8 India Compliance Concerns Wisemonk Solves for Startup Founders

So you found a brilliant engineer in Bengaluru, or a customer-success lead in Pune, or a whole team in Hyderabad. Hiring in India looks like the easiest decision you will make all year.

Then you start reading about provident fund, professional tax, the four new labour codes, and something called permanent establishment risk. Suddenly the easy decision has a rulebook attached, and the rulebook is in a language only Indian compliance lawyers seem to speak.

That gap is exactly what trips up foreign founders. India runs employment law at two levels, central and state, with mandatory social security on top, and the rules shifted again in November 2025. Get it wrong and you are looking at back-payments, penalties, and a tax notice that lands a year too late to fix cheaply.

This guide breaks down the eight compliance concerns that catch founders hiring into India, what each one actually costs, and how an Employer of Record (EOR) takes them off your plate. We have walked 300+ global companies through this, so the examples are real, not theoretical.

1. You can hire in India in two weeks, or build an entity for six months first

To employ someone in India under Indian labour law, the employer has to be an Indian legal entity, registered under the relevant state's Shops and Establishments Act and signed up with EPFO, ESIC, the state professional-tax authority, and the income-tax department for TDS.

Setting up your own private limited company to do all that takes three to six months and $15,000 to $25,000 before anyone writes a line of code. Then come the ongoing ROC filings, statutory audits, a company secretary, and transfer-pricing documentation, every year, whether you have three employees or thirty.

For your first 1 to 50 hires, that math rarely works. An EOR already holds the Indian entity, so your hire starts in days instead of quarters, and you skip the setup cost entirely. The entity only pays off once you have a few dozen long-term people in one location and want a permanent local presence of your own. Our EOR vs entity guide runs the full cost comparison if you want the numbers.

The point: you do not need to incorporate in India to hire in India. Most companies start lean with an EOR and only revisit the question at scale.

2. Skip the entity, and "permanent establishment" becomes the word your CFO fears most

Here is the trap founders walk into. No Indian entity, so they pay a developer directly as a contractor through Wise and move on. No payroll, no compliance, done. Until the tax authorities take a different view.

Permanent establishment (PE) risk means Indian tax authorities can decide your company has a taxable business presence in India, even with no registered entity here. It is triggered under Section 9 of the Income Tax Act and Article 5 of the relevant tax treaty when revenue-generating work happens in India on a sustained basis, done by people who function like your employees.

If that determination lands, a portion of your profits can become taxable in India, with corporate income tax, filings, and tax disputes attached. A full-time contractor working exclusively for you makes the risk worse, because exclusivity looks a lot like employment.

Because an EOR's Indian entity is the legal employer, you stay its client rather than a company operating in India. That structure keeps PE exposure low, which is the single biggest reason finance teams reach for an EOR in the first place.

3. Calling a full-time employee a "contractor" is the ₹3-4 lakh mistake nobody budgets for

Hiring contractors in India is legitimate and useful for genuine project work. The problem is misclassification: labelling someone a contractor when the relationship is really employment.

Indian labour law applies a supervision-and-control test. If a worker is on your management structure, works set hours, uses your systems, and works exclusively for you for months or years, that is employment, whatever the contract says. The new labour codes sharpened the definitions of "employee" and "worker," so the line is being watched more closely than before.

When authorities reclassify a long-term contractor as an employee, the foreign company owes retrospective PF, ESI, gratuity, professional tax, and TDS, plus interest and penalties, for every month of the engagement. A single misclassified contractor on ₹15 lakh a year for two years can create ₹3 to 4 lakh in backdated liability. Multiply that across a team and the exposure compounds fast. It also surfaces as a red flag in due diligence when you raise or get acquired.

An EOR employs people correctly from day one, so the question never comes up. For roles that are genuinely project-based and autonomous, a Contractor of Record handles the contracting, foreign remittance, GST, and TDS compliantly instead.

4. PF, ESI, PT, gratuity: the alphabet soup you have never heard of, and legally must pay

This is the section with no equivalent in your home market. Employing someone in India means mandatory statutory contributions on top of salary, and most foreign founders have never encountered any of them.

Here is what an employer is actually on the hook for in 2026:

• Provident Fund (EPF): 12% of basic from the employer, matched by 12% from the employee. It is India's mandatory retirement scheme, roughly a 401(k). The statutory wage ceiling is ₹15,000, though many employers contribute on actual basic.
• Employee State Insurance (ESI): 3.25% from the employer and 0.75% from the employee, for staff earning up to ₹21,000 a month gross. It funds state medical and sickness cover.
• Gratuity: about 4.81% of basic, set aside monthly, paid as a lump sum when an employee leaves after qualifying service.
• Professional Tax (PT): a small monthly amount set by each state, which means it varies depending on where your employee sits.

Add it up and statutory contributions run roughly 15 to 22% on top of gross salary, taking your total cost of employment to around 110 to 125% of gross. Our employee cost calculator gives you the exact figure for any salary.

Getting registration, calculation, or filing wrong invites interest and penalties on each one. An EOR registers every employee, deducts and remits each contribution monthly, and files the returns, so the alphabet soup of statutory benefits is handled before you ever see it.

