In an old Panchatantra-style tale, a cart-builder in a trading town built a sturdy cart to carry four sacks of grain to market every week. It worked well: the axle held, the wheels turned true, and he made a fair profit. As business grew, he began loading a fifth sack, then a sixth, quietly pleased with how much further his cart could go. Nobody had told him the axle wasn’t built for six. The cart held on the smooth road out of town. Then the axle gave way in the middle of the crowded market square, scattering grain across the cobblestones in front of the very customers he had spent years winning over.
The cart-builder hadn’t done anything reckless. He simply kept adding weight to a frame that had a limit he’d never checked.
Indian founders do something similar with HR compliance. A startup that runs smoothly with six employees, one shared spreadsheet, and a WhatsApp group for leave requests can find itself out of step with at least four separate laws the moment it hires its tenth person, not through carelessness, but because nobody checked what that tenth hire changes. No notification arrives from the government. The obligation simply exists from that day, whether or not the founder knows it.
Founders rarely wake up one morning deciding to ignore compliance. More often, they simply don’t realise that every new hire quietly changes the legal responsibilities of the business.
A startup HR compliance checklist is a practical, headcount-triggered roadmap of the statutory HR obligations that become legally mandatory as an Indian company grows, including POSH, ESI, gratuity, maternity benefit, and Provident Fund, most of which activate at the 10- and 20-employee marks. Rather than treating compliance as a one-time audit, it helps founders prepare for the next milestone before the law catches up with them.
Figures and thresholds in this section reflect Indian labour law as of the publication date above. Employment law changes periodically; confirm current requirements with a qualified professional or the relevant government portal before acting.
Key Takeaways
|
Why This Catches Founders Off Guard
HR is usually one of five hats a founder or a solo HR hire wears in the first two years, and compliance maintenance loses out to hiring and product deadlines almost every week. Most founders also assume labour law compliance is something a company opts into once it feels big enough to need it. It isn’t: the obligations are headcount-triggered by law, not by company maturity or founder intent.
Most founders assume finance and taxation carry the greatest regulatory burden during the early years. In reality, employment law begins expanding much earlier than many expect, often before the company has a dedicated HR professional.
A good example is the Sexual Harassment of Women at Workplace Act, 2013 (POSH Act).
Most founders believe it simply doesn’t apply until they cross 10 employees. SHRM’s legal analysis of common POSH myths corrects this directly: the Act applies to every workplace regardless of size, and companies with fewer than 10 employees are still covered. Complaints just go to a government-appointed Local Committee instead of an in-house Internal Committee. A five-person startup assuming POSH “isn’t relevant yet” has already misread the law.
Rohan Malhotra learned this the expensive way. His eight-person fintech in Gurugram had no POSH policy at all, on the theory that the Act only kicked in at 10 employees. One Friday afternoon, an employee emailed Rohan alleging inappropriate behaviour by a colleague. Until that moment, POSH had been something he intended to “look into later.” Rohan discovered that the Local Committee route existed whether he had prepared for it or not, and that his company’s lack of a policy was itself a gap the committee flagged during its review. The complaint was resolved, but building a policy mid-process cost him weeks he didn’t have during a fundraising sprint.
Gratuity works the same way in reverse. Ananya Reddy, who co-founded a 14-person logistics startup in Pune, assumed gratuity was something to plan for only once an employee neared five years with the company. When her first long-serving employee resigned after six years, the payout came due immediately, calculated on his final salary, and nobody had set aside anything for it because the company had never treated the obligation as live. The Payment of Gratuity Act had covered the company since it crossed 10 employees; the five-year mark only decides when an individual employee cashes out, not when the company’s liability begins.
Compliance doesn’t grow all at onceInstead of imagining compliance as a single finish line, picture it as a staircase.
|
The Headcount Trigger Ladder: What Changes at Each Stage
Excellential calls this the Headcount Trigger Ladder: the sequence in which Indian labour law arrives for a growing company, rung by rung, rather than the flat, all-at-once template most compliance checklists hand founders.
Don’t wait until you’re legally forced. The easiest compliance work is the work done before it becomes mandatory. Policies written calmly at six employees are far better than policies rushed together after the tenth hire.
1. Before employee number 10: the baseline that’s already due
Even a two- or three-person company needs written offer and appointment letters, a basic leave policy aligned to the state’s Shops and Establishments Act, and a code of conduct. As covered above, a POSH policy is worth having voluntarily even below the 10-employee mark, since the Act’s protections already extend to your team through the Local Committee route.
