Legal Roadmap for Building a 100 Crore Startup in India

Legal Roadmap for Building a 100 Crore Startup in India

Building a ₹100 crore revenue startup in India is not just a commercial milestone — it is a legal threshold that changes who regulates you, which filings become mandatory, and how expensively you pay for skipping steps you should have taken in Year One. The founders who reach this number cleanly are almost always the ones who sequenced their legal structure to match their funding stage, not the ones who retrofitted compliance during Series C diligence. This roadmap maps every critical legal decision to the stage at which it actually matters.

Stage 1: Incorporation and Foundational Structure (Month 0–3)

Choose Your Legal Vehicle Deliberately

A Private Limited Company under the Companies Act 2013 is almost always the right answer for a venture-backed startup. It separates personal and business liability, supports ESOP issuance under Section 62(1)(b), accommodates foreign equity under FEMA NDI Rules 2019, and presents a clean path to public listing. An LLP is appropriate for professional services firms, not for startups that plan to raise equity rounds.

Filing on MCA V3 — What "Clean" Actually Means

Register through the SPICe+ form on the MCA V3 portal (mca.gov.in). Before you file, do three things that most founders skip:

1. Name search on V3: Reserve a name that is not confusingly similar to a registered trademark. A conflict at name-reservation stage can delay incorporation by 3–4 weeks.
2. Draft an investor-ready MOA and AOA: Your Articles should already contain drag-along, pre-emption, and reserved-matter clauses in blank — it is far cheaper to include them on Day 1 than to pass special resolutions to alter the AOA three rounds later.
3. Issue shares at a meaningful face value: ₹10 face value is standard; ₹1 face value gives flexibility for deeper ESOP discounts later.

DPIIT Recognition — File Within 60 Days of Incorporation

Apply for DPIIT recognition immediately through the Startup India portal (startupindia.gov.in). You are eligible if you are incorporated within the last 10 years, have not crossed ₹100 crore in annual turnover in any year, and are working on an innovative product, process, or service.

Why it matters in 2026:

• Section 80-IAC tax holiday: A 100% deduction on profits for 3 consecutive Assessment Years out of 10, available to startups incorporated within the date as extended by successive Finance Acts. Check the current eligibility window — Finance Act 2024 set the incorporation cutoff at March 31, 2025, and any further extension will apply from AY 2027-28 onwards.
• Angel Tax abolition: Finance Act 2024 removed Section 56(2)(viib) entirely from the Income Tax Act with effect from AY 2025-26. Angel tax is no longer live for any investor class, but DPIIT recognition still gives you faster IP examination, access to SIDBI Fund of Funds, and self-certification under select labour laws.

IP Assignment — This Step Cannot Be Backdated Cleanly

Every founder who built a prototype before incorporation must assign that IP to the company via a written IP assignment deed, executed on appropriate stamp paper. The deed must be filed with the Patent Office if patents are involved. If you skip this step and a foreign investor does due diligence, they will discover that the company's core technology is legally owned by a natural person. Fixing this retroactively triggers stamp duty, potential capital gains questions, and sometimes a valuation dispute. Do it before you take your first rupee of external funding.

Stage 2: Building Your Compliance Stack (₹0–₹10 Crore)

GST — Voluntary Registration Pays Off Early

GST registration becomes mandatory once turnover crosses ₹40 lakh for goods or ₹20 lakh for services in general-category states (lower thresholds apply in special-category states). But if you are purchasing SaaS tools, cloud services, office equipment, or paying consultants, voluntary registration from Month 1 recovers input tax credit immediately. A startup spending ₹3 lakh/month on AWS, Google Workspace, and professional fees generates ₹54,000/month in claimable ITC that disappears if you are unregistered. Over 12 months, that is ₹6.48 lakh in unclaimed credit.

File your GSTR-1 (outward supplies) and GSTR-3B (summary return) on the GST portal consistently. Late GSTR-3B for a non-nil month costs ₹50 per day (₹25 CGST + ₹25 SGST). A 60-day delay on a medium-sized return costs ₹3,000 — trivial in isolation, but systemic non-compliance creates a notice trail that surfaces in investor due diligence.

Employment Compliances — Triggered by Headcount, Not Revenue

POSH (Prevention of Sexual Harassment of Women at Workplace Act 2013) is non-negotiable the moment you cross 10 employees. The ICC must include at least one external member from an NGO or with relevant expertise. Failure to constitute the ICC attracts a fine of up to ₹50,000 for the first offence, doubled for repeat violations.

