POSH Compliance

Sexual harassment at work isn't abstract. It's a live legal obligation under the POSH Act 2013 — and it goes much deeper than just having a complaint process. If you have 10 or more employees, you need an Internal Complaints Committee, a board-approved policy, mandatory annual training, and an annual Form 1 report filed with your District Officer. Most companies have pieced these together with templates and goodwill. Then an audit happens, or an investor due-diligence call comes, and gaps appear: a missing external ICC member, generic policy, no training records, Form 1 arrears spanning years. That's where a proper POSH compliance program saves time, reputation, and liability.

We handle the complete setup — ICC constitution to Board sign-off, policy drafting, training delivery, complaint handling procedurally, and Form 1 filing through SHe-Box. Within 10–15 working days, you move from unclear to audit-ready. After that, an annual retainer keeps you compliant year to year.

At a Glance

• Triggers at: 10 or more employees in aggregate (permanent, contract, intern, vendor, daily-wage). Gender-neutral threshold — not 10 women.
• Governed by: POSH Act 2013; Section 4 (ICC), Section 21 (annual report). Enforced by District Officer and Ministry of Women & Child Development.
• ICC structure: Presiding Officer (senior woman), 2+ internal members, 1+ external member from NGO/association. At least 50% must be women. Reconstituted every 3 years.
• Key obligation: Written POSH policy, ICC constituted, annual training for all employees, complaint handled within 90 days, Form 1 filed annually.
• Complaint window: Must be filed within 3 months of incident (extendable 3 more by ICC). Inquiry completed within 90 days. Interim relief (transfer, work-from-home, leave) available immediately.
• Scope includes: Office workplace, client sites, offsite events, transport, home office, virtual meetings, vendor and contractor personnel. Not just office walls.
• Penalty for non-compliance: Employer faces Section 21 penalties; responsible officers face criminal prosecution (imprisonment possible). Reputational damage in investor/customer diligence.

What's New for FY 2026-27

POSH compliance has tightened post the 2023 Supreme Court directions and MWD enforcement push. Here's what's changed:

• SHe-Box now mandatory: Form 1 filing shifted entirely to Ministry's SHe-Box portal. Offline and manual submissions no longer accepted. Real-time data integration with Saakshar.
• Remote and hybrid work confirmed in scope: Post-pandemic court rulings and MWD clarifications are now unambiguous: home office, Zoom calls, and client site visits are all 'workplace' for POSH. No excuse for digital-blind policies.
• Investor diligence includes POSH arrears: Due-diligence checklists now explicitly ask for Form 1 filing history and ICC constitution dates. Multi-year arrears are a material red flag. Startups raising capital need clean Form 1 records.
• Vendor and contractor scope expanded: Courts have extended POSH to temporary staff, gig workers, and vendor personnel deployed at your site — not just your permanent payroll.
• Complaint statistics now audit-tracked: Form 1 data feeds into public statistics. If you file 'zero complaints' for years and then a harassment claim surfaces in litigation, auditors cross-check and question veracity.

Why Proper POSH Compliance Matters — More Than You Think

• Regulatory liability is real: 10+ employees means the ICC is non-negotiable. Section 4 non-compliance is not a 'process gap' — it's grounds for district-level investigation and prosecution of your Board and HR leadership.
• The external member is the audit differentiator: We see this constantly: small and mid-cap audits flag ICC without an external member as a material weakness. It's the single most common defect. Courts have made clear — Section 4 means Section 4.
• Complaint data becomes evidence: If a harassment claim ever reaches court, your Form 1, complaint register, and ICC inquiry report become Exhibits. Proper records protect you; lack of them suggest cover-up.
• Form 1 arrears compound fast: One missed year becomes two, then five. SHe-Box now tracks filings. When you apply for a loan, lease space, or raise capital, lenders ask for Form 1 history. Arrears are a red flag.
• Investor due diligence is non-negotiable: PE/VC diligence now explicitly includes POSH. Missing Form 1 reports, gaps in ICC constitution, no training records — these kill or delay fund releases.
• Culture and retention go hand-in-hand: Employees know their rights post-MWD awareness campaigns. If they believe your complaint process is weak, it feeds distrust, disengagement, and attrition. A proper ICC signals 'we take you seriously'.

