ROC Compliance for Pvt Ltd Companies

ROC Compliance for Pvt Ltd Companies: Complete FY 2026-27 Guide

Every Private Limited Company registered in India — whether it invoiced ₹10 crore last year or sat dormant — must file a fixed set of forms with the Registrar of Companies (ROC) under the Companies Act, 2013. In FY 2026-27, with the MCA V3 portal now the sole filing interface and the MCA running active strike-off drives against non-compliant entities, the cost of missing a deadline has never been higher. This guide gives you every due date, penalty formula, and step-by-step sequence you need to stay clean.

What ROC Compliance Actually Covers

ROC compliance is the collective term for all statutory disclosures a Pvt Ltd company must make to the Ministry of Corporate Affairs (MCA) through the Registrar of Companies. It covers three broad categories:

• Annual filings — financial statements, annual return, director KYC, deposit returns
• Event-based filings — triggered by changes in directors, share capital, registered office, charges, or resolutions
• One-time or periodic filings — beneficial ownership declarations, MSME payment returns, auditor appointments

The obligation applies regardless of turnover, activity level, or whether the company has started operations. A company incorporated on 15 March 2026 still owes DIR-3 KYC for its directors by 30 September 2026. Dormant status under Section 455 of the Companies Act, 2013 reduces some obligations but does not eliminate them.

In FY 2026-27, two developments have raised the stakes. First, the MCA has migrated substantially all company filings to the MCA V3 portal (v3.mca.gov.in), which uses web-based forms rather than downloadable PDFs, integrates directly with the Income Tax PAN-Aadhaar database for director validation, and auto-populates company master data to reduce keying errors. Second, the MCA's Significant Beneficial Owner (SBO) enforcement and suo-motu strike-off campaigns are running simultaneously, meaning a quiet inactive company is no longer insulated from regulatory action.

Your Annual ROC Compliance Calendar for FY 2026-27

The reference financial year for your annual filings in 2026 is FY 2025-26 (1 April 2025 – 31 March 2026). Your AGM for that year must be held by 30 September 2026, and most annual filing deadlines are pegged to the AGM date. Plan backwards from 30 September 2026.

> Practical note: The 30-day and 60-day windows are calendar days from the date of the AGM, not from 30 September. If you hold the AGM on 20 September 2026, AOC-4 is due by 20 October 2026 and MGT-7 by 19 November 2026.

AOC-4: Filing Audited Financial Statements

What the Form Contains

Form AOC-4 is the vehicle for submitting your company's Board of Directors' Report, audited Balance Sheet, Profit & Loss Account, Cash Flow Statement, Notes to Accounts, and the auditor's report to the ROC. For FY 2025-26, companies must also include the Corporate Governance Report (if applicable), the CSR Annual Report (for companies meeting Section 135 thresholds), and the statement of related-party transactions.

Companies with subsidiaries or associates file AOC-4 CFS (Consolidated Financial Statements) as a separate additional form.

Step-by-Step AOC-4 Filing on MCA V3

1. Log in to v3.mca.gov.in with your company's authorised signatory credentials.
2. Navigate to MCA Services → E-Filing → Company Forms Filing → AOC-4.
3. Enter your CIN (Corporate Identification Number) — the form auto-populates company name, registered address, and director details from the MCA master database. Verify these against your actual records before proceeding.
4. Upload the Board Report, standalone financials, and (if applicable) consolidated financials as PDF attachments. Each PDF must be digitally signed by the auditor using their UDIN (Unique Document Identification Number) generated on the ICAI portal.
5. The form is signed by a director using a Class 3 DSC (Digital Signature Certificate) and, where required, certified by a practising Company Secretary (CS) or CA.
6. Pay the Registrar's filing fee — fee slabs are linked to authorised share capital and are displayed on-screen before submission.
7. Download the SRN (Service Request Number) acknowledgment. Keep this for your records — it is proof of filing.

