← Back to Insights
Payroll & Labour Compliance

Payroll Compliance Checklist for Growing Startups in India

Published September 13, 2026CA Mehul AgrawalAgrawal Khandelwal & Associates LLP

TL;DR

As an Indian startup scales from a few founders to over 50 employees, payroll compliance transitions from simple bank transfers to complex statutory mandates. This guide provides a practical checklist for managing EPF, ESI, TDS, professional tax, and workplace compliance at each headcount milestone, while leveraging Startup India self-certification.

Introduction: From Spreadsheets to Statutory Compliance

In the early stages of a startup, founders are naturally focused on finding product-market fit, acquiring customers, and raising capital. Human resources and payroll are often managed informally, sometimes using basic spreadsheets and manual bank transfers at the end of each month. However, as your team grows from a few close peers to 10, 20, and then beyond 50 employees, payroll is no longer just about sending salaries. It rapidly morphs into a complex web of statutory compliance involving multiple government departments, monthly deductions, retirement benefits, and social security contributions.

Failing to comply with Indian payroll regulations can result in heavy interest, monetary penalties, and even legal action against directors. Conversely, a streamlined and compliant payroll system builds trust among employees, establishes institutional credibility, and ensures a clean record during venture capital due diligence. This comprehensive guide provides a practical compliance checklist for Indian startups as they scale through various headcount milestones.

Milestone 1: The Core Setup (1 to 9 Employees)

Even if you have just one or two employees on your payroll, certain fundamental compliances apply from day one. At this stage, your focus must be on local business registration, professional tax, and basic income tax deductions.

1. Shops and Establishments Act Registration

The Shops and Establishments Act is governed by individual state governments and regulates working hours, weekly holidays, leave policies, and employment terms. In Maharashtra, for instance, this is managed under the Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act, 2017. Businesses must register their office premises within 30 days of commencing operations. For micro-enterprises with fewer than 10 employees, a simple online intimation is sufficient in many states, while larger teams require a formal registration certificate.

2. Tax Deducted at Source (TDS) on Salaries - Section 192

Under Section 192 of the Income Tax Act, every employer is responsible for deducting tax at source (TDS) from employee salaries if their estimated total annual income exceeds the basic exemption limit under their chosen tax regime. Key requirements include:

  • Declaration: At the start of the financial year, employees must declare whether they are opting for the Old Tax Regime or the New Tax Regime, along with their planned tax-saving investments.
  • Calculation: The employer must compute the estimated annual income, apply the standard deduction (currently Rs 75,000 under the New Regime and Rs 50,000 under the Old Regime), deduct eligible exemptions, calculate the tax liability, and deduct the TDS in equal monthly installments.
  • Filing and Issuance: TDS deducted must be deposited to the government treasury by the 7th of the following month (except for March, where the deadline is April 30). Employers must file quarterly TDS returns in Form 24Q and issue Form 16 to employees by June 15 of the following financial year.

3. Professional Tax (PT) in Maharashtra

Professional Tax is a state-level tax levied on professions, trades, and employments. If you are operating from Maharashtra, you must register under two categories:

  • PTRC (Professional Tax Registration Certificate): This is required by the employer to deduct and deposit Professional Tax from employee salaries. In Maharashtra, the standard deduction is up to Rs 2,500 per annum, typically collected as Rs 175 per month (and Rs 200 in February) for eligible employees. Women earning up to a certain threshold are exempt from PT in Maharashtra, which is a key state-specific relief.
  • PTEC (Professional Tax Enrolment Certificate): This is the tax paid by the startup itself as a corporate entity, which is a fixed annual fee of Rs 2,500.

Milestone 2: Crossing the Threshold (10 to 19 Employees)

Once your startup hits a headcount of 10 employees, several social security and workplace welfare laws are triggered. This is a critical transition phase where informal systems must give way to structured policies.

1. Employees' State Insurance (ESI) Registration

The ESI Act, 1948 provides medical and sickness benefits to employees. ESI registration is mandatory for any non-seasonal factory or establishment employing 10 or more people. In Maharashtra, shops and commercial establishments must register once headcount reaches 10. Key compliance points include:

  • Eligibility: ESI applies only to employees whose gross monthly wages are Rs 21,000 or less.
  • Contributions: The employer contributes 3.25% of the wages, and the employee contributes 0.75%, making a total contribution of 4.0% of the employee's gross salary.
  • Filing: Contributions must be deposited online on the ESIC portal within 15 days of the following month, accompanied by monthly return filings.

2. Prevention of Sexual Harassment (POSH) Committee

Under the POSH Act, 2013, every organization with 10 or more employees must set up an Internal Committee (IC) to address complaints of sexual harassment at the workplace. The IC must have a senior woman employee as the Presiding Officer, at least two employee members committed to the cause, and one external member from an NGO or legal background. Non-compliance can lead to severe fines and cancellation of business licenses.

3. Payment of Gratuity Act, 1972 (Accrual Trigger)

The Gratuity Act is applicable once an establishment reaches 10 employees. Although an employee must complete 5 years of continuous service to receive gratuity, the liability begins to accrue from their first year of employment. Startups must provision for this gratuity liability in their balance sheets to reflect true financial health, and should ideally explore gratuity funding schemes to avoid sudden cash outflows in the future.