Annual ROC Filings — The Deadlines That Bite

The AGM must be held by 30 September each year. After that, you have:

• AOC-4 (financial statements): 30 days from AGM, i.e., by 29 October
• MGT-7 (annual return): 60 days from AGM, i.e., by 28 November
• DIR-3 KYC: by 30 September for every director annually

Additional fees (₹100 per day) begin immediately after the deadline. If you file AOC-4 and MGT-7 both 90 days late, you pay ₹18,000 in additional fees per document — for a total of ₹36,000 for a simple delay most founders could avoid with a calendar reminder. The real risk is not the fee but the disqualification of directors under Section 164(2) if the company defaults for three consecutive years.

Stage 3: Seed to Series A — Fundraising Legal Hygiene (₹10–₹50 Crore)

Build the ESOP Pool Before the Term Sheet Arrives

Create your Employee Stock Option Plan under Section 62(1)(b) by special resolution before you are in active Series A negotiations. The standard pool size is 8–12% on a fully diluted basis, pre-Series A. Here is why timing is everything:

If your pre-money valuation is ₹50 crore and you have not yet created the pool, the VC will typically demand it be carved from the pre-money cap table. Effect: the ESOP pool represents 10% × ₹50 crore = ₹5 crore of value absorbed by founders before the investment closes. Had you created the pool 6 months earlier — when the company was valued lower — you would have issued the same 10% at a cheaper implied cost. Creating the pool early also signals maturity to investors and avoids a last-minute shareholder resolution during the already-stressful closing period.

Reading a Term Sheet — The Clauses That Bind You for Years

Three provisions in a Series A term sheet will govern your life for the next 5–7 years:

1. Liquidation preference: A 1× non-participating preference is standard and acceptable. A 2× participating preference means the investor gets back 2× their money and participates pro-rata in residual proceeds. On a ₹30 crore Series A at 2× participating preference, the investor recovers ₹60 crore off the top of any exit before founders see a rupee.

1. Anti-dilution: Broad-based weighted average is market standard. Full ratchet anti-dilution means if you raise a down-round at any lower price, the investor's ownership resets to what they would have held at the new price — potentially wiping out significant founder equity.

1. Reserved matters / affirmative votes: A list of decisions (new equity issuance, changes to business plan, key hires, related-party contracts above a threshold) that require investor approval. Negotiate the threshold amounts carefully; overly broad reserved matters make routine operations painful.

Have an experienced transactional lawyer review the SHA (Shareholders' Agreement) before you sign. ₹1–2 lakh in legal fees at term sheet stage is categorically cheaper than litigating an ambiguous clause in NCLT five years later.

Stage 4: FEMA, FDI and Foreign Capital

Automatic Route vs. Government Route — Know Before You Accept

India's FDI policy (administered by DPIIT and RBI) allows 100% FDI under the automatic route in most sectors including SaaS, e-commerce marketplace, fintech infrastructure, and manufacturing. Sectors requiring government approval include news media, satellite, defence above 49%, and multi-brand retail. Verify your sector's route on the FDI Policy consolidated circular before accepting a term sheet from a foreign investor — the government route adds 3–6 months to your timeline.

The FC-GPR Deadline and What Compounding Costs You

Once you allot shares or convertible instruments to a foreign investor, you must file Form FC-GPR on the FIRMS portal (firms.rbi.org.in) within 30 days of allotment. This is a hard deadline, not a grace period.

Missing it triggers FEMA compounding under FEMA (Compounding Proceedings) Rules 2000. The compounding process requires engagement with the regional RBI office, preparation of a compounding application, and payment of a fee computed as per RBI's internal matrix. For a ₹25 crore Series A reported even 15–45 days late, the compounding fee itself may be modest (as notified), but the management bandwidth consumed — 3 to 6 months of back-and-forth with RBI — and the reputational flag it creates in future due diligence is disproportionate to the avoidable delay.

Also file the Foreign Liabilities and Assets (FLA) return on the RBI FLAIR portal by 15 July each year for the previous financial year. Every company with FDI must file this regardless of whether any new investment occurred in that year.

