ROC Compliance 2026: The Complete Checklist for Private Limited Companies
If you run a private limited company, ROC compliance isn’t optional paperwork — it’s the annual proof to the government that your company still exists, is still governed properly, and hasn’t quietly gone dormant. Miss it, and the penalties compound daily with no upper limit. Two things make this year’s ROC compliance cycle different from previous ones: the MCA quietly doubled the small company thresholds in December 2025, which may have moved your company into a lighter compliance bracket without you realising it, and a data-centre fire in June 2026 pushed the DPT-3 deadline to 31 July — which, as you’re reading this, is closer than you might think.
This guide walks through the full annual ROC compliance checklist for FY 2025-26 — AOC-4, MGT-7/7A, DIR-3 KYC, DPT-3, board meetings, and penalties — and, because ROC filings don’t exist in isolation, how these deadlines line up against your Income Tax and GST obligations so nothing falls through the gap between three different regulators.
What Is ROC Compliance and Who Must File
ROC compliance refers to the annual and event-based filings every company registered under the Companies Act, 2013 must submit to the Registrar of Companies (ROC), the office under the Ministry of Corporate Affairs (MCA) responsible for administering company law in India, through the MCA21 portal. There are currently 25 ROC offices spread across the country, and every one of India’s registered companies and LLPs falls under one of them based on its registered office address.
The obligation applies uniformly — a private limited company with zero revenue in a given year still has to hold its AGM, get its accounts audited, and file its annual return. The only thing that changes with company size is which specific form you file and how much governance overhead comes with it, which is exactly what changed for a lot of companies in December 2025.
- Private Limited Companies — full annual filing cycle every year
- One Person Companies (OPCs) — simplified filing, treated similarly to small companies
- Small Companies — abridged forms and reduced governance burden (see next section)
- LLPs — a parallel but separate filing cycle under the LLP Act, 2008 (Form 8 and Form 11)
- Dormant companies — still required to file annual returns, hold at least one board meeting, and complete a statutory audit
“No transactions this year” is not the same as “no filing required.” A company that filed its incorporation papers in March and did absolutely nothing else still has to complete its first AGM, audit, AOC-4, and MGT-7 cycle on schedule.
Big Update: MCA’s New Small Company Threshold
On 1 December 2025, the MCA notified an amendment to Rule 2(1)(t) of the Companies (Specification of Definition Details) Rules, 2014, more than doubling both thresholds that define a “small company” under Section 2(85) of the Companies Act, 2013. This single change quietly moved a meaningful number of private companies into a lighter compliance bracket — many without their directors realising it yet.
A company qualifies as a small company if it satisfies both conditions — this is not an either/or test:
| Criterion | Old Limit (until 30 Nov 2025) | New Limit (from 1 Dec 2025) |
|---|---|---|
| Paid-up share capital | ≤ ₹4 Crore | ≤ ₹10 Crore |
| Turnover (preceding FY) | ≤ ₹40 Crore | ≤ ₹100 Crore |
Public companies, holding companies, subsidiary companies, and Section 8 (non-profit) companies are excluded from small company status regardless of size.
What Changes If You Now Qualify as a Small Company
- Annual return: file the abridged MGT-7A instead of the full MGT-7
- Board meetings: only 2 per year instead of 4, with a minimum gap of 90 days instead of a maximum gap of 120 days
- Auditor rotation: exempt from the mandatory 5-year auditor rotation under Section 139(2)
- Cash flow statement: exempt from preparing one as part of financial statements
- CARO 2020 reporting: the auditor’s report doesn’t need to address CARO’s expanded clauses
- Penalties: under Section 446B, penalties for defaults are capped at half the normal amount — up to ₹2 lakh for the company and ₹1 lakh per officer in default
Small company status is reassessed every financial year against the immediately preceding year’s audited figures — it is never permanent. If your turnover crosses ₹100 crore this year, you lose small company status for the next filing cycle even if revenue dips back below the threshold afterward. Re-check your numbers before choosing MGT-7A over MGT-7 each year; filing the wrong form risks rejection.
A Pune-based electronics distributor with ₹7 crore paid-up capital and ₹65 crore turnover had been filing full MGT-7, holding 4 board meetings a year, and rotating auditors every 5 years — standard “regular company” compliance. Under the new thresholds, both figures now fall comfortably within the ₹10 crore / ₹100 crore limits. For FY 2025-26 onward, the company can file MGT-7A, drop to 2 board meetings a year, and skip its scheduled auditor rotation — a real reduction in both cost and administrative load that the directors hadn’t clocked until their CS flagged it during AGM prep.
