Wisemonk Team
Written By
Category Workplace and Legal Compliance
Read time 14 min read
Last updated June 4, 2026

India Compliance for US Staffing Agencies That Want to Place Candidates in India

India Compliance for US Staffing Agencies That Want to Place Candidates in India
TL;DR
  • 5 pillars define India compliance for a US staffing agency placing engineers in India: labour codes, taxation (Income Tax Act and TDS), DPDP Act data protection, FEMA cross border payments, and statutory benefits (PF, ESI, gratuity).
  • 14 calendar days is the realistic time to set up full India compliance through an EOR partnership. Own entity takes 12 to 18 weeks to register and another 4 to 6 weeks before the first compliant placement.
  • 250 crore INR (~30 million USD) is the maximum penalty under the Digital Personal Data Protection Act 2023 for a breach of personal data of Indian residents. Engineering placements process candidate data, payroll data, and client data, all of which fall under DPDP scope.
  • November 21, 2025 is when the Code on Wages was fully notified and the broader Labour Codes regime went operative. Offer letter templates that paid 30 percent basic and 70 percent allowances are no longer compliant [Source: Ministry of Labour, Code on Wages 2019].
  • 99 to 200 USD per engineer per month is what an India focused EOR partner charges to carry all 5 pillars. Doing it in house with own entity costs 200,000 to 350,000 USD per year in legal, payroll, and HR compliance headcount.
  • 3 audit trigger zones exist: TDS short deduction (Income Tax Department), PF defaults (EPFO), and DPDP non compliance (Data Protection Board). The first two penalize the foreign agency directly through PE attribution if compliance is mishandled.
  • In our experience helping 2,000+ employees onboard, US agencies that build the 5 Pillar India Compliance Stack on EOR partnership ship the first placement in 14 days and pass labour department audit on first attempt 9 out of 10 times.

Are you a US staffing agency planning to place candidates in India in 2026 and unsure where India compliance starts and ends? You are not alone. Per the NASSCOM strategic review, India's tech sector will cross 300 billion USD in FY2026 with 27 percent of the world's new tech talent. The talent pool is open. The compliance load is dense, recently rewritten, and audited harder than most foreign agencies realize.

This guide breaks down the 5 Pillar India Compliance Stack covering labour codes, taxation, DPDP data protection, FEMA cross border payments, and statutory benefits. It compares EOR partnership, direct contractor pay, and own entity for compliance load. It maps the documents you need to keep for audit. Numbers are anchored to NASSCOM FY2026, the Ministry of Labour Code on Wages 2019 notification, and the Digital Personal Data Protection Act 2023. Based on our experience working with 300+ global companies, agencies that build the stack on EOR partnership pass audit on first attempt in 9 out of 10 cases.

Why is India compliance for foreign staffing agencies different in 2026?

India compliance for foreign staffing agencies is different in 2026 because three regulatory shifts landed inside 24 months and overlapped. None are reversible.

  • Code on Wages fully notified November 21, 2025. The 50 percent basic wage floor, unified weekly hour cap, and consolidated overtime rules rewrote every offer letter template in the country [Source: Ministry of Labour, Code on Wages 2019].
  • Digital Personal Data Protection Act 2023. Effective enforcement landed in 2025. Candidate data, payroll data, and client data processed in India fall under DPDP scope with penalties up to 250 crore INR per breach.
  • Income Tax Act 2025 update. PE attribution rules tightened. Foreign agencies that pay India contractors directly trigger PE risk under Section 9 if the contractor's working pattern looks like employment.

That is why 2026 compliance is not a stack you can borrow from a 2022 template. Rebuild it from scratch on the current framework, or partner with an EOR that already runs it.

What does India compliance for foreign staffing agencies actually cover?

India compliance for a foreign staffing agency placing engineers in India covers five overlapping regimes. Skip any one and the others do not save you.

  • Labour codes. Code on Wages, Code on Social Security, Industrial Relations Code, Occupational Safety Health and Working Conditions Code. Governs offer letters, working hours, leave, gratuity, and dispute resolution.
  • Taxation. Income Tax Act 1961 for TDS on salary and contractor payments, plus GST on B2B services. Permanent establishment risk under Section 9 for foreign agencies paying contractors directly.
  • Data protection. Digital Personal Data Protection Act 2023. Data processing agreement, breach notification, data principal rights, cross border transfer rules.
  • Cross border payments. Foreign Exchange Management Act. RBI guidelines on Liberalised Remittance Scheme, FDI rules for own entity, ODI rules for capital infusion.
  • Statutory benefits. Employees Provident Fund Organisation, Employees State Insurance Corporation, gratuity under Payment of Gratuity Act, professional tax, labour welfare fund.