Pricing CCPS and CCDs — FEMA NDI Rules Apply

Convertible instruments issued to non-residents — Compulsorily Convertible Preference Shares (CCPS) or Compulsorily Convertible Debentures (CCDs) — must be priced under FEMA Non-Debt Instruments Rules 2019. For unlisted companies, the equity-equivalent value must be determined on a DCF (Discounted Cash Flow) or NAV basis by a SEBI-registered Category I Merchant Banker or a Chartered Accountant using a recognised valuation methodology. The valuation report must predate the allotment. Missing this step, or using an informal valuation, renders the allotment non-compliant and requires FEMA compounding.

Stage 5: Governance Upgrade as You Approach ₹50–₹100 Crore

Audit Committee and NRC — Triggered at ₹100 Crore Turnover

Many founders are surprised to learn that private limited companies are not permanently exempt from board-level governance requirements. Under Section 177 of the Companies Act 2013, an Audit Committee becomes mandatory if your company's turnover crosses ₹100 crore — even if you remain a private limited company. The same trigger applies for a Nomination and Remuneration Committee under Section 178.

Practically, start constituting these committees during the financial year in which you are approaching ₹100 crore, not after crossing it. The committees require at least 3 directors, with the majority being independent directors for the Audit Committee.

CSR — Triggered by Profitability, Not Just Revenue

CSR obligations under Section 135 attach if, in the immediately preceding financial year, net profits reach ₹5 crore — even if turnover is well below ₹1,000 crore. If your startup is profitable and approaches this number, budget 2% of your average 3-year net profit for CSR spend. Unspent amounts must be transferred to Unspent CSR Account and deployed within defined timelines, or transferred to a PM Relief or Schedule VII fund.

Related-Party Transactions Under Section 188

At scale, founders tend to contract with personally held entities, family companies, or co-founder ventures. Section 188 requires shareholder approval (ordinary resolution, or special resolution in some cases) for related-party transactions above prescribed monetary thresholds. Disclose all related-party transactions in the Directors' Report and financial statement notes. Boards with independent directors (even if not legally required) should route RPT approvals through the Audit Committee — investor SHA's almost always require this.

Stage 6: IP, Data Protection and Sector Licences

Trademark and Patent — Sequence Matters

File trademark applications in every class you actually use (Nice Classification) before launch, not after. Class 42 (software as a service), Class 9 (software products), Class 35 (business services), and Class 41 (education) are the most common for tech startups. The Indian trademark registry takes 18–24 months for examination; filing early protects your priority date.

For patentable technology, file a provisional application before any public disclosure, conference paper, or GitHub push. India's Patents Act 1970 requires absolute novelty — once disclosed publicly, the window closes. For international protection, file a PCT application within 12 months of the Indian priority date. DPIIT-recognized startups receive expedited examination (8-week target under the startup examination scheme).

DPDP Act 2023 — Obligations That Apply Now

The Digital Personal Data Protection Act 2023 is in force. While the central government is yet to notify all rules and designate Significant Data Fiduciaries as of the date of this writing, Data Fiduciary obligations apply to every organisation that processes digital personal data. Your obligations from today:

• Publish a privacy notice in plain language describing what data you collect, why, and how long you retain it.
• Obtain free, specific, informed, unconditional consent before processing personal data for any purpose beyond the stated necessity.
• Establish a mechanism for data principals to raise grievances within prescribed response timelines.
• Appoint a Data Protection Officer if you are designated a Significant Data Fiduciary (notification pending; sectors handling large volumes of sensitive data are likely to be first).

Build consent flows and data retention policies into your product architecture before scale — retrofitting them after 10 lakh users is expensive and risks regulatory notices.

Sector Licences — Apply 12–18 Months Before You Need Them

If your revenue model extends into regulated verticals, licence timelines are your pacing constraint, not your technology:

• NBFC (RBI): Section 45-IA, RBI Act 1934. Minimum NOF of ₹10 crore. Application to regional RBI office; 12–18 month processing time in practice.
• Payment Aggregator (RBI): Minimum net worth ₹15 crore at authorisation (enhanced threshold as per 2024 PA guidelines). Online application via COSMOS portal.
• Insurance Broker (IRDAI): Category-specific; principal officer must clear IRDAI examination.
• FSSAI: Central licence if turnover > ₹20 crore or operations cross states. Apply on FoSCoS portal.

Apply early. A fintech startup that builds out a lending flow without an NBFC licence, or a D2C food brand that ships nationally without a central FSSAI licence, faces enforcement action and forced shutdown of that revenue stream.

