Your Startup is growing. Is your Legal Foundation Growing As Well?

Startup legal checklist · India

Your startup is growing.
Is your legal foundation?

Six layers every founder should check before the next round, the next hire or the next market
Why it matters

Growth stress-tests your paperwork.

Every funding round, senior hire and new market brings due diligence. Investors look closely at:

Shareholder documentsIP ownershipKey contractsPending disputesFEMA filings
Quick health check

Four questions to ask this quarter

    Company setup · Compliance · IP

    Delhi Legal Company

    Call+91-95993 32456
    Emailinfo@delhilegalcompany.com
    OfficeConnaught Place, New Delhi
    delhilegalcompany.com
    General information as of October 2026, not legal advice. Requirements depend on your structure, sector and size.
    DLC
    Delhi Legal CompanyStartup desk
    Your Startup is Growing. Is Your Legal Foundation Growing As Well? | Delhi Legal Company
    The short answer

    Most startups do not fail because of one big legal mistake. They stall because of small gaps that compound as the business grows: a founder who never signed an IP assignment, a brand that was never registered, ESOPs promised in an email, a missed MCA filing, or customer data collected without a lawful notice. 2026 raises the stakes, with India's four Labour Codes in force since 21 November 2025, data protection obligations arriving in phases under the DPDP Rules, a new DPIIT startup framework, and the Income-tax Act, 2025 applying from 1 April 2026. Your legal foundation has to grow at the same pace as your revenue, team and cap table.

    ₹200 croreNew turnover ceiling for DPIIT startup recognition (₹300 crore for deep tech)
    21 Nov 2025All four Labour Codes brought into force
    13 May 2027Core DPDP obligations for businesses apply
    ₹10 cr / ₹100 crRevised small company limits for capital and turnover

    1Why legal foundations crack during growth


    Every founder remembers the early days: a shared document instead of a contract, a co-founder brought in on a handshake, a logo designed by a friend, the first customer signed over WhatsApp. At that stage speed matters more than paperwork, and that is understandable. The problem is that most startups never go back. Revenue grows, the team grows, investors arrive and enterprise customers ask for contracts, but the legal structure underneath is still the one built for a three-person team.

    The result is what lawyers increasingly call legal debt. Like technical debt, it is invisible while things are going well and expensive the moment something goes wrong. It usually surfaces at the worst possible time: during a funding round's due diligence, when a co-founder leaves, when a competitor files a trademark that looks like yours, when a key employee joins a rival with your code, or when a large customer's procurement team asks for documents you do not have.

    “A legal gap costs a few thousand rupees to close at incorporation, and can cost a funding round to close at Series A.”

    The Indian regulatory environment has also changed meaningfully in the last twelve months. India's four Labour Codes, which replaced 29 central labour laws, came into force on 21 November 2025. The Digital Personal Data Protection Rules were notified on 13 November 2025, starting a phased countdown to full compliance. The Ministry of Corporate Affairs widened the definition of a small company in December 2025. DPIIT replaced its 2019 startup recognition notification with a new framework in February 2026. And the Income-tax Act, 2025 replaced the 1961 Act from 1 April 2026. A startup that set up its legal systems even two years ago is now working with an outdated rulebook.

    This guide is designed as a practical audit. It walks through each layer of a startup's legal foundation, explains what changes as you grow, highlights the 2026 updates, and ends with a stage-wise checklist you can use with your team or advisers.

    2The legal growth curve: stage by stage


    Legal needs do not grow in a straight line. They step up at predictable points, usually when the business takes on a new kind of relationship: a co-founder, the first employee, the first investor, the first enterprise customer, the first foreign shareholder. The table below maps the typical stages.

