Introduction: The Compliance Challenge for Foreign Companies in India
India's regulatory framework demands more frequent and more detailed compliance filings than most other major economies. A foreign-invested private limited company must file returns with at least six different regulatory authorities: the Ministry of Corporate Affairs (ROC), the Income Tax Department (CBDT), the GST Network (CBIC), the Employees' Provident Fund Organisation (EPFO), the Employees' State Insurance Corporation (ESIC), state-level professional tax authorities, and the Reserve Bank of India (for FEMA compliance). Each authority has its own portal, its own filing forms, its own deadlines, and its own penalty structure.
For foreign companies — particularly those managing Indian operations from overseas with no or minimal local staff — this compliance burden is a significant operational challenge. Time zone differences mean that Indian filing deadlines pass during the parent company's off-hours. Regulatory portals are accessible only with Indian digital signature certificates. Forms require Indian-specific details (DIN numbers, PAN references, CIN citations) that foreign directors may not have at hand. And the consequences of non-compliance are not trivial: penalties accumulate daily with no cap, directors face personal disqualification, and the company itself can be struck off the register.
Compliance outsourcing addresses this challenge by consolidating all filing obligations under a single, SLA-backed engagement with a team that specializes in foreign-invested company compliance.
What is Compliance Outsourcing?
Compliance outsourcing is the practice of delegating all recurring statutory and regulatory filing obligations to a specialized external team. Unlike engaging separate providers for different compliance areas — a CA firm for tax, a company secretary for ROC, a consultant for FEMA — full compliance outsourcing places the entire compliance calendar under one team with unified accountability.
The engagement model is retainer-based, with a fixed monthly or annual fee covering all included filings. Service Level Agreements define turnaround times for each filing type, escalation protocols for items requiring client approval, and reporting formats for compliance status updates. The outsourced team operates as an extension of the company's compliance function, using the company's digital signatures and portal credentials to file directly with regulatory authorities.
For foreign-invested companies, the scope extends beyond standard corporate compliance to include FEMA-specific filings that are triggered by the foreign ownership structure — FC-GPR for share allotments, FC-TRS for share transfers, FLA returns, ECB-2 returns for intercompany loans, and Form 15CA/15CB for outward remittances. These filings are often missed by domestic-focused compliance providers who lack FEMA expertise.
Scope of Compliance Outsourcing
ROC Filings (Ministry of Corporate Affairs)
ROC compliance covers all filings with the Registrar of Companies on the MCA21 portal:
- AOC-4 — Filing of financial statements (balance sheet, P&L, cash flow statement, notes) within 30 days of the AGM
- MGT-7/MGT-7A — Annual return with details of shareholding pattern, directors, and meetings — due within 60 days of AGM
- ADT-1 — Appointment of auditor — within 15 days of AGM
- DIR-3 KYC — Annual KYC update for all directors — due September 30 each year. Non-filing results in DIN deactivation and a ₹5,000 reactivation fee
- INC-20A — Declaration of commencement of business — within 180 days of incorporation (one-time filing)
- Event-based forms — PAS-3 (share allotment within 15 days), MGT-14 (resolutions within 30 days), DIR-12 (director changes within 30 days), INC-22 (registered office change within 15 days), SH-7 (capital changes within 30 days), CHG-1 (creation of charges within 30 days)
Income Tax Compliance
Income tax compliance spans monthly, quarterly, and annual obligations:
- TDS (Tax Deducted at Source) — Monthly deposit of TDS by the 7th of the following month, quarterly returns on Form 24Q (salary), 26Q (non-salary domestic payments), and 27Q (payments to non-residents)
- Advance tax — Quarterly installments on June 15 (15%), September 15 (45%), December 15 (75%), and March 15 (100%) of estimated annual tax liability
- Income tax return — Annual filing on Form ITR-6 by October 31 (for companies requiring audit)
- Transfer pricing report — Form 3CEB filed along with the income tax return for companies with international transactions exceeding ₹1 crore
- TDS certificates — Form 16 (annual salary certificate), Form 16A (quarterly non-salary certificate) — due within 15 days of TDS return filing date
GST Compliance
GST compliance involves:
- GSTR-1 — Monthly outward supply statement by the 11th of the following month
- GSTR-3B — Monthly summary return with tax payment by the 20th
- GSTR-9 — Annual return by December 31 of the following year
- GSTR-9C — Reconciliation statement (if turnover exceeds ₹5 crore) — certified by a CA
- Input tax credit reconciliation — Monthly matching of purchase invoices with GSTR-2A/2B data to maximize ITC claims
- E-way bills — Generated before goods movement exceeding ₹50,000 in value