How It Actually Works

POSH compliance is not one-time. It's a calendar-based annual cycle with a setup front-load. Here's the sequence:

Step 1: POSH Audit & Gap Assessment (2–3 Days)

We review your existing ICC, current policy, training records, complaint register, Form 1 filing history, and Board minutes on POSH. We map gaps against Section 4, 19, 21, and the 2023 SC directions on remote work and contractor scope. We identify what's missing: external member, policy weaknesses, training lapses, Form 1 arrears, or complaint-handling process gaps.

Step 2: ICC Constitution & External Member Onboarding (3–5 Days)

We draft ICC appointment letters per Section 4 — nominating your Presiding Officer (senior woman), internal members, and identifying an external member from our approved NGO/association partner panel. External member undergoes onboarding on POSH procedural norms. Board approves all appointments via resolution. Appointment letters signed and documented.

Step 3: POSH Policy Drafting & Board Approval (2–3 Days)

We draft a board-approved POSH policy tailored to your workforce structure. Policy covers complaint definition, filing process, ICC authority, confidentiality, interim relief (transfer, leave, work-from-home), anti-retaliation clause, and scope (office, client sites, events, transport, virtual meetings). Board approves. Policy displayed at workplace and intranet. Circulation letter sent to all employees with signed acknowledgements.

Step 4: Annual Awareness Training Delivery (1–2 Days)

We conduct an all-employee awareness session covering: what is sexual harassment, your rights under POSH, how to file a complaint, ICC contact details, confidentiality, interim relief, anti-retaliation, and reporting timelines. A deeper ICC-member training covers procedural norms in Section 11. Attendance tracked, content slides/videos archived, feedback collected.

Step 5: Complaint Redressal Support (As-and-When)

If a complaint is filed, our team supports the ICC through the 90-day inquiry window. We ensure proper documentation — written complaint, evidence submission from both parties, opportunity to be heard, interim relief if needed, witness examination, and a final written report with findings and recommendations. We track deadlines, ensure confidentiality, prevent retaliation, and advise the employer on action.

Step 6: Form 1 Annual Report Filing on SHe-Box (1–2 Days)

Once the calendar year ends, we compile your Form 1 — the annual POSH report filed with your District Officer via the Ministry's SHe-Box portal. Form 1 includes: number of complaints received, disposed, pending, action taken on ICC recommendations, workshops held, and details of any unresolved complaints beyond 90 days. We file on your behalf, track receipt, and archive for audit.

A Real Example: When a Complaint Comes Through

Consider a mid-size fintech company with 80 employees across office, remote, and client site. In March 2026, an employee files a POSH complaint alleging harassment by her manager over the past 2 months (Slack messages, in-person comments at a client site). Here's what happens:

• Day 1–3: Filing & interim relief: Employee files written complaint with ICC. ICC chair grants interim relief immediately — manager transferred to a different team, complainant offered work-from-home option. Confidentiality maintained; only ICC, HR, and employer leadership aware.
• Day 4–60: Inquiry phase: ICC examines written submissions from both parties. Manager provides his account via email and video call. ICC calls 3 witnesses. Each gives statements. Slack logs, attendance records, client visit notes compiled. All parties get opportunity to be heard.
• Day 61–89: Report drafted & legal review: ICC drafts a detailed report with findings (whether harassment occurred). If substantiated, recommendations include: disciplinary action, compensation to complainant, reinstatement of benefits. Report reviewed for procedural correctness.
• Day 90: Report to employer & action: Report delivered to employer and both parties. Employer reviews and acts within 60 days — e.g., termination of manager, ₹3 lakh ex-gratia to complainant, mandatory anti-harassment training for respondent.
• Year-end: Form 1 filing: This complaint becomes a data point in Form 1: '1 complaint received, 1 disposed within 90 days, substantiated, disciplinary action taken.' You file Form 1 by 31 December showing compliance.

Without a proper ICC and process, the employer risks: public litigation at police or District LCC, court-ordered reinvestigation, reputational damage, and criminal prosecution. With a proper ICC, the matter is resolved confidentially, procedurally, and within the 90-day window.

