Payroll Process (SOP) for Startups

Payroll Process for Startups 8-Step SOP & Controls
Finance SOPs & Controls
AS
Ankit Sarawagi|Founder, CFOmatrix·July 2026·10 min read
The payroll process is the one SOP a startup runs every single month, and it is the one where a small slip is most visible: pay the wrong number, miss a statutory due date, or let a single person quietly change a bank account, and you have an unhappy team, a tax notice, or a fraud loss. The good news is that a lean team does not need a payroll department to do this well. It needs a fixed monthly cycle: collect inputs, run payroll, have the founder review it before it goes out, approve it, disburse through bank maker-checker, deposit statutory dues (TDS, PF, ESI, PT) by their due dates, issue payslips, and record it all. This guide lays out that cycle, the controls that make it safe, and the audit trail it leaves behind.
✍ Key Takeaways
  • Payroll is a fixed monthly cycle, not an ad hoc task: inputs, run, review, approve, disburse, deposit, payslips, record.
  • The founder scans payroll before it runs. Finance prepares the run; a second person reviews and approves it before any money leaves, and salary changes always need founder approval.
  • Salaries go out through bank maker-checker, the same maker-uploads, checker-releases control used for every other payment.
  • Statutory dues are part of the run: deposit TDS (by the 7th), PF and ESI (by the 15th) and PT (state dates), then file the returns.
  • The trail lives in the tools. Run payroll in Zoho Payroll, disburse via bank maker-checker, post it in your accounting books, so the records an auditor wants appear as a byproduct.
8 Steps in the monthly payroll cycle 4 Statutory dues to deposit: TDS, PF, ESI, PT 2 People before money moves: preparer + approver

The Monthly Payroll Cycle

The payroll process is a repeatable monthly cycle that turns employee inputs into paid salaries and deposited statutory dues, leaving a clean record at every step. When it is written down as a fixed sequence, anyone on the team can run it, nothing gets skipped, and the control (a second person reviewing before money moves) is built into the flow rather than remembered on a good day.

This SOP is the process. The matching HR, payroll and leave policies are the rules, what the salary structure is, how leave and attendance are counted, which reimbursements are allowed. You need both, and they should agree with each other. This post is one of the operating SOPs in our finance SOPs and controls guide for startups.

The monthly payroll run, end to end
Eight steps, one owner in finance, one approver (the founder) before any money leaves
1
Collect inputs
Attendance and leave, new joiners and exits, variable pay, and approved reimbursements for the month.
2
Run payroll in the tool
Enter the inputs in Zoho Payroll; it computes gross, deductions (TDS, PF, ESI, PT) and net pay.
3
Founder reviews before it runs
The founder scans the run: total cost, headcount, joiners and exits, and any salary change.
4
Approve the run
The approval is captured in the tool (or an email saved back), so the run is locked before payment.
5
Disburse salaries via bank maker-checker
One person uploads the salary file (maker), a second approves and releases it (checker).
6
Deposit statutory dues by due date
TDS by the 7th, PF and ESI by the 15th, PT per state, then file the returns.
7
Issue payslips
The tool generates and shares payslips with each employee.
8
Record in the accounting books
Post the payroll entry and the statutory liabilities and payments in Zoho Books.
Same cycle every month; the review-and-approve step in the middle is what keeps it a control, not just a task.

Step 1: Collect the Inputs

Payroll is only as accurate as its inputs, so this first step is where a lean team should be most disciplined. Gather everything that changes pay this month, in one place, before you touch the payroll tool. A short input checklist, run the same way every month, prevents the most common payroll errors: a joiner paid a full month instead of a part month, an exit paid after leaving, or a reimbursement missed.

The monthly payroll input checklist
Everything that changes pay this month, collected before the run
InputWhat to checkSource
Attendance & leaveLoss-of-pay days, unpaid leave, part-month casesHR / attendance tool
New joinersStart date, pro-rated pay, bank and PF/ESI detailsOnboarding record
ExitsLast working day, days payable, recoveriesHR / F&F workflow
Variable payIncentives, bonus, overtime, approved for the monthManager / founder approval
ReimbursementsOnly approved claims, within category limits, with receiptsExpense claim workflow
Salary changesOnly with founder approval on recordFounder approval
A change without a source and an approval does not go into the run. That single rule stops most payroll disputes.
📈 CFO Lens: reimburse with payroll

The simplest way to handle expense reimbursements on a lean team is to pay them monthly, along with the payroll cycle, instead of running scattered off-cycle transfers. Every claim needs a receipt and must sit within its category limit before it is approved, and only approved claims flow into that month’s run. One payment, one approval, one clean record. The detail lives in the expense reimbursement SOP.

Steps 2 to 4: Run, Review, Approve

With inputs in hand, finance runs the payroll in the tool, which computes gross pay, each deduction and net pay. Then comes the step that turns payroll from a task into a control: a second person reviews and approves the run before any salary is disbursed. On a lean team that reviewer is the founder, who scans the run before it goes out.

