Streamlining ROC Compliance

Streamlining ROC Compliance

Every private limited company registered in India must file a defined set of forms with the Registrar of Companies (ROC) under the Companies Act 2013. Missing any one of these triggers an automatic additional fee of ₹100 per day per form — with no statutory cap and no provision for administrative waiver. The MCA V3 portal, which became the mandatory filing gateway from 2023, has made pre-filling smarter and rejections faster, but it has also made non-compliance far easier for the ROC to detect in real time. This guide gives you a working compliance calendar for FY 2026-27, concrete penalty calculations, and the exact steps to stay clear of defaults.

The 2026 ROC Compliance Calendar: Every Recurring Filing

For a typical private limited company whose financial year ends on 31 March 2026 and whose Annual General Meeting (AGM) is held on 30 September 2026, the recurring annual ROC filings fall as follows. Plot these dates at the start of every financial year and assign a named internal owner to each one.

Form DIR-3 KYC — Director KYC

Due date: 30 September every year.

Every individual who holds a Director Identification Number (DIN) must file DIR-3 KYC (web-based) by this date. If the director's mobile number or email is being updated for the first time, the full DIR-3 form with a Digital Signature Certificate (DSC) is required. For all other years, the simplified DIR-3 KYC-Web — an OTP-based reconfirmation — is sufficient.

Fee if missed: ₹5,000 per DIN, flat, as prescribed under the Companies (Registration Offices and Fees) Rules, 2014. The DIN is deactivated the day after the due date lapses, which blocks the director from signing or submitting any MCA V3 form until KYC is completed and the fee is paid.

Form ADT-1 — Auditor Appointment

Due date: Within 15 days of the AGM — 15 October 2026 for a 30 September AGM.

This form is filed when an auditor is first appointed or reappointed at the AGM under Section 139 of the Companies Act 2013. Required attachments include the auditor's written consent and certificate of eligibility, the board resolution recommending appointment, and the shareholders' ordinary resolution.

Form AOC-4 — Financial Statements

Due date: Within 30 days of the AGM — 30 October 2026 for a 30 September AGM.

AOC-4 carries the Balance Sheet, Profit & Loss Account, Directors' Report, Auditor's Report, and where applicable the Cash Flow Statement and Consolidated Financial Statements. The Directors' Report must comply with the mandatory disclosures under Section 134, including the statement on internal financial controls, related party transaction disclosures (with AOC-2 as an annexure where transactions are on a non-arm's-length or material basis), and the CSR report for companies to which Section 135 applies. For companies required to file in XBRL format under the Companies (Filing of Documents and Forms in Extensible Business Reporting Language) Rules, the XBRL instance document must accompany the form.

Form MGT-7 / MGT-7A — Annual Return

Due date: Within 60 days of the AGM — 29 November 2026 for a 30 September AGM.

MGT-7 applies to all companies other than small companies and One Person Companies (OPCs), which use the simplified Form MGT-7A introduced via the Companies (Management and Administration) Amendment Rules, 2022. A company qualifies as a small company under Section 2(85) of the Companies Act 2013 if its paid-up capital does not exceed ₹4 crore and its turnover does not exceed ₹40 crore (thresholds as last amended — verify current thresholds at the time of filing).

From FY 2020-21 onwards, MGT-7 must be certified by a Practicing Company Secretary (PCS) where paid-up share capital is ₹10 crore or more, or annual turnover is ₹50 crore or more. Below these thresholds, the form may be self-certified by a director.

Form DPT-3 — Return of Deposits and Exempt Deposits

Due date: 30 June each year (covering the period ending 31 March).

Every company that has outstanding amounts classified as "exempt deposits" under Rule 2(1)(c) of the Companies (Acceptance of Deposits) Rules, 2014 must file DPT-3. This includes director loans, shareholder loans, and inter-corporate borrowings — not merely public deposits. Many small companies miss this filing under the incorrect assumption that DPT-3 applies only to companies accepting deposits from the public.

Form MSME-1 — Half-Yearly Return of Dues to MSME Suppliers

Due dates: 30 April (for the October–March half-year) and 31 October (for the April–September half-year).

Specified companies — broadly those whose paid-up capital or turnover crosses prescribed thresholds — must report dues outstanding for more than 45 days to suppliers registered under the Micro, Small and Medium Enterprises Development (MSMED) Act 2006. A NIL return must be filed where there are no such dues. Non-filing is flagged automatically on MCA V3.