Annual Compliance & Post-Filing Obligations

POSH compliance doesn't end with Form 1 filing. Here's what carries forward each year:

• Annual training (every fiscal year): All employees must undergo awareness training at least once per calendar year. New joinees get inducted on POSH within their first month. ICC members get annual procedural refresher. Training records retain for 3+ years.
• ICC reconstitution (every 3 years): Section 4 requires ICC to be reconstituted every 3 years. When a member's 3-year term ends or they resign, nominate a replacement. Board passes new resolution. New member onboarded.
• Form 1 filing (annual by Dec 31): Compile complaint stats (received, disposed, pending >90 days, substantiated vs. unsubstantiated), training data, and disciplinary actions. File via SHe-Box by year-end. Employer and ICC chair sign Form 1.
• Policy review & updates: Annual Board review of POSH policy to incorporate MWD circulars, court judgments, or org changes (e.g., expansion to new sites, shift to remote, acquisition). Changes Board-approved and recirculated.
• Complaint register maintenance: Keep a confidential complaint register recording date of complaint, parties, ICC inquiry dates, outcome, action taken, and complainant closure. Essential for Form 1 data and internal audit.
• External member continuity: If your external ICC member resigns, replace within 30 days. Board resolution and engagement letter must be in place. External member identity confidential.

Where POSH Compliance Goes Wrong — Common Mistakes We Fix

• Missing external ICC member: Employer constitutes Presiding Officer + 2 internal members, forgets the NGO/association external member. Section 4 is clear; courts have flagged this as material. Our first audit almost always finds this.
• Generic POSH policy, not Board-approved: Employer downloads a template policy, posts it on intranet, claims compliance. No Board approval. No tailoring to vendor/remote scope. No circulation acknowledgements. Audit reveals it's not 'Board-approved policy'.
• Training 'done once' but no records: HR conducts a training session, doesn't track attendance, doesn't archive slides or feedback. Year-end, no evidence training happened. Form 1 says 'training held', auditor finds nothing.
• Form 1 arrears stacking up: Year 1 Form 1 filed. Year 2 delayed. Year 3 forgotten. By Year 4, employer has 2+ years of arrears and faces enforcement action. SHe-Box now tracks this in real time.
• Confidentiality breached during complaint: ICC member discusses complaint details with friends, or complainant identified publicly. Employer doesn't enforce confidentiality. Retaliation concerns arise. The breach itself is an offense under Section 21.
• 90-day inquiry window missed: Complaint filed. ICC takes 5 months to complete inquiry. Courts consider this non-compliance; the complaint is deemed 'pending beyond 90 days' on Form 1, flagging the employer.
• Scope limited to office, ignoring remote/client sites: Policy covers office only. Complaint arises at a client site or Zoom meeting — employer argues 'outside our scope.' Courts and SC directions reject this. Scope must be wide.

What You Receive at the End

• ICC Appointment Letters, Board Resolution & Charter — Presiding Officer, internal members, external member, with terms and tenure
• Board-Approved POSH Policy — Tailored to your workforce, covering office, client sites, events, remote, vendor, and virtual-meeting scope
• Policy Display & Circulation Evidence — Photographs of intranet/notice-board display, signed employee acknowledgement forms
• Training Records & Certificates — Attendance sheets, trainer credentials, presentation slides/videos, participant feedback, ICC-specific training records
• Complaint Register Template & Handling Procedures — Confidential intake form, ICC inquiry process guide, 90-day tracker
• Form 1 Filing Receipts & SHe-Box Submission Proof — Submitted Form 1, SHe-Box receipt, filing confirmation from District Officer
• Annual Compliance Calendar & Checklist — Dates for training, ICC reconstitution, Form 1 filing, policy review, external member continuity

How to Get Started

Share your employee list (current head count, gender, employment type: permanent, contract, intern, vendor), any existing POSH policy, ICC appointment dates (if any), Form 1 filing history, and the name/designation of your nominated ICC Presiding Officer (or recommend one from your senior woman leadership). Within 2 days, we'll conduct a POSH audit and send you a gap report.

Once you approve the gap-closure plan, we move into setup: ICC constitution (with external member), policy drafting and Board approval, training delivery, and Form 1 filing support. Most employers are audit-ready and Form 1-compliant within 10–15 working days. After that, we stay on as annual retainer, handling training delivery each year and Form 1 filing by year-end. Contact our POSH compliance team to schedule your audit call.