ROC Annual Filing

Every private limited, public, and one-person company in India has to file two main returns with the Registrar of Companies each year — AOC-4 for the financials and MGT-7 (or MGT-7A for small companies and OPCs) for the annual return. Miss the deadline and the late fee is ₹100 per form per day with no cap, plus the risk of strike-off and a five-year director disqualification under Section 164(2).

ROC annual filing is not a single form you submit and forget. It is a 5-7 month cycle that starts with closing the books, runs through the statutory audit, the AGM, AOC-4 and MGT-7, and ends with surrounding forms like DIR-3 KYC, DPT-3, MSME-1, and BEN-2. We handle the whole cycle on one calendar so nothing slips through the gap between 'main' and 'small' filings.

At a Glance

• Who needs this: Every company registered under the Companies Act 2013 — private limited, public, OPC, Section 8, producer company — regardless of turnover, profit, or whether business was actually carried on during the year.
• Governing law: Companies Act 2013, Sections 92, 96, 129, 134, 137, 164, 204 and the Companies (Accounts) Rules, Companies (Management and Administration) Rules, and Companies (Appointment and Remuneration of Managerial Personnel) Rules.
• Key forms: AOC-4 (financial statements), MGT-7 / MGT-7A (annual return), ADT-1 (auditor), DIR-3 KYC, DPT-3, MSME-1, BEN-2, MGT-14 for board resolutions where required.
• AGM deadline: Within six months of FY end (so 30 September 2027 for the FY ending 31 March 2027), and within 15 months of the previous AGM.
• Filing deadlines: AOC-4 within 30 days of AGM; MGT-7 within 60 days of AGM; DIR-3 KYC by 30 September each year; DPT-3 by 30 June.
• Penalty for default: ₹100 per day per form with no upper cap; director disqualification under Section 164(2) after three consecutive years of non-filing; company strike-off under Section 248.
• Turnaround once books close: Audit and Board's Report 3-4 weeks; AGM notice 21 clear days; forms filed within the statutory windows after AGM.

What's New for FY 2026-27

MCA has tightened the V3 portal workflow and added several disclosure layers. Plan the year-end calendar around these changes, not around what worked last year.

• MCA V3 portal fully stable: All annual forms — AOC-4, MGT-7, ADT-1, DIR-3 KYC, DPT-3, MSME-1 — are filed on V3 with linked DSC-based signing and a unified login per stakeholder.
• DPDP Act compliance disclosures: Companies handling personal data must reflect data fiduciary obligations in the Board's Report and risk management section. The MCA disclosure framework now reads alongside the Digital Personal Data Protection Act.
• Mandatory dematerialisation extended: All non-small private companies must hold and transfer shares only in demat form. PAS-6 half-yearly reconciliation continues; the Board's Report must confirm compliance.
• Audit trail in accounting software: Rule 3(1) of the Companies (Accounts) Rules requires accounting software with an edit log running for the full year. Statutory auditors verify and report on this — non-compliance is now flagged in CARO 2020.
• MSME-1 scrutiny: Half-yearly disclosure of dues to MSMEs beyond 45 days is being cross-checked against TReDS data and Section 43B(h) of the Income-tax Act. Mismatch invites both ROC and tax action.
• SBO and BEN-2 enforcement: MCA is actively scrutinising significant beneficial ownership filings; layered shareholding structures are being asked to file BEN-2 even where the company believed there was no reportable SBO.

Who Must File and What That Pack Looks Like

The forms you file depend on company class, turnover, paid-up capital, and borrowings. Get the classification wrong and you either over-file (wasted cost) or under-file (penalty plus disqualification).

• Every company without exception: AOC-4, MGT-7 (or MGT-7A for small companies and OPCs), ADT-1 for auditor appointment, and DIR-3 KYC for every director.
• Small companies and OPCs: MGT-7A replaces MGT-7. Cash flow statement is not mandatory. Board meetings reduced to one per half-year. Still required to file AOC-4 in full.
• XBRL-tagged AOC-4: Listed companies, companies with turnover ₹100 crore or more, companies with paid-up capital ₹5 crore or more, subsidiaries of listed companies, and any company that has filed AOC-4 XBRL even once before.
• MGT-8 PCS certification: Required where paid-up capital is ₹10 crore or more, or turnover is ₹50 crore or more. The annual return is countersigned by a practising company secretary.
• Secretarial audit (MR-3): Listed companies; public companies with paid-up capital ₹50 crore or more; public companies with turnover ₹250 crore or more; any company with bank or PFI borrowings of ₹100 crore or more.
• CSR reporting: Net worth ₹500 crore, turnover ₹1,000 crore, or net profit ₹5 crore triggers Section 135. CSR-2 is filed separately on the V3 portal.
• DPT-3 and MSME-1: DPT-3 by every company that has accepted money other than equity; MSME-1 by every company with dues to MSME vendors beyond 45 days, half-yearly.

