Payroll Compliance Checklist for Indian Startups: Offer Letters, PF, ESI, TDS, POSH, Contractors and Investor Diligence
Indian startups should set up payroll compliance before hiring becomes messy, not after the first investor asks for employee registers and statutory challans. A founder can run payroll from a spreadsheet in…
Direct answer for founders
Indian startups should set up payroll compliance before hiring becomes messy, not after the first investor asks for employee registers and statutory challans. A founder can run payroll from a spreadsheet in the first month, but the compliance logic behind that spreadsheet must be clear: who is an employee, who is a consultant, what salary is fixed, what is variable, which deductions apply, when PF or ESI triggers, whether salary TDS applies, how reimbursements are approved, who owns payroll data, and where records are stored.
This matters even for a 10-person company. Payroll errors do not stay small. They become employee disputes, tax exposure, diligence questions, founder salary confusion, ESOP valuation issues, contractor IP gaps and data privacy risk. If the company later raises capital, investors will not only check revenue and cap table. They will test whether the team was hired properly and paid through a defensible system.
Use official law and regulator sources as the base. The Employees’ Provident Funds and Miscellaneous Provisions Act, 1952 applies to covered establishments with twenty or more persons, subject to the Act and notifications: https://www.epfo.gov.in/epf-mp-act-1952/. ESIC’s official coverage page states the wage limit for coverage is Rs 21,000 per month, with Rs 25,000 for persons with disability: https://esic.gov.in/coverage. Section 192 of the Income-tax Act deals with TDS on salary: https://www.incometaxindia.gov.in/w/section-192-64. India Code’s POSH Act Section 4 requires every employer of a workplace to constitute an Internal Committee and specifies its composition: https://www.indiacode.nic.in/show-data?actid=AC_CEN_13_14_00009_201314_1517807327213&orderno=4.
Why payroll becomes a founder-level issue
Early founders often think payroll is a back-office task. It is not. Payroll decides whether the company can hire talent, defend salary promises, deduct tax correctly, show expense quality, protect confidential information and prove that contractor work belongs to the company.
| Payroll area | Founder risk if ignored |
|---|---|
| Offer letters | Verbal compensation promises become disputes |
| Salary structure | Basic, allowances, bonus, variable pay and reimbursements are mixed casually |
| PF and ESI | Statutory trigger is missed when headcount grows |
| TDS on salary | Tax deduction is not computed or deposited properly |
| Contractors | Long-term consultants look like employees without benefits or IP clarity |
| Founder salary | Board approval, tax treatment and cash discipline are unclear |
| POSH | Workplace safety obligation is left until a complaint appears |
| Payroll data | PAN, bank, Aadhaar, salary and medical data are stored without controls |
| Investor diligence | Expense, headcount and statutory records do not reconcile |
Employee, consultant or advisor: classify before paying
The first payroll mistake is poor classification. A person working full-time under company supervision, using company systems, reporting daily, appearing on the org chart and taking leave like employees should not be casually called a consultant only because the founder wants simpler paperwork.
Use this practical test:
| Question | Employee signal | Consultant signal |
|---|---|---|
| Control | Company controls hours, manager, tools and work process | Consultant controls method and often serves more than one client |
| Continuity | Regular monthly engagement with leave and notice terms | Project or deliverable-based engagement |
| Integration | Uses company email, appears in team chart, attends all internal meetings | Works as external service provider |
| Pay | Salary, reimbursements and employee benefits | Fee, invoice, GST where applicable, milestone billing |
| IP | Employment contract assigns work product | Consultant agreement must expressly assign IP |
Misclassification can create tax, labour, IP and dispute risk. It can also hurt diligence because investors may ask whether critical product code was written by employees, founders or contractors.
Offer letter and employment agreement checklist
Every employee should have a signed document before joining or no later than the joining date. Keep it simple, but do not keep it incomplete.
| Clause | What to cover |
|---|---|
| Legal employer | Exact company name, CIN and registered office |
| Role and reporting | Designation, team, manager and work location or remote arrangement |
| Compensation | Fixed salary, variable pay, bonus discretion, reimbursements and deductions |
| Probation | Duration, review process and confirmation logic |
| Working time and leave | Attendance, weekly off, holidays and leave policy reference |
| Confidentiality | Customer, code, pricing, data, financials and investor information |
| IP assignment | Work product, inventions, designs, code, content and documentation |
| Data handling | Company systems, personal data, devices and access rules |
| Notice and termination | Notice period, immediate termination grounds and handover |
| Restrictive covenants | Non-solicit, confidentiality and conflict terms drafted realistically |
| POSH and conduct | Policy acceptance and reporting channel |
For senior hires, add role-specific terms: board observer exposure, investor meetings, signatory authority, customer commitments, ESOP eligibility, garden leave, clawback for joining bonus if lawful and practical, and conflict declarations.
