5 Crucial Steps: Annual Compliance Checklist for Private Limited Companies (2025 Guide)

5 Crucial Steps: Annual Compliance Checklist for Private Limited Companies (2025 Guide)

A private limited company registered under the Companies Act 2013 carries a fixed, repeating set of annual obligations — board meetings, audits, ROC filings, and director KYC — that run independently of whether the company made any revenue. Missing even one window triggers statutory penalties, DIN deactivation, or strike-off proceedings. For FY 2026-27 (April 1, 2026 to March 31, 2027), here is every deadline you need to track, what each filing requires, how to execute it on MCA V3, and precisely what it costs when you miss one.

Step 1: Board Meetings, Minutes, and the AGM Window

Minimum Meeting Requirements Under Section 173

Section 173 of the Companies Act 2013 mandates a minimum of four board meetings per financial year. The critical constraint is not just the count — it is the gap. No two consecutive board meetings may be more than 120 days apart. A company that holds three meetings between April and June and a fourth in December has technically notched four meetings but has violated the 120-day gap rule between the third and fourth. The violation exists even if the annual count is satisfied.

For FY 2026-27, a clean, defensible schedule looks like this:

• Meeting 1: April or May 2026
• Meeting 2: July or August 2026
• Meeting 3: October or November 2026
• Meeting 4: January or February 2027

The first board meeting after incorporation must be held within 30 days of the date of incorporation (Section 173(1) proviso). This catches many new founders off guard — they incorporate in March, assume the compliance clock starts in April, and miss the 30-day window entirely.

Annual General Meeting Deadline for FY 2026-27

The AGM must be held by September 30, 2027 — within six months of the financial year closing March 31, 2027 (Section 96). The AGM must ordinarily be held at or near the registered office. If you need an extension, apply to the Registrar of Companies before the deadline; the ROC can grant up to three months.

For a company in its first financial year, the AGM may be held within nine months of the close of that year, provided not more than 15 months have elapsed since the preceding AGM. One-Person Companies are exempt from holding an AGM altogether.

Minutes: The Silent Compliance Trap

Every resolution passed at any board meeting or general meeting must be recorded in minutes and entered in the bound minute book within 30 days of the meeting (Section 118). The chairperson of that meeting — or the chairperson of the immediately following meeting — must sign the minutes.

What consistently goes wrong: founders prepare minutes in bulk at year-end, backdating each entry to the meeting date. This is an offence under Section 118(12), punishable with imprisonment up to two years and a fine up to Rs. 25,000. MCA V3 inspections and due diligence exercises for funding rounds both surface bulk-prepared minutes almost immediately — the metadata on digital files tells its own story. Prepare minutes meeting by meeting, within the 30-day window, and maintain a sequentially numbered, bound minute book at the registered office.

Step 2: Statutory Audit and Financial Statements

Appointing and Reappointing Your Auditor

Every private limited company must appoint a statutory auditor at the first AGM and hold the appointment for a term of five consecutive years (Section 139). The same audit firm cannot serve indefinitely — mandatory rotation applies after two terms of five consecutive years for companies meeting prescribed thresholds.

The first auditor is appointed by the Board within 30 days of incorporation. If the Board does not act, shareholders must appoint at an EGM within 90 days. Intimate the ROC using Form ADT-1 within 15 days of each appointment.

Preparing Financial Statements Under Schedule III

Financial statements — Balance Sheet, Statement of Profit and Loss, Statement of Cash Flows (mandatory for all companies except small companies), and Notes to Accounts — must comply with Schedule III of the Companies Act 2013 and applicable Accounting Standards (AS for non-listed companies below Ind AS thresholds; Ind AS for prescribed class of companies).

A practical working timeline for FY 2026-27:

1. Close books: June 30, 2027
2. Hand over trial balance and schedules to auditor: July 5, 2027
3. Auditor issues draft report: August 15, 2027
4. Board approves and directors sign financial statements: September 1, 2027
5. AGM held (with 5-day buffer): September 25, 2027
6. AOC-4 filed: October 25, 2027 — five days before the October 30 outer deadline

CARO 2020 — Does It Apply to Your Company?

The Companies (Auditor's Report) Order, 2020 (CARO 2020) requires auditors to report on 21 clauses covering fixed assets verification, loans and advances, related-party transactions, internal controls, and fraud reporting, among others.

