Skip to main content

Best Company Secretary Firm in India | Bhavya Sharma & Associates

Startup Blogs

Payroll Compliance Checklist for Indian Startups: Offer Letters, PF, ESI, TDS, POSH, Contractors and Investor Diligence

Indian startups should set up payroll compliance before hiring becomes messy, not after the first investor asks for employee registers and statutory challans. A founder can run payroll from a spreadsheet in…

Bhavya Sharmapayroll compliance checklist for startups India8 August 202608 Aug 202610 min read
Quick takeaway: Direct answer: Indian founders want a practical payroll compliance checklist before hiring employees, paying founders, using contractors or entering investor diligence.

Direct answer for founders

Indian startups should set up payroll compliance before hiring becomes messy, not after the first investor asks for employee registers and statutory challans. A founder can run payroll from a spreadsheet in the first month, but the compliance logic behind that spreadsheet must be clear: who is an employee, who is a consultant, what salary is fixed, what is variable, which deductions apply, when PF or ESI triggers, whether salary TDS applies, how reimbursements are approved, who owns payroll data, and where records are stored.

This matters even for a 10-person company. Payroll errors do not stay small. They become employee disputes, tax exposure, diligence questions, founder salary confusion, ESOP valuation issues, contractor IP gaps and data privacy risk. If the company later raises capital, investors will not only check revenue and cap table. They will test whether the team was hired properly and paid through a defensible system.

Use official law and regulator sources as the base. The Employees’ Provident Funds and Miscellaneous Provisions Act, 1952 applies to covered establishments with twenty or more persons, subject to the Act and notifications: https://www.epfo.gov.in/epf-mp-act-1952/. ESIC’s official coverage page states the wage limit for coverage is Rs 21,000 per month, with Rs 25,000 for persons with disability: https://esic.gov.in/coverage. Section 192 of the Income-tax Act deals with TDS on salary: https://www.incometaxindia.gov.in/w/section-192-64. India Code’s POSH Act Section 4 requires every employer of a workplace to constitute an Internal Committee and specifies its composition: https://www.indiacode.nic.in/show-data?actid=AC_CEN_13_14_00009_201314_1517807327213&orderno=4.

Why payroll becomes a founder-level issue

Early founders often think payroll is a back-office task. It is not. Payroll decides whether the company can hire talent, defend salary promises, deduct tax correctly, show expense quality, protect confidential information and prove that contractor work belongs to the company.

Payroll areaFounder risk if ignored
Offer lettersVerbal compensation promises become disputes
Salary structureBasic, allowances, bonus, variable pay and reimbursements are mixed casually
PF and ESIStatutory trigger is missed when headcount grows
TDS on salaryTax deduction is not computed or deposited properly
ContractorsLong-term consultants look like employees without benefits or IP clarity
Founder salaryBoard approval, tax treatment and cash discipline are unclear
POSHWorkplace safety obligation is left until a complaint appears
Payroll dataPAN, bank, Aadhaar, salary and medical data are stored without controls
Investor diligenceExpense, headcount and statutory records do not reconcile

Employee, consultant or advisor: classify before paying

The first payroll mistake is poor classification. A person working full-time under company supervision, using company systems, reporting daily, appearing on the org chart and taking leave like employees should not be casually called a consultant only because the founder wants simpler paperwork.

Use this practical test:

QuestionEmployee signalConsultant signal
ControlCompany controls hours, manager, tools and work processConsultant controls method and often serves more than one client
ContinuityRegular monthly engagement with leave and notice termsProject or deliverable-based engagement
IntegrationUses company email, appears in team chart, attends all internal meetingsWorks as external service provider
PaySalary, reimbursements and employee benefitsFee, invoice, GST where applicable, milestone billing
IPEmployment contract assigns work productConsultant agreement must expressly assign IP

Misclassification can create tax, labour, IP and dispute risk. It can also hurt diligence because investors may ask whether critical product code was written by employees, founders or contractors.

Offer letter and employment agreement checklist

Every employee should have a signed document before joining or no later than the joining date. Keep it simple, but do not keep it incomplete.