- Reverse charge on import of services — GST payable by the Indian subsidiary on services received from the foreign parent under reverse charge mechanism
Labour Law Compliance (PF, ESI, Professional Tax)
- EPF (Employees' Provident Fund) — Employer and employee each contribute 12% of basic wages + DA. Monthly deposit by the 15th. Registration mandatory for establishments with 20+ employees. Annual return filing
- ESI (Employees' State Insurance) — Employer contributes 3.25%, employee contributes 0.75% of wages. Applicable for employees earning up to ₹21,000/month. Registration mandatory for 10+ employees (20 in some states). Half-yearly returns
- Professional tax — State-level tax with varying rates and frequencies. Maharashtra: up to ₹2,500/year per employee. Karnataka: ₹200/month for salary above ₹15,000. Delhi: not applicable
FEMA Reporting & RBI Returns
This is the compliance layer unique to foreign-invested companies:
- FC-GPR — Filed within 30 days of share allotment to foreign investors. Submitted via the Single Master Form on RBI's FIRMS portal through the AD bank
- FC-TRS — Filed within 60 days of share transfer between resident and non-resident
- FLA Return — Annual census of foreign liabilities and assets. Filed on RBI's FLAIR portal by July 15. Mandatory even if there are no changes during the year
- ECB-2 Return — Monthly return for entities with active External Commercial Borrowings
- Form 15CA/15CB — Required before every outward remittance to a non-resident. Part A for remittances up to ₹5 lakh; Part C with CA certificate (15CB) for remittances exceeding ₹5 lakh
The Compliance Calendar Approach
The compliance calendar is the operational backbone of the outsourcing engagement. It is a dynamic schedule that maps every filing obligation to:
- Due date — the statutory deadline
- Preparation start date — when data collection and filing preparation begins (typically 10–15 days before the due date)
- Internal review date — when the completed filing is reviewed by the engagement lead before submission
- Client approval date — when client sign-off is needed (applicable for financial statements, tax returns, and certain ROC forms)
- Filing date — actual submission date (targeted at least 3–5 days before the due date)
A sample compliance calendar for a foreign subsidiary includes the following monthly cycle:
| Date | Filing | Authority | Penalty for Delay |
|---|---|---|---|
| 7th of each month | TDS deposit | CBDT | 1.5% per month interest |
| 11th of each month | GSTR-1 | GST Network | ₹50/day (₹20 for nil) |
| 15th of each month | PF/ESI deposit | EPFO/ESIC | 12% interest on PF arrears |
| 20th of each month | GSTR-3B | GST Network | ₹50/day + 18% interest on tax |
| End of month | Professional tax (varies by state) | State authority | Varies by state |
Risk of Non-Compliance
Company Strike-Off (Section 248, Companies Act 2013)
The ROC can initiate strike-off proceedings if a company fails to file financial statements (AOC-4) or annual returns (MGT-7) for two consecutive financial years. The company's name is first listed for strike-off on the MCA portal with a 30-day public notice period. If no objections are received, the company is struck off — its legal identity ceases to exist, bank accounts are frozen, and directors are disqualified.
Director Disqualification (Section 164(2))
Directors of companies that default on filing annual returns for three continuous years are disqualified from holding any directorship for five years. This affects the individual director personally — not just their role in the defaulting company. A foreign director disqualified in India cannot be appointed as a director of any other Indian company during the disqualification period, which can have severe implications for multinational groups with multiple Indian entities.
Financial Penalties
- ROC late filing: ₹100/day per form, no cap — a 1-year delay on AOC-4 alone costs ₹36,500
- TDS late filing: ₹200/day under Section 234E, capped at the TDS amount
- TDS late deposit: 1.5% per month interest under Section 201(1A)
- GST late filing: ₹50/day per return (₹20 for nil returns), plus 18% per annum interest on tax liability
- Income tax late filing: ₹5,000 under Section 234F (₹1,000 if total income is below ₹5 lakh)
- FEMA contravention: Compounding penalty up to 3 times the contravention amount
- DIR-3 KYC non-filing: DIN deactivation plus ₹5,000 reactivation fee
Why Foreign Companies Especially Need Compliance Outsourcing
No Local Team
Many foreign subsidiaries in India operate with minimal or zero local staff, particularly in the first 1–2 years. All compliance responsibility falls on the foreign directors, who may be located in Singapore, the United States, the United Kingdom, or Japan — multiple time zones away from Indian regulatory portals that operate on IST. Without a local compliance team, filings are routinely missed.
Time Zone Challenges
Indian regulatory portals (MCA21, GST, Income Tax e-filing, RBI FIRMS) have uptime and server availability patterns that favour Indian business hours. Many portals experience heavy traffic on filing deadline days, requiring repeated attempts. A local compliance team can manage this; a foreign director logging in at midnight local time cannot.