How It Actually Works

The cycle below assumes a 31 March 2027 year-end. Shift dates correspondingly for companies on a different financial year.

Step 1: Close the Books and Lock the Audit (April-July 2027)

Finalise trial balance, Schedule III financial statements, and tax positions. The statutory auditor verifies the audit trail in your accounting software for the full year — if the edit log was off for any period, expect a CARO qualification.

CARO 2020 reporting, related-party disclosures under Section 188, and MSME dues schedule are prepared alongside the financials, not bolted on at the end.

Step 2: Draft Board's Report and Annexures (August 2027)

The Board's Report under Section 134 includes the directors' responsibility statement, dividend recommendation, transfers to reserves, risk management framework, internal financial controls comment, and DPDP Act compliance note.

Annexures cover CSR (where applicable), secretarial audit MR-3, AOC-2 for related-party transactions, particulars of employees under Rule 5, and conservation of energy. Missing annexures are the single largest cause of ROC notices.

Step 3: Issue AGM Notice and Hold the AGM (Latest 30 September 2027)

AGM notice with explanatory statements goes out at least 21 clear days before the meeting. The notice carries the agenda, proxy form, route map for the venue, and remote e-voting details where applicable.

At the AGM, members adopt the financials, declare dividend, re-appoint or appoint the auditor, and approve any other agenda items. Minutes are entered in the minute book within 30 days.

Step 4: File AOC-4 / AOC-4 XBRL (Within 30 Days of AGM)

Audited financials, Board's Report with all annexures, auditor's report, CARO 2020 report, and CSR report (if applicable) are attached. The form is signed by a director and certified by a CA, CMA, or CS in practice.

Where XBRL applies, tagging uses the latest MCA-published taxonomy. We validate the instance document against the MCA validation tool before upload — a single tagging error rejects the filing.

Step 5: File MGT-7 / MGT-7A (Within 60 Days of AGM)

The annual return is built from the statutory registers — members, directors, transfers, charges, and meetings. It captures the position as on the AGM date, not the financial year end, and includes details of every share transfer during the year.

Where MGT-8 thresholds are crossed, a practising company secretary certifies the annual return alongside. Mismatch between the annual return and the register of members is the most common reason for MGT-7 queries.

Step 6: Surrounding Forms — DIR-3 KYC, DPT-3, MSME-1, BEN-2

DIR-3 KYC for every DIN holder by 30 September; DPT-3 for non-deposit borrowings by 30 June; MSME-1 half-yearly by 30 April and 31 October; BEN-2 within 30 days of receiving a BEN-1 declaration.

MGT-14 is filed for board resolutions requiring filing — adopting financials, approving Board's Report, borrowing limits, and related-party transactions where applicable to public companies.

Step 7: Master Data Verification and Year Closure

Once all forms are accepted, MCA master data on the V3 portal is verified against the company's own records. Any mismatch on paid-up capital, directors, or registered office is corrected through linked filings.

Statutory registers, minute books, and filing acknowledgments are archived. A compliance certificate is issued for the year — useful for due diligence, bank borrowing, and investor reporting.

A Real Example: A 31-Crore Turnover Private Limited Company

Consider a private limited company with paid-up capital of ₹2 crore, turnover of ₹31 crore for FY 2026-27, three directors, and 22 shareholders.

• Books closed and audit signed: 20 July 2027. CARO 2020 attached. Audit trail in software verified clean for full year.
• AGM held: 25 September 2027 at the registered office, with 18 members present and three proxies.
• AOC-4 filed: 20 October 2027 — well within the 30-day window. Non-XBRL because turnover is below ₹100 crore and capital below ₹5 crore.
• MGT-7 filed: 12 November 2027 — within 60 days. MGT-8 not required because both turnover and capital are below the threshold.
• DIR-3 KYC: Filed for all three directors by 28 September 2027, ahead of the 30 September cut-off.
• DPT-3: Filed on 12 June 2027 for unsecured loans from directors carried at year-end.
• MSME-1: Filed twice — on 22 April 2027 for the October-March half-year and on 18 October 2027 for the April-September half-year.