    What your legal foundation needs at each stage
    StageWhat is happeningLegal priorities
    Idea and validationFounders testing the concept, building a prototypeFounders' agreement, NDAs, trademark search, choosing a name you can own
    IncorporationForming an entity, opening a bank accountRight entity type, clean shareholding, IP assignment to the company, PAN, TAN, GST where required
    First hiresEmployees, interns and freelancers joinAppointment letters, confidentiality and invention assignment, payroll, PF/ESI thresholds, POSH policy
    RevenuePaying customers, vendors, partnersCustomer terms, master service agreements, privacy notice, GST invoicing, TDS
    Seed fundingAngel or seed investors come inTerm sheet, shareholders' agreement, share allotment, valuation report, FEMA filings for foreign money
    Series A and beyondInstitutional investors, larger teamFull due diligence readiness, ESOP pool, board governance, data protection programme, contract management
    Scale and expansionNew cities, new countries, acquisitionsMulti-state registrations, international trademarks, group structuring, transfer pricing, M&A documentation

    The most common pattern we see is a startup operating at the “Series A” row with a legal foundation still at the “incorporation” row. The rest of this guide is about closing that gap.

    3Choosing and upgrading your business structure


    The entity you start with shapes almost everything that follows: how you raise money, how you issue ESOPs, how much compliance you carry and how you are taxed. Many founders start as a proprietorship or partnership because it is quick, and then discover that investors will not fund it.

    Comparing common structures for startups
    StructureBest forFundraisingESOPsCompliance load
    Sole proprietorshipSolo testing, freelancingNot possibleNoLow
    Partnership firmSmall traditional businessesVery limitedNoLow
    LLPServices firms, consultanciesLimited; less favoured by equity investorsNoModerate
    One Person CompanySingle founder wanting limited liabilityMust convert to raise equityNoModerate
    Private limited companyStartups planning to raise capitalYes: equity, CCPS, convertible notesYesHigher, but manageable

    3.1 Why most funded startups are private limited companies

    A private limited company can issue different classes of shares, including compulsorily convertible preference shares (CCPS), which most Indian venture investors prefer. It can raise money through convertible notes once recognised as a startup, set up an ESOP pool, and admit foreign investors under India's FDI rules. LLPs can receive foreign investment in sectors open under the automatic route, but they cannot issue ESOPs, and commentators have noted that the FEMA rules give certain benefits to startup companies that do not extend to startup LLPs.

    3.2 When to convert

    If you started as a proprietorship, partnership or LLP, the right time to convert is before your first external investment, not during it. Conversion takes time, involves transferring assets, contracts and intellectual property, and can trigger tax questions if not structured correctly. Converting early also gives you a clean incorporation history for later due diligence.

    3.3 The small company advantage

    In December 2025, the Ministry of Corporate Affairs raised the thresholds for a small company under the Companies Act, 2013 to a paid-up capital of up to ₹10 crore and turnover of up to ₹100 crore. Small companies benefit from a lighter compliance regime, including fewer mandatory board meetings, simplified annual filings and lower penalties for certain defaults. Many growing startups that had outgrown the old limits now qualify again, but note that the small company exemptions do not apply to public companies, holding or subsidiary companies, or companies governed by special Acts. If your startup has a foreign parent or an Indian subsidiary, check your status carefully.

    Foreign founders: if your startup is owned by an overseas parent, a wholly-owned subsidiary or an Indian private limited company with foreign shareholding is usually the right vehicle. Every Indian private company needs at least one director resident in India; our resident director services can help.

    4Founder agreements, vesting and IP assignment


    Co-founder disputes are among the most common reasons early-stage startups break down, and they are almost always made worse by the absence of written terms. A founders' agreement is not a sign of mistrust; it is a record of what everyone already agrees on, written down while relations are good.

    4.1 What a founders' agreement should cover

    • Equity split and vesting. Who owns what, and how shares vest over time. A typical structure is four years with a one-year cliff, so a founder who leaves in month six does not walk away with a quarter of the company.
    • Roles and decision-making. Who leads product, sales and finance, and which decisions need unanimous consent.
    • Time commitment and exclusivity. Whether founders can work on other ventures.
    • Exit and buy-back. What happens to unvested and vested shares when a founder leaves, distinguishing “good leaver” and “bad leaver” situations.
    • Intellectual property. A clear assignment of all work created for the business to the company.
    • Confidentiality and non-solicitation. Protection of business information and team during and after a founder's involvement.
    • Dispute resolution. Mediation first, then arbitration with a defined seat, to avoid years in court.