What Goes Wrong

The most common AOC-4 rejection on MCA V3 is a UDIN mismatch — the auditor generates the UDIN for the standalone financials but forgets to generate a separate UDIN for the consolidated financials or the Board Report annex. Verify all UDINs on udin.icai.org before attaching PDFs to the form. A second frequent issue is a DSC expiry: many directors renew their DSC only when it stops working, which often coincides with the filing deadline itself. Check DSC validity at least 60 days before the AOC-4 due date.

MGT-7 and MGT-7A: Annual Return Filing

MGT-7 vs MGT-7A — Which Form Do You File?

Form MGT-7 applies to all Pvt Ltd companies except those classified as small companies or One Person Companies (OPCs).

Form MGT-7A applies to small companies (paid-up capital ≤ ₹4 crore AND turnover ≤ ₹40 crore, as per the current MCA notification) and OPCs. MGT-7A is a shorter, simpler form introduced to reduce compliance burden on smaller entities.

If your company crosses the small company threshold mid-year, you default to MGT-7 for that year's filing.

What the Annual Return Discloses

The annual return (Section 92 of the Companies Act, 2013) is a snapshot of the company's structure as at the last day of the financial year (31 March 2026 for FY 2025-26). It must include:

• Registered office address and CIN
• Type of company and principal business activities
• Details of registered charges
• Complete list of members as on 31 March 2026 with shareholding pattern
• Complete list of debenture holders (if any)
• Details of transfers of shares during the year
• Directors and Key Managerial Personnel (KMP) — names, DINs, designations
• Meetings held during the year (Board, AGM, EGM) with attendance details
• Remuneration of directors and KMP
• Penalties imposed during the year and details of compounding applications

How to File on MCA V3

MGT-7 is a web-based form on MCA V3 — there is no downloadable version. The form is pre-populated with DINs and director names from MCA master data, but shareholding pattern, transfer details, and meeting data must be entered manually. For a company with more than 50 shareholders, prepare the shareholding data in an Excel sheet first; the form allows bulk upload. The form must be certified by a practising CS (for companies with paid-up capital above ₹10 lakh or turnover above ₹50 lakh) or signed by a director for small companies filing MGT-7A.

DIR-3 KYC: Every Director Must Act by 30 September 2026

Every individual holding a DIN (Director Identification Number) — whether or not actively associated with any company — must complete DIR-3 KYC annually. The deadline for FY 2025-26 is 30 September 2026. A missed deadline deactivates the DIN immediately, making it impossible to file any form on behalf of any company until the KYC is completed with a ₹5,000 late fee.

Two Modes of Filing

DIR-3 KYC Web (for directors who completed KYC last year with no change in mobile number or email): A quick OTP-based re-verification on the MCA V3 portal. Takes under 10 minutes. No DSC required. This applies to the majority of directors.

DIR-3 KYC Form (for first-time KYC or when mobile/email changes): A full form requiring Class 3 DSC of the director and certification by a practising CA or CS. Documents required include self-attested PAN, Aadhaar, passport-size photo, and proof of address.

What Changed in 2026

The MCA has integrated DIR-3 KYC verification with the Income Tax AIS/TIS (Annual Information Statement / Tax Information Summary) database. If the PAN-Aadhaar linkage on the Income Tax portal is incomplete or if there is a name mismatch between the PAN and Aadhaar records, the DIR-3 KYC submission will fail even after OTP verification. Directors should verify their PAN-Aadhaar linkage status on incometax.gov.in at least 30 days before 30 September 2026.

DPT-3 and MSME-1: The Returns Most Companies Ignore

DPT-3: Return of Outstanding Loans by 30 June 2026

Form DPT-3 must be filed by every company that has outstanding loans, deposits, or any amount received that is not treated as a deposit — including unsecured loans from directors, shareholders, and related parties — as at 31 March 2026. The due date is 30 June 2026.

This is one of the most missed forms among small Pvt Ltd companies, largely because founders do not realise that a director loan to the company triggers a DPT-3 obligation. The exemption under Rule 2(1)(c) of the Companies (Acceptance of Deposits) Rules, 2014 covers amounts received from directors, but the disclosure in DPT-3 is still mandatory even for exempt amounts. Non-filing attracts a penalty of ₹5,000 plus ₹500 per day for continuing default on the company, and equivalent amounts on every officer in default.

