01 / 13
India's IT Landscape — Why Now?
India is one of the world's premier destinations for technology businesses. Backed by Digital India, Startup India, and a talent base of 1.5M+ annual engineering graduates, the strategic advantages are unmatched — for resident founders and the growing wave of NRIs and foreign investors establishing their presence here.
Whether you are building a SaaS product, an IT services export company, a fintech venture, an AI/ML startup, or an ITES operation — India's legal ecosystem is engineered to support you, provided you navigate it with precision.
Startup India
DPIIT recognition unlocks 3-year tax holidays, self-certification under labour laws, fast-track IPR, and 80% fee rebates.
100% FDI via Auto Route
No government approval needed in IT/ITES. Foreign nationals can own 100% of an Indian IT company.
Talent Engine
1.5M+ engineering graduates per year — the world's largest technical talent pool at globally competitive cost.
Export Incentives
SEZ/STPI schemes, Section 10AA tax exemptions, and zero-rated GST for IT export companies.
Key Governing Laws: Companies Act 2013 (MCA) · Income Tax Act 1961 · GST Acts 2017 · IT Act 2000 & DPDP Act 2023 · Patents / Trademarks / Copyrights Acts · SEZ Act 2005 · FEMA 1999
02 / 13
Choosing the Right Business Structure
Your legal entity choice shapes everything: liability exposure, tax rates, fundraising capability, compliance burden, and exit options. For NRIs and foreign founders, the decision has additional FEMA and RBI dimensions.
Solo Founder
Sole Proprietorship
- No formal registration
- Full control
- Unlimited liability
- Cannot raise equity
- Not scalable
2–20 Partners
Partnership / LLP
- LLP: Limited liability
- Flexible management
- Lower compliance
- Good for service firms
- Limited VC appeal
✦ Recommended
Startups & Growth Co.
Private Limited Company
- Separate legal entity
- Limited liability
- VC / Angel fundable
- ESOP-friendly
- DPIIT eligible
Large Enterprise
Public Limited Co.
- Stock exchange listing
- Public shareholding
- High compliance
- SEBI regulated
- Suitable post-scale
Foreign Companies
Branch / Liaison / WOS
- Branch: Limited ops
- Liaison: No revenue
- WOS: Fully operational
- RBI/FEMA approval
- 100% FDI in IT
Our Recommendation: A Private Limited Company under the Companies Act 2013 is the universally preferred choice for IT startups — limited liability, ESOP capability, DPIIT eligibility, and the only structure investors will consider.
03 / 13
Registering Your IT Company — Step by Step
The Ministry of Corporate Affairs (MCA) governs all company incorporations via the MCA21 portal. With professional assistance, a Private Limited Company can be incorporated in 7–15 working days.
- 01Obtain Digital Signature Certificate (DSC)All proposed directors must obtain a Class 3 DSC from a government-approved Certifying Authority (eMudhra, Sify, NSDL). Required to digitally sign all MCA filings. Timeline: 1–2 days.
- 02Apply for Director Identification Number (DIN)DIN is a unique identifier for each director. It is applied for within the SPICe+ form — no separate application needed for new company formations.
- 03Name Reservation via RUN / SPICe+Reserve your company name on the MCA21 RUN portal. Names must be unique, must not conflict with existing trademarks, and must end in "Private Limited."
- 04Prepare Incorporation DocumentsDraft MOA and AOA. Ensure the Objects Clause covers software development, SaaS, IT services, consulting, and all planned activities. Identity and address proofs required for all directors and shareholders.
- 05File SPICe+ Form on MCA21Integrated form handling incorporation, DIN allotment, PAN, TAN, EPFO, ESIC, Profession Tax (Maharashtra), and bank account opening in a single submission.
- 06File AGILE-PRO-S FormLinked to SPICe+, this simultaneously registers your company for GST, EPFO, ESIC, Profession Tax, and opens a current bank account through partner banks.
- 07Certificate of Incorporation (COI) IssuedUpon ROC approval, a COI is issued with your Corporate Identification Number (CIN). PAN and TAN are simultaneously issued by the Income Tax Department.
- 08Open Bank Account & File INC-20AOpen a current account using COI, MOA/AOA, PAN, and KYC documents. File INC-20A (Declaration of Commencement of Business) within 180 days before commencing operations.
For IT companies, co-working spaces, virtual offices, and rented offices are all acceptable as registered office. Ensure a valid rent agreement and NOC from the property owner.