    4.2 The IP assignment gap

    Here is a problem we encounter repeatedly in due diligence: the code, design, brand or content that the company's value depends on was created by a founder before incorporation, or by a freelancer, and was never formally assigned to the company. Under Indian copyright law, the author of a work is generally its first owner unless it is created by an employee in the course of employment or there is a written assignment. A freelancer who designed your logo may legally own its copyright. A founder who wrote the first version of your platform before the company existed may still own that code.

    The fix is simple if done early: a written IP transfer and assignment from each founder and contributor to the company, properly stamped. Done later, it may require negotiating with someone who has since left or fallen out with the team.

    Investor red flag: missing IP assignments are one of the most common issues raised in startup due diligence. Investors are buying into the company's assets; if the company does not clearly own its core technology and brand, the round can be delayed or re-priced.

    5DPIIT recognition under the 2026 framework


    Recognition by the Department for Promotion of Industry and Internal Trade (DPIIT) under the Startup India programme unlocks tax, compliance and funding benefits. In February 2026, DPIIT issued a new notification replacing the framework that had applied since February 2019.

    5.1 What changed in 2026

    Criterion2019 framework2026 framework
    Turnover ceiling₹100 crore in any financial yearRaised ₹200 crore; ₹300 crore for deep tech startups
    Age limitUp to 10 years from incorporation10 years for regular startups; 20 years for deep tech startups
    Eligible entitiesPrivate companies, partnership firms, LLPsWider Adds multi-state and state cooperative societies
    Deep tech categoryNot separately definedNew Ventures built on new scientific or engineering knowledge, with high R&D spend and significant novel IP
    Restricted investmentsApplied for a fixed seven-year periodApply throughout the recognition period

    5.2 Benefits worth having

    • Tax holiday. Eligible recognised startups can apply to the Inter-Ministerial Board for a certificate allowing a 100% deduction of profits for three consecutive years out of their first ten. With the Income-tax Act, 2025 now in force, confirm the corresponding provision and conditions under the new law before claiming.
    • No more angel tax. The tax on share premium received above fair market value, popularly called angel tax, was abolished for all classes of investors from assessment year 2025-26, removing a major friction point for early-stage fundraising.
    • Convertible notes. Recognised startups can raise money through convertible notes of ₹25 lakh or more in a single tranche without these being treated as public deposits.
    • IP support. Reduced official fees and facilitation support for patent and trademark filings.
    • Public procurement. Relaxations on prior experience and turnover requirements in many government tenders.
    • ESOP tax deferral. Employees of eligible startups can defer tax on ESOP perquisites, easing the burden of paying tax on shares they cannot yet sell.

    Check your status: a startup that crossed the old ₹100 crore turnover ceiling may now qualify again under the ₹200 crore limit. Deep tech companies older than ten years should assess whether the 20-year window applies to them.

    6Protecting your brand, code and inventions


    For most startups, intellectual property is the single largest asset on the balance sheet, even if it does not appear there. It is also the area where small, early decisions have the largest long-term consequences.

    6.1 Trademarks: own your name before you build it

    Many founders spend months building a brand, launching a website and growing a social following before checking whether they can legally own the name. If someone else has an earlier registration or earlier use, a rebrand at the growth stage can cost far more than the original marketing spend. India follows a “first to use” principle alongside registration, so prior users can sometimes stop later registrants.

    1. Search before you commit. Run a professional trademark search and advisory before finalising a name, domain or logo.
    2. Choose the right classes. Use a considered class selection and filing strategy, keeping in mind the Nice Classification 13th edition that applies from 1 January 2026.
    3. File in the company's name. Complete trademark registration in the name of the company, not a founder. Startups and small enterprises qualify for the reduced official fee.
    4. Respond on time. Handle examination reports through a proper reply to objections and defend your mark through opposition proceedings if needed.
    5. Monitor and enforce. Use brand monitoring and send timely infringement notices when copycats appear.