2. The 10-employee mark: four obligations arrive together
This is the busiest rung on the ladder. The moment headcount touches 10, all of the following apply, usually without the founder noticing the exact day it happened:
- POSH Internal Committee. A minimum four-member committee, a senior woman as Presiding Officer, two employee members, and one external member from an NGO or women’s rights body, becomes mandatory, with a three-year term per member.
- ESI coverage. Any employee earning up to ₹21,000 a month (₹25,000 for employees with disabilities) falls under compulsory ESI coverage, per ESIC’s own coverage rules. A handful of states set this establishment threshold at 20 instead of 10, so it’s worth checking your state’s specific notification.
- Gratuity Act coverage. The Payment of Gratuity Act, 1972 starts covering the organisation at 10 employees. Gratuity itself is only paid out after five years of an individual employee’s service, but the company’s coverage under the Act begins now, not later.
- Maternity Benefit Act. Protections apply with no wage ceiling at all: every woman employee is covered, regardless of salary, once the company crosses 10 employees.
| Common founder mistake
Many founders assume these obligations begin after completing a financial year or after formal government communication. Neither is true. The legal obligation begins the moment the employee threshold is crossed. |
3. The 20-employee mark: Provident Fund becomes compulsory
Once a company employs 20 or more people, counting permanent, contractual, and trainee staff, EPF registration becomes mandatory, with one month to complete it from the date the threshold is crossed. EPFO has directly confirmed that this 20-employee trigger hasn’t changed in recent updates to the EPF Act. Coverage continues even if headcount later falls below 20.
For rapidly growing startups, this threshold often arrives sooner than expected because interns, trainees and contract staff may also count towards employee strength depending on the applicable law and employment arrangement.
4. 20 to 50 employees: formalising beyond the legal minimum
This is where compliance stops being about ticking legal boxes and starts being about whether the underlying processes hold up. Three things typically need attention in this window:
Compliance may bring organisations safely across legal thresholds, but governance determines whether those policies work.
- POSH training that produces real change, not just a certificate. Section 19 of the Act requires regular awareness programmes, not a one-time onboarding slide, and a session nobody remembers three months later offers weak protection, however well it’s documented. This is where Excellential’s POSH training programmes apply the Learn → Apply → Measure → Sustain methodology built on the Kirkpatrick Model.
- PF and ESI filing hygiene. What works as a manual monthly task at 20 employees usually breaks down by 40 or 50, when a missed contribution or a late filing starts generating real interest and penalty exposure instead of just an admin headache.
- Gratuity provisioning. Most startups treat gratuity as a future problem rather than a current liability. A simple accrual practice, reviewed once a year, avoids discovering the full payout amount only when an employee finally exits, the way Ananya did above.
The same failure mode shows up across all three: someone does the work once and moves on. Follow-up at 30, 60, and 90 days, whether that’s a training refresher, a filing reconciliation, or a provisioning review, is usually where the real gap sits.
5. Every year, once triggered: the paperwork that doesn’t stop
- POSH annual report to the District Officer, generally expected by 31 January each year.
- Monthly PF and ESI contributions, due by the 15th of the following month.
- IC member renomination before the three-year term lapses.
- Gratuity liability review at each financial year-end, especially once headcount and average tenure both start climbing.
The Headcount Trigger Ladder at a Glance
| Headcount | Obligation | Governing law | Risk if missed |
| Any size | POSH Act protections (via Local Committee below 10) | Sexual Harassment of Women at Workplace Act, 2013 | No formal redress route for a complaint |
| 10+ | POSH Internal Committee | POSH Act, 2013 | Fine up to ₹50,000, doubling on repeat violation |
| 10+ (wages ≤ ₹21,000/month) | ESI registration | Employees’ State Insurance Act, 1948 | Employees lose medical/cash benefit cover |
| 10+ | Gratuity Act coverage | Payment of Gratuity Act, 1972 | Liability at exit even if never budgeted for |
| 10+ | Maternity Benefit Act protections | Maternity Benefit Act, 1961 | Legal exposure on maternity leave denial |
| 20+ | EPF registration (within 1 month) | EPF & Miscellaneous Provisions Act, 1952 | Interest and penalty on unregistered dues |
What Investors and Auditors Check
When investors run legal due diligence ahead of a funding round, employment records are a standard line item, not an afterthought. Investors typically review PF and ESI registration certificates, Internal Committee constitution and meeting minutes, and gratuity provisioning first, since each is objectively checkable against a company’s own headcount records. A gap here doesn’t necessarily kill a deal, but it slows one down at the worst possible time, and it’s the kind of finding that makes a legal team ask what else wasn’t tracked.