ClauseWhat to cover
Legal employerExact company name, CIN and registered office
Role and reportingDesignation, team, manager and work location or remote arrangement
CompensationFixed salary, variable pay, bonus discretion, reimbursements and deductions
ProbationDuration, review process and confirmation logic
Working time and leaveAttendance, weekly off, holidays and leave policy reference
ConfidentialityCustomer, code, pricing, data, financials and investor information
IP assignmentWork product, inventions, designs, code, content and documentation
Data handlingCompany systems, personal data, devices and access rules
Notice and terminationNotice period, immediate termination grounds and handover
Restrictive covenantsNon-solicit, confidentiality and conflict terms drafted realistically
POSH and conductPolicy acceptance and reporting channel

For senior hires, add role-specific terms: board observer exposure, investor meetings, signatory authority, customer commitments, ESOP eligibility, garden leave, clawback for joining bonus if lawful and practical, and conflict declarations.

Salary structure: keep it readable

Startup salary structures often become overdesigned. Founders should keep the structure understandable to the employee and defensible to finance.

Common components include basic salary, house rent allowance, special allowance, statutory bonus where applicable, employer PF contribution, gratuity provisioning, variable incentive, reimbursements and ESOP separately. Do not mix employee CTC and actual monthly take-home in a way that causes joining-day distrust.

Founder checklist:

  1. Show gross salary, deductions and net pay clearly.
  2. Keep employer contribution separate from employee deduction.
  3. Avoid calling everything reimbursement unless there is evidence.
  4. Define variable pay metrics and payment timing.
  5. Keep joining bonus and retention bonus terms written.
  6. Match payroll records with bank payments and books.
  7. Track state-specific professional tax where applicable.

PF trigger and controls

EPF coverage needs careful review when employee strength approaches twenty or when the establishment otherwise becomes covered. Do not wait until the twenty-first person joins and then start searching for documents.

Prepare early:

PF readiness itemPractical action
Headcount trackerCount employees, eligible workers and contractors separately
Wage reviewTrack basic wage and statutory wage components
Registration evidenceKeep EPFO login, registration certificate and authorised signatory details
UAN dataCollect employee UAN, KYC and nominee details where applicable
Monthly challansStore ECR, payment challans and reconciliation
Excluded employeesDocument the basis for treatment and employee declarations
Contractor labourCheck whether manpower vendor has PF registration and challans

The bigger diligence point is consistency. Payroll register, bank statement, accounting ledger, PF records and employment contracts should tell the same story.

ESI trigger and wage ceiling

ESI should be reviewed for covered establishments and employees within the wage ceiling. ESIC’s official coverage page states the wage limit is Rs 21,000 per month and Rs 25,000 per month for persons with disability. Founders should verify applicability by location, establishment type and notifications because ESI coverage depends on more than a generic internet summary.

Practical ESI controls:

Free Weekly Newsletter

Subscribe to BSA startup funding alerts

  • Every Sunday, all Indian startup funding alerts in one place
  • Monthly funding report on the last day of the month
  • Free, concise, founder-focused, and easy to unsubscribe

Get the complete Indian startup funding roundup in your inbox, covering deals, sectors, investor moves, and founder readiness notes from the week.

Built for founders, investors, CFOs, and advisors

No spam. Unsubscribe anytime.

  1. Track employee wages each month.
  2. Identify employees within the wage ceiling.
  3. Keep employee insurance numbers and family details updated.
  4. Store challans, returns and inspection correspondence.
  5. Train HR not to ignore ESI for lower-salary operational roles.
  6. Check vendor labour compliance if warehouse, retail, facility or fulfilment teams are outsourced.

ESI gaps become visible in D2C, retail, manufacturing, fulfilment, logistics, food, clinic, training and field-operations startups faster than pure software companies.

Salary TDS under Section 192

Section 192 requires tax deduction at source when salary income is paid, based on estimated salary income and applicable rates. For founders, the practical job is to create a monthly tax process, not to calculate tax casually in March.

Monthly TDS discipline:

StepAction
Employee declarationCollect regime choice, investment declarations and previous employer salary where relevant
Payroll computationEstimate annual salary and tax each month
DeductionDeduct TDS from salary at payment
DepositDeposit within statutory timelines
ReturnFile quarterly TDS returns and issue Form 16
ReconciliationMatch payroll ledger, bank salary payments, challans and Form 26AS/AIS logic

Be careful with founder salary, joining bonus, severance, retention bonus, reimbursements, ESOP perquisites, remote allowances and consultant fees. Different payment labels can trigger different tax treatment.

POSH compliance before the company scales

Workplace safety is not optional because the startup is young. POSH documentation should include policy, Internal Committee where applicable, appointment letters, external member details, complaint process, awareness material, annual reporting and confidentiality controls.

