in one year — called the Previous Year or Financial Year — was assessed in the following year, called the Assessment Year. So income from FY 2024-25 was taxed in AY 2025-26. This dual-reference system was unique to India and created confusion that persisted for 64 years. Tax professionals estimated that selecting the wrong Assessment Year was among the top five reasons for defective return notices across the country.

    The new Act scraps both terms. A single “Tax Year” now covers both the earning and assessing of income under one label — defined simply as the 12-month period from April 1 to March 31. No more one-year lag, no more juggling two different year labels for the same income.

    What most founders miss: this change doesn’t alter when you file or how much you owe. It only removes the confusion. If you incorporate mid-year, your first Tax Year runs from your incorporation date to the following March 31, exactly as the old Previous Year rules worked for new businesses.

    The short answer for your filing this July: you’re still submitting an AY 2026-27 return under the old 1961 Act for income earned in FY 2025-26. The new Act only governs income earned from April 1, 2026 onwards. Your first Tax Year 2026-27 return under the new law isn’t due until mid-2027.

    7 Legal Tax-Saving Strategies Every Startup Founder Should Use (2026)

    What Happens to Section 80-IAC, Angel Tax, and Your Startup Benefits

    If your company has DPIIT (Department for Promotion of Industry and Internal Trade) recognition, the benefits you’ve been counting on don’t disappear — they move.

    The 100% profit deduction for any three consecutive years out of your first ten, formerly under Section 80-IAC, now sits under Section 140 of the new Act. Angel tax — the provision that once taxed share premiums above fair market value as “income from other sources” — was already abolished with effect from April 1, 2025 under Finance Act 2024, and that relief carries forward cleanly into the new framework. Section 79’s protection of carried-forward losses through funding rounds also continues, so a fresh priced round won’t wipe out your accumulated losses, as long as original promoters retain control.

    Here’s the thing founders keep getting wrong: DPIIT recognition alone still doesn’t activate the tax holiday. You need a separate Inter-Ministerial Board (IMB) certificate obtained by filing Form 1 with the Income Tax Department. As of early 2026, only around 3,700 startups had received IMB approval out of over 2.07 lakh DPIIT-recognised companies. Most founders hold the DPIIT certificate, assume they’re covered, and quietly miss out on a benefit worth lakhs in saved tax.

    On ESOPs, pay close attention. The eligible-startup ESOP tax deferral mechanism moves to Section 392 of the new Act. Allotments made from April 1, 2026 onwards now carry a 60-month deferral window — up from the earlier 48 months — before perquisite tax becomes due. But this extended window only applies if your company holds the IMB certificate, not just DPIIT recognition. Every grant letter, ESOP scheme document, and board resolution still citing 1961-Act section numbers needs to be re-papered for allotments dated April 1, 2026 onwards. It’s a paperwork task, not a legal overhaul, but skipping it creates filing inaccuracies your company is responsible for correcting.

    Latest TDS Rates Chart Tax Year 2026-27 | Effective April 2026

    TDS Compliance: Fewer Sections, But a Documentation Overhaul

    TDS (Tax Deducted at Source) is where founders feel the new Act most directly, because it touches every vendor payment, contractor invoice, rent cheque, and salary run.

    Under the old Act, businesses navigated roughly 37 separate TDS sections — Section 194A through 194T — each with different thresholds, rates, and filing requirements. The new Act consolidates these into around 20 sections. Section 393 is now the primary TDS provision, with related payment categories grouped as subsections rather than standalone sections.

    Fewer sections should mean fewer thresholds to memorise. But the documentation overhaul that comes with this is non-trivial. Here’s what your team needs to update before your Tax Year 2026-27 compliance work begins:

    Chart of accounts: Remap all entries from old section numbers to new equivalents

    TDS rate schedules: Update internal rate cards and accounting software configs

    Payroll configurations: Reflect the current standard deduction under the new Act

    Vendor contracts and SOPs: Any reference to old section numbers in payment terms or vendor agreements needs updating

    ESOP documentation: As noted above — grant letters, board resolutions, and scheme documents

    A quick example: if your Bengaluru startup pays a Razorpay or Meesho integration partner, the TDS deduction on that payment now references a different section number. Your accountant may already know this, but your internal finance team’s SOP likely doesn’t. The correction obligation sits with your company, not your CA firm.

    Frequently Asked Questions

    Q: Does the Income Tax Act 2025 apply to my ITR filing this year?

    No, not yet. If you’re filing your return in July 2026 for income earned in FY 2025-26, you’re still governed by the Income Tax Act, 1961. The new Act only applies to income earned from April 1, 2026 onwards. Your first return under it isn’t due until mid-2027.

    Q: Will my startup’s tax holiday under Section 80-IAC still apply?

    Yes. The three-year, 100% profit deduction benefit continues under the new Act, now positioned under Section 140. Eligibility rules remain the same — you need both DPIIT recognition and a separate IMB certificate obtained by filing Form 1 with the Income Tax Department.

    Q: What is a “Tax Year” and how is it different from Financial Year?

    Tax Year is a single 12-month period from April 1 to March 31 that replaces both the old Financial Year (when income was earned) and Assessment Year (when it was taxed and filed). Under the new Act, the year you earn income and the year you report it share the same label, removing the one-year offset that caused decades of confusion.

    Q: Do I need to update my ESOP grant letters?

    Yes, if they reference 1961-Act section numbers and cover allotments dated April 1, 2026 or later. Those allotments fall under Section 392 of the new Act. If your company holds an IMB certificate, the perquisite tax deferral window on new allotments also extends from 48 months to 60 months.

    Q: Is angel tax really gone for good?

    The provision taxing share premiums above fair market value was abolished from April 1, 2025 and doesn’t reappear anywhere in the new Act. If you raised funding before that date, it’s worth checking with your CA whether any prior assessments remain open.

    Q: How many TDS sections do we need to track now?

    Roughly 20, down from about 37 under the old Act. Section 393 is now the primary TDS provision, with payment categories grouped as subsections rather than separate standalone sections.

    Ready to get your startup compliant under the new Act?

    Lawizer’s experts handle Income Tax Act 2025 transition reviews, DPIIT and IMB certification, and ongoing ITR filing — fully online, starting at just ₹999. No CA visit needed.

    Talk to a Lawizer expert → lawizer.com/startup-businesslegal