15 Legal Documents Every Startup Founder Needs in India
Nobody starts a company because they enjoy paperwork. But the documents skipped in year one are the documents an investor's counsel asks for in year three, usually in a week when there is no time left to create them.
Due diligence in an Indian funding round begins with an email. It contains a list, it runs to four or five pages, and it asks for documents in numbered categories with a deadline attached. Founders open that email expecting a review of their business. What it actually is, is an audit of decisions taken two and three years earlier by people who had no intention of creating a record.
The list itself is not adversarial. It asks for the incorporation papers, the constitutional documents, the statutory registers, the cap table, every agreement with a shareholder, every agreement with an employee or contractor who built anything, the material customer and vendor contracts, the intellectual property filings, the tax and labour compliance record, and disclosure of any notice or dispute. None of that is unreasonable. All of it exists, or it does not.
What follows is a working list of the fifteen documents that carry most of the weight for an Indian startup, grouped in the order companies actually need them. For each one, what it does, and — more usefully — the way it tends to fail.
Part one: existence, ownership and control
01 Certificate of Incorporation
The company's birth certificate, issued by the Registrar of Companies, carrying the Corporate Identity Number. Under the SPICe+ route it usually arrives bundled with PAN and TAN, and depending on what was applied for, with EPFO, ESIC, professional tax and a bank account reference.
The failure here is mundane. Nobody can find it. Banks, payment gateways, marketplaces and investors ask for it repeatedly, and founders end up ordering certified copies at the least convenient moment. Keep the certificate, PAN, TAN, the MCA master data extract, and the login and Digital Signature Certificate details somewhere more than one person can reach. A DSC that exists only on a former consultant's laptop is a problem waiting for a filing deadline.
02 Memorandum and Articles of Association
The MOA states what the company may do — objects, registered office state, liability, capital — under Section 4 of the Companies Act, 2013. The AOA is the internal rulebook under Section 5: board meetings, share transfers, appointment and removal of directors, what requires a special resolution.
Most founders receive whatever their incorporation agent generated and never read a line of it. Two consequences follow. A narrowly drafted objects clause creates friction with banks and regulators once the business has pivoted, which it will. More seriously, a boilerplate AOA lifted from Table F contains none of the transfer restrictions your founders' arrangement assumes and none of the provisions your investors will insist on.
The AOA is the document the company itself is bound by. Arrangements agreed between shareholders but never written into the Articles sit on weaker ground when someone tries to enforce them against the company. Amending the AOA requires a special resolution and a filing, so it is not an afternoon's work. Build it into the funding timetable rather than discovering it at closing.
03 Founders' Agreement
No statute requires it, which is exactly why it is skipped. It is also the document whose absence does the most damage, because founder disputes never arrive politely and never arrive early.
The clauses that matter are the uncomfortable ones. Equity split written as numbers, not understandings. Vesting with a cliff — commonly a year — so that a co-founder leaving in month eight does not retain a quarter of the company for eight months of work. Reverse vesting on shares already issued, which is the mechanism that actually delivers that protection in a company where shares have been allotted upfront. Roles and decision rights, so "we will decide together" does not become deadlock. What happens when someone takes a salaried job elsewhere, becomes unreachable, or quietly disengages. Good leaver and bad leaver treatment. And a route for a departing founder's shares with a valuation method fixed in advance, because agreeing a price after a relationship has broken down is close to impossible.
Founders resist the conversation because it feels like planning for failure among people who currently trust each other. The honest answer is that the agreement is straightforward to write while that trust exists and unwriteable once it does not.
04 Shareholders' Agreement
Where the founders' agreement governs the founding team, the SHA governs the whole cap table once outside money arrives. It carries what investors negotiate for and what founders negotiate back: reserved matters requiring investor consent, board composition and observer seats, information and inspection rights, pre-emptive rights on new issues, right of first refusal on transfers, tag-along protection for minority holders, drag-along on a sale, anti-dilution treatment, liquidation preference, and a deadlock mechanism.
The recurring Indian pitfall is enforceability. A transfer restriction agreed between shareholders but absent from the Articles has repeatedly run into difficulty when someone tried to enforce it against the company. The position is more settled than it once was, and contracts between shareholders in respect of transfer of securities are recognised in their own right, but the practical rule has not changed: whatever you agree in the SHA, mirror it in the AOA. One extra filing removes an entire category of argument.
Where a foreign investor is involved, treat exit terms with care. Assured-return exit rights sit awkwardly with exchange control regulation. Optionality clauses are workable but carry conditions, and this is not an area for a template found online.