MSME-1: Half-Yearly Outstanding Payment Return

If your company has payments outstanding for more than 45 days to MSME-registered vendors, you must file Form MSME-1 twice a year:

• For April – September 2026 (H1 FY 2026-27): due by 31 October 2026
• For October 2026 – March 2027 (H2 FY 2026-27): due by 30 April 2027

The form requires vendor MSME registration details (Udyam Registration Number), the amount outstanding, and the reason for delay. If your company has no MSME vendors or no amounts outstanding beyond 45 days, you still need to confirm this — some companies file a nil return to create an audit trail.

Event-Based Filings You Cannot Ignore

Several corporate actions trigger standalone filings that must be completed within tight windows — typically 15 to 30 days of the event. Missing these windows compounds quickly because the penalty runs from the date of the event, not from when you discover the oversight.

MGT-14 is particularly important in 2026. Any resolution for borrowing beyond limits under Section 180(1)(c), any resolution to amend the MoA or AoA, and any resolution for significant transactions require MGT-14 filing. The MCA V3 portal flags non-filed resolutions during the annual return process, which can block MGT-7 certification.

Significant Beneficial Owner (SBO) Disclosures

Every Pvt Ltd company must identify and maintain records of its Significant Beneficial Owners (SBOs) — individuals who ultimately own or control 10% or more of shares, voting rights, or dividend rights, or who exercise significant influence or control over the company through any structure.

How the disclosure chain works:

1. Any person who meets the SBO threshold sends Form BEN-1 (declaration of SBO status) to the company.
2. The company files Form BEN-2 with the ROC within 30 days of receiving BEN-1.
3. The company maintains a Register of SBOs (BEN-3) internally.

For companies with complex shareholding — involving trusts, foreign holding entities, or multi-layered corporate structures — mapping the SBO chain must be documented in writing, reviewed at every board meeting, and updated whenever the ownership structure changes. The MCA's 2026 inspection guidelines specifically flag SBO non-compliance as a priority enforcement area.

Penalties, Disqualification and Strike-Off Risks

The ₹100/Day Formula — Worked Example

Take InnovateTech Pvt Ltd, incorporated with 2 directors. It holds its AGM on 30 September 2026. AOC-4 is due by 30 October 2026; MGT-7 is due by 29 November 2026. The company's finance team gets delayed and files both forms on 18 April 2027 — 170 days late for AOC-4 and 140 days late for MGT-7.

AOC-4 penalty (Section 137(3), Companies Act 2013):

• Company: ₹10,000 (base) + ₹100 × 170 days = ₹27,000
• Director 1: ₹10,000 + ₹100 × 170 = ₹27,000
• Director 2: ₹10,000 + ₹100 × 170 = ₹27,000
• AOC-4 total exposure: ₹81,000

MGT-7 penalty (Section 92(5), Companies Act 2013):

• Company: ₹50,000 (base) + ₹100 × 140 days = ₹64,000
• Director 1: ₹50,000 + ₹100 × 140 = ₹64,000
• Director 2: ₹50,000 + ₹100 × 140 = ₹64,000
• MGT-7 total exposure: ₹1,92,000

Combined penalty liability for two missed annual forms: ₹2,73,000 — on a routine compliance task that would have cost under ₹15,000 in professional fees if filed on time. And this is before any DPT-3 or MSME-1 defaults are factored in.

Section 164(2) Disqualification and Strike-Off

A director who is an officer of a company that defaults on annual filing for two consecutive financial years becomes disqualified under Section 164(2) of the Companies Act, 2013 — barred from being appointed or continuing as a director in any company for five years. This disqualification applies across all companies the individual is a director of, not just the defaulting company. The MCA publishes annual disqualification lists, and banks, investors, and regulators cross-check these lists during due diligence.