Common Mistakes Founders Make — and How to Fix Them

1. Leaving IP in the founders' names. Fix: Execute an IP assignment deed before any fundraise. Include all code repositories, domain names, social handles, and patents.

2. Filing FC-GPR after the 30-day window. Fix: Calendar the allotment date and assign the FIRMS filing to a specific person. Set the deadline at Day 20, not Day 30.

3. Creating the ESOP pool after receiving a term sheet. Fix: Pass the ESOP resolution by shareholders at your first board-approved fundraising preparation meeting, well before any investor conversation.

4. Not registering for GST until mandatory. Fix: Register voluntarily when your monthly input costs (cloud, SaaS, consultants) exceed ₹50,000. The ITC recovery makes registration immediately net-positive.

5. Shops & Establishment registration ignored when opening new offices. Fix: Register in each new state within 30 days of commencing operations. Non-registration is a standalone violation under state labour law and flags on HR due diligence.

6. SHA clauses not reviewed against Articles of Association. Fix: When you execute a new SHA, ensure a lawyer reconciles it with the existing AOA. Conflicting provisions create enforceability risks.

Worked Example — An EdTech Startup's Path to ₹22 Crore Revenue

Velocity Learning Pvt. Ltd. (hypothetical, composite scenario):

• April 2024: Incorporated on MCA V3 via SPICe+. Face value ₹1 per share.
• June 2024: DPIIT recognition obtained. Section 80-IAC application filed.
• September 2024: ₹4 crore seed round — ₹3 crore from domestic angels, ₹1 crore from an NRI investor (Mauritius resident). FC-GPR for the NRI tranche filed on Day 47 post-allotment.
• Result: FEMA compounding initiated. Process took 4 months; compounding fees as computed under FEMA Compounding Procedure Rules 2000 and management time both consumed.
• December 2024: ESOP pool of 10% not created. Series A negotiations begin in February 2025.
• Result: VC demanded a 10% pre-money ESOP pool from a ₹30 crore pre-money valuation — effectively reducing founder effective valuation by ₹3 crore. Had the pool been created 6 months earlier at a ₹12 crore implied valuation, the same 10% would have been cheaper in economic terms.
• July 2025: Series A closed — ₹30 crore from a Singapore-registered fund (Mauritius SPV). FC-GPR filed on Day 22. FEMA-compliant CCPS priced on DCF valuation by a registered Category I Merchant Banker. FLA return filed by 15 July 2026.
• FY 2026-27: Revenue ₹22 crore. GST-compliant. PF and ESI registered (25 employees). POSH ICC constituted with external member. Brand trademark in Classes 41 and 42 filed (post-launch, creating a 7-month gap in priority protection during which a competitor filed in Class 41 — opposition proceedings pending).
• AY 2027-28: Section 80-IAC tax benefit claimed for Year 2 of the 3-year window.

The lesson: three legal slip-ups — late FC-GPR, post-term-sheet ESOP pool, and delayed trademark filing — each had measurable monetary and time costs that a structured legal calendar would have prevented entirely.

Key Takeaways

• Incorporate on MCA V3 using SPICe+, draft an investor-ready AOA from Day 1, and file DPIIT recognition within 60 days — the tax and process benefits compound from the first year.
• ESOP pool approval must precede your first investor meeting, not arrive with the term sheet. A 10% pool created pre-money can cost founders ₹3–5 crore in effective dilution if created at the wrong time.
• FC-GPR on FIRMS must be filed within 30 days of allotment — this is an absolute FEMA deadline. Missing it triggers compounding, management distraction, and a diligence flag.
• GST voluntary registration, PF, ESI, POSH, and Shops & Establishment must be treated as launch-stage obligations, not scale-stage ones. They are triggered by headcount and operations, not revenue.
• At ₹100 crore turnover, Audit Committee and NRC become mandatory for private companies under Sections 177 and 178 of the Companies Act 2013. CSR kicks in if net profit crosses ₹5 crore in any year.
• Trademark in every relevant Nice class before launch. File patents before public disclosure. The DPIIT startup expedited examination scheme makes this faster than most founders assume.
• Sector licences (NBFC, Payment Aggregator, FSSAI) take 12–18 months to obtain — start the application the moment a regulated revenue line enters your product roadmap, not when you are ready to scale it.