Regulatory Complexity
India's compliance landscape is not just extensive — it is fragmented across central, state, and local bodies, each with different digital systems, different filing frequencies, and different penalty structures. Understanding which compliance applies to your specific entity type (subsidiary vs branch vs liaison office), your specific industry, your specific state of registration, and your specific transaction pattern requires specialized expertise that general-purpose accountants often lack.
FEMA Layer
The FEMA compliance layer is the most commonly defaulted area for foreign-invested companies. FC-GPR delays are the single most frequent FEMA contravention observed by the RBI. FLA returns are missed because local accountants are often unaware of the requirement. Form 15CA/15CB compliance is overlooked on routine intercompany payments. Each of these contraventions can result in compounding proceedings with penalties that are disproportionate to the filing effort involved.
The SLA-Based Service Model
The compliance outsourcing engagement operates under a structured SLA framework:
- Filing SLAs — Each filing type has a defined turnaround time. ROC filings: submitted 5 days before deadline. TDS/GST returns: filed within 3 days of data finalization. FEMA filings: submitted within 20 days of the triggering event (giving 10 days buffer before the statutory deadline)
- Response SLAs — Client queries are responded to within 4 business hours. Notice responses are drafted within 3 business days of receipt
- Reporting SLAs — Monthly compliance dashboard delivered by the 10th of each month. Quarterly review report delivered within 5 days of the quarter end
- Escalation Protocol — Tier 1: compliance coordinator escalates to engagement lead. Tier 2: engagement lead escalates to client's designated contact. Tier 3: senior management escalation with formal risk communication
Monthly Compliance Dashboards
The monthly dashboard provides a single-page compliance overview covering:
- Overall compliance score (target: 100% on-time filings)
- Filing-wise status tracker with acknowledgement numbers for completed filings
- Upcoming filing calendar for the next 30 days
- Any overdue items with penalty exposure quantification
- Regulatory change alerts affecting the entity
- Action items pending client approval
The dashboard is shared with both the local management team and the parent company's designated compliance contact, ensuring full visibility into the Indian entity's compliance position.
Common Mistakes to Avoid
- Assuming your accountant covers all compliance — Most bookkeeping services do not include ROC filings, FEMA reporting, or ESI/PF compliance. Verify exactly what your current provider covers
- Filing FLA return only when there is a transaction — The FLA return is mandatory every year for every company with foreign investment, even if nothing changed during the year
- Ignoring reverse charge GST on import of services — When the Indian subsidiary receives services from the foreign parent (management services, IT support, shared services), GST is payable under reverse charge by the Indian entity. This is frequently missed
- Not filing INC-20A after incorporation — Declaration of commencement of business must be filed within 180 days. Non-filing can lead to strike-off proceedings
- Treating DIR-3 KYC as optional — DIN deactivation for non-filing of DIR-3 KYC prevents directors from signing any digital documents, effectively halting all filings until the DIN is reactivated
- Using incorrect purpose codes for FEMA remittances — Every cross-border remittance must carry the correct RBI-prescribed purpose code. Using the wrong code creates a permanent mismatch in RBI records
Timeline & What to Expect
| Phase | Duration | Outcome |
|---|---|---|
| Compliance Health Check | 3–5 days | Complete picture of current compliance status and gap identification |
| Remediation (if needed) | 7–15 days | All overdue filings cleared with applicable penalties paid |
| Calendar Setup | 3–5 days | Full compliance calendar operational with automated reminders |
| First Monthly Cycle | Month 1 | All monthly filings completed on time, first dashboard delivered |
| Steady State | Month 3 onwards | All processes streamlined, dashboard delivery on schedule, zero missed filings |
Comparison: Outsourcing vs In-House vs Multiple Providers
The choice between compliance outsourcing, an in-house compliance team, and engaging multiple individual providers depends on the subsidiary's size and complexity:
- Compliance outsourcing is optimal for subsidiaries with up to 100 employees and moderate transaction volumes. It provides specialized foreign-subsidiary compliance expertise at a fraction of the cost of an in-house team, with the added benefit of unified accountability across all compliance areas
- In-house compliance team makes sense for larger subsidiaries (100+ employees, multiple state registrations, high transaction volumes) where the compliance workload justifies dedicated full-time resources. Even then, FEMA compliance may be retained with an external specialist
- Multiple individual providers is the least efficient model — higher total cost, coordination burden on management, risk of gaps between providers, and no single point of accountability. This model often evolves organically (one provider for tax, another for ROC, another for FEMA) but should be consolidated as the entity matures
Foreign parent companies looking to understand the compliance differences between entity structures in India should review the branch office vs subsidiary and branch office vs liaison office comparisons, as the compliance scope varies significantly based on the chosen structure.