    6.2 Copyright: code, content and design

    Copyright arises automatically in original software, website content, designs, videos and written material. Registration is not mandatory, but it provides strong evidence of ownership and date, which is valuable in disputes and due diligence. Our copyright application filing and software, website and digital content protection services cover these assets.

    6.3 Patents: protect real innovation before you disclose it

    If your startup has developed a genuinely new technical solution, a patent can create a lasting competitive moat and is central to the new deep tech recognition category. Novelty is lost by public disclosure, so file before you publish, pitch publicly or launch. A patentability assessment tells you whether a filing is worthwhile, and a provisional specification can secure an early priority date while you continue development.

    6.4 Licensing and monetisation

    As you grow, IP becomes a revenue source: white-label arrangements, technology licences, franchise models and brand collaborations. Each needs a properly drafted agreement. See our brand licensing, technology licensing and royalty agreement services.

    7Corporate compliance that cannot slip


    Under the Companies Act, 2013, a private company has recurring obligations whether or not it is profitable. Missed filings attract additional fees that accumulate daily, and repeated defaults can lead to directors being disqualified. For a growing startup, compliance is also about credibility: investors, banks and enterprise customers will check your MCA records.

    Core recurring compliance for a private limited company
    RequirementWhat it involvesTiming
    Commencement of businessDeclaration that subscribers have paid for their sharesWithin 180 days of incorporation
    First auditorBoard appoints the first statutory auditorWithin 30 days of incorporation
    Board meetingsFour a year with no more than 120 days between them; small companies, OPCs and startups need fewerThroughout the year
    Annual general meetingAdopting accounts and appointing auditorsWithin six months of financial year end
    Financial statements filingFiling audited accounts with the RegistrarWithin 30 days of the AGM
    Annual returnShareholding, directors and company detailsWithin 60 days of the AGM
    Director KYCVerification of each director's details with MCAPeriodic, as notified by MCA
    Statutory registersMembers, directors, charges and other registers kept up to dateOngoing

    Our annual ROC filings, board resolutions and minutes, statutory registers and director KYC services keep this running in the background. If your company has borrowed against assets, also read our guide to registration of charges under Section 77.

    Governance grows with you. Minutes and resolutions are not formalities. Every share allotment, ESOP grant, related party transaction and major contract should be backed by a proper board or shareholder approval. Gaps here are among the hardest to fix retrospectively.

    8Getting investment-ready


    Fundraising is the moment when a startup's legal foundation is examined most closely. Investors run legal due diligence before closing, and every gap discovered either delays the round, reduces the valuation or becomes a condition the founders must fix before money arrives.

    8.1 The core documents

    ✎

    Term sheet

    The headline commercial terms: valuation, instrument, investor rights, board seats and conditions. Mostly non-binding, but it frames everything that follows.

    📄

    Share subscription agreement

    The binding contract for the investment itself: amount, instrument, conditions precedent and representations by the company and founders.

    ⚖

    Shareholders' agreement

    Governance and exit rights: board composition, reserved matters, anti-dilution, transfer restrictions, tag-along and drag-along rights.

    📋

    Amended articles

    Key investor rights must also be reflected in the articles of association to be enforceable against the company.

    8.2 Instruments and process

    Indian venture rounds commonly use equity shares, CCPS or convertible notes. Each requires correct corporate approvals, a valuation report where applicable, and timely filings for the allotment. Our share allotment and transfer service handles the corporate steps.

    8.3 Foreign investment

    Money from foreign investors brings an additional layer under FEMA: pricing guidelines, sectoral caps and conditions, and reporting to the Reserve Bank of India through the FIRMS portal, including Form FC-GPR after allotment of shares to a non-resident and Form FC-TRS on transfers between residents and non-residents. Late reporting attracts compounding or late submission fees. See FC-GPR, FC-TRS and RBI documentation and FEMA compliance and FDI reporting.