CARO 2020 does not apply to a private limited company if all three of the following are satisfied:

• Paid-up capital and free reserves do not exceed Rs. 1 crore
• Total borrowings from any bank or financial institution do not exceed Rs. 1 crore
• Total revenue as per the audited financial statements does not exceed Rs. 10 crore

Small companies and OPCs are also exempt. If your company crosses even one of these thresholds, CARO 2020 applies. Confirm this with your auditor before the audit begins — the reporting requirements determine how much detail goes into the audit file.

Step 3: AOC-4 — Filing Financial Statements With MCA V3

Who Files What Form

Form AOC-4 is the MCA e-form for submitting a company's annual financial statements to the Registrar. For FY 2026-27, AOC-4 must be filed within 30 days of the AGM — i.e., by October 30, 2027 if the AGM is held on the outer limit of September 30.

If your company prepares Consolidated Financial Statements (i.e., you have subsidiaries or associate companies), you additionally file Form AOC-4 CFS within the same 30-day window.

XBRL filing is mandatory for companies with paid-up capital of Rs. 5 crore or more, or turnover of Rs. 100 crore or more, or any company listed on a stock exchange — these entities file Form AOC-4 XBRL. Smaller private companies use the standard AOC-4.

Step-by-Step AOC-4 Filing on MCA V3

1. Log in to MCA V3 at unknown node using the authorised signatory's credentials.
2. Navigate to e-Filing → Company e-Filing → Financial Statement Related Filings → AOC-4.
3. Enter the CIN to prefill company master data; verify the details before proceeding.
4. Attach the following PDFs: Balance Sheet, P&L Account, Cash Flow Statement, Notes to Accounts, Auditor's Report (including CARO 2020 report if applicable), Board's Report with annexures, and the Directors' Responsibility Statement.
5. Fill in the standalone disclosure fields — related-party transactions, CSR spending if applicable, and managerial remuneration details.
6. Have the form digitally signed by a Director (DSC pre-registered against DIN on MCA V3) and then counter-signed by the Statutory Auditor's DSC (registered against the auditor's PAN on MCA V3).
7. Submit and pay the filing fee.

The most common rejection trigger: attaching draft or board-approved-but-unsigned financial statements. AOC-4 requires the final signed versions — signed by at least two directors (including the MD or CFO where applicable) and the auditor. Verify signatures on every page of every attachment before upload.

Late Filing Penalties Under Section 137(3)

Under Section 137(3) of the Companies Act 2013 (as amended for decriminalised penalties):

• Company: Rs. 10,000 base penalty + Rs. 100 per day of continuing default, maximum Rs. 2,00,000
• Officer in default (MD, CFO, or the director charged with this responsibility): Rs. 10,000 + Rs. 100 per day, maximum Rs. 50,000

Beyond monetary penalties, persistent non-filing triggers strike-off proceedings under Section 248, which can result in the company being removed from the register — an outcome that is both difficult and expensive to reverse.

Step 4: MGT-7 / MGT-7A — The Annual Return

Which Form Applies to Your Company?

A company qualifies as a small company if its paid-up share capital does not exceed Rs. 4 crore and its turnover does not exceed Rs. 40 crore (as amended — verify the current notified thresholds at the time of filing, as the Ministry periodically revises these limits upward). If your company has crossed either threshold during FY 2026-27, you graduate to MGT-7 for that year.

What the Annual Return Must Disclose

The MGT-7 is a snapshot of the company as at March 31, 2027 — the last day of FY 2026-27. It discloses:

• Registered office, CIN, principal business activities, and group companies
• Shareholding pattern: number and class of shares held by every member, all transfers during the year (cross-reference all PAS-3 filings made during the year)
• Directors and KMP: names, DIN, designation, dates of appointment and cessation (cross-reference every DIR-12 filed during the year)
• Meetings held: number and dates of board meetings and the AGM — these must match your signed minute book exactly
• Debenture holders and charges outstanding (cross-reference CHG-1/CHG-4 filings)
• Pending litigation and penalties where applicable

Pre-filing reconciliation is non-negotiable. Before you open the MGT-7 form, pull a list of every event-based filing made during FY 2026-27 — PAS-3 for share allotments, DIR-12 for director changes, SH-7 for capital alterations, MGT-14 for special resolutions — and verify that the annual return reflects all of them. A discrepancy between MGT-7 and an earlier MCA filing is a red flag in any MCA review or investor due diligence.