“I always want to scan payroll before it actually runs. I am not re-checking every calculation; I am looking at the total cost, the headcount, who joined, who left, and above all any change in someone’s salary. A salary change never happens without my sign-off.”

Ankit Sarawagi, from building the finance function at growing startups

This is the same two-person model used everywhere in the finance function: finance does the work, one other person approves. It means no single person can quietly add a name to the payroll, inflate a salary, or redirect a payment and pay it out unnoticed. Salary changes are a sensitive item that always needs founder approval, exactly as set out in the startup approval matrix, and the review sits on the same segregation-of-duties logic covered in the segregation of duties SOP.

Review, approve, disburse: two sets of eyes before money moves
Preparer and approver are never the same person, and the trail is captured at each stage
1 · FINANCE PREPARES
Enters inputs and runs payroll in Zoho Payroll.
Trail: the payroll run and register in the tool.
2 · FOUNDER APPROVES
Scans the run, sign-off on totals and any salary change.
Trail: approval in the tool or an email saved back.
3 · BANK RELEASES
Maker uploads the salary file, checker releases it.
Trail: maker and checker logged by the bank.
Three independent records (payroll run, approval, bank release) reconstruct exactly who did what, which is what an auditor asks to see.

Step 5: Disburse via Bank Maker-Checker

Salaries leave the company the same way every other payment does: through bank maker-checker. One person uploads the salary payment file into the bank (the maker), and a second person approves and releases it (the checker). The bank logs both actions, so the release itself becomes your approval evidence, no separate paperwork needed. Before release, reconcile the payment file total to the approved payroll run, so the amount leaving the bank matches exactly what was signed off.

⚠️ Watch Out: the bank-detail change

A request to change an employee’s salary bank account is a classic route for payroll fraud. Never action it on an email alone. It is a sensitive item: the founder confirms it, ideally through a second channel like a phone call, before finance updates the record. Then reconcile the payment file to the approved run before release, so a swapped account number cannot slip through.

Step 6: Deposit the Statutory Dues

Deducting TDS, PF, ESI and PT from salary is only half the job. The other half is depositing them with the government by their due dates and filing the returns. Treat the statutory deposit as part of the payroll run, not a separate afterthought, because a missed date means interest and penalties, and for TDS it can even mean the salary expense is disallowed.

Payroll statutory dues and due dates
What you deduct, who it covers, and when it must be deposited
DueWhat it isApplies toDeposit by
TDS on salaryIncome-tax deducted at source, Section 192All taxable salaries7th of next month
PFProvident Fund, employee + employer shareWhere the EPF Act applies15th of next month
ESIEmployees’ State Insurance, employee + employerEmployees up to the wage threshold15th of next month
PTProfessional Tax, a state levyStates that levy PT, by slabPer state (varies)
Due dates current to mid-2026 and subject to change; March (year-end) has a specific TDS date. Verify the current position before each deposit.

A payroll tool like Zoho Payroll computes each of these deductions in the run, which is why keeping payroll in the tool matters: the deduction, the challan and the return all tie back to the same register. Set calendar reminders a few days ahead of the 7th and the 15th so a deposit is never missed, and keep the challans, they are part of the audit trail. This deposit discipline connects to the broader statutory compliance calendar for the company.

Payslips, Records and the Audit Trail

The last two steps close the loop. The tool issues payslips to each employee, and finance records the payroll entry and the statutory liabilities and payments in the accounting books. Done inside the right tools, these steps also produce the exact records an auditor or diligence team asks for, without any extra work.

Where the payroll audit trail lives
Keep each record in a tool that carries its own log; capture back anything approved on chat
1
Payroll: Zoho Payroll
The monthly payroll register, the run, the approval and the payslips all live here, with the tool’s own audit trail.
2
Payments: bank maker-checker
The salary release is logged with maker and checker, so the disbursement itself is your approval evidence.
3
Accounting: Zoho Books
The payroll entry, the statutory liabilities and the deposits are posted here. India’s MCA rules now require accounting software to keep an edit-log audit trail switched on, which auditors check.
!
Approved a salary change or exit on email or chat? Capture it back
Speed is fine, but a chat message is not a durable record. Save it into the payroll tool or a monitored email so it stays audit-defensible.
The records diligence asks for: the monthly payroll register, the salary payment proof, the run approval, the TDS/PF/ESI/PT challans, and the filed returns.

Startups get caught here the same way they do everywhere else: they do the work but never document it. Run payroll this way and the documentation is a byproduct of paying people, not a scramble before an audit. The same principle runs through the whole series, from the employee onboarding SOP that feeds clean joiner data into payroll, to the expense reimbursement SOP, and the full picture in the finance SOPs and controls pillar guide.

Want a payroll process that runs clean every month?