All five pillars overlap on a single payroll cycle. A mistake in one shows up as a defect in another. That is why compliance is treated as a system, not a checklist.

How long does India compliance take to set up through an EOR partnership?

India compliance through an EOR partnership is live in 10 to 14 calendar days from MSA signature. The EOR already holds the Indian entity, the PF/ESI/TDS registrations, the GST, and the DPDP data processing infrastructure. Your agency activates the partnership and the first compliant placement runs through the existing rails.

Compare that to own entity. Incorporation takes 4 to 6 weeks. PF/ESI registration adds 4 to 6 weeks. GST takes another 2 to 3 weeks. Bank account and FEMA filings add 4 to 6 weeks. Total time to first compliant placement runs 16 to 24 weeks if everything goes smoothly.

The agencies that win procurement RFPs with a 30 day first placement clause cannot meet the clock with own entity. EOR is the only path that fits.

What is the 5 pillar India compliance stack for foreign staffing agencies?

The 5 Pillar India Compliance Stack is the operating model US staffing agencies use to run placements at full statutory depth without a 12 person in house compliance team. Build all five before the first placement goes live.

  • Pillar 1. Labour codes. Offer letter on the Code on Wages 50 percent basic wage template. Working hour cap, overtime accrual, leave policy, gratuity accrual, and termination protocol.
  • Pillar 2. Taxation. Monthly TDS deduction and deposit. Form 24Q quarterly. Form 16 annually. GST registration and B2B billing for the EOR fee. Avoid direct contractor pay to dodge PE risk.
  • Pillar 3. Data protection. DPDP data processing agreement between US entity, India EOR, and engineer. Consent management, breach notification process, data principal rights handling.
  • Pillar 4. Cross border payments. USD or GBP invoicing from US to EOR. INR payroll from EOR to engineer. FX conversion with FIRC for inbound and tax documentation for outbound.
  • Pillar 5. Statutory benefits. PF UAN linkage, ESI registration where applicable, gratuity accrual ledger, professional tax remittance, labour welfare fund.

Pro tip: Document each pillar in a one page compliance brief signed by the founder, the COO, and the EOR account lead before the first IST engineer goes live. The agencies that pass labour department audit on first attempt have this brief in their audit folder. The ones that fail audit do not.

See the compliance stack in practice

The Wisemonk partner program for software agencies includes the 5 Pillar Compliance Stack template, the Code on Wages offer letter format, the DPDP DPA, and the audit ready document ladder so you place engineers in India without a 12 person compliance team.

How do EOR, direct contractor, and own entity compare for India compliance?

EOR partnership wins on compliance depth, speed, and total cost for the first 25 to 50 placements. Own entity wins on margin past 50 placements. Direct contractor pay is structurally cheaper but creates PE, labour code, and TDS exposure that overwhelms the saving. Here is the 2026 comparison.

India compliance model comparison for foreign staffing agencies, 2026
Compliance pillarEOR partnershipOwn Indian entityDirect contractor pay
Time to first compliant placement10 to 14 days16 to 24 weeksSame day, high risk
Year 1 cost0 USD setup, 99 to 200 USD per engineer per month60,000 to 120,000 USD setup, plus salarySalary only, risk uncovered
Labour codesEOR carriesBuild and maintainForeign agency exposure
Taxation and TDSEOR deducts and depositsBuild and maintainPE risk under Section 9
DPDP data protectionEOR DPA templateBuild DPA and breach processLimited control
FEMA cross borderEOR handles INR conversionDirect foreign remittance, RBI complianceVariable
Statutory benefitsEOR pays and tracksBuild and runNot applicable
Best fit1 to 50 placements50 plus with multi year horizonShort bounded engagements only

Source: Wisemonk India compliance intelligence 2026.

The practical takeaway. Direct contractor pay looks cheap. The actual cost lands in year 2 or year 3 when the contractor's working pattern triggers PE assessment, or when DPDP audit finds no DPA in place. Avoid.

How does Wisemonk solve India compliance for foreign staffing agencies?

Wisemonk runs all 5 compliance pillars for foreign staffing agencies placing engineers in India. The Indian entity is ours, the registrations are ours, and the SOC 2 Type II and ISO 27001:2022 control set sits over the entire stack. Based on our experience working with 300+ global companies, agencies that join the partner program pass labour department audit on first attempt in 9 out of 10 cases.

Here is what we handle.