    8.4 Preparing a data room

    Investors will typically ask for incorporation documents, the cap table, all share allotment records, board and shareholder minutes, material contracts, IP registrations and assignments, employment documents, tax filings, licences and details of any disputes. A startup that can produce a clean, indexed data room in days rather than weeks signals strong governance and shortens the time to close.

    Do a mock diligence. Six months before you plan to raise, have an adviser review your records as an investor would. Fixing issues on your own timeline is cheaper and less stressful than fixing them under a term sheet deadline.

    9Employees, ESOPs and the Labour Codes


    As a startup moves from a founding team to tens or hundreds of employees, employment law becomes one of its largest compliance areas. 2026 is the first full year in which startups operate under India's consolidated labour framework.

    9.1 The four Labour Codes

    The Central Government brought all four Labour Codes into force from 21 November 2025, consolidating 29 central labour laws:

    CodeReplaces (examples)What startups should note
    Code on Wages, 2019Minimum Wages Act, Payment of Wages Act, Payment of Bonus Act, Equal Remuneration ActA uniform definition of “wages”, floor wages and timely payment rules. Salary structures heavy on allowances should be reviewed, because the wage definition affects PF, gratuity and other calculations.
    Code on Social Security, 2020EPF Act, ESI Act, Maternity Benefit Act, Payment of Gratuity Act and othersCoverage of gig and platform workers with aggregator contributions; changes to gratuity, including for fixed-term employees; digital registration.
    Industrial Relations Code, 2020Industrial Disputes Act, Trade Unions Act, Standing Orders ActStanding orders threshold raised to 300 workers; fixed-term employment formally recognised.
    Occupational Safety, Health and Working Conditions Code, 2020Factories Act, Contract Labour Act and othersStandardised registration and contractor licensing, working conditions and digital compliance.

    Full operation depends on central and state rules, and states are at different stages of notifying them. Startups with teams in multiple states should track each state's rules and update policies, salary structures and contracts accordingly. Our payroll processing and labour licence services help keep this aligned.

    9.2 Employment documentation

    • Appointment letters setting out role, pay, probation, notice period and policies.
    • Confidentiality and invention assignment clauses so that everything created in the course of employment belongs to the company.
    • Consultant and freelancer agreements with clear IP assignment, since copyright in work by non-employees does not automatically pass to you.
    • Policies on leave, code of conduct, IT and data use, and remote work.
    • Prevention of sexual harassment (POSH). Every workplace with ten or more employees must constitute an Internal Committee and have a policy in place.

    9.3 ESOPs done properly

    ESOPs are one of the most powerful tools a startup has to attract talent it cannot yet afford in cash. They are also among the most frequently mishandled. A valid ESOP requires a written scheme approved by shareholders by special resolution, grant letters, a minimum vesting period of one year, proper records and compliant disclosures. Promises made in offer letters or emails without an approved scheme can create disputes and diligence problems. Startups have specific flexibility, including the ability to grant options to promoters within a defined period from incorporation, and employees of eligible startups may defer tax on the perquisite value.

    If your employees are granted options by a foreign parent rather than the Indian company, tax, FEMA and reporting rules differ; read our guide on ESOPs for Indian employees of a foreign parent.

    10Tax and GST foundations


    10.1 Income tax under the new Act

    The Income-tax Act, 2025 applies from 1 April 2026, replacing the Income-tax Act, 1961. It introduces the concept of a single “tax year” in place of the old previous year and assessment year terminology, and reorganises provisions into a new structure. For startups, the practical effect is that internal processes, contract clauses and documents that refer to old section numbers should be reviewed. Core obligations remain: advance tax, TDS deduction and returns, annual income tax filing and, for companies, corporate tax planning.

    10.2 GST

    GST registration is mandatory once turnover crosses the threshold (generally ₹40 lakh for suppliers of goods and ₹20 lakh for service providers in most states, with lower limits in special category states), and is required from the start in certain cases, such as inter-state supplies of goods and supplies through e-commerce operators. India's GST rate structure was rationalised in September 2025 into fewer slabs, so startups should confirm that their products and services are invoiced at the current rates. Monthly or quarterly returns, input tax credit reconciliation and e-invoicing (once turnover crosses the notified threshold) all require reliable bookkeeping. See GST registration and GST compliance.