04 / 13
Digital Signature Certificate & DIN
A DSC is the electronic equivalent of a handwritten signature — mandatory for all directors for signing MCA filings, ROC returns, and ITR filings.
DSC Requirements
- Class 3 DSC required for all MCA filings (Class 2 discontinued from 2022)
- Valid for 1 or 2 years — must be renewed before expiry
- PAN, Aadhaar, passport photo, and mobile number required
- Cost: approximately ₹1,000–₹2,500 per director
- Issued within 24–48 hours by authorised CAs
Director Identification Number (DIN)
- Unique 8-digit number assigned to every director
- Obtained automatically via SPICe+ for new companies
- One DIN per individual — valid for lifetime
- KYC must be updated annually (DIR-3 KYC by September 30)
- Foreign nationals can obtain DIN with notarised passport
For NRI & Foreign Directors: A foreign national can serve as director and/or shareholder. However, at least one director must be an Indian resident (182+ days in the previous financial year) as mandated by the Companies Act 2013.
05 / 13
Memorandum & Articles of Association
The MOA defines the company's constitution and scope via the Objects Clause. The AOA governs internal management, shareholder rights, and director powers. Never use standard templates for IT startups.
Objects Clause — Include for IT Companies
Software DevelopmentSaaS ProductsMobile App DevIT ConsultingCloud ComputingCybersecurityAI & MLData AnalyticsE-commerce SolutionsIT Export / ITES / BPOERP ImplementationWeb Design & HostingBlockchain SolutionsIoT ProductsDigital Marketing Tech
Key AOA Clauses for IT Startups
| Clause | Importance for IT Companies |
|---|---|
| Share Transfer Restrictions | Right of First Refusal (ROFR), lock-in periods for founders — critical for investor negotiations. |
| ESOP / Stock Option Pool | Enables Employee Stock Option Plans — essential for attracting top tech talent. |
| Drag-along / Tag-along Rights | Standard investor protection clauses for venture-backed IT companies. |
| Reserved Matters | Investor consent for key decisions — required when onboarding angel / VC investors. |
| Anti-Dilution Provisions | Protects investors from dilution in down rounds — negotiated at investment stage. |
| Board Composition | Defines director appointment/removal rights — critical for founder control post-funding. |
Do Not Use Table-F: The default Table-F articles are wholly inadequate for IT startups. Always have MOA and AOA professionally drafted with startup-friendly clauses from Day 1.
06 / 13
Post-Incorporation Registrations
Once your COI is issued, several critical registrations must be completed within prescribed timelines. Failure attracts penalties and can disrupt operations.
01
Immediately after COI
Open Bank Account & File INC-20A
Open a current account, deposit subscribed share capital, and file INC-20A within 180 days. Mandatory before commencing any business operations.
02
Within 30 days of incorporation
GST Registration
Mandatory if turnover exceeds ₹20 lakhs. For IT export companies, register immediately to claim zero-rating and LUT benefits.
03
Before hiring first employee
EPFO & ESIC Registration
EPFO mandatory for 20+ employees. ESIC applies to 10+ employees with wages up to ₹21,000/month. Both can be set up via SPICe+ AGILE process.
04
As soon as possible
DPIIT Startup India Recognition
Benefits: 3-year income tax holiday (Sec 80-IAC), labour law self-certification, fast-track patent/trademark, 80% IPR filing fee rebate.
05
Before product launch
Trademark Registration
File under Classes 9 (software), 38 (telecom), and 42 (computer services). DPIIT startups receive 80% rebate on government trademark filing fees.
06
If exporting IT services
STPI / SEZ Registration
Register under STPI scheme or in an SEZ for duty-free imports, Section 10AA income tax exemption, and single-window compliance clearance.
07 / 13
Taxation & GST for IT Companies
Corporate Income Tax Rates (FY 2025–26)
| Category | Base Rate | Effective Rate |
|---|---|---|
| New Manufacturing Co. (Sec 115BAB) | 15% | ~17.01% |
| Domestic Co. opting Sec 115BAA | 22% | ~25.17% |
| Domestic Co. (Turnover ≤ ₹400 Cr) | 25% | ~26% |
| Other Domestic Companies | 30% | ~34.94% |
| DPIIT Startup (Sec 80-IAC holiday) | NIL for 3 consecutive years out of first 10 years | |
GST Rates for IT Companies
18%
Software Products
Off-the-shelf software, packaged products, licenses sold within India.