Salary structure: keep it readable
Startup salary structures often become overdesigned. Founders should keep the structure understandable to the employee and defensible to finance.
Common components include basic salary, house rent allowance, special allowance, statutory bonus where applicable, employer PF contribution, gratuity provisioning, variable incentive, reimbursements and ESOP separately. Do not mix employee CTC and actual monthly take-home in a way that causes joining-day distrust.
Founder checklist:
- Show gross salary, deductions and net pay clearly.
- Keep employer contribution separate from employee deduction.
- Avoid calling everything reimbursement unless there is evidence.
- Define variable pay metrics and payment timing.
- Keep joining bonus and retention bonus terms written.
- Match payroll records with bank payments and books.
- Track state-specific professional tax where applicable.
PF trigger and controls
EPF coverage needs careful review when employee strength approaches twenty or when the establishment otherwise becomes covered. Do not wait until the twenty-first person joins and then start searching for documents.
Prepare early:
| PF readiness item | Practical action |
|---|---|
| Headcount tracker | Count employees, eligible workers and contractors separately |
| Wage review | Track basic wage and statutory wage components |
| Registration evidence | Keep EPFO login, registration certificate and authorised signatory details |
| UAN data | Collect employee UAN, KYC and nominee details where applicable |
| Monthly challans | Store ECR, payment challans and reconciliation |
| Excluded employees | Document the basis for treatment and employee declarations |
| Contractor labour | Check whether manpower vendor has PF registration and challans |
The bigger diligence point is consistency. Payroll register, bank statement, accounting ledger, PF records and employment contracts should tell the same story.
ESI trigger and wage ceiling
ESI should be reviewed for covered establishments and employees within the wage ceiling. ESIC’s official coverage page states the wage limit is Rs 21,000 per month and Rs 25,000 per month for persons with disability. Founders should verify applicability by location, establishment type and notifications because ESI coverage depends on more than a generic internet summary.
Practical ESI controls:
Free Weekly Newsletter
Subscribe to BSA startup funding alerts
- Every Sunday, all Indian startup funding alerts in one place
- Monthly funding report on the last day of the month
- Free, concise, founder-focused, and easy to unsubscribe
Get the complete Indian startup funding roundup in your inbox, covering deals, sectors, investor moves, and founder readiness notes from the week.
Built for founders, investors, CFOs, and advisors
No spam. Unsubscribe anytime.
- Track employee wages each month.
- Identify employees within the wage ceiling.
- Keep employee insurance numbers and family details updated.
- Store challans, returns and inspection correspondence.
- Train HR not to ignore ESI for lower-salary operational roles.
- Check vendor labour compliance if warehouse, retail, facility or fulfilment teams are outsourced.
ESI gaps become visible in D2C, retail, manufacturing, fulfilment, logistics, food, clinic, training and field-operations startups faster than pure software companies.
Salary TDS under Section 192
Section 192 requires tax deduction at source when salary income is paid, based on estimated salary income and applicable rates. For founders, the practical job is to create a monthly tax process, not to calculate tax casually in March.
Monthly TDS discipline:
| Step | Action |
|---|---|
| Employee declaration | Collect regime choice, investment declarations and previous employer salary where relevant |
| Payroll computation | Estimate annual salary and tax each month |
| Deduction | Deduct TDS from salary at payment |
| Deposit | Deposit within statutory timelines |
| Return | File quarterly TDS returns and issue Form 16 |
| Reconciliation | Match payroll ledger, bank salary payments, challans and Form 26AS/AIS logic |
Be careful with founder salary, joining bonus, severance, retention bonus, reimbursements, ESOP perquisites, remote allowances and consultant fees. Different payment labels can trigger different tax treatment.
POSH compliance before the company scales
Workplace safety is not optional because the startup is young. POSH documentation should include policy, Internal Committee where applicable, appointment letters, external member details, complaint process, awareness material, annual reporting and confidentiality controls.
Even where a company is still below the threshold for an Internal Committee, founders should set expectations early. Remote work, offsites, customer visits, investor events, internships and late-night work chats can all be workplace contexts. A weak response to a complaint can damage the employee, the company and investor confidence.
Contractor, freelancer and intern records
A startup’s first product may be built by contractors. That is fine if the documents are clean.
Keep:
- Signed consultant agreement.
- Scope of work and fee terms.