    10.3 Finance as a legal function

    Clean books are a legal asset. They support tax positions, valuation reports, audits and due diligence. Many startups outgrow ad hoc accounting well before they can justify a full finance team; bookkeeping and accounting, monthly MIS reports and virtual CFO services bridge that gap. Foreign-owned startups should also follow our compliance calendar for tax year 2026-27.

    11Data protection under the DPDP regime


    For any startup that collects personal data, whether customer sign-ups, app users, employee records or marketing leads, the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 are now the governing framework. The Rules were notified on 13 November 2025 and come into force in phases.

    • 13 Nov 2025
      Provisions establishing the Data Protection Board and its functioning come into force.
    • 13 Nov 2026
      Registration and obligations of consent managers apply.
    • 13 May 2027
      Core obligations for businesses apply: notice and consent, security safeguards, breach reporting, data principal rights, children's data, retention and cross-border rules.

    11.1 What startups will need to do

    • Map your data. Know what personal data you collect, why, where it is stored and who has access, including legacy data.
    • Give clear notice. Tell users, in plain language, what data is processed and for what purpose, and obtain valid consent where required.
    • Secure it. Implement reasonable security safeguards, including access controls, encryption and logging.
    • Plan for breaches. The Rules require detailed breach reporting to the Data Protection Board within 72 hours, alongside intimation to affected individuals.
    • Handle rights requests. Build a process to respond to access, correction and erasure requests within the prescribed time.
    • Protect children. Obtain verifiable parental consent before processing children's data, subject to limited exceptions.
    • Review vendor contracts. Cloud providers, CRMs and analytics tools process data on your behalf; your contracts with them should reflect your obligations.

    Do not wait for 2027. Penalties under the DPDP Act can be very significant. Building privacy into your product, contracts and processes now is far cheaper than retrofitting it later, and enterprise customers are already asking vendors about DPDP readiness.

    The Act also allows the Government to exempt certain classes of data fiduciaries, including startups, from specific provisions. Watch for any notification in this regard, but do not assume an exemption until one is issued.

    12Contracts that protect revenue


    Contracts are where legal protection meets daily business. Early on, most startups use whatever terms the other side sends, or a template downloaded from the internet. As deal sizes grow, so does the cost of unfavourable terms.

    👥

    Customer contracts

    Master service agreements, SaaS terms, statements of work and service levels. Pay attention to liability caps, indemnities, IP ownership of deliverables and payment terms.

    🚚

    Vendor contracts

    Suppliers, contractors and technology providers. Check data protection, confidentiality and termination rights. Our vendor compliance service helps.

    🏢

    Office and premises

    Lease or leave and licence agreements, lock-in periods and registration. See commercial rental agreements and lease drafting.

    🔒

    Website and app terms

    Terms of use, privacy notice, refund and cancellation policies, aligned with consumer protection and e-commerce rules.

    12.1 Five clauses that matter most

    1. Limitation of liability. Cap your exposure, typically to fees paid over a defined period, and exclude indirect losses.
    2. Indemnities. Make them mutual where possible and limit them to matters within each party's control.
    3. IP ownership. Keep ownership of your platform and pre-existing IP; license, rather than assign, where you can.
    4. Payment and termination. Clear invoicing, interest on late payment and the right to suspend services for non-payment.
    5. Dispute resolution. Arbitration with a defined seat and governing law, which is usually faster than litigation.

    Also remember stamp duty. Many agreements in India must be stamped under the applicable state stamp law to be admissible in evidence, and unstamped documents can create problems at exactly the moment you need to enforce them.

    13Licences and registrations


    Depending on what you do and where you operate, your startup may need sector-specific licences in addition to company and tax registrations. Operating without a required licence can lead to penalties, closure orders and problems with customers and investors.