CFOmatrix sets up right-sized finance SOPs for founders: the payroll cycle, maker-checker disbursement, statutory deposits on time, and an audit trail that survives diligence. Tell us your team size and we will map it.

Talk to CFOmatrix

Frequently Asked Questions

What is the payroll process?

The payroll process is the monthly cycle that turns employee inputs into paid salaries and deposited statutory dues, leaving a record at every step. In a lean startup it runs as: collect inputs (attendance, new joiners and exits, variable pay, approved reimbursements), run payroll in a tool like Zoho Payroll, have the founder review the run before it goes out, approve it, disburse salaries through bank maker-checker, deposit statutory dues (TDS, PF, ESI, PT) by their due dates, issue payslips, and record everything in the accounting books. The whole point is that payroll is reviewed and approved by a second person before any money leaves, and every step lives in a tool with an audit trail.

What statutory dues apply to payroll?

Four main statutory deductions ride on Indian payroll. TDS on salary under Section 192 of the Income Tax Act is deducted based on each employee’s tax regime and deposited by the 7th of the next month. Provident Fund (PF) is deducted where the EPF Act applies and deposited by the 15th of the next month. Employees’ State Insurance (ESI) applies to employees earning up to the wage threshold and is also deposited by the 15th. Professional Tax (PT) is a state levy with state-specific slabs and due dates. You deduct the employee’s share, add the employer’s share where applicable, and deposit the total by each due date, then file the related returns.

Who approves payroll before it runs?

Payroll should be reviewed and approved by a second person before any salary is disbursed, and in a lean startup that second person is usually the founder. Finance prepares the payroll run and the founder scans it before it goes out: total payroll cost, headcount, any new joiners or exits, and especially any salary changes, because a salary or compensation change always needs founder approval. This is the same two-person control used everywhere in the finance function: finance does the work, one other person approves. It means no single person can quietly add a name, inflate a salary, or change a bank account and pay it out unnoticed.

How is payroll disbursed safely?

Salaries are disbursed through bank maker-checker, the same control used for every other payment. One person uploads the salary payment file into the bank (the maker) and a second person approves and releases it (the checker). The bank logs both actions, so the release itself becomes your approval evidence. Before release, reconcile the payment file total to the approved payroll run so the amount leaving the bank matches what was signed off. Any change to an employee’s bank details is a sensitive item that needs founder confirmation, ideally through a second channel, before finance updates the record, because a bank-detail change is a common route for payroll fraud.

When are TDS, PF and ESI deposited?

For salary paid in a given month, TDS under Section 192 is deposited by the 7th of the following month (with a March-specific date for the year-end month). PF and ESI are both deposited by the 15th of the following month. Professional Tax due dates vary by state. Missing a due date triggers interest and penalties and, for TDS, can lead to disallowance of the expense, so the safest practice is to set calendar reminders a few days ahead of each date and to treat the statutory deposit as part of the payroll run, not a separate afterthought. Always verify the current dates, as rules change.

How do I keep payroll audit-ready?

Keep the whole process inside tools that carry their own audit trail. Run payroll in Zoho Payroll, which logs the run, the register and the payslips; disburse through bank maker-checker, which logs the maker and checker; and post the payroll entry and the statutory deposits in your accounting software, which under India’s MCA rules must keep an edit log switched on. The records an auditor or diligence team asks for are the monthly payroll register, the salary payment proof, the approval of the run, the challans for TDS, PF, ESI and PT, and the filed returns. If a salary change or an exit was approved over email or chat, save that back into the record. Run this way and the documentation is a byproduct of paying people, not extra work later.

How are reimbursements handled in payroll?

The simplest lean practice is to reimburse approved expense claims monthly, together with the payroll cycle, rather than running a separate off-cycle payment. Every claim needs a receipt and must sit within its category limit before it is approved, and only approved claims are picked up as a payroll input for that month. Paying reimbursements with salary keeps one payment run, one approval, and one clean record instead of scattered ad hoc transfers, and it keeps the reimbursement inside the same audit trail as the rest of payroll.

This is general educational information for founders, current to mid-2026, drawing on the author’s experience building finance functions inside growing startups, and is not legal, tax or audit advice. Statutory rates, wage thresholds and due dates for TDS, PF, ESI and Professional Tax change and vary by state; verify the current position or consult a professional before acting on a specific matter.

AS
Founder, CFOmatrix  |  Finance Strategy & Equity Compliance

CFOmatrix is a knowledge platform focused on how finance actually works inside growing companies. This SOP draws on hands-on experience running lean monthly payroll, maker-checker disbursement and on-time statutory deposits for startup teams.

What do you think?

Leave a Reply

Your email address will not be published. Required fields are marked *

Insights

More Related Articles

Factory Registration and Compliance in India

Startup Compliance Checker: Which Labour, Payroll and HR Rules Apply in India

Startup Compliance Applicability Checker