POSH Compliance for Startups: Internal Committee Setup and Annual Report

POSH Compliance for Startups IC Setup & Annual Report
HomeInsightsPayroll & Labour Law › POSH Compliance for Startups
Payroll & Labour Law
AS
Ankit Sarawagi|Founder, CFOmatrix·August 2026·9 min readPayroll & Labour Law

Most founders meet POSH the hard way: an investor’s diligence checklist asks for your “Internal Committee constitution” and “last annual report,” and nobody in the room knows what either is.

This guide gives you the whole thing in plain language: when POSH applies, how to build a valid committee, how an inquiry runs, and how to file the annual report. Start with the summary, then dig into the section you need.

POSH at a glance
When it applies
A formal Internal Committee is mandatory at 10 or more employees (headcount, not payroll).
Committee
At least 4 members, half women, led by a senior woman, plus 1 external member.
Inquiry clock
Complaint in 3 months → inquiry done in 90 days → employer acts in 60 days.
Annual filing
Report to the District Officer each calendar year (most districts: by 31 January).
Penalty
Up to ₹50,000, doubling on repeat, with possible licence cancellation.
10+Employees: committee becomes mandatory
90 daysTo complete an inquiry
₹50,000Penalty for no committee

1 Does POSH apply to you?

The POSH Act, 2013, protects employees at every workplace, however small. Size does not decide whether harassment is unlawful. It decides which body handles a complaint.

  • 10 or more employees: you must set up an Internal Committee (IC) at each office. This is the line most startups cross without noticing.
  • Fewer than 10: no IC needed, but a complaint goes to the district Local Committee. Keep a policy and a clear reporting route anyway.

Who counts in the “10”

The count is broad. It includes everyone on the floor, on your payroll or not:

  • Full-time and part-time staff
  • Contract workers and agency hires
  • Interns, apprentices and consultants

It applies equally to private companies, LLPs, partnerships and proprietorships.

Example

Kaveri Labs has 6 full-time employees, 2 interns and 3 designers from an agency sitting in its office. That is 11 people on the floor. Kaveri has crossed the threshold and must set up an IC, even though only 6 are “on payroll”.

Watch outOnce you cross 10, the duty does not lapse if headcount later drops below 10. Founders who scale down after a hiring freeze often assume it disappears. It does not.

2 Building a valid Internal Committee

A wrongly composed IC counts as no IC at all: its inquiries can be challenged and the penalty still applies. Get these five things right.

SeatRequirement
Presiding OfficerA senior woman employee. None at that office? Borrow one from another unit.
Employee membersAt least two, ideally with legal or social-work experience.
External memberOne, from an NGO or familiar with harassment matters. Mandatory.
Gender balanceAt least half the members must be women.
TenureUp to three years, then reconstitute.
NoteThe external member is the seat startups skip to save cost. It is not optional, and its absence is the defect most often flagged in due diligence.

The policy and the paper trail

Alongside the committee you need a written POSH policy that defines harassment, explains how to complain, sets timelines and states the consequences. Then:

  • Display an abstract of the policy and the IC members’ names prominently.
  • Run at least one awareness session and keep the attendance sheet.
  • Register the IC on the government’s SHe-Box portal.

In diligence, “we have a policy” means nothing without the display proof and the attendance record.

Free templateYou do not need to draft this from scratch. Download our ready POSH policy template for India, fill in your IC members and District Officer, and you have a compliant policy in minutes.

3 How a complaint and inquiry run

When a complaint lands, the clock starts. The process is time-bound, and missing a step is where employers lose cases.

1
Complaint filedwithin 3 months
In writing, within three months of the incident. The IC can extend by a further three months for good reason.
2
Conciliation (optional)
Only if the complainant asks for it, and never on the basis of a monetary settlement.
3
Inquiry90 days
A fair inquiry giving both sides a hearing, completed within ninety days.
4
Report to employer10 days
The IC sends its findings to the employer within ten days of finishing the inquiry.
5
Employer acts60 days
The employer implements the recommendations within sixty days.
Example

A complaint reaches Kaveri’s IC on 1 March. The inquiry must finish by about 30 May, the report goes to the employer by 9 June, and the outcome (a transfer, warning or termination) is implemented by early August. Slip any date and the company’s position weakens if the matter is later challenged.