Understanding the Penalty Arithmetic: A Worked Example

Penalties for ROC defaults accumulate without a ceiling and are payable before the portal accepts the late filing. They cannot be waived by the ROC directly; reduction or waiver requires compounding under Section 441, which involves an application, an order, and its own cost.

Scenario: Clearpath Technologies Private Limited has three directors and holds its AGM on 30 September 2026. Due to a delayed audit and a change of CA firm, the company does not file AOC-4 or MGT-7 until 17 April 2027. All three directors also miss their DIR-3 KYC deadline.

AOC-4 additional fee: Due date: 30 October 2026. Actual filing: 17 April 2027. Delay: 168 days. ₹100 × 168 = ₹16,800

MGT-7 additional fee: Due date: 29 November 2026. Actual filing: 17 April 2027. Delay: 138 days (December: 31 + January: 31 + February: 28 + March: 31 + 1–17 April: 17 = 138). ₹100 × 138 = ₹13,800

DIR-3 KYC reactivation fee (three directors, all missed the 30 September 2026 deadline): ₹5,000 × 3 = ₹15,000

Total regulatory outflow for one year of delayed filing: ₹45,600 — before professional fees, which typically attract a premium when filed under time pressure.

Extend the scenario slightly. If the same company also missed DPT-3 due on 30 June 2026 and files it alongside the other forms on 17 April 2027, the delay is 290 days. Additional penalty: ₹100 × 290 = ₹29,000 for that single form alone. Four missed filings across a modest private limited company can cost over ₹74,000 in pure penalties — with zero business benefit received in return.

How to File AOC-4 and MGT-7 on MCA V3: Step-by-Step

The MCA V3 portal (www.mca.gov.in) is the mandatory filing gateway. Both forms go through the same general sequence, with some form-specific requirements.

Preparing and Filing AOC-4

1. Approve financials at a Board Meeting. The Board must approve the audited financial statements at a board meeting held before the AGM. The auditor's report must be signed before this meeting — a draft report will not suffice.
2. Finalise the Directors' Report. Ensure compliance with Secretarial Standards SS-2 (issued by ICSI) and all Section 134 disclosures. Attach AOC-2 if related party transactions on non-arm's-length or material terms exist.
3. Download a fresh copy of Form AOC-4 from the MCA V3 portal on the day of preparation. Do not reuse the prior year's downloaded form — version mismatches cause rejection.
4. Prepare XBRL (if applicable). Use the current taxonomy published on the MCA website. Validate the instance document using the XBRL validation tool before attaching it to the form.
5. Attach signed PDFs. Required: signed Balance Sheet and P&L, Cash Flow Statement (if applicable), Auditor's Report, Directors' Report, and AOC-2.
6. Affix DSC. The form must be digitally signed by a director (DIN-linked DSC) and the certifying professional (CA or PCS) where applicable.
7. Upload and pay. The portal calculates government filing fee based on authorised share capital and appends any additional late fee automatically. Download and preserve the SRN (Service Request Number) acknowledgement.

Preparing and Filing MGT-7 / MGT-7A

1. Compile the Annual Return data. You will need: current registered office address, NIC code for principal business activity, shareholding pattern as at 31 March 2026, all changes in directors and KMP during the year, names of shareholders holding 5% or more, and indebtedness figures at year-end.
2. Confirm which form applies. Use MGT-7A for small companies and OPCs; MGT-7 for all others.
3. Obtain PCS certification where required (paid-up capital ≥ ₹10 crore or turnover ≥ ₹50 crore). The PCS affixes their DSC and certificate of practice number.
4. Use the MCA V3 pre-validation check before final submission. This catches DIN mismatches, name discrepancies between the MCA register and the form, and missing mandatory fields — before you enter the payment gateway.
5. File and archive. Save the SRN, the filed PDF, and all attachments for a minimum of eight years per the Companies Act record-retention norms.

Director KYC Under DIR-3: The Disqualification Risk You Cannot Ignore

Section 164(2) of the Companies Act 2013 disqualifies a person from being appointed or continuing as a director of any company for five years if the company of which they are or were a director has failed to file its annual returns or financial statements for any continuous period of three financial years. No order is required — the disqualification operates by operation of law the moment the third year of default is established.

This has a cascading effect. A director sitting simultaneously on three company boards, where one of those companies lapses into three-year non-filing, faces disqualification across all three boards. Banks now routinely verify DIN status through the MCA V3 database before processing corporate credit facilities or director-guaranteed loans.