- IP assignment covering code, designs, content, models, datasets and documentation.
- Confidentiality and data-processing obligations.
- GST invoice where applicable.
- TDS assessment under the right section.
- Device, account and repository access controls.
- Exit handover and access removal record.
Do not let a contractor keep sole control of GitHub, hosting, domain, Figma, analytics, app store or payment gateway access.
Payroll data-room folder for fundraising
Create this before investor outreach:
| Folder | Documents |
|---|---|
| Team list | Employee, consultant, intern and advisor list with joining dates |
| Contracts | Offer letters, employment agreements, consultant agreements and advisor letters |
| Payroll | Monthly payroll sheets, payslips and bank payment proof |
| Statutory | PF, ESI, professional tax, TDS challans and returns where applicable |
| Policies | Leave, reimbursement, POSH, code of conduct, remote work and device policy |
| ESOP | ESOP scheme, grants, vesting, exercise records and board approvals |
| Founder pay | Board approvals, salary notes and related-party records |
| IP | Employee and contractor IP assignment evidence |
| Exit | Resignation, full and final settlement, relieving letters and access removal |
| Notices | Labour, tax or employee notices and replies |
Common mistakes founders should avoid
- Hiring before signing basic employment terms.
- Treating long-term full-time workers as consultants without review.
- Forgetting PF or ESI when headcount changes.
- Deducting TDS inconsistently and cleaning it only at year-end.
- Not documenting founder salary.
- Paying bonuses without a written rule.
- Ignoring POSH because the team is small or remote.
- Letting payroll data sit in personal email or open spreadsheets.
- Not checking contractor IP assignment.
- Keeping payroll records outside the investor data room.
A 14-day payroll cleanup plan
| Day | Action |
|---|---|
| 1 | Build a master list of employees, consultants, interns and advisors |
| 2 | Collect all offer letters and consultant agreements |
| 3 | Reconcile salary promises with payroll sheets and bank payments |
| 4 | Check PF and ESI headcount and wage triggers |
| 5 | Review salary TDS computation and challans |
| 6 | Check professional tax and state labour registrations |
| 7 | Review POSH policy and committee status |
| 8 | Verify contractor IP assignment and access control |
| 9 | Create reimbursement and expense evidence folder |
| 10 | Review founder salary and related-party approvals |
| 11 | Organise ESOP grant and vesting records |
| 12 | Prepare exit and full-and-final checklist |
| 13 | Lock payroll data access to authorised users |
| 14 | Create a monthly compliance calendar |
Sources
- EPFO, Employees’ Provident Funds and Miscellaneous Provisions Act, 1952: https://www.epfo.gov.in/epf-mp-act-1952/
- ESIC coverage page: https://esic.gov.in/coverage
- Income Tax Department, Section 192: https://www.incometaxindia.gov.in/w/section-192-64
- India Code, POSH Act Section 4: https://www.indiacode.nic.in/show-data?actid=AC_CEN_13_14_00009_201314_1517807327213&orderno=4
FAQ Section
When should a startup start formal payroll compliance?
Start before the first employee joins. The first version can be simple, but offer letters, salary structure, tax treatment, confidentiality, IP assignment and payroll records should be clear from day one.
Does PF apply to every startup from day one?
Not automatically. EPF applicability depends on coverage rules, employee strength and notifications. Founders should review PF before the team approaches twenty people or enters a covered situation.
What is the ESI wage limit currently shown by ESIC?
ESIC’s official coverage page states Rs 21,000 per month, and Rs 25,000 per month for persons with disability. Applicability should still be checked by location and establishment type.
Is POSH compliance required for remote startups?
Remote work does not remove workplace safety obligations. Founders should maintain a POSH policy, complaint route, awareness process and Internal Committee where legally required.
What do investors check in payroll diligence?
Investors may check employment contracts, consultant agreements, payroll sheets, bank proof, PF and ESI records, TDS challans, ESOP records, founder salary approvals, POSH records and IP assignment evidence.
Founder / Business Takeaway
Payroll is part of startup governance. Clean employee contracts, statutory triggers, salary tax, POSH records, contractor IP and payroll data controls make the company easier to trust. The Best CS Firm In India approach is to make payroll readable to founders, finance teams, employees and investors before it becomes a dispute.
Need expert support?
BSA helps Indian startups review payroll compliance, founder salary, PF and ESI triggers, TDS records, POSH documentation, contractor agreements and investor-ready HR data rooms.
Need expert support?
BSA supports founders across India with ROC, FEMA, due diligence, fundraising readiness, and company secretarial execution.