05 Statutory registers, minutes and share certificates
This is not on most published checklists, and it is the category that most often derails a first diligence. The Act requires a company to maintain a register of members, registers of directors and key managerial personnel and their shareholding, and a register of charges. Board and general meeting minutes are to be recorded and finalised within the prescribed period. Share certificates are to be delivered within two months of allotment. Board meetings have a minimum frequency and a maximum permitted gap. Annual financial statements and annual returns are filed each year, and directors complete their annual KYC.
None of this is difficult. It is simply never done, because a company of five people does not feel like an entity that holds board meetings. Three years later, an investor's counsel asks for the minutes book covering the resolutions that authorised past allotments, and there is nothing to hand over. Reconstructing it is possible, awkward, and visible.
A company secretary or compliance professional maintains this for a modest annual fee. Compare that against a diligence finding that delays a closing by a month. This is the highest-return item on the list and the least discussed.
Part two: people, and what they create
06 Employment Agreements
A one-page appointment letter covering designation, salary and joining date is not an employment agreement. A workable one deals with duties and reporting, compensation structure and variable pay, remote or hybrid arrangements, leave, probation, notice on both sides, grounds for termination, confidentiality that survives exit, and assignment of anything the employee creates.
On restrictive covenants, Indian law is stricter than founders expect. Section 27 of the Indian Contract Act, 1872 makes agreements in restraint of trade void, and Indian courts have consistently declined to enforce post-employment non-compete clauses against former employees, however carefully drafted. Restraints operating during employment stand on different footing and are generally upheld. Non-solicitation of clients and staff has a better record than non-competition, though it is not unlimited either.
So a clause promising that an ex-employee will not work in your sector for two years is decorative. Real protection comes from confidentiality obligations, properly assigned intellectual property, and sensible access control — not from a threat you cannot execute.
07 Non-Disclosure Agreement
The most circulated and least considered document in the startup world. A useful NDA defines confidential information with precision, states the permitted purpose, carves out what is already public or independently developed, fixes a duration, deals with return or destruction of material, and specifies the remedy.
Two practical points. Loss from breach of confidence is notoriously hard to quantify, so a sound NDA anticipates injunctive relief rather than relying solely on damages — and a pre-agreed sum still has to represent a reasonable pre-estimate of loss to be awarded in full. Second, a mutual NDA is usually the right instinct in a commercial negotiation. A one-way NDA that binds only you tells you something about the relationship you are about to enter.
08 Intellectual Property Assignment
Some years ago a founder called me four days before a Series A signing. Diligence had asked one question: who owns the product? The founders assumed the company did. The code had been written over eighteen months by two freelance developers paid by bank transfer, with no written contract. One had since moved abroad and stopped replying.
The deal did not collapse. It was delayed by seven weeks, the valuation moved, and part of the round went into an indemnity escrow. All of it traceable to a two-page assignment nobody had thought worth the trouble.
Here is why. Under the Copyright Act, 1957, where a work is made by an employee in the course of employment under a contract of service, the employer is generally first owner in the absence of agreement to the contrary. That protection does not extend in the same way to a contract for service — the freelancer, the agency, the design consultant, the weekend developer. There, the creator retains ownership unless there is a written assignment signed by them. An invoice is not an assignment. A message confirming payment is not an assignment. Patent rights follow their own route and need their own transfer.
Two categories are routinely missed. Work done by founders before incorporation — the prototype built at home, the brand designed by a friend — belongs to individuals until formally assigned to the company. And work by early contributors who were never employees and never contracted properly, which is how most Indian startups are actually built in their first year.
If this describes your company, it is fixable. Confirmatory assignments executed now, covering everything created historically, close the gap. It takes a fortnight when everyone is reachable and cooperative. It takes considerably longer when one of them left on bad terms and has just understood the leverage he holds.
09 Consultant and Freelancer Agreement
Independent professionals need a document deliberately different from an employment contract: scope and deliverables, milestones, fees and payment schedule, tax treatment, confidentiality, and assignment of everything produced. It should state plainly that the relationship is not employment and carries no employment benefits — while recognising that substance, not label, is what gets examined if the question is ever raised.
Get the IP clause right here above all. If your logo was designed by a freelancer, your app built by an agency, or your content written by a contractor, ownership sits with them until it is assigned in writing.
Part three: revenue, spending and the public-facing documents
10 Customer or Client Agreement
For a services business this is the revenue document; for a product business, the contract behind enterprise deals. It should carry scope, acceptance criteria, payment terms with interest on delay, service levels where you commit to them, warranties in terms you can honour, limitation of liability, indemnities, term and termination, and a dispute resolution clause specifying arbitration with seat, venue, language and number of arbitrators, or else a chosen court.