  • Code on Wages compliant offer letter on the 50 percent basic wage floor.
  • Monthly TDS, PF, ESI, professional tax, and labour welfare fund filings. Form 16 issuance.
  • DPDP data processing agreement between your US entity, our Indian entity, and the engineer.
  • INR payroll on the 1st of every month, USD invoicing on the 5th. FX conversion with FIRC.
  • Quarterly compliance review covering all 5 pillars.
  • Annual labour department audit support and documentation.

Pricing is published. EOR at 99 USD per employee per month. Managed payroll at 49 USD per employee per month. Contractor of record at 19 USD per contractor per month. We are rated 4.8 out of 5 on G2, we run payroll for 300+ global companies and 2,000+ employees, we process 20 million USD plus in annual payroll, and we are SOC 2 Type II and ISO 27001:2022 certified. Talk to our India hiring experts to scope a 14 day compliant launch, or compare EOR vs entity for the full stack picture.

How do you avoid the most expensive India compliance mistakes?

Six mistakes drive 80 percent of compliance penalties for foreign staffing agencies. Each one is preventable.

  • Old offer letter templates. Offer letters with basic wage below 50 percent of CTC violate the Code on Wages from November 21, 2025. Penalty up to 1 lakh INR per offer plus PF arrears.
  • Direct contractor pay treated as employment. If the contractor reports daily, works on company devices, and follows agency policies, the Income Tax Department reclassifies as employment. TDS arrears and PE attribution follow.
  • Missing DPA. Processing engineer data without a Data Processing Agreement triggers DPDP penalties up to 250 crore INR.
  • Late PF or ESI deposits. Interest at 12 percent per annum plus penal damages up to 100 percent of arrears.
  • FX without FIRC. Inbound FX without Foreign Inward Remittance Certificate creates GST input credit denials and audit triggers.
  • No labour department registration. Running a placement without Shops and Establishments registration in the engineer's state triggers fines at the first inspection.

That is the list. Avoid all six and you have removed the majority of audit risk. Run an India focused EOR partner and the EOR removes them for you.

What documents should a foreign staffing agency keep for India compliance audits?

Keep 8 categories of documents in a single audit folder, refreshed quarterly. India labour and tax audits start with documentation and rarely move past it if the paper trail is complete.

  • Signed employment contracts on Code on Wages template.
  • Monthly payroll registers showing basic, allowances, deductions, net pay.
  • PF, ESI, TDS, PT challans and acknowledgements.
  • Form 16 and Form 24Q quarterly returns.
  • DPDP data processing agreement and consent records.
  • FIRC certificates for inbound USD or GBP.
  • Leave registers and attendance logs.
  • Termination paperwork and full and final settlement records.

In our experience helping 2,000+ employees onboard, the agencies that maintain this folder pass audit in one inspection. The ones that scramble to assemble it post inspection take 4 to 6 months to clear.

How should US agencies budget for India compliance across headcount tiers?

US agencies should budget India compliance as a layered cost stack that scales with headcount tier. Single point estimates miss the 60 percent variance across the build vs buy decision.

  • 1 to 10 placements. EOR partnership only. Budget 1,200 to 2,400 USD per engineer per year for compliance plus payroll. Hidden cost reserve at 8 to 10 percent.
  • 10 to 25 placements. EOR partnership with internal compliance ops half FTE. Budget 18,000 to 30,000 USD per year for the half FTE. Cost per engineer drops to roughly 1,800 USD per year all in.
  • 25 to 50 placements. EOR partnership with internal compliance ops 1 FTE. Budget 35,000 to 55,000 USD per year for the FTE plus 99 to 200 USD per engineer per month EOR fee. Run own entity feasibility analysis at the 35 placement mark.
  • 50 plus placements. Own Indian entity plus 2 to 3 FTE compliance team. Budget 200,000 to 350,000 USD per year for the team plus 12,000 to 22,000 USD for audit, ROC, and statutory consultants.

Cross check the budget annually. The agencies that overspend on compliance at 10 placements stop scaling. The ones that underspend at 35 placements hit audit findings inside 12 months. Run the EOR vs entity calculator every quarter.

What governance cadence keeps India compliance productive after launch?

India compliance for a foreign staffing agency stays productive when the post launch cadence covers all 5 pillars on a fixed weekly, monthly, quarterly, and annual rhythm. Skip the cadence and one pillar degrades and the rest follow.