Priya Nair found this out during her Series A. Her 22-person edtech startup in Hyderabad had grown fast on contract hires, and nobody had run the EPF math on that headcount. The investor’s legal team flagged it in week two of diligence, not as a dealbreaker, but as a condition: register with EPFO and settle the backdated contributions before the term sheet closed. Even so, the round closed three weeks later than planned, with a cheque written for months of interest that a one-month registration would have avoided entirely.
Excellential’s piece on why startups crack without strong HR foundations covers how this same pattern shows up in hiring, culture, and retention too.
The Headcount Trigger Ladder isn’t a one-time audit; it’s a rhythm to build into how you hire.
Every offer letter you extend past your ninth and nineteenth employee should come with a compliance checklist attached, not a scramble six months later. If POSH is the specific gap keeping founders up at night, Excellential’s detailed POSH compliance guide covers the Act itself in full. For the broader question of what policies to write first, the startup HR policy framework is a practical starting point, and the First 50 Hires playbook covers the hiring-side mistakes that tend to arrive alongside these same compliance gaps.
Excellential works with founders and HR-1 hires to get statutory compliance and POSH awareness training in place before it becomes a due-diligence finding.
Not sure where your startup stands today? Excellential can map your current headcount against your legal obligations and flag any compliance gaps before they turn into funding or audit issues.
Frequently Asked Questions
At how many employees does HR compliance become legally mandatory in India?
Compliance obligations attach at different headcounts for different laws, not at one single number. The POSH Act applies to every workplace regardless of size; an Internal Committee becomes mandatory at 10 employees, and Provident Fund registration becomes compulsory at 20 employees.
Does POSH apply to a startup with fewer than 10 employees?
Yes. The Act itself applies to every workplace regardless of size. Below 10 employees, a government-run Local Committee handles complaints rather than an in-house Internal Committee, but the legal protection for employees exists either way.
When does Provident Fund (PF) registration become compulsory for a startup?
PF registration becomes mandatory once a company employs 20 or more people, counting permanent, contractual, and trainee staff, with one month to complete registration from the date the threshold is crossed. Coverage continues even if headcount later falls below 20.
Is ESI applicable to a 10-person startup?
Yes, if any employee earns up to ₹21,000 a month (₹25,000 for employees with disabilities). ESI coverage generally applies once an establishment has 10 or more employees, though a few states set this threshold at 20, and only employees within the wage ceiling qualify.
Do gratuity and maternity benefit obligations apply to very small startups?
Both apply once a company reaches 10 employees. Gratuity itself pays out only after five years of an individual employee’s service, but the company’s coverage under the Act begins at the 10-employee mark, not when the first employee completes five years.
What HR documents do investors typically check during due diligence?
Investors typically review employment agreements, PF and ESI registration certificates, POSH Internal Committee constitution and annual reports, and gratuity provisioning, since each is directly checkable against a company’s own headcount and payroll records.
What is the penalty for not forming a POSH Internal Committee in India?
Section 26 of the POSH Act sets a fine of up to ₹50,000 for a first offence. A repeat violation doubles the penalty and can lead to cancellation or non-renewal of the organisation’s business licence, so the cost of skipping this compounds quickly.
Do contract and intern staff count toward the PF and ESI headcount thresholds?
Yes. Both thresholds count permanent, contractual, trainee, and intern staff on the company’s own payroll, not just full-time employees. Founders who count only their core team often discover their real headcount crossed a threshold months earlier than they realised.
Does every startup need an employee handbook?
Not necessarily. A formal handbook isn’t legally required for a very small team, but appointment letters, a basic leave policy, a code of conduct, and a POSH policy become increasingly important as headcount grows. Most founders find a single handbook easier to maintain than scattered documents once they cross 10 employees.
What HR policies should a startup have before hiring its tenth employee?
Before the tenth hire, a startup should have written offer and appointment letters, a basic leave policy aligned to the state’s Shops and Establishments Act, a code of conduct, and a POSH policy. POSH isn’t legally mandatory until 10 employees, but the Act’s protections already apply through the Local Committee route, so having a policy early avoids the scramble a complaint can trigger.
Disclaimer: This article is based on Indian labour law, wage ceilings, and penalty provisions as verified on the publication date shown above. These figures are set by the Government of India and its regulatory bodies, including EPFO, ESIC, and the Ministry of Labour and Employment, and are subject to change. Excellential reviews and updates its published content periodically but cannot guarantee that every figure remains current at the time you’re reading this. This post is for general informational purposes only and does not constitute legal advice. For guidance specific to your organisation, consult a qualified labour law professional or Excellential directly.