DPT-3 Deadline Extended to 31 July 2026
If your company has any director’s loans, inter-corporate deposits, or advances that fall within the scope of the Companies (Acceptance of Deposits) Rules, 2014, your DPT-3 (Return of Deposits) for FY 2025-26 is due by 31 July 2026 — extended from the usual 30 June deadline via MCA General Circular No. 02/2026 dated 19 June 2026, following a fire at the MCA21 data centre on 5 June 2026. No additional fee applies if filed by the extended date. If you’re reading this close to the deadline, this is the one item on this checklist to action first.
DPT-3 must be filed by every company (other than a government company) that has outstanding loans, deposits, or specified exempted transactions as of 31 March, even where none of it technically counts as a “deposit” under the rules — the form is used to declare that too. The same MCA circular also extended validity for company and LLP name reservations expiring between 21 and 30 June 2026 to 10 July 2026, so if you were mid-incorporation during that window, check whether your reservation needs re-verification.
The Core ROC Annual Compliance Checklist
Assuming your company holds its AGM on the standard 30 September deadline for FY 2025-26 (the year running April 2025 to March 2026), here is how the core filing calendar lines up:
AOC-4 — Filing Financial Statements
AOC-4 carries your audited financial statements, board report, and auditor’s report to the ROC. It is due within 30 days of the AGM — around 30 October 2026 for a 30 September AGM. Companies required to use XBRL tagging (listed companies, companies with paid-up capital of ₹5 crore or more, or turnover of ₹100 crore or more, among other criteria) file AOC-4 XBRL instead of the standard form. At least one director signs using a Class 3 Digital Signature Certificate, alongside certification by the statutory auditor.
MGT-7 / MGT-7A — Annual Return
The annual return captures your company’s shareholding pattern, director details, and corporate structure as of the financial year-end. It’s due within 60 days of the AGM — around 29 November 2026. MGT-7 is required for regular companies; MGT-7A is the abridged version for small companies and OPCs. Note that AOC-4 must be filed first — MGT-7/7A pulls financial data directly from the submitted AOC-4, so the portal won’t let you file them out of sequence.
DIR-3 KYC — Director KYC
Every individual holding a Director Identification Number (DIN) as of 31 March 2026 must complete DIR-3 KYC by 30 September 2026, regardless of whether they’re currently an active director of any company. This is an annual requirement for every DIN holder, not just company-specific — a director on the board of three companies files it once, not three times.
Documents You’ll Need Before You Start Filing
Gathering these upfront saves the back-and-forth that usually delays AOC-4 and MGT-7 closer to the deadline:
- Audited financial statements — balance sheet, profit and loss account, notes to accounts
- Board’s report and auditor’s report, including CSR report if CSR provisions apply
- List of shareholders and their shareholding as on the financial year-end
- Details of directors, including any changes during the year (appointments, resignations)
- Register of charges, if the company has any secured borrowings
- Digital Signature Certificate (Class 3) of the signing director, kept current and not expired
- Auditor’s PAN and membership details for certification
| Form | Purpose | Due Date (FY 2025-26) |
|---|---|---|
| ADT-1 | Auditor appointment/reappointment | 15 days from AGM |
| MSME-1 | Outstanding dues to micro/small suppliers beyond 45 days | 30 Apr and 31 Oct (half-yearly) |
| DPT-3 | Return of deposits and exempted transactions | 31 Jul 2026 (extended) |
| CSR-2 | CSR reporting, if CSR provisions apply | Notified separately after AOC-4 |
Board Meetings, Auditor Rotation and Governance
Beyond the filing forms themselves, the Companies Act sets minimum governance standards that get checked whenever ROC scrutinises a filing or a company faces a dispute:
- Board meetings: regular companies must hold at least 4 board meetings a year with no gap exceeding 120 days between consecutive meetings; small companies, OPCs, and dormant companies need only 2, with a minimum gap of 90 days
- Auditor rotation: individual auditors rotate every 5 years, audit firms every 10 years, for companies above the small company threshold — this is the single most commonly missed governance requirement in growing companies that cross the threshold mid-cycle
- Statutory audit: compulsory for every company regardless of size — small company status reduces the scope of what the auditor must report (no CARO 2020, no cash flow statement) but never removes the audit requirement itself
- Registered office: any change must be intimated to the ROC within 15-30 days depending on whether it’s within the same city or across states
Founders who cross the small company threshold mid-year sometimes keep filing MGT-7A and holding only 2 board meetings out of habit, not realising their status changed. This creates a compliance default that surfaces only when the next year’s filing gets rejected or queried. Recheck your small company eligibility every year before your CS finalises which form to file.