  • Weekly EOR sync. 30 minutes between agency lead and EOR account lead. Cover open placements, statutory filings due, end client escalations, and pipeline.
  • Monthly payroll and TDS close. Reconcile headcount, statutory accruals, leave balances, and salary changes by the 25th. EOR processes payroll on the 1st and deposits TDS by the 7th.
  • Quarterly compliance audit. Pull PF, ESI, TDS, PT, LWF challans for the quarter. Cross check DPDP DPA in every active client contract. Verify Form 24Q quarterly return filing.
  • Quarterly DPDP review. Audit consent capture logs, breach notification readiness, and cross border transfer documentation.
  • Annual labour department audit. Year end audit support with named owners on both sides. Annual return filing under each Labour Code.

That cadence runs on roughly 6 hours of agency time per month per 10 engineers. Compare it to 40 to 60 hours per month an in house compliance lead would cost. That is the number most agency owners miss when they build vs buy.

Conclusion

India compliance for foreign staffing agencies placing candidates in India in 2026 is a 5 pillar stack covering labour codes, taxation, data protection, cross border payments, and statutory benefits. Built on EOR partnership, the stack is live in 14 days for 99 to 200 USD per engineer per month and clears labour department audit on first attempt in 9 out of 10 cases. Built in house through own entity, the stack costs 200,000 to 350,000 USD per year in compliance headcount and 16 to 24 weeks before the first compliant placement. Direct contractor pay is not a viable path under the current Code on Wages, DPDP, and Income Tax Act framework.

Wisemonk runs all 5 pillars for US software agencies placing engineers in India. We are rated 4.8 out of 5 on G2, SOC 2 Type II and ISO 27001:2022 certified, and trusted by 300+ global companies. Talk to our India hiring experts to scope a 14 day compliant launch, or read the full EOR guide.

Frequently asked questions

What does India compliance for a foreign staffing agency actually cover?

Five overlapping regimes. Labour codes (Code on Wages, Social Security, Industrial Relations, OSH). Taxation (Income Tax Act TDS, GST, PE rules). Data protection (DPDP Act 2023). Cross border payments (FEMA, RBI rules). Statutory benefits (PF, ESI, gratuity, PT, LWF). All five overlap on the monthly payroll cycle. Skip one and the others do not save you.

How long does it take to set up India compliance through an EOR partnership?

10 to 14 calendar days from MSA signature to first compliant placement. The EOR already holds the Indian entity, PF/ESI/TDS registrations, GST, and DPDP infrastructure. Your agency activates the partnership and runs through the existing rails. Compare that to 16 to 24 weeks for own entity setup.

What is the maximum penalty under the DPDP Act 2023 for foreign agencies?

Up to 250 crore INR (approximately 30 million USD) per data breach. The act covers personal data of Indian residents processed for employment, payroll, or client engagement. Penalties apply to the data fiduciary regardless of where it is headquartered. Sign a Data Processing Agreement with your EOR before the first engineer goes live.

How does the Code on Wages affect foreign staffing agencies in 2026?

The Code on Wages 2019, fully notified November 21, 2025, sets a 50 percent floor on basic wage relative to total compensation, unifies weekly hour caps, and consolidates overtime rules. Offer letters with basic below 50 percent of CTC are not compliant. Penalty up to 1 lakh INR per non compliant offer letter plus PF arrears on the higher base.

What is the PE risk for foreign staffing agencies paying contractors directly in India?

Under Income Tax Act 1961 Section 9, paying an India based contractor who works daily under the agency's control, on agency devices, on agency policies triggers permanent establishment attribution. The foreign agency becomes liable for Indian corporate tax on the attributed profits. Penalties can run several lakh USD per case. Avoid direct contractor pay for any role beyond 90 days or 25 percent allocation to one client.

How does EOR partnership remove India compliance load for foreign agencies?

The EOR's Indian entity is the legal employer. It signs the employment contract, files monthly PF, ESI, TDS, PT, and labour welfare fund returns, issues Form 16, runs gratuity accrual, and holds the DPDP data processing infrastructure. The foreign agency funds payroll in USD or GBP and retains the engineer relationship for work assignment, performance, and client billing.

What documents should a foreign staffing agency keep for India compliance audits?

Eight categories. Signed employment contracts on Code on Wages template, monthly payroll registers, PF/ESI/TDS/PT challans, Form 16 and Form 24Q, DPDP DPA and consent records, FIRC certificates for inbound FX, leave and attendance logs, termination and full and final settlement records. Refresh the folder quarterly. The agencies that maintain it clear audit in one inspection.

Ready to build your India team?

Tell us who you're looking to hire. We'll walk you through exactly how the setup works for your company, your timeline, and your budget.

The India'logue

Everything you need for building & scaling remote teams in India

You wire money to workers in India — this newsletter covers everything that comes with it. Tax, GST, IP, ESOPs, cross-border compliance, worker classification, and every regulation in between.

Know more