Legal and Regulatory Framework for GCCs in India (2026)

What does it actually take, legally, to stand up a global capability centre in India and start employing people?

India now hosts 2,117 GCCs across 3,728 centers, per our India Investment Intelligence 2026 research. Every one of them cleared the same regulatory stack before a single engineer logged in.

The part that catches teams out is sequencing. Registration and hiring do not have to happen in that order, and assuming they do costs most companies a quarter.

This guide is for legal, finance and operations leads scoping an India GCC. It covers entity structure, the registrations, FEMA and FDI, tax and transfer pricing, employment law, data protection and IP.

What legal structure should your India GCC use?

A wholly owned subsidiary, incorporated as a private limited company under the Companies Act 2013. It is the standard for a reason: 100% foreign ownership under the automatic route, limited liability, clean IP ownership and straightforward permanent establishment protection.

Three alternatives exist. Each carries a limit that rules it out for most capability centres:

If you are still weighing ownership models rather than structures, our comparison of a GCC against an ODC sets out who holds what.

Structure settled, the next question is what you have to register.

Which registrations does a GCC need before it can operate?

Incorporation runs through the Ministry of Corporate Affairs SPICe+ form, which bundles most of what you need into a single filing. The employment registrations come after, and they are state-specific.

• Incorporation via SPICe+: name reservation, DIN for directors, DSC, PAN and TAN, handled as one company registration workflow.
• GST registration: required before you raise your first intercompany invoice, and the basis on which exported services are zero-rated.
• EPF and ESI: employer registration for provident fund and state insurance, in every state where staff are based.
• Shops and Establishments Act: a state registration governing hours, leave and working conditions. Different in every state, including for fully remote staff.
• Professional tax: levied by state, with different slabs and due dates. One payroll configuration does not cover all of them.

From our experience helping 300+ global companies build India operations, the multi-state piece is where most first-year penalties come from. A team spread across Karnataka, Maharashtra and Telangana is three compliance footprints, not one.

Thresholds also shift as you grow. Our statutory compliance checklist after ten employees maps what switches on and when.

Registration is the visible half. The money coming in has its own rulebook.

How do FEMA and FDI rules apply to your GCC?

IT and ITeS sit under the automatic route, so 100% foreign investment needs no prior government approval. What it does need is reporting, on a clock.

• FC-GPR within 30 days: file with the Reserve Bank of India after every share allotment. Penalties compound from day 31, and a late filing can stall operations while it is resolved.
• Annual FLA return: foreign liabilities and assets, due each July for entities holding foreign investment.
• Valuation at entry: shares issued to a non-resident must be priced at or above fair value, certified by a registered valuer.

Treat the 30-day FC-GPR window as the hardest date in your setup calendar. It is the single filing we see missed most often, and it is entirely avoidable.

With the capital reported, the recurring question becomes how the centre gets paid.

How is a GCC taxed in India?

A captive centre bills its parent on a cost-plus basis and pays Indian corporate tax on that margin. Because the two parties are related, the margin has to be defensible under transfer pricing rules, and that is where most GCC tax exposure sits.

• The 15.5% safe harbour: effective 1 April 2026, a uniform margin now covers software development, ITeS, KPO and contract R&D as a single Information Technology Services category, under a revised threshold. Opting in removes most dispute risk.
• Documentation: intercompany agreements, a transfer pricing study and the annual accountant's report. Put the agreement in place before the first invoice, not after.
• GST on exports: services exported to the parent are zero-rated where the supplier is in India, the recipient is outside it, and payment arrives in convertible foreign exchange. Most GCCs export under a Letter of Undertaking.
• Income Tax Act 2025: live from 1 April 2026. TDS on salary moved section and the quarterly return was renumbered, so payroll configurations carried over from the old Act are filing against retired references.

Tax treatment shapes the economics as much as salary does. Our GCC setup cost breakdown puts numbers against each line.