Steps to actively monitor disqualification risk:

1. Log in to the MCA V3 director services portal and verify the "DIN Status" for every DIN you hold or manage. Status should read "Approved." Any other status — "Deactivated," "Disqualified" — requires immediate action.
2. Check the filing status of every company across which your directors hold positions — not just the company you are managing. Use the "Master Data" lookup on MCA V3 for each company CIN.
3. Collect Form DIR-8 (declaration of non-disqualification) and Form MBP-1 (disclosure of interest in other entities) from all directors at the first Board Meeting of each financial year. These are statutory requirements under Sections 164(2) and 184, and their absence is flagged in the Secretarial Audit.
4. Set an internal deadline of 15 September each year for DIR-3 KYC initiation — two weeks before the statutory 30 September date — to accommodate directors who are travelling or whose DSC tokens need renewal.

Event-Based Filings That Catch Companies Off Guard

Annual deadlines are only half the compliance picture. Event-triggered filings have the same ₹100-per-day penalty and a 30-day window in most cases. The failure mode is identical in every instance: the board takes an action, operations move on, and the CS or CA is notified three months later.

• Form PAS-3 — Return of allotment: Due within 30 days of allotment of shares, whether for cash, consideration other than cash, or ESOP exercise. Each tranche of an ESOP grant that involves an actual allotment triggers a separate PAS-3.
• Form CHG-1 / CHG-4 — Charge creation or modification: Due within 30 days of the charge instrument date. Missing this window does not merely attract a late fee — an unregistered charge becomes void against a liquidator and any creditor of the company, destroying its priority status entirely.
• Form DIR-12 — Change in directors or KMP: Due within 30 days of the Board Meeting at which the appointment or resignation was noted. Startups going through restructuring frequently delay this, creating a mismatch between the MCA register and the company's actual board composition.
• Form INC-22 — Change of registered office within the same ROC jurisdiction: Due within 30 days of the board resolution. A shift to a different ROC jurisdiction requires Regional Director approval and Form INC-23 in addition.
• Form ADT-3 — Auditor resignation: Filed by the resigning auditor within 30 days. The company must simultaneously ensure a replacement auditor is appointed to fill the casual vacancy and ADT-1 is filed for the new appointment.
• Form SH-7 — Increase in authorised share capital: Due within 30 days of the resolution. Every startup doing a fundraise round that requires an authorised capital increase before allotment needs this form completed before PAS-3.

The practical fix: Every board meeting agenda that approves any of these actions must auto-generate a compliance task in your secretarial system, assigned to the CS or CA with a 25-day internal deadline — five days before the statutory 30, to allow for one round of corrections.

Building a Single Source of Truth for Secretarial Records

Fragmented record-keeping is the structural root cause of most ROC defaults. The typical failure pattern: signed financials sit with the CA firm, board minutes live as emailed Word documents, share certificates are held by a third-party registrar, and DIR-8 declarations were collected years ago and never digitised. When the annual return season arrives, critical data is missing or mismatched, rushing everyone into error-prone last-minute filings.

Your unified secretarial records system must contain at minimum:

• Register of Members (Section 88): Folio numbers, allotment dates, transfer history, and current holdings. Must be updated within 7 days of any change. Mismatches between this register and the PAS-3 history cause MCA V3 rejections during annual return filing.
• Register of Directors and KMP (Section 170): DIN, PAN, residential address, date of appointment, category (executive, non-executive, independent, nominee), and changes during the year.
• Register of Charges (Section 85): Charge particulars, creation date, CHG-1 SRN, modification history, and satisfaction date upon closure.
• Minutes Books: Board meeting minutes compliant with Secretarial Standard SS-1, and general meeting minutes compliant with SS-2, serially numbered and signed by the Chairman within 30 days of the meeting.
• Director Disclosures: Form MBP-1 and DIR-8 collected from all directors at the first Board Meeting of each financial year, filed in the company's statutory records.

These records should be maintained in a secretarial software platform that is version-controlled, cloud-accessible to the CS and directors, and capable of exporting data in MCA-compatible formats. The MCA V3 portal pre-fills certain fields from its own database — any discrepancy between your internal records and the MCA master data will cause a form validation failure. Reconciling these two sets of data in August, before the AGM and filing season begins, eliminates the most common source of last-minute rejections.

Common Mistakes and Pitfalls to Avoid

Using a stale form version

MCA V3 updates forms each time rules are amended. A form downloaded in April may be invalid by September. Always download the current version from the portal on the day of preparation — do not recycle prior-year files.