Total ROC engagement cost for the year stayed within budget, no late fees, no notices. The compliance certificate went into the company's data room for an investor diligence three months later.

What Backs Up Each Filing

Every form has source documents that the ROC may call for. Building these alongside the form (not after a notice) is what separates a clean filing from a costly one.

• AOC-4 supports: Signed audited financials, auditor's report, CARO 2020, Board's Report with annexures, CSR report if applicable, secretarial audit MR-3 if applicable, and the MGT-14 acknowledgment for adopting financials.
• MGT-7 supports: Updated registers of members, directors, transfers, charges, meetings; share certificate book; transfer deeds; AGM and board meeting minutes; MGT-8 if applicable.
• ADT-1 supports: Auditor's written consent, eligibility certificate under Section 141, board resolution appointing the auditor, and shareholder resolution at AGM.
• DIR-3 KYC supports: PAN, Aadhaar, passport for foreign directors, current address proof, photograph, mobile and email for OTP, DSC of the director and a CA / CS in practice.
• DPT-3 supports: Auditor's certificate on outstanding receipts, breakup of secured and unsecured borrowings, debenture details, and ICSI return where applicable.
• BEN-2 supports: BEN-1 declaration from the significant beneficial owner, identity and address proof, chain of ownership documents, and the trust deed or LLP agreement where the SBO is held through a non-individual vehicle.

Treat the document pack as a single audit-ready file per form. If the ROC sends a notice 18 months later, you should be able to pull a clean PDF — not chase emails.

Where It Goes Wrong

Most ROC penalties and director disqualifications trace back to a small list of repeating mistakes. None of them are about the form itself — they are about the cycle around the form.

• Treating AGM as a paperwork formality: Holding the AGM after 30 September without filing for extension is a continuing offence. The extension application has to be filed before the original deadline, not after.
• Filing AOC-4 with missing annexures: The Board's Report, CARO 2020, secretarial audit, and CSR report are all attachments. A filed AOC-4 with a missing CSR report is treated as defective and triggers a notice.
• Skipping DIR-3 KYC because nothing changed: The DIN deactivates on 1 October regardless. Reactivation costs ₹5,000 per director and the DIN cannot sign any form in the interim — which means MGT-7 cannot be filed.
• Ignoring MGT-7A eligibility: Filing MGT-7 when MGT-7A applies is not penalised, but filing MGT-7A when the company has crossed the small-company threshold is a defective filing.
• Missing the once-XBRL-always-XBRL rule: A company that filed AOC-4 XBRL once because of a one-time turnover spike must continue filing in XBRL every year thereafter, even if turnover drops below the threshold.
• Failing to file BEN-2 for layered structures: Where shares are held through LLPs, trusts, or foreign companies, the SBO determination is not optional. Non-filing exposes the company and the SBO to penalty under Section 90.
• Late ADT-1 after auditor change: ADT-1 must be filed within 15 days of the AGM where the auditor is appointed or reappointed. A delay here cascades into AOC-4 because the auditor's report is signed by an auditor not yet on the MCA record.
• Letting three years of default accumulate: Three consecutive years of non-filing of financial statements or annual returns disqualifies every director on the company's board under Section 164(2) — across every other company they sit on. The damage is rarely limited to one entity.

What You Receive at the End

• Filed AOC-4 (or AOC-4 XBRL) with SRN acknowledgment and full attachment set archived as PDF
• Filed MGT-7 or MGT-7A with SRN acknowledgment and reconciliation working to the registers
• Filed ADT-1 with auditor's consent and eligibility certificate on file
• DIR-3 KYC acknowledgment for every director, with DSC validity confirmed
• DPT-3, MSME-1, and BEN-2 acknowledgments where applicable
• AGM minutes, board minutes, attendance and proxy registers updated and signed
• Statutory registers updated to the AGM date, archived for the year
• MCA master data verification report comparing portal data with company records
• Year-end compliance certificate listing every filing, due date, and SRN
• Calendar for the next financial year with all due dates pre-loaded

How to Get Started

Share your last filed AOC-4 and MGT-7 acknowledgments, the latest signed financials, and a list of directors with their DINs. We map your company class, threshold position, and the exact form pack you need to file for FY 2026-27 — and quote against that pack, not against a generic price list.

Once engaged, we put the entire cycle on a shared calendar with you and your auditor. AGM date, notice date, audit signing date, and each form's filing date are locked at the start so there is no last-minute scramble in September. You sign the e-forms; we handle drafting, attachments, XBRL tagging, SRN tracking, and post-filing master data verification.