How ROC Compliance Connects to Income Tax and GST
ROC filings don’t happen in isolation from your other statutory obligations — the same audited books drive filings across three separate regulators, and that overlap is exactly where inconsistencies tend to surface as scrutiny triggers.
The audited financial statements you file in AOC-4 are the same figures that feed your company’s Tax Audit Report (where applicable) and ITR-6 filing with the Income Tax Department. Companies are also required to pay advance tax in quarterly instalments — our Advance Tax FY 2026-27 guide covers the instalment schedule and computation in detail, and the same advance tax obligation applies to every company regardless of size, whether it is a small company or not.
If your company is GST-registered, the annual return GSTR-9 (and GSTR-9C reconciliation statement, where turnover crosses the applicable threshold) filed on the GST portal draws on the same books of account — our GSTR-9 annual return guide walks through that reconciliation in detail. A reclassified expense or restated revenue figure made for one filing needs to be reflected consistently across MCA, Income Tax, and GST — mismatched numbers across these three filings are one of the more common triggers for scrutiny notices, precisely because each department can now cross-reference data far more easily than a few years ago. A director who signs off on AOC-4 without first checking it against the company’s GST turnover reconciliation is effectively signing three different declarations of the same year’s revenue and hoping they all match.
Reconcile your AOC-4 figures against your Tax Audit Report and GSTR-9 before filing any of them, not after. Once AOC-4 is filed, correcting a figure that later turns out to be inconsistent with your tax filings means either a fresh round of ROC amendments or a mismatch that sits on record indefinitely.
Penalties for Missing ROC Deadlines
ROC penalties are structured to punish delay itself, not just non-filing — the daily accrual is what makes a small oversight expensive fast.
| Default | Penalty |
|---|---|
| Late AOC-4 or MGT-7/7A | ₹100 per day per form, no maximum cap |
| Late DIR-3 KYC | ₹5,000 flat, plus DIN deactivation until filed |
| Late DPT-3 | ₹100 per day per form, no maximum cap |
| Late MSME-1 | Up to ₹20,000 on the company, plus daily fine on defaulting directors |
| Non-filing for 2 consecutive years | ROC may initiate strike-off proceedings against the company |
Run the AOC-4/MGT-7 numbers on a real delay and the scale becomes obvious: a 180-day delay on just one form costs ₹18,000; the same delay on both AOC-4 and MGT-7 together is ₹36,000 — before any professional fees to sort out the backlog. Small companies get their penalty exposure halved under Section 446B, but the daily accrual still applies until the halved cap is reached.
A Bengaluru-based SaaS startup missed its AOC-4 deadline by 95 days after a founder transition left nobody tracking the compliance calendar for a quarter. The delay alone added ₹9,500 in additional fees on top of the standard filing cost, and because MGT-7 couldn’t be filed until AOC-4 cleared, that form was automatically delayed too, adding a further ₹9,500. A single missed handoff during a leadership change cost the company ₹19,000 in penalties that a shared compliance calendar — even a basic shared spreadsheet with deadline reminders — would have avoided entirely.
On the Horizon: Corporate Laws (Amendment) Bill, 2026
Worth tracking, though not yet relevant to this year’s filings: the Corporate Laws (Amendment) Bill, 2026 (Bill No. 85 of 2026) was introduced in the Lok Sabha on 23 March 2026 and is currently with a Joint Parliamentary Committee for clause-by-clause review. It is not yet law — individual provisions may still change before enactment, and the government will notify different provisions on different dates once it is passed. Spanning 107 clauses across the Companies Act, 2013 and the LLP Act, 2008, its stated direction is decriminalising procedural defaults (replacing imprisonment with civil monetary penalties for many technical lapses) and moving toward outcome-based, risk-aligned regulation rather than the current form-heavy compliance model. It also proposes raising the small company ceiling further, to ₹20 crore capital / ₹200 crore turnover, giving the government room to increase thresholds by rule without a fresh Act amendment. We’ll cover the practical impact in detail once it’s actually enacted — for now, file this year’s returns against the rules as they stand.
Key Takeaways
- Every registered company must complete ROC compliance annually — turnover and activity level don’t change that, only which specific forms apply.