The clause founders most often surrender is limitation of liability. Signing an enterprise contract with uncapped liability on a deal worth a few lakhs exposes the whole company to a claim of a different magnitude entirely. Cap it, commonly at fees paid over a preceding period, and carve out only what you genuinely must.
11 Vendor and Supplier Agreement
Purchase orders, cloud subscriptions, logistics, manufacturing, professional services. Specification, delivery, quality and rejection, price and payment, warranties, indemnity, confidentiality, exit.
One point now carries a tax consequence and deserves attention. Under Section 43B(h) of the Income-tax Act, 1961, amounts payable to enterprises registered as micro or small under the MSMED framework are deductible only in the year of actual payment where payment runs beyond the statutory window — forty-five days where there is a written agreement, fifteen where there is not. Stretching a small vendor's payment across the year-end therefore converts a cash flow decision into a tax outcome. Collect Udyam registration details at vendor onboarding and reflect payment timelines in the contract.
12 Terms and Conditions
The contract between your platform and the people using it: eligibility and account rules, acceptable use, payment and refund terms, ownership of your content, disclaimers, limitation of liability, suspension and termination, governing law, and the mechanism for amending the terms.
If you sell to consumers, the Consumer Protection Act, 2019 and the e-commerce rules made under it bring their own requirements on seller information, cancellation, refunds and grievance redressal. If you host user content or act as an intermediary, the 2021 intermediary guidelines add obligations including a published grievance mechanism and named officers. Terms copied from an American SaaS company carry none of this.
13 Privacy Policy and data documentation
The fastest-moving area on this list. The Digital Personal Data Protection Act, 2023 has been on the statute book for some time, and the DPDP Rules were notified on 14 November 2025 with substantive obligations phased across eighteen months, pointing to full compliance around the middle of May 2027. That sounds distant. It is not, for anyone who has to build consent capture, retention schedules and deletion into a live product.
In practice it means a standalone, itemised notice stating what personal data is collected and why, in plain language; consent that can be withdrawn as easily as it was given; defined retention periods with actual erasure at the end of them; a published contact for data queries and a working grievance route; breach notification obligations; security safeguards, including through your vendor contracts; and materially stricter treatment of anyone under eighteen, where verifiable parental consent is required and behavioural tracking of children is off the table. That last point reshapes product design for anyone with a young user base, and no policy page solves it.
A privacy policy describing something your systems do not actually do is worse than none. It is a published statement you are not honouring.
Part four: brand, employee upside, and capital
14 Trademark Registration and IP Records
Registration under the Trade Marks Act, 1999 gives a statutory right you can enforce in the classes applied for. Unregistered use gives a passing off action, which is real but slower and heavier on evidence.
Search before committing to a name — before the logo, the domain, the printed material and the app store listing. Founders who discover a conflicting registered mark after eighteen months of brand building face an expensive choice between fighting and rebranding. File in the classes matching what you actually sell, not the one that sounds closest. Use ™ while an application is pending and ® only after registration. Diarise the renewal.
Alongside it, keep a plain IP register: marks and status, domains and expiry dates, copyright in code and content with references to the assignments, any patent or design filings, and who holds the credentials for each. An hour to set up, and it answers half a diligence questionnaire.
15 ESOP or Stock Option Plan
Employee stock options run under Section 62(1)(b) of the Companies Act, 2013 read with Rule 12 of the Companies (Share Capital and Debentures) Rules, 2014. A plan needs shareholder approval, a defined pool, eligibility criteria, vesting schedule, exercise price and window, treatment on resignation and termination, and mechanics for exercise and issue. Grants go out by letter and the company maintains a register of options.
Two things founders consistently get wrong. First, promising options verbally. "You'll get one percent," said in a hiring conversation with no pool created, no plan adopted and no grant letter issued, produces a grievance later and occasionally a claim. Create the pool, issue the letters.
Second, failing to explain the tax position, which employees then discover at the worst moment. Broadly, there is a charge as a perquisite at exercise and capital gains on eventual sale — meaning an employee can face tax on shares they cannot yet sell. Eligible recognised startups have access to a deferral mechanism, and the rules on promoter and large-shareholder participation carry startup carve-outs that have been amended more than once. Check the current position rather than relying on an article, including this one.
+ Investment and Funding Documents
A round is a set of documents, not one. The term sheet comes first and is usually non-binding except as to confidentiality, exclusivity and costs — but it fixes the commercial terms everyone will later insist were settled, so negotiate it as though it binds. Due diligence follows, and it is where every gap in this article surfaces. Then the Share Subscription Agreement governing the investment, the Shareholders' Agreement, a disclosure letter qualifying your warranties, and the board and shareholder resolutions authorising the issue.
