Annual ROC Compliance for Private Limited Companies

ROC compliance is one of the obligations that founders often discover only after it has already become a problem.

A private limited company has annual compliance obligations even if it has little or no business activity during the year. The exact forms may differ depending on the company's size, status and transactions, but the core annual filing framework remains.

1. What needs to happen before the AGM?

Annual ROC compliance starts well before the actual filing on the MCA portal.

Before the AGM, the company generally needs to ensure that:

• The financial statements have been audited and signed.
• The Board has approved the financial statements.
• The Board's Report has been prepared and approved.
• The AGM notice has been issued within the prescribed notice period.
• The required statutory records and minutes are up to date.

The AGM notice ordinarily requires 21 clear days' notice. The Companies Act also permits an AGM to be called at shorter notice where the prescribed consent is obtained.

2. The key annual ROC filings

The main annual and recurring filings for a typical private limited company include the following:

If the AGM is held on 30 September

The post-AGM filings then run from the AGM date. AOC-4 is generally due within 30 days, MGT-7 or MGT-7A within 60 days and ADT-1 within 15 days. The exact calendar date should be determined using the statutory method of counting days rather than by simply adding a number to the AGM date.

What goes into AOC-4?

The filing generally carries the company's audited financial statements and the prescribed accompanying documents. Depending on the company and its transactions, this can include the auditor's report, Board's Report and AOC-2 where related party transactions requiring disclosure exist.

A note on DIR-3 KYC

DIR-3 KYC is no longer an annual compliance. From 31 March 2026, the framework moved to a three-year compliance cycle.

We have covered the new DIR-3 KYC framework, applicability, due dates, filing process, KYC updates and consequences of non-compliance separately.

MGT-7A and small companies

MGT-7A applies to One Person Companies and eligible small companies.

For the purpose of the small company definition, the current prescribed thresholds include paid-up share capital of up to ₹4 crore and turnover of up to ₹40 crore, subject to the statutory exclusions and other conditions.

An OPC does not hold an AGM in the same manner as other companies. Its financial statements have a separate filing timeline, including the prescribed 180-day period from the close of the financial year for AOC-4.

3. Board meetings are part of annual compliance too

ROC compliance is not limited to forms filed on the MCA portal. The company also needs to maintain the underlying corporate records that support those filings.

A typical private company is required to hold at least four Board meetings in a year, with not more than 120 days between two consecutive meetings. The prescribed notice period is generally at least seven days.

Small companies, One Person Companies and dormant companies have a relaxed requirement of at least two Board meetings in a year, with one meeting in each half of the calendar year and a minimum gap of 90 days between the two meetings.

Board meeting quorum

The general quorum is one-third of the total strength of the Board or two directors, whichever is higher. In a company having only two directors, both directors therefore need to be present for the meeting to have quorum.

Minutes and statutory records

Minutes of Board and general meetings must be prepared and maintained in accordance with the statutory requirements. Minutes should not be treated as paperwork that can simply be reconstructed months later when a compliance review begins.

Companies should also maintain the applicable statutory registers and records, including records relating to members, directors and charges, as required.

4. What does delay actually cost?

For annual returns and financial statements, the additional fee for delayed filing is ₹100 per day per form, with no upper ceiling.

This additional fee is separate from any statutory penalty that may arise for the underlying non-compliance. Paying the additional filing fee does not automatically eliminate every other consequence.

5. What happens if a company keeps ignoring ROC compliance?

Repeated non-compliance can create consequences beyond filing fees.

• Director disqualification: failure to file financial statements or annual returns for three consecutive financial years can trigger director disqualification provisions, with the prescribed consequences extending to appointment or reappointment as a director for the relevant period.
• Strike-off: persistent non-compliance and inactivity can contribute to the company becoming liable for removal from the register, subject to the statutory process.
• Restoration complications: once a company has been struck off, restoring it generally requires an application to the Tribunal rather than simply filing the missed annual returns.
• Due diligence issues: unresolved ROC defaults can surface during financing, investment, sale of the business or other corporate transactions.

6. Five mistakes we see repeatedly

1. Assuming a dormant business has no ROC compliance.
   No business activity does not automatically eliminate the company's statutory filing obligations.
2. Treating every filing date as a fixed calendar date.
   Several ROC filings are triggered by events such as the AGM rather than by a universal calendar date.
3. Leaving the audit until immediately before the AGM.
   This compresses the entire compliance process and leaves little room to resolve accounting or audit issues.
4. Assuming DPT-3 applies only to traditional deposits.
   DPT-3 applicability extends to specified outstanding amounts that are required to be reported, so the company's funding and liability structure should be reviewed rather than relying on the label attached to an amount.
5. Holding Board meetings without maintaining proper minutes.
   The meeting is only one part of the compliance. The supporting corporate records matter as well.

A better way to manage ROC compliance

The simplest approach is to stop treating ROC filings as a year-end exercise.