Separately, the ROC can strike off a company under Section 248 if it has not filed financial statements or annual returns for two consecutive years. Strike-off removes the company's legal existence; reviving it through NCLT (National Company Law Tribunal) under Section 252 is expensive, time-consuming, and not always successful.

Common Mistakes That Lead to ROC Penalties

1. Treating the AGM date as the filing deadline. The AOC-4 deadline is 30 days after the AGM, not the AGM date itself. Confusing the two means you think you have buffer when you don't.

2. Filing MGT-7 before DSC renewal. If a director's DSC expires between the AGM and the MGT-7 deadline, the form cannot be certified. DSC renewal takes 2–5 working days — do not leave it for the last week of November.

3. Skipping DPT-3 because there are "no deposits." Unsecured loans from promoters and directors must be reported in DPT-3 even though they are exempt from deposit regulations. Many companies discover this only during a bank credit audit.

4. Not filing DIR-12 for a resigned director. A director who resigns submits their resignation letter to the company. The company then has 30 days to file DIR-12. Many small companies skip this, leaving the resigned director's name active on the MCA master — which can haunt the director in future ventures.

5. Mixing up MGT-7 and MGT-7A applicability. A company that grew beyond small company thresholds mid-year sometimes files the shorter MGT-7A. The ROC can treat this as a non-filing, triggering penalties.

6. Forgetting MGT-14 for board resolutions. Resolutions passed at board meetings for borrowings, major investments, or amendments to constitutional documents require MGT-14 filing. This is missed in roughly 40% of small company compliance reviews.

7. Filing AOC-4 without a valid UDIN. UDINs expire 60 days after generation. If the auditor generated the UDIN for the financial statements at the time of signing but the filing happens much later, the UDIN may have lapsed. Verify UDIN validity on udin.icai.org immediately before uploading.

How to Build Your ROC Compliance System on MCA V3

The MCA V3 portal has built-in tools you should use proactively rather than reactively:

• Company Master Data check: Verify your registered office address, directors list, and authorised/paid-up capital on v3.mca.gov.in quarterly. Discrepancies between MCA master data and your internal records cause form rejections.
• Filing history view: Review all past SRN-acknowledged filings to confirm none are in "Resubmission Required" or "Rejected" status. A rejected form is not a filed form.
• DSC registration: All authorised signatories must have their DSC registered on MCA V3 before attempting any filing. Registration takes one business day and requires a one-time verification against PAN.
• Compliance calendar integration: Map every due date from the table in the second section of this guide against your internal project management or finance system. Set reminders at T-60, T-30, and T-7 days for every annual filing.

Pair this with a quarterly compliance review — check DIR-3 KYC status of all directors, verify DSC expiry dates, scan for any event-based triggers (new share allotments, director changes, property acquisitions that create charges), and ensure all resolutions passed are cross-checked against MGT-14 filing requirements.

Key Takeaways

• AOC-4 is due 30 days after AGM; MGT-7 is due 60 days after AGM. For an AGM held on 30 September 2026, these deadlines fall on 30 October 2026 and 29 November 2026 respectively.
• DIR-3 KYC must be completed by every DIN holder by 30 September 2026, irrespective of whether they are active directors. A missed deadline deactivates the DIN with a ₹5,000 reactivation fee.
• DPT-3 by 30 June 2026 is mandatory even for companies with director loans only — exemption from deposit regulations does not mean exemption from disclosure.
• A 170-day delay on just two forms (AOC-4 + MGT-7) for a 2-director company can generate over ₹2.7 lakh in penalties — far exceeding the annual cost of structured compliance support.
• Two consecutive years of annual filing default triggers Section 164(2) director disqualification — a five-year bar from directorship across all companies.
• Event-based filings (DIR-12, PAS-3, CHG-1, MGT-14) have 15–30 day windows that run from the date of the event, not from year-end. Track corporate actions in real time.
• SBO disclosures (BEN-2) are an active MCA enforcement priority in 2026. Companies with indirect or trust-based shareholding structures should map their SBO chain now and file or update BEN-2 before the next inspection cycle.