CS Certification Requirement

Under Section 92(2), the MGT-7 of a company with paid-up capital of Rs. 10 crore or more, or turnover of Rs. 50 crore or more, must be certified by a Company Secretary in Practice. For smaller companies, a director's signature suffices. MGT-7A (small companies and OPCs) requires only a director's signature.

Late Filing Penalties Under Section 92(5)

• Company: Rs. 50,000 base penalty + Rs. 100 per day of continuing default, maximum Rs. 5,00,000
• Officer in default: Rs. 50,000 + Rs. 100 per day, maximum Rs. 5,00,000

Step 5: DIR-3 KYC — The September 30 Non-Negotiable

Who Must File

Every person who holds an active Director Identification Number (DIN) — whether or not they are currently serving as a director in any company — must complete DIR-3 KYC by September 30 of each year. The obligation runs with the DIN, not with active directorship.

Two routes depending on your situation:

Using the web route when you should use the full form — because your mobile number changed — results in a failed OTP verification and a missed deadline. Confirm which route applies before October 1 approaches.

What You Need for DIR-3 KYC (Full Form)

• Aadhaar number (linked to the DIN holder's current mobile for OTP)
• PAN
• Passport (mandatory for foreign nationals)
• Current residential address with supporting proof
• Recent passport-size photograph
• Active personal mobile number and personal email ID (both verified via OTP at filing time)

Deactivation and Reactivation Fee

Miss the September 30 deadline, and MCA automatically deactivates the DIN on October 1. A deactivated DIN cannot be used to sign any MCA e-form, any board resolution, or any bank mandate. Filing resumes only after reactivation, which requires filing DIR-3 KYC late plus paying a reactivation fee of Rs. 5,000 per DIN. For a three-director company where all three miss the deadline, that is Rs. 15,000 in fees — before the practical cost of not being able to execute any filing until DINs are restored.

Event-Based Filings: The Year-Round Obligation

Annual compliance does not pause between due dates. Every significant corporate event triggers its own MCA filing with an independent deadline.

Share Allotments — PAS-3

Any allotment of shares (private placement under Section 42, rights issue under Section 62, conversion of instruments, or ESOP allotment) requires Form PAS-3 to be filed within 30 days of the date of allotment. Delay beyond 30 days attracts escalating additional fees on a multiplier basis. If the delay exceeds 270 days, compounding before the ROC or NCLT is required before the filing can be accepted.

Charge Creation and Satisfaction — CHG-1 and CHG-4

When a company creates a charge on its assets — typically by taking a term loan, working capital facility, or equipment finance from a bank or NBFC — Form CHG-1 must be filed with the ROC. The outer limit for filing is 300 days from the date of charge creation (Section 77), after which only an NCLT order can condone the delay. Additional fees apply on a sliding scale for filings made after the initial 30-day window.

When the charge is fully satisfied (loan repaid), file Form CHG-4 within 30 days of satisfaction. Uncleared charges on the MCA register surface in every lender's due diligence and will need to be explained — and often compounded — before any new facility can be sanctioned.

Director Changes — DIR-12

Every appointment, resignation, or removal of a director must be reported via Form DIR-12 within 30 days of the change (Section 170). Attach the board resolution, the signed letter of appointment or resignation, and the director's consent to act (in MBP-1 format). Late filings attract additional fees; non-filing creates a discrepancy between the company's own records and MCA data that must be resolved before MGT-7 can be filed correctly.

Special Resolutions — MGT-14

Certain resolutions passed at board or shareholder meetings must be filed via Form MGT-14 within 30 days (Section 117). These include resolutions to:

• Borrow beyond paid-up capital and free reserves
• Grant loans or investments beyond prescribed limits
• Approve related-party transactions crossing thresholds
• Alter the Memorandum or Articles of Association
• Approve schemes of merger or reconstruction

Many private companies treat borrowing resolutions as internal board matters and never file MGT-14. They are not internal. Late filing attracts compounding; non-filing leaves the company exposed under Section 117(2) which carries prosecution.