Filing AOC-4 with an unsigned or draft audit report

The audit report must be formally signed before AOC-4 is filed. Companies sometimes file a provisional version to beat the deadline, then discover that a revised filing creates its own legal complications without erasing the original. If the audit is running late, address the cause — extension of the AGM under Section 96(1) with ROC approval is available in genuine cases of hardship.

Treating DPT-3 as a "big company" form

Any director loan, shareholder loan, or inter-corporate borrowing that falls under the "exempt deposit" definition in Rule 2(1)(c) must be disclosed in DPT-3. This applies to virtually every startup that has borrowed from its founders. Non-filing exposes the company to prosecution under Sections 73 and 76 of the Companies Act — a consequence disproportionate to the simplicity of the form.

Miscounting the deadline from the financial year end rather than the AGM date

AOC-4 is due 30 days from the AGM. MGT-7 is due 60 days from the AGM. If your AGM is held on 15 September 2026, AOC-4 is due 15 October 2026 — not 30 October. Even a two-week miscalculation here can put you inadvertently into late-fee territory.

Allowing DSC tokens to expire mid-cycle

DSCs have a validity of 2 or 3 years depending on the class. An expired DSC prevents the director from signing any MCA form. Audit expiry dates at the start of each financial year and renew at least 45 days before expiry. Directors who travel frequently should keep their DSC tokens with their CA or CS for timely renewal.

Assuming MSME-1 is not required when dues are zero

The obligation to file MSME-1 exists independently of whether any dues are outstanding. A NIL return must be filed by the due date. The MCA V3 system automatically flags specified companies that have not filed, creating an ROC scrutiny trail.

Engaging a Practicing Company Secretary: Structuring the Right Retainer

A Practicing Company Secretary — an ICSI member holding a Certificate of Practice — is the most cost-effective external resource for ongoing ROC compliance. The right structure is a retainer for recurring filings plus event-based billing for triggered forms.

The annual retainer should cover: DIR-3 KYC coordination for all directors, DPT-3, both MSME-1 half-yearly returns, ADT-1, drafting and filing AOC-4 and MGT-7/MGT-7A (with certification where thresholds apply), annual director disclosure collection (MBP-1, DIR-8), and a quarterly compliance status report presented to the board as a standing agenda item.

Event-based work — PAS-3, CHG-1/CHG-4, DIR-12, INC-22, SH-7, ADT-3, and similar forms — should be billed per occurrence at agreed rates with contractual turnaround times. Including turnaround time SLAs in the retainer agreement eliminates the most common friction point: calling the PCS on day 28 of a 30-day window and finding them unavailable.

For companies where paid-up capital exceeds ₹10 crore, the Secretarial Audit under Section 204 is mandatory. The resulting Secretarial Audit Report in Form MR-3 must be annexed to the Directors' Report filed with AOC-4. Engaging the PCS for the secretarial audit in June — well before the September AGM — gives them time to identify and remediate compliance gaps before they appear in the public record.

Key Takeaways

• Calculate deadlines from the AGM date, not the financial year end. AOC-4 is due 30 days post-AGM; MGT-7/MGT-7A is due 60 days post-AGM. A 30 September 2026 AGM means 30 October and 29 November deadlines respectively.
• The ₹100-per-day late fee has no statutory ceiling and cannot be administratively waived. A 168-day delay on AOC-4 alone costs ₹16,800; combine it with MGT-7, DPT-3, and three missed DIR-3 KYC filings and total penalties for one company can exceed ₹74,000 in a single filing cycle.
• DIR-3 KYC by 30 September is an absolute prerequisite for everything else. A deactivated DIN blocks that director from signing or submitting any MCA form, creating a cascading block on every other annual filing.
• DPT-3 applies to director and shareholder loans, not just public deposits. Any company that has borrowed from its directors or shareholders must file DPT-3 annually, regardless of company size.
• Event-based filings must be triggered at the board meeting, not weeks later. PAS-3, CHG-1, DIR-12, and SH-7 each carry a 30-day window from the date of the underlying board action. A missed charge registration can render the charge void against liquidators — a consequence far more serious than the late fee.
• Unified secretarial records eliminate the single biggest source of last-minute filing errors. Reconcile internal registers against the MCA V3 master data each August, before the AGM and filing season begins.
• Section 164(2) disqualification does not scale with company size or turnover. A two-director startup faces identical five-year disqualification risk as a large enterprise if its company accumulates three consecutive years of filing defaults. Compliance discipline built at small scale is structurally cheaper than remediation after growth.