    RegistrationWho needs it
    GST registrationBusinesses above the turnover threshold, and certain businesses from day one
    Shops and establishments registrationMost offices and commercial premises, under the relevant state law
    PF and ESI registrationEstablishments crossing the employee thresholds under the Social Security Code
    Import Export Code (IEC)Startups importing or exporting goods or services
    FSSAI licenceFood and beverage, cloud kitchens and food delivery businesses
    Labour licenceBusinesses engaging contract labour above prescribed limits
    Pollution and fire approvalsManufacturing units, warehouses and certain premises
    Professional taxEmployers in states that levy it

    Our registrations practice can map exactly which licences apply to your business model and locations.

    13.1 The real cost of legal debt

    Founders often postpone legal work because it feels like a cost with no immediate return. The table below shows why that calculation usually goes the wrong way. The same issue costs very different amounts depending on when it is addressed.

    Fixing early vs fixing late
    IssueIf handled earlyIf discovered late
    Brand name conflictA search and an application before launchOpposition, infringement claims or a forced rebrand after building market recognition
    Founder exit without vestingA standard clause in the founders' agreementAn inactive co-founder holding a large stake, which investors may require you to buy back before investing
    Unassigned IPA short assignment deed at onboardingNegotiating with a former contributor during due diligence, often on their terms
    Missed MCA filingsRoutine filing within the due dateAccumulated additional fees, possible director disqualification and delays in fundraising
    Late FEMA reportingFiling within 30 days of allotmentLate submission fees or compounding, and questions from investors and banks
    Undocumented ESOPsAdopting a scheme before granting optionsEmployee disputes, retention problems and cap table restatement
    No privacy frameworkPrivacy by design while building the productRebuilding data flows under deadline pressure, and potential penalties

    The pattern is consistent: early action is a predictable, modest expense, while late action is unpredictable, expensive and often happens at a moment when the startup has the least negotiating power.

    14The legal health check: 12 warning signs


    If any of the statements below are true for your startup, your legal foundation has fallen behind your growth.

    Warning signThere is no signed founders' agreement, or it has no vesting.
    FixSign one now with vesting, leaver terms and IP assignment.
    Warning signYour brand name is not registered, or is registered to a founder personally.
    FixFile a trademark in the company's name, or record an assignment.
    Warning signFreelancers or ex-founders built your core product without written IP assignment.
    FixObtain stamped assignment deeds while you still can.
    Warning signESOPs were promised in offer letters but no scheme has been approved.
    FixAdopt a compliant scheme and issue formal grant letters.
    Warning signSome ROC filings or board minutes are missing or late.
    FixRegularise filings and reconstruct records before diligence.
    Warning signForeign investment came in but FEMA reporting was not completed.
    FixFile late reports and consider compounding where required.
    Warning signSalary structures were not reviewed after the Labour Codes took effect.
    FixRe-check wage definitions, PF, gratuity and contracts.
    Warning signYou collect user data with no privacy notice or data map.
    FixStart a DPDP readiness project well before May 2027.
    Warning signYour largest customer contracts are on the customer's paper with uncapped liability.
    FixNegotiate caps at renewal and adopt your own standard terms.
    Warning signKey agreements were never stamped.
    FixPay stamp duty and any penalty before you need to enforce them.
    Warning signYou have ten or more employees but no POSH committee.
    FixConstitute the Internal Committee and adopt a policy.
    Warning signNobody owns the compliance calendar.
    FixAssign responsibility internally or outsource to a compliance partner.

    15Stage-wise legal checklist


    Before and at incorporation

    • Run a trademark search and secure the name, domain and social handles.
    • Choose the right entity; for funded startups, usually a private limited company.
    • Sign a founders' agreement with vesting and IP assignment.
    • Obtain PAN, TAN, bank account and, where required, GST registration.
    • File the commencement of business declaration and appoint the first auditor on time.

    First hires and first revenue

    • Issue appointment letters with confidentiality and invention assignment.
    • Sign consultant agreements with IP assignment for every freelancer.
    • Set up payroll, TDS and statutory registrations as thresholds are crossed.
    • Publish website terms, a privacy notice and refund policies.
    • Adopt standard customer and vendor contracts.