Worked Example: What Two Missed Deadlines Actually Cost

Scenario: TechVista Private Limited — a two-director startup with paid-up capital of Rs. 20 lakh and annual turnover of Rs. 80 lakh. For FY 2026-27, both directors are absorbed in a Series A fundraise and defer their compliance calendar. They miss both annual filing deadlines and skip DIR-3 KYC.

AOC-4 filed 120 days late (February 28, 2028 instead of October 30, 2027):

Under Section 137(3):

• Company penalty: Rs. 10,000 + (Rs. 100 × 119 days) = Rs. 21,900
• Director A (MD): Rs. 10,000 + (Rs. 100 × 119 days) = Rs. 21,900
• Director B: Rs. 10,000 + (Rs. 100 × 119 days) = Rs. 21,900
• Subtotal: Rs. 65,700

MGT-7 filed 90 days late (February 27, 2028 instead of November 29, 2027):

Under Section 92(5):

• Company penalty: Rs. 50,000 + (Rs. 100 × 89 days) = Rs. 58,900
• Director A: Rs. 50,000 + (Rs. 100 × 89 days) = Rs. 58,900
• Director B: Rs. 50,000 + (Rs. 100 × 89 days) = Rs. 58,900
• Subtotal: Rs. 1,76,700

DIR-3 KYC reactivation (both directors miss September 30):

• 2 × Rs. 5,000 = Rs. 10,000

Total avoidable outflow: Rs. 2,52,400 — for a startup that simply deprioritised paperwork during fundraising.

These figures represent statutory minimums under adjudication proceedings. An adjudicating officer under Section 454 has discretion to levy higher amounts in cases of repeat or wilful default. The penalties above are in addition to regular MCA filing fees and any professional fees for late compliance assistance.

Common Mistakes and How to Avoid Them

1. Calculating AOC-4 due date from the last permissible AGM date instead of the actual AGM date. If you hold the AGM on August 31, 2027, AOC-4 is due September 30, 2027 — not October 30. The 30-day window runs from the actual meeting date.

2. Attaching board-approved but unsigned financial statements to AOC-4. The AOC-4 submission requires signed financial statements — authenticated by at least two directors and the statutory auditor. Verify physical signatures on every page before scanning.

3. Not pre-registering or renewing DSCs on MCA V3 before deadline week. MCA V3 rejects forms signed with DSCs that are not pre-linked to the DIN or PAN on the portal. Check DSC validity and MCA V3 registration at least two weeks before any filing deadline.

4. Using DIR-3 KYC Web when the full e-form is required. If your mobile or email has changed since the last KYC cycle, the web portal sends the OTP to the old number — the verification fails silently or returns an error. File the full DIR-3 KYC e-form with an updated DSC whenever any personal detail has changed.

5. Treating MGT-7 as an independent document. The annual return must be consistent with every event-based filing made during the year. Preparing MGT-7 without a prior reconciliation of PAS-3, DIR-12, SH-7, and CHG-1/CHG-4 filings creates discrepancies that MCA V3 flags, and that surface painfully in investor due diligence.

6. Not filing MGT-14 for borrowing resolutions. A board resolution to borrow beyond paid-up capital plus free reserves requires MGT-14 within 30 days. This is routinely missed by companies that consider such resolutions to be internal. The gap is visible to any lender or acquirer who checks MCA records.

Key Takeaways

• Four board meetings per year, no more than 120 days apart — set the dates at the start of FY 2026-27 and protect them from being crowded out by operational priorities.
• AGM by September 30, 2027 for FY 2026-27; work backwards to pin your book-closure and audit-completion dates to a calendar.
• AOC-4 by October 30, 2027 (30 days after AGM); verify that financial statements are signed and both the director's and auditor's DSCs are active on MCA V3 before the last week.
• MGT-7 by November 29, 2027 (60 days after AGM); run a full reconciliation of all FY 2026-27 event-based filings before you submit.
• DIR-3 KYC by September 30, 2027 — every DIN holder, every year, without exception; reactivation costs Rs. 5,000 per DIN and blocks all filings until cleared.
• Event-based filings — PAS-3, CHG-1/CHG-4, DIR-12, MGT-14 — each carry a 30-day clock from the triggering event; track them on a live compliance calendar, not a year-end checklist.
• The combined penalty exposure for missing just AOC-4 and MGT-7 over 90–120 days, across two directors, exceeds Rs. 2.5 lakh — consistently more expensive than the cost of staying current in the first place.