18%
IT Services (Domestic)
Software development, consulting, maintenance, support for Indian clients.
0%
IT / ITES Exports
Zero-rated. File Letter of Undertaking (LUT) annually to export without GST.
0%
SaaS — Overseas
Zero-rated for foreign customers. Follow Place of Supply rules carefully.
TDS Compliance: Deduct TDS on salary (Sec 192), professional fees (Sec 194J — 10%), rent (Sec 194I), and foreign payments (Sec 195). File quarterly TDS returns (Forms 24Q, 26Q) without fail.
08 / 13
Labour Laws & HR Compliance
Mandatory Compliances
- PF: 12% employer + 12% employee on basic salary (20+ employees)
- ESIC: 3.25% employer + 0.75% employee on wages up to ₹21,000/month
- Professional Tax: State-specific slab on salaries
- Gratuity: 15 days salary per year after 5 years service
- Minimum Wages: State-specific; must be documented
IT Sector Specifics
- POSH Act: Mandatory Internal Complaints Committee for 10+ employees
- Shops & Establishment Act: Register within 30 days in each state
- Employment Agreements: IP Assignment, NDA, Non-Compete, Data Protection clauses mandatory
- Remote Work Policy: Define WFH, BYOD, data security, and moonlighting policies
Critical Clauses in IT Employment Agreements
IP AssignmentNon-Disclosure (NDA)Non-CompeteNon-SolicitationBYOD / Device PolicySocial Media PolicyMoonlighting RestrictionData ProtectionNotice Period (1–3 months)Code of Conduct
DPIIT Startup Benefit: Recognised startups can self-certify compliance under 6 major labour laws for the first 5 years — effectively exempting them from government inspections during this period.
09 / 13
Intellectual Property Rights & Data Laws
For an IT company, intellectual property is your most valuable asset. A robust IP strategy from Day 1 protects your competitive advantage and underpins valuation in future funding rounds.
Copyright
Software code automatically protected upon creation under the Copyright Act 1957. Assign all copyrights from developers to the company via IP Assignment clauses.
Trademarks
Register brand name, logo, and product name under Classes 9, 38, and 42. DPIIT startups get 80% fee rebate. Protection for 10 years, renewable indefinitely.
Patents
Pure software is not patentable in India, but hardware-software inventions may qualify. DPIIT startups get 80% rebate and expedited examination.
Trade Secrets
Protect proprietary algorithms via strict NDAs, access controls, and employment agreements. India lacks a standalone Trade Secrets Act — protection via contract law.
Data Protection — DPDP Act 2023
- Obtain free, informed, and specific consent before processing personal data
- Process data only for the lawful purpose for which consent was obtained
- Implement appropriate technical and organisational security measures
- Appoint a Data Protection Officer (DPO) if designated as Significant Data Fiduciary
- Enable Data Principal rights: access, correction, erasure, and grievance redressal
- Notify the Data Protection Board of India in case of data breaches
- Comply with cross-border data transfer restrictions as notified by the government
CERT-In Compliance: CERT-In mandates reporting of cybersecurity incidents within 6 hours of detection. ISO 27001 ISMS strongly recommended for export companies and government contracts.
10 / 13
Funding, Equity & Foreign Direct Investment
India allows 100% FDI in the IT sector under the Automatic Route — no prior government approval required. Understanding FEMA compliance is critical for NRIs and foreign investors.
FDI Compliance under FEMA
- 100% FDI under Automatic Route in IT, ITES, software development, IT-enabled services
- Foreign investment reported to RBI via Form FC-GPR within 30 days of share allotment
- Annual Return on Foreign Liabilities and Assets (FLA) filed with RBI by July 15
- Share pricing must comply with FEMA pricing guidelines (DCF/CCI method)
- Convertible instruments (CCDs, CCPS, SAFEs) used for angel/seed rounds
ESOP — Employee Stock Options
- Minimum vesting period: 1 year from date of grant
- Can be issued to employees, directors (except promoters holding 10%+), and consultants
- Taxed as perquisite at exercise and as capital gain on sale
- DPIIT startups: ESOP tax deferred to sale or exit — major cashflow benefit
- File PAS-3 return with ROC within 30 days of each exercise / allotment
Convertible Instruments: CCDs, CCPS, and SAFEs are FEMA-compliant instruments widely used for early-stage IT startup investments. Always engage a qualified lawyer for structuring and RBI reporting.