    Before raising capital

    • Apply for DPIIT recognition and check eligibility for the tax holiday.
    • Regularise all ROC filings, minutes and registers.
    • Adopt an ESOP scheme if options have been promised.
    • Prepare an indexed data room and complete a mock due diligence.
    • Plan FEMA compliance if any investor is non-resident.

    Scaling up

    • Review policies and pay structures under the Labour Codes, state by state.
    • Constitute a POSH Internal Committee once you reach ten employees.
    • Run a DPDP readiness programme ahead of 13 May 2027.
    • Extend trademark protection to new classes and key export markets.
    • Move to a managed compliance calendar with clear ownership.

    16How Delhi Legal Company can help


    Delhi Legal Company works with founders and foreign companies as a single partner for setup, compliance, tax and intellectual property, so that legal foundations are built once and maintained as you grow.

    17Conclusion


    Growth exposes whatever is underneath it. A startup with clean ownership, registered IP, compliant filings, proper employment documents and sensible contracts can raise money faster, close enterprise deals more easily and handle disputes from a position of strength. A startup without those foundations spends its best growth months repairing them under pressure.

    2026 makes this more urgent. New Labour Codes, a phased data protection regime, a new income tax law, a broader startup recognition framework and revised company thresholds mean that the rules your startup was built on have shifted. The good news is that almost every legal gap is fixable, and fixing it early is far cheaper than fixing it late.

    Your startup is growing. Make sure the legal foundation underneath it grows too.

    Book a startup legal health check

    Our team will review your structure, cap table, IP, contracts and compliance, and give you a prioritised action plan before your next round or growth phase.

    Call +91-9599332456  |  Email info@delhilegalcompany.com

    ?Frequently asked questions


    When should a startup first speak to a lawyer?

    Ideally before incorporation, when choosing the entity, finalising the name and agreeing founder terms. These early decisions are cheap to get right and expensive to unwind later.

    Is a private limited company always the best structure?

    For startups planning to raise equity investment or issue ESOPs, it usually is. Service businesses that do not plan to raise external equity may find an LLP simpler. The right answer depends on your funding plans, ownership and sector.

    What changed in DPIIT startup recognition in 2026?

    The turnover ceiling rose from ₹100 crore to ₹200 crore (₹300 crore for deep tech), deep tech startups can be recognised for up to 20 years, and cooperative societies became eligible.

    Is angel tax still a concern?

    No. The tax on share premium above fair market value was abolished for all classes of investors from assessment year 2025-26. Valuation reports are still relevant for company law and FEMA purposes.

    Do the new Labour Codes apply to small startups?

    Yes. The Codes apply broadly, though some obligations depend on headcount thresholds. Wage definitions, social security coverage and documentation requirements affect most employers, and state rules determine many operational details.

    When do DPDP obligations apply to my startup?

    Most obligations for businesses, including notice, consent, security, breach reporting and data rights, apply from 13 May 2027. Consent manager obligations apply from 13 November 2026. Preparation should start now.

    Should I register my trademark before launch?

    Yes. At a minimum, run a clearance search and file an application before you invest heavily in branding. You can file on a “proposed to be used” basis before launch.

    Can ESOPs be granted to founders?

    Generally, promoters and directors holding more than ten percent cannot receive ESOPs, but startups have a specific relaxation allowing grants to promoters within a defined period from incorporation. Check the current conditions before granting.

    What is the most common legal issue found in startup due diligence?

    Gaps in IP ownership, incomplete corporate records and undocumented ESOP promises are among the most frequent. All three are easy to prevent and can delay a round if discovered late.

    Disclaimer: This article reflects the position as at 8 October 2026 and is provided for general information only. It does not constitute legal, tax or financial advice or create a professional relationship. Laws, thresholds, fees and deadlines change, and several 2026 frameworks depend on rules still being notified by central and state governments; please verify the current position with official sources or a qualified professional before acting. In accordance with the rules of the Bar Council of India, this content is not intended as advertisement or solicitation.