Milestone 3: Scaling Up (20 to 49 Employees)

Reaching a headcount of 20 employees is a massive milestone, primarily because it brings your startup under the mandatory coverage of India's primary retirement benefit scheme.

1. Employees' Provident Fund (EPF) Registration

The EPF and Miscellaneous Provisions Act, 1952 becomes mandatory for any establishment employing 20 or more people. Key compliance mandates under EPF are:

  • Eligibility: Mandatory for employees with a basic salary + dearness allowance of up to Rs 15,000 per month. Employees earning above this can opt out at the start of their career, though many startups choose to extend EPF benefits to all employees.
  • Contributions: Both the employer and the employee contribute 12% of the basic salary (plus dearness allowance). Out of the employer's 12% contribution, 8.33% goes to the Employees' Pension Scheme (EPS) and the remaining 3.67% goes to the EPF account.
  • Administrative Charges: Employers also pay 0.5% as EPF admin charges and 0.5% towards the Employees' Deposit Linked Insurance (EDLI) scheme.
  • Deadlines: Monthly EPF contributions must be deposited by the 15th of the following month. Delay in payment attracts interest under Section 7Q and damages under Section 14B.

Milestone 4: Large-Scale Operations (50+ Employees)

With more than 50 employees on board, your startup is now considered an established corporate entity. At this stage, compliance becomes a dedicated corporate function.

  • Labour Law Registers: You are required to maintain exhaustive registers, including Muster Rolls, Register of Wages, Register of Fines, and Register of Overtime, either physically or electronically.
  • Contract Labour Regulation: If you hire contract staff (such as security guards or housekeeping) through agencies, and the total number of contract workers exceeds 20 (or 50 in some states), you must obtain a registration certificate as a Principal Employer.

DPIIT Startup India Benefits: A Strategic Relief

To support early-stage ventures, the Department for Promotion of Industry and Internal Trade (DPIIT) offers significant compliance relaxation. Startups recognized under the Startup India initiative can self-certify compliance for up to 9 labour laws (including the EPF Act, ESI Act, Gratuity Act, and Contract Labour Act) for a period of 3 to 5 years from incorporation. This means no random inspections or audits will be conducted, provided the startup files regular self-certification returns online through the Shram Suvidha portal.

Summary Table of Headcount Triggers

Headcount TriggerApplicable Law / ComplianceKey Requirement
1+ EmployeeShops & Establishments, TDS (Section 192), Professional TaxLocal office registration, PTRC/PTEC registration (e.g. Maharashtra), monthly salary TDS deductions.
10+ EmployeesESI Act, POSH Act, Gratuity ActESIC registration (wages <= Rs 21,000), Internal Committee (IC) setup for POSH, gratuity accrual provisioning.
20+ EmployeesEPF ActProvident fund registration, monthly 12% matching contributions for eligible employees.
50+ EmployeesComprehensive Labour Registers, Contract Labour ActPrincipal Employer registration if hiring contract labour, detailed automated statutory registers.

Conclusion: Automating Payroll Compliance

As a founder, your focus should be on building great products and scaling your business. Trying to manually navigate ESI, EPF, TDS, and Professional Tax is not only a poor use of time but also highly risky given the legal stakes. Partnering with professional advisory firms like Agrawal Khandelwal & Associates LLP ensures that your payroll compliance is fully managed by experts. From initial registrations to monthly deductions, filing returns, and managing DPIIT self-certifications, our team handles the compliance so you can focus on growth.

Need help applying this to your specific situation? Our advisory services cover compliance planning for growing businesses.

Have a Question on This?

Book a free consultation with our partners, or message us on WhatsApp for a quick answer.

Frequently Asked Questions

What is the penalty for late payment of EPF contributions?

EPF contributions must be deposited by the 15th of the subsequent month. Delay in deposits attracts interest at 12% per annum under Section 7Q and damages ranging from 5% to 25% per annum (subject to regulatory limits) under Section 14B of the EPF Act.

Is ESI mandatory for all employees in a startup?

No. ESI is mandatory only for establishments with 10 or more employees, and within those establishments, it applies only to individual employees whose monthly gross wages are Rs 21,000 or less. If an employee's salary exceeds Rs 21,000, they are out of the ESI coverage.

What is the difference between PTRC and PTEC in Professional Tax?

PTRC (Professional Tax Registration Certificate) is obtained by an employer to deduct and deposit professional tax from employees' salaries. PTEC (Professional Tax Enrolment Certificate) is obtained by the business entity itself to pay its own annual professional tax (which is Rs 2,500 in Maharashtra).

Are DPIIT recognized startups completely exempt from labour laws?

No, startups are not exempt from the laws themselves. However, recognized startups are allowed to self-certify their compliance online for up to 9 labour laws for a period of 3 to 5 years, shielding them from routine, unannounced physical inspections.

Can an employee opt out of EPF contributions?

If an employee's basic salary plus dearness allowance exceeds Rs 15,000 per month at the time of joining their first job, they can opt out of EPF by filing Form 11 as an "excluded employee". However, if they have ever been a member of the EPF in a previous job, they cannot opt out and must continue contributing.

Is a POSH committee required if all our employees are male?

Yes. Under the POSH Act, 2013, any office or establishment with 10 or more employees must set up an Internal Committee (IC), regardless of the current gender ratio or composition of the workforce. Compliance is based strictly on employee headcount.