5. Your global employment template is not legal here, and India just rewrote the rulebook

A contract that works in Delaware or London does not hold up in India, and the ground shifted in late 2025. On 21 November 2025, India brought all four labour codes into force, consolidating 29 existing labour laws into a single framework covering wages, social security, industrial relations, and workplace safety. It is the most significant labour reform in independent India.

A few changes matter directly for hiring:

• Mandatory appointment letters for every worker, so informal arrangements no longer pass.
• A uniform definition of "wages," under which basic pay plus dearness allowance must be at least 50% of total remuneration. Stack salary as allowances to dodge PF and the excess gets added back anyway, which lifts PF, ESI, and gratuity costs.
• Faster full-and-final settlement, now expected within two days of exit.

On top of the codes, employment contracts have to comply with the relevant state's Shops and Establishments Act, covering notice periods, working hours, leave, and probation. Generic templates miss all of this.

A compliant Indian contract also needs proper IP assignment built in, because India's defaults surprise people. Copyright in an employee's on-the-job work usually sits with the employer, but patents do not transfer automatically, and contractors keep what they create unless a written assignment says otherwise. An EOR drafts every contract under the Indian Contract Act and the right state law, with IP and confidentiality clauses included, not bolted on later.

6. Pay your India team a day late and the penalty clock starts; FEMA does the rest

Paying people in India is not a wire transfer and a shrug. Salary is paid in rupees, income tax is deducted at source (TDS) against each employee's slab, and the deductions have to be deposited and returns filed on a fixed monthly calendar. Each employee also needs an annual Form 16, India's salary-and-tax statement.

There is a currency-law catch on top. Paying a salary in USD straight into an Indian bank account violates FEMA, India's foreign-exchange rules. Compliant payment routes USD to an Indian entity or registered fintech, which converts to INR and deposits to the employee's account, typically by the 7th of the month.

The deadlines are unforgiving. ESI is due by the 15th of the following month; miss PF, ESI, or TDS filing dates and interest and penalties attach automatically. For a team spread across states, professional-tax rules differ by location, which multiplies the moving parts.

An EOR runs monthly payroll in India on its own platform, with USD, EUR, or GBP in and INR out, full FX transparency, payslips, Form 16, and every statutory filing handled on time. One invoice to you, all the deadlines met behind it.

7. POSH committee is a legal requirement, not a nice-to-have

This one blindsides founders because nothing like it exists at home as a hard statutory duty. India's POSH Act (Prevention of Sexual Harassment of Women at Workplace, 2013) requires any employer with 10 or more employees to set up an Internal Committee, adopt a formal POSH policy, run awareness training, and file an annual compliance report. It is a legal obligation, and non-compliance carries fines and, on repeat, the risk to business licences.

Statutory leave is its own framework. India mandates earned leave, sick leave, and casual leave, plus 26 weeks of paid maternity leave, one of the most generous entitlements in the world, under the Maternity Benefit Act. Public-holiday rules vary by state too.

Foreign founders routinely miss both, because a US or UK handbook simply does not include them. An EOR sets up compliant leave policies and POSH structures as part of onboarding, so you meet the requirement from your first hire rather than discovering it during a dispute.

8. India now has GDPR's tougher cousin, with ₹250 crore on the line for employee data

If you handle the personal data of people in India, and as an employer you handle a lot of it, India's Digital Personal Data Protection (DPDP) Act, 2023 now applies to you. The DPDP Rules were notified on 14 November 2025, moving the law from paper to practice.

For an employer, the scope is everything from a candidate's CV to an ex-employee's records: salary, biometrics, bank details, health information, performance data. The Act runs on a consent-and-notice model, requires breach notification, and obliges you to handle employee rights requests. It reaches companies outside India too, as long as you process data connected to people in India.

Serious violations can reach ₹250 crore, roughly $30 million. Compliance is phased: the Data Protection Board provisions are already live, consent-manager rules will come in November 2026, and the core consent, notice, and rights obligations become enforceable by May 2027. That timeline is the window to get your house in order, not a reason to wait.

An EOR collects sensitive employee data through a secure platform, which limits who touches it and how it moves, and keeps documentation properly stored for any audit. Your India team's data sits inside a compliant system from the start.

Hire in India without the rulebook landing on your desk

Compliance is the part of India hiring that looks small at the offer stage and turns expensive a year later, when a tax notice, a reclassification, or a data-breach question shows up. Take control of it early and none of that happens.

That is the whole point of an Employer of Record. Wisemonk is India-native, built only for global companies hiring into India. We operate through our own Indian entity rather than a partner network, start at $99 per employee per month with no hidden FX markups, onboard hires in 24 to 48 hours, and assign a dedicated India-based HR manager to every client. Across 2,000+ employees and 300+ companies, we handle all eight concerns above so founders can focus on the team, not the rulebook.

You pick who to hire. We carry incorporation, PE risk, classification, statutory contributions, contracts, payroll, POSH and leave, and data compliance. And when you scale past the EOR route, we support the transition to your own entity, so you never lose compliance continuity.

Ready to build your India team without becoming an India compliance expert? Talk to our India specialists and we will map the setup to your timeline and budget.