Compliance Requirements by Entity Type
The scope of compliance outsourcing varies based on the type of entity operating in India. Understanding these differences is critical for structuring the right engagement:
Private Limited Subsidiary (Most Common for FDI)
A private limited company that is a subsidiary of a foreign entity has the broadest compliance footprint. It must comply with all provisions of the Companies Act 2013, Income Tax Act, GST law, labour laws, and FEMA. Key annual filings include AOC-4, MGT-7, income tax return with Form 3CEB (if international transactions exceed ₹1 crore), GST annual returns, PF/ESI returns, and FLA return. Board meetings must be held at least 4 times per year, and the AGM must be conducted within 6 months of the financial year end. At least one resident director is mandatory — someone who has stayed in India for at least 120 days in the previous calendar year.
Branch Office
A branch office of a foreign company is not a separate legal entity — it is an extension of the foreign parent. Branch offices must file annual accounts with the ROC in Form FC-3 and FC-4, obtain an Annual Activity Certificate from a Chartered Accountant for submission to the AD bank (which forwards it to the RBI), comply with income tax obligations (branch profits are taxable in India), and maintain FEMA compliance for all inward remittances from the head office. Branch offices cannot engage in manufacturing or processing activities on their own and must limit their operations to the activities specified in their RBI approval letter.
Liaison Office
A liaison office has the most restricted scope — it can only undertake liaison activities (market research, communication between parent and Indian parties, promoting products/services) and cannot earn any income in India. Compliance obligations include filing an Annual Activity Certificate confirming no commercial activity was conducted, maintaining accounts showing all expenses were funded by inward remittances, filing income tax returns (even though the office has no taxable income, as non-filing can create complications), and FEMA compliance for all inward remittances from the head office. RBI approval for the liaison office must be renewed periodically, and the renewal application requires the Annual Activity Certificate.
LLP with Foreign Partners
An LLP with foreign partners (permitted only in sectors where 100% FDI is allowed under the automatic route) has different compliance obligations than a company. LLPs file Form 8 (Statement of Account and Solvency) and Form 11 (Annual Return) with the ROC, instead of AOC-4 and MGT-7. LLPs do not need to hold board meetings or AGMs, but partners' meetings must be conducted per the LLP agreement. Income tax, GST, TDS, and FEMA compliance obligations are similar to a company, though LLPs are taxed as partnerships (not at corporate rates) and do not pay dividend distribution tax.
The Escalation Framework in Detail
Effective compliance outsourcing requires a robust escalation framework that ensures filings are never missed due to pending client approvals or information gaps. The framework operates on multiple levels:
- Level 1 — Standard Request (T-15 days): The compliance coordinator sends the first request for data or approvals needed for upcoming filings. This includes payroll data for PF/ESI, sales data for GST, payment details for TDS, and board resolution drafts for ROC filings
- Level 2 — Reminder (T-10 days): A follow-up reminder is sent with specific items still pending, clearly listing each required document or approval
- Level 3 — Engagement Lead Escalation (T-7 days): The engagement lead contacts the client's designated compliance contact directly, highlighting the risk of missing the deadline and the specific penalties that would apply
- Level 4 — Senior Escalation (T-3 days): A formal communication is sent to the parent company's legal or finance head, quantifying the penalty exposure and requesting immediate action. This level of escalation is rarely needed but serves as the final safety net
This structured approach ensures that even when client response times are slow — a common challenge with overseas parent companies managing across time zones — filings are not delayed beyond the statutory deadline.
Regulatory Change Monitoring
India's regulatory landscape changes frequently, with the annual Finance Act (Union Budget), periodic RBI circulars, MCA notifications, GST Council decisions, and CBDT/CBIC circulars all impacting compliance obligations. Recent changes that have affected foreign-invested companies include:
- The increase in domestic withholding tax on royalties and FTS from 10% to 20% (Finance Act 2023)
- RBI's liberalization of ECB regulations in February 2026, removing the all-in-cost ceiling and expanding eligible lender categories
- MCA's ongoing migration to MCA21 Version 3, which has changed form formats and filing procedures
- The increase in TCS threshold on LRS remittances from ₹7 lakh to ₹10 lakh (Budget 2025)
- Changes to GST rates and compliance procedures through GST Council meetings
- Extension of FLA return filing deadline to July 31 for FY 2024-25
The compliance outsourcing team monitors all these changes through official gazette notifications, RBI circulars, MCA circulars, and professional institute updates. Clients receive proactive advisories when any change impacts their compliance obligations, with specific action items and revised deadlines.
Need help with this?
Schedule a free consultation with our team. We will walk you through the process, timeline, and costs specific to your situation.