- The small company threshold jumped from ₹4cr/₹40cr to ₹10cr/₹100cr on 1 December 2025 — recheck your eligibility before filing MGT-7 vs MGT-7A this year.
- DPT-3 for FY 2025-26 is due 31 July 2026, extended from 30 June via MCA Circular 02/2026 after the data-centre fire.
- For a 30 September AGM: AOC-4 by ~30 October, MGT-7/7A by ~29 November, DIR-3 KYC by 30 September.
- Late AOC-4 and MGT-7 penalties run at ₹100/day with no cap — small delays compound fast.
- Your AOC-4 figures, Tax Audit Report, ITR-6, and GSTR-9 should all reconcile to the same audited books — mismatches across regulators are a common scrutiny trigger.
- The Corporate Laws (Amendment) Bill, 2026 is still pending before a Joint Parliamentary Committee — not yet law, but worth tracking.
Frequently Asked Questions
What is ROC compliance and is it mandatory for every private company?
ROC compliance means filing the annual returns and event-based forms required under the Companies Act, 2013 with the Registrar of Companies. It is mandatory for every company registered in India, regardless of turnover or whether it did any business during the year. Even a dormant or zero-transaction company must file NIL returns.
What changed in the small company threshold in December 2025?
Effective 1 December 2025, the MCA raised the small company thresholds under Section 2(85) from paid-up capital of ₹4 crore and turnover of ₹40 crore to paid-up capital of ₹10 crore and turnover of ₹100 crore. Companies that now fall within these higher limits qualify as small companies and get relaxations such as filing MGT-7A instead of MGT-7, holding only 2 board meetings a year instead of 4, and exemption from auditor rotation.
What is the due date for AOC-4 and MGT-7 for FY 2025-26?
Assuming the AGM is held on the standard deadline of 30 September 2026, AOC-4 is due within 30 days of the AGM, which works out to around 30 October 2026, and MGT-7 or MGT-7A is due within 60 days of the AGM, around 29 November 2026. These dates shift if your company holds its AGM earlier.
Is the DPT-3 deadline really extended to 31 July 2026?
Yes. MCA General Circular No. 02/2026 dated 19 June 2026 extended the DPT-3 (Return of Deposits) filing deadline for FY 2025-26 from 30 June 2026 to 31 July 2026 without additional fees, following a fire at the MCA21 data centre on 5 June 2026.
What happens if I miss the DIR-3 KYC deadline?
If a director fails to file DIR-3 KYC by the due date, the Director Identification Number (DIN) is marked deactivated, and a flat penalty of ₹5,000 applies to reactivate it. A deactivated DIN means the director cannot be validly appointed or continue functioning until KYC is completed and the fee is paid.
What is the difference between MGT-7 and MGT-7A?
MGT-7 is the standard annual return form with full disclosures. MGT-7A is an abridged version available only to small companies and One Person Companies, requiring fewer disclosures and allowing simpler signing requirements. Using the wrong form for your company’s actual status can lead to rejection or a compliance default.
Do small companies still need a statutory audit?
Yes. Statutory audit is compulsory for every company registered under the Companies Act, including small companies. Small company status reduces the scope of the audit, such as exemption from CARO 2020 reporting and cash flow statement requirements, but it does not remove the audit requirement itself.
How does ROC compliance connect to my income tax filing?
The audited financial statements filed with ROC in AOC-4 are the same figures used for your Tax Audit Report and ITR-6 filing with the Income Tax Department. Inconsistencies between the numbers filed with MCA, Income Tax, and GST authorities are a common trigger for scrutiny, so all three filings should be reconciled from the same audited books.
Is ROC filing required for a company with no business activity?
Yes. Every registered company must file audited financial statements and an annual return even if there were zero transactions during the year, to maintain active status on the MCA portal. Failing to file returns for two consecutive years can lead the ROC to initiate strike-off proceedings against the company.
Conclusion
ROC compliance rewards companies that treat it as a calendar to plan around rather than a scramble each AGM season. This year specifically, two things are worth checking before you file anything: whether the December 2025 threshold change moved your company into small company status, and whether your DPT-3 for FY 2025-26 is already handled ahead of the 31 July 2026 deadline. Beyond that, the fundamentals hold — hold your AGM on time, get the audit done, file AOC-4 before MGT-7, complete DIR-3 KYC for every director, and keep your ROC, Income Tax, and GST figures reconciled to the same set of books.
For the tax side of your company’s compliance calendar, our Advance Tax FY 2026-27 guide and New Income Tax Act 2025 Business Guide cover what changes alongside these ROC deadlines.