Around all of it sits process: a valuation report where required, compliance with the private placement machinery under Section 42, allotment and filing of the return of allotment within the prescribed period, updating the register of members, issuing share certificates, and — where funds come from outside India — the applicable exchange control reporting within its own deadline. Convertible notes have a specific route available to recognised startups, subject to a minimum threshold and conditions.
A note on stamping
Agreements attract stamp duty under the applicable state legislation, and rates differ from state to state. An instrument that is unstamped or insufficiently stamped can be held inadmissible in evidence and impounded — meaning the contract exists, but you cannot easily rely on it at the moment you need to. Duty is generally modest at the point of execution and considerably less so when paid later with penalty.
Arbitration clauses sat under a cloud on this question for several years, until a larger Bench of the Supreme Court settled in December 2023 that non-stamping is a curable defect rather than something that renders an agreement void. That resolved the arbitration point. It did not make stamping optional.
Bonus documents, depending on what you are building
- Data processing agreements — required in substance where you engage a processor to handle personal data on your behalf, and increasingly demanded by enterprise customers before they will sign anything.
- Commercial lease agreement — leases beyond eleven months carry registration and stamp duty consequences, which is why so many Indian office arrangements are written for exactly eleven.
- Software licensing agreement — licence scope, territory, term, permitted users, support and updates, audit rights, where you license a product rather than sell a service.
- Distribution or channel partner agreement — territory, exclusivity, minimum commitments, pricing, and what happens to the customers on termination.
- Partnership or joint venture agreement — contribution, control, profit sharing, ownership of what the venture creates, and exit.
- Loan and convertible note documentation — including founder loans into the company, which are frequently undocumented and later disputed.
- Sectoral licences and registrations — GST, shops and establishment, professional tax, and whatever your sector demands in food, financial services, healthcare, education or manufacturing.
What to do first
Fifteen documents at once is not realistic for a company of four people. Sequence them.
| Stage | What to put in place |
|---|---|
| Month 0–1 | Incorporation papers filed and stored; MOA and AOA read rather than accepted; founders' agreement signed, with vesting |
| First hires | Employment agreements with confidentiality and IP assignment; NDA and consultant templates; assignments from everyone who has built anything |
| First revenue | Customer agreement; vendor terms; website terms and conditions; a privacy policy that matches actual practice |
| Scaling | Trademark filing; IP register; ESOP plan and pool; data processing agreements; registers and minutes maintained properly |
| Pre-funding | Cap table reconciled with filings; statutory records current; gaps closed; mock diligence run internally |
Five recurring mistakes
Templates adopted without adaptation. A contract downloaded and signed unread will carry the wrong governing law, the wrong statutes, and occasionally another company's name. It survives until it is tested, which is the only moment it matters.
Signing the investor's draft as received. Term sheets are negotiable. Founders who accept the first draft whole, anxious the round will evaporate, then live with those reserved matters and that liquidation preference for the next decade.
Documenting after the fact. An agreement dated backwards and signed once a dispute has surfaced attracts more scrutiny than the gap it was meant to close.
Confusing incorporation with structuring. Registering a company is administrative. Deciding who owns what, on what conditions, and what happens when someone leaves is a different exercise, and no incorporation package includes it.
Treating documents as one-time work. Cap tables change, teams change, the DPDP clock is running, and an agreement reflecting the company as it stood three years ago describes an entity that no longer exists.
Questions founders ask
Which documents matter most in the first month?
Is a founders' agreement legally required?
Can I stop an employee from joining a competitor?
Our product was built by freelancers. Who owns it?
Do our agreements need stamping?
How do I know whether we are diligence-ready?
The short version
Documentation does not make a startup succeed. Product, distribution and persistence do that. Documentation determines whether the value you build stays with the company, and with you, when it is finally tested — by an investor, a departing co-founder, a regulator, or a customer with a claim.
The papers are cheap while relationships are good and everyone is reachable. They become expensive, and occasionally impossible, at exactly the moment you need them. That asymmetry is the entire argument.
If you are unsure where your company stands, start with the mock diligence. Ask for all fifteen. What comes back tells you more than any checklist can.
This article is general information on Indian corporate and commercial law, published for public awareness. It is not legal advice and does not create a lawyer–client relationship. Statutory provisions, rules and timelines are summarised in ordinary language and are subject to amendment and to judicial interpretation; positions stated here reflect the law as understood at the time of writing. Advice on any specific matter depends on the documents and facts of that matter and should be taken from an advocate.
There's no reason for concern. There is no difficult-to-understand legalese.
Someone who has helped many people with the same problems gives you clear, honest advice. We want to make the legal process easy to understand and use for everyone.
+91-9625961599 Chat on WhatsAppSchedule Your Consultation