Corporate tax handled, the rules that touch your people are next.

Which employment laws apply to GCC staff?

India's four Labour Codes came into force on 21 November 2025, consolidating 29 central laws covering wages, social security, industrial relations and workplace safety. Final central rules followed in May 2026, with state rules still rolling out.

For a GCC, that translates into four practical obligations:

• Contracts and wage structure: employment contracts and salary structures must reflect the new definition of wages, which changes how PF and gratuity are computed.
• Statutory benefits: provident fund, state insurance, gratuity and leave entitlements. What counts as standard benefits in India matters more for retention than a salary bump.
• State variation: minimum wages, professional tax and Shops Act rules differ by state and are revised on their own cycles.
• Correct classification: contractors doing employee-shaped work create back-pay and tax exposure. Check your setup with our misclassification quiz.

Employment covered, two areas remain that boards ask about first: data and IP.

What data protection rules apply to an India GCC?

India's Digital Personal Data Protection Act was enacted in 2023. Its Rules were notified in November 2025 and phase in through 2027, covering consent, breach reporting and cross-border transfer terms.

Alongside it, CERT-In cybersecurity directions set incident reporting and log retention obligations that apply regardless of sector. If your GCC touches customer data for a regulated parent, expect both to show up in client contracts ahead of the statutory deadline.

Payroll is usually the most sensitive data a GCC handles. Our payroll in India guide covers the statutory handling rules in full.

Who owns the IP your India GCC creates?

You do, but only if the paperwork says so. India's Copyright Act defaults ownership of work created during employment to the employer, which helps. The Patents Act carries no equivalent rule, so inventions need express assignment.

Three clauses close the gap: an assignment covering copyright and inventions, a moral rights waiver, and confidentiality binding every subcontractor who touches the work. Put them in the employment contract, not a side letter.

Two questions come up in almost every scoping call we run.

How long does GCC legal setup take in India?

Incorporation to fully registered typically runs four to six months, varying with the state, document readiness and how complex the operation is. Our launch timeline for an India GCC breaks it down week by week.

Can you hire before the entity is registered?

Yes, and it is the single biggest time saver available. An Employer of Record employs your team legally from week one while incorporation runs in parallel, then the staff transfer across. We cover the mechanics in hiring via EOR while your GCC is being set up.

Running them in sequence rather than in parallel is the most common reason a build slips, and it is a theme in why GCC setups fail in India.

Which brings us to how we can help.

How does Wisemonk help you set up a compliant GCC in India?

Wisemonk is an India-native Employer of Record that helps global companies hire, pay and manage talent in India without setting up a local entity. India is the only market we serve, which is why we go deeper on it than any global platform can.

We work with 300+ global clients, manage 2,000+ employees in India and process over $20M in annual payroll, at 4.8 out of 5 on G2.

Here is how that maps to a GCC build:

• Employer of Record: hire compliantly from day one through our India EOR, from $99 per employee per month, while the entity registers.
• Entity setup: company registration in India covering SPICe+, FEMA, FC-GPR, PAN, TAN and GST.
• GCC setup: end-to-end GCC build-out in India once you scale past 50 employees, on a custom quote.
• Managed payroll: payroll and statutory filings once you have your own entity, aligned to the current Act.
• Crossover modelling: price EOR against your own entity with our EOR vs entity calculator before you commit capital.

We are a leading EOR in India, now expanding our services to the US and UK.

Here is what one client told us:

We came across Wisemonk and met with the CEO and staff to explain our situation, and were very impressed with their customer-focused approach to their business. Wisemonk onboarded all of my employees in one or two days. They paid my employees' salaries on the day after my payment cleared. We are an American company, so I was very happy to see that they have a US bank account where I can make ACH payments to minimize bank charges. The best part is that we get to work with a dedicated person assigned to our company. I would highly recommend Wisemonk and think of them as our Indian HR department.
- Frank Menes, Founder & CEO at Senem RFP