CFO lensTreat these like statutory filing dates. Put the 90-day and 60-day clocks in the same compliance calendar as GST and TDS, with a named owner. A missed POSH deadline is as real a liability as a missed tax one.

4 Filing the annual report

This is the deliverable investors and auditors ask to see. Each calendar year the IC prepares an annual report and submits it to the District Officer of the district where the office sits.

ItemDetail
Period coveredCalendar year, January to December
DeadlineMost districts: 31 January for the previous year (some set a later date, confirm locally)
Multiple officesFile a separate report per district where you have a workplace
What it containsComplaints received, disposed, pending beyond 90 days, and awareness programmes run
SHe-BoxIC registration and report details updated on the portal where applicable

Separately, under the Companies Act, 2013, your Board’s report must state that the company has complied with POSH and constituted an IC. Auditors check this line, so it must match reality.

TipEven a nil year needs a report. “Zero complaints” is a valid, expected filing, and its absence looks worse than the nil return itself.

5 What non-compliance costs

Failing to set up an IC, or otherwise breaching the Act, attracts a fine of up to ₹50,000. A repeat offence can double it and lead to cancellation of your licence or registration.

The bigger cost is usually the deal. A missing IC or unfiled report routinely holds up a funding round or acquisition until it is cured, often under time pressure and at a premium.

POSH is not an HR nicety. For a startup raising capital it is a diligence gate, and the cheapest time to clear it is before anyone asks.

6 Your setup checklist

  1. Count everyone on the floor. At 10, set up the IC.
  2. Appoint a senior woman as Presiding Officer, two employee members and one external member; keep women at half or more.
  3. Adopt and display a written policy; run an awareness session and keep proof.
  4. Register the IC on SHe-Box.
  5. Put the 3-month, 90-day and 60-day clocks in your compliance calendar.
  6. File the annual report with the District Officer each year, and add the POSH line to your Board’s report.

Not sure which rules apply at your headcount?

Use our free Compliance Applicability Checker: enter your team size, state and set-up, and see exactly which labour, payroll and HR filings you owe now, and which switch on as you grow.

Check my compliances

7 FAQs

Does POSH apply to a startup with fewer than 10 employees?

The Act protects employees at every workplace regardless of size, but a formal Internal Committee is mandatory only at 10 or more people. Below 10, complaints go to the district Local Committee, and you should still keep a policy and a redressal route.

Who counts towards the 10-employee threshold?

Everyone working at the workplace: full-time, part-time, contract, interns, apprentices and consultants, on your payroll or a vendor’s. Once you hit 10 on any single day, the duty is triggered.

By when must the POSH annual report be filed?

The IC prepares a report for the calendar year (January to December) and submits it to the District Officer. Most districts follow 31 January for the previous year, though some set a later date, so confirm your district’s cut-off.

Is an external IC member really mandatory?

Yes. Every IC must include one external member from an NGO or a person familiar with harassment issues. An IC without this seat is defective and its proceedings can be challenged.

What is the penalty for not constituting an Internal Committee?

A fine of up to ₹50,000. A repeat offence can double the penalty and lead to cancellation of your business licence or registration.
Sources: Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 and Rules; Companies (Accounts) Rules, 2014 (Board’s report disclosure); Ministry of Women & Child Development, SHe-Box portal. Thresholds and deadlines verified as of August 2026; district deadlines are set locally and should be confirmed.
AS
Founder, CFOmatrix  |  Finance Strategy & Compliance

CFOmatrix helps Indian startups build finance, tax and compliance functions that stand up to investor due diligence, from process and controls to the filings and the numbers behind them.

Disclaimer: This article is general information as of August 2026 and is not legal advice. The POSH Act, its rules and district-level deadlines can change and vary by location. Confirm your specific obligations with a qualified professional before acting.

What do you think?

Leave a Reply

Your email address will not be published. Required fields are marked *

Insights

More Related Articles

Payment of Bonus Act: A Startup Guide to Statutory Bonus in India

Professional Tax Registration and Filing in India: A Startup Guide

Shops and Establishment Registration in India: A Founder’s Guide