11 / 13
SEZ, STPI & Export Benefits
STPI Scheme
- Register as STPI unit with nearest STPI centre
- Import hardware/software duty-free for export production
- Simplified customs via STPI green channel
- Net Foreign Exchange (NFE) must remain positive
- Annual performance report filing required
- Suitable for smaller IT firms exporting software/services
SEZ Scheme
- Set up in designated IT SEZ areas (SEEPZ Mumbai, Noida SEZ, Cochin, etc.)
- Sec 10AA: 100% income tax deduction for first 5 years, 50% for next 10
- Customs/excise duty exemption on imports and capital goods
- Goods/services to/from SEZ treated as exports under GST
- Suitable for larger IT companies with significant export revenue
GST for IT Exporters: File a Letter of Undertaking (LUT) at the start of each financial year to export without paying GST and claim full refunds on input services. Highly advantageous for companies with significant domestic vendor costs.
12 / 13
Annual Compliance Calendar
| Compliance | Form / Filing | Due Date | Authority |
|---|---|---|---|
| Annual Return | MGT-7A / MGT-7 | 60 days from AGM | MCA / ROC |
| Financial Statements | AOC-4 / XBRL | 30 days from AGM | MCA / ROC |
| Annual General Meeting | — | By September 30 | Companies Act |
| Income Tax Return | ITR-6 | Oct 31 (tax audit) / Jul 31 (others) | Income Tax Dept. |
| GST Annual Return | GSTR-9 / 9C | December 31 | GSTN |
| Director KYC | DIR-3 KYC | September 30 annually | MCA |
| Board Meetings | Minutes maintained | Min. 4 per year (120-day gap max) | Companies Act |
| TDS Returns | 24Q / 26Q | Jul 31, Oct 31, Jan 31, May 31 | TDS / TRACES |
| Advance Tax | Challan 280 | Jun 15, Sep 15, Dec 15, Mar 15 | Income Tax |
| EPFO / ESIC | ECR / Monthly Returns | Monthly by 15th | EPFO / ESIC |
| GST Monthly Returns | GSTR-1, GSTR-3B | Monthly / Quarterly | GSTN |
| Statutory Audit | Auditor's Report | Before filing financial statements | ICAI |
Penalty Alert: Late ROC filings attract 2× to 12× additional fees. Non-filing for more than 2 years can result in the company being struck off and directors disqualified for 5 years. Always maintain a compliance calendar managed by your legal / CA team.
13 / 13
Master Checklist — Your Complete Roadmap
🏗️ Pre-Incorporation
- Decide on business structure (Pvt Ltd recommended)
- Finalise company name — check MCA + trademark databases
- Decide registered office address (own / leased / virtual)
- Identify all directors and shareholders
- Obtain Class 3 DSC for all directors
- Prepare MOA / AOA with startup-friendly clauses
- Collect KYC documents of all directors / shareholders
📋 Incorporation
- File SPICe+ + AGILE-PRO-S on MCA21
- Obtain Certificate of Incorporation (COI) + CIN
- Receive PAN and TAN simultaneously
- Open current bank account
- File INC-20A (commencement of business declaration)
⚡ Post-Incorporation
- Apply for DPIIT Startup India recognition
- Register for GST; apply for LUT if exporting
- Register under Shops & Establishment Act
- Obtain EPFO / ESIC registration
- Register with STPI or SEZ (if exporting IT services)
- Set up accounting software and payroll system
- Draft employment contracts / consultant agreements
- Implement POSH policy (10+ employees)
- Implement DPDP Act data protection framework
🔐 Intellectual Property
- File trademark for company name + logo
- Register software copyrights where required
- Assess patent eligibility for core innovations
- IP Assignment clauses in all employment / contractor agreements
- NDA policies for all staff and third parties
📅 Ongoing Compliance
- Maintain statutory registers (Share, Director, Charges)
- Hold quarterly Board meetings; maintain minutes
- File monthly GST returns (GSTR-1 + GSTR-3B)
- Deduct and deposit TDS monthly; file quarterly returns
- Pay advance tax in 4 instalments each financial year
- Conduct statutory audit and file ITR annually
- File ROC annual returns (MGT-7, AOC-4)
- Renew LUT for GST exports at start of each financial year
- Update Director KYC (DIR-3) by September 30
- Renew trademarks every 10 years
Ready to Build Your IT Empire in India?
Startup Solicitors handles everything — from incorporation to ongoing compliance — so you can focus entirely on building your product.