Even where a company is still below the threshold for an Internal Committee, founders should set expectations early. Remote work, offsites, customer visits, investor events, internships and late-night work chats can all be workplace contexts. A weak response to a complaint can damage the employee, the company and investor confidence.

Contractor, freelancer and intern records

A startup’s first product may be built by contractors. That is fine if the documents are clean.

Keep:

  • Signed consultant agreement.
  • Scope of work and fee terms.
  • IP assignment covering code, designs, content, models, datasets and documentation.
  • Confidentiality and data-processing obligations.
  • GST invoice where applicable.
  • TDS assessment under the right section.
  • Device, account and repository access controls.
  • Exit handover and access removal record.

Do not let a contractor keep sole control of GitHub, hosting, domain, Figma, analytics, app store or payment gateway access.

Payroll data-room folder for fundraising

Create this before investor outreach:

FolderDocuments
Team listEmployee, consultant, intern and advisor list with joining dates
ContractsOffer letters, employment agreements, consultant agreements and advisor letters
PayrollMonthly payroll sheets, payslips and bank payment proof
StatutoryPF, ESI, professional tax, TDS challans and returns where applicable
PoliciesLeave, reimbursement, POSH, code of conduct, remote work and device policy
ESOPESOP scheme, grants, vesting, exercise records and board approvals
Founder payBoard approvals, salary notes and related-party records
IPEmployee and contractor IP assignment evidence
ExitResignation, full and final settlement, relieving letters and access removal
NoticesLabour, tax or employee notices and replies

Common mistakes founders should avoid

  • Hiring before signing basic employment terms.
  • Treating long-term full-time workers as consultants without review.
  • Forgetting PF or ESI when headcount changes.
  • Deducting TDS inconsistently and cleaning it only at year-end.
  • Not documenting founder salary.
  • Paying bonuses without a written rule.
  • Ignoring POSH because the team is small or remote.
  • Letting payroll data sit in personal email or open spreadsheets.
  • Not checking contractor IP assignment.
  • Keeping payroll records outside the investor data room.

A 14-day payroll cleanup plan

DayAction
1Build a master list of employees, consultants, interns and advisors
2Collect all offer letters and consultant agreements
3Reconcile salary promises with payroll sheets and bank payments
4Check PF and ESI headcount and wage triggers
5Review salary TDS computation and challans
6Check professional tax and state labour registrations
7Review POSH policy and committee status
8Verify contractor IP assignment and access control
9Create reimbursement and expense evidence folder
10Review founder salary and related-party approvals
11Organise ESOP grant and vesting records
12Prepare exit and full-and-final checklist
13Lock payroll data access to authorised users
14Create a monthly compliance calendar

Sources

FAQ Section

When should a startup start formal payroll compliance?

Start before the first employee joins. The first version can be simple, but offer letters, salary structure, tax treatment, confidentiality, IP assignment and payroll records should be clear from day one.

Does PF apply to every startup from day one?

Not automatically. EPF applicability depends on coverage rules, employee strength and notifications. Founders should review PF before the team approaches twenty people or enters a covered situation.

What is the ESI wage limit currently shown by ESIC?

ESIC’s official coverage page states Rs 21,000 per month, and Rs 25,000 per month for persons with disability. Applicability should still be checked by location and establishment type.

Is POSH compliance required for remote startups?

Remote work does not remove workplace safety obligations. Founders should maintain a POSH policy, complaint route, awareness process and Internal Committee where legally required.

What do investors check in payroll diligence?

Investors may check employment contracts, consultant agreements, payroll sheets, bank proof, PF and ESI records, TDS challans, ESOP records, founder salary approvals, POSH records and IP assignment evidence.

Founder / Business Takeaway

Payroll is part of startup governance. Clean employee contracts, statutory triggers, salary tax, POSH records, contractor IP and payroll data controls make the company easier to trust. The Best CS Firm In India approach is to make payroll readable to founders, finance teams, employees and investors before it becomes a dispute.

Need expert support?

BSA helps Indian startups review payroll compliance, founder salary, PF and ESI triggers, TDS records, POSH documentation, contractor agreements and investor-ready HR data rooms.

Talk to BSA

Need expert support?

BSA supports founders across India with ROC, FEMA, due diligence, fundraising readiness, and company secretarial execution.

Published by Bhavya Sharma & Associates for Indian founders, operators, CFOs, and compliance teams.

Leave a Reply

Your email address will not be published. Required fields are marked *

WhatsApp chat